+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 19
Windows Thread, Force Teachers to update laptops in Technical; Ok, here's an odd one, but maybe a sensible one. I've been asked to stop laptops being able to log ...
  1. #1
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    605
    Thank Post
    51
    Thanked 12 Times in 12 Posts
    Rep Power
    21

    Force Teachers to update laptops

    Ok, here's an odd one, but maybe a sensible one. I've been asked to stop laptops being able to log on if they haven't connected to the domain for a week.
    Is it possible?

  2. #2

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    18

    Re: Force Teachers to update laptops

    My understanding is that by default computers on a Windows domain have to log in every 30 days or the account is suspended.

    I wonder if it is possible to reduce the time window.

  3. #3
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    21

    Re: Force Teachers to update laptops

    My understanding is that by default computers on a Windows domain have to log in every 30 days or the account is suspended.
    if that was the case msot of the machines in our school would be suspened after the 6 weeks hols, and we've never had this. I aint changed any setting to do this either

  4. #4

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,582
    Thank Post
    107
    Thanked 761 Times in 592 Posts
    Rep Power
    179

    Re: Force Teachers to update laptops

    AFAIK the accounts don't suspend. In Longhorn serer there will be a quarantine function that suspends all network activity until AV and Windows updates are performed... until then I think you are out of luck.

    WSUS will show you which machines haven't been connected recently. You could use this to clamp down on people. Combined with a School policy and some scare mongering it might help.

  5. #5

    Join Date
    Mar 2006
    Posts
    537
    Thank Post
    2
    Thanked 3 Times in 2 Posts
    Rep Power
    18

    Re: Force Teachers to update laptops

    Well I suppose it would be possible to write a script to suspend the accounts in AD.

    The main problem is checking that the machines are updated or not, unless the idea is to get a human to visually inspect the lapotp.

  6. #6
    ChrisC's Avatar
    Join Date
    Mar 2006
    Location
    Dorset
    Posts
    767
    Thank Post
    2
    Thanked 1 Time in 1 Post
    Rep Power
    18

    Re: Force Teachers to update laptops

    If this is a move motivated by out of date AV software, surely just setting up AV auto updating and locking that down in AD would be enough?

    Chris

  7. #7
    eejit's Avatar
    Join Date
    Jun 2005
    Location
    Ireland
    Posts
    605
    Thank Post
    51
    Thanked 12 Times in 12 Posts
    Rep Power
    21

    Re: Force Teachers to update laptops

    It's motivated by our LEA's SIMS people who have found that laptops don't update SIMS properly if they've been away for a considerable period. The next time that they launch SIMS on the network there may have been 4 or 5 upgrades that they've missed so the updater doesn't work properly.

    I'll have a look for something in the registry today to see if it timestamps the last group policy replication or similar and see if I can do something with that.

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,800
    Thank Post
    110
    Thanked 582 Times in 503 Posts
    Blog Entries
    1
    Rep Power
    223

    Re: Force Teachers to update laptops

    You can implement the 'network quarantine' function in W2k3 server too. Your sims people will have to supply some scripts that actually check what they want though.

    http://www.microsoft.com/technet/its...uarantine.mspx

  9. #9

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,130
    Thank Post
    100
    Thanked 217 Times in 176 Posts
    Blog Entries
    1
    Rep Power
    69

    Re: Force Teachers to update laptops

    I'd endorse a solution whereby staff using their laptops in school on a daily basis negated the need for an elaborate technical cludge.

  10. #10

    Join Date
    Jun 2005
    Posts
    223
    Thank Post
    6
    Thanked 8 Times in 8 Posts
    Rep Power
    29

    Re: Force Teachers to update laptops

    The real solution would be to have a decent update system for SIMs, or better still Capita could try a little harder to get right the first time, so we wouldn't need an update every two and a half minutes.

    /rant

  11. #11

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,130
    Thank Post
    100
    Thanked 217 Times in 176 Posts
    Blog Entries
    1
    Rep Power
    69

    Re: Force Teachers to update laptops

    No, that would just solve the SIMS problem.

    <cynic>and it ain't going to happen.</cynic>

  12. #12

    bossman's Avatar
    Join Date
    Nov 2005
    Location
    England
    Posts
    3,853
    Thank Post
    1,160
    Thanked 1,028 Times in 729 Posts
    Rep Power
    323

    Re: Force Teachers to update laptops

    Through the dhcp you could. Create another scope which the only the laptops can connect to and set the ip lease to 5 days this would then stop the laptops from connnecting to the network after 5 days. I think this would just be a short term fix for you at the mo as Geoff mentioned in his reply:

    Quote Originally Posted by Geoff
    "You can implement the 'network quarantine' function in W2k3 server too. Your sims people will have to supply some scripts that actually check what they want though"

  13. #13

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,130
    Thank Post
    100
    Thanked 217 Times in 176 Posts
    Blog Entries
    1
    Rep Power
    69

    Re: Force Teachers to update laptops

    It's been mentioned already but..... school holidays?

  14. #14

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,571
    Thank Post
    869
    Thanked 1,293 Times in 786 Posts
    Blog Entries
    1
    Rep Power
    436

    Re: Force Teachers to update laptops

    I created a MSI with a script that ran on login. It would have a expired date and once the script detected it was past this people had to come back and have the machine reset as it would auto log them off otherwise. It is a little limited but it was all we needed.

  15. #15

    Join Date
    Jun 2005
    Posts
    223
    Thank Post
    6
    Thanked 8 Times in 8 Posts
    Rep Power
    29

    Re: Force Teachers to update laptops

    There's obviously a few different ways to do this but another one that just occurred to me:
    DSQuery computer -inactive 1
    Would give you a list of inactive machines from the server end. You could pipe then the output to dsmod and disable the account. You just need to be a lttle careful if you have servers that you use RDP to control as it won't pick up logon events for these.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 18
    Last Post: 12th September 2013, 05:44 PM
  2. Replies: 1
    Last Post: 24th July 2007, 08:10 PM
  3. Replies: 4
    Last Post: 12th July 2007, 08:11 PM
  4. Teachers laptops
    By witch in forum Wireless Networks
    Replies: 27
    Last Post: 27th March 2007, 12:28 PM
  5. Replies: 11
    Last Post: 20th October 2006, 04:14 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •