+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Stopping Students from logging on to 'Teacher' Wiorkstaions in Technical; There are many ways of doing it.. but I wondered how most network managers on a vanilla Microsoft environment lmit ...
  1. #1

    Join Date
    Dec 2009
    Location
    London
    Posts
    42
    Thank Post
    4
    Thanked 10 Times in 7 Posts
    Rep Power
    11

    Stopping Students from logging on to 'Teacher' Wiorkstaions

    There are many ways of doing it.. but I wondered how most network managers on a vanilla Microsoft environment lmit the use of 'teacher' computers to teachers.

  2. #2
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,782
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    Me to, without adding all 500 curic PCs (thus excluding teacher and admin PCs) to the "log on to" button in AD.

  3. #3

    Join Date
    Dec 2005
    Posts
    535
    Thank Post
    34
    Thanked 89 Times in 79 Posts
    Rep Power
    39
    We have an OU with the staff computers in

    Edit the Policy for that OU then go to:

    Computer Configuration > Windows Settings > Security Settings > Local Polices > User Rights Assignments > Deny Log on locally

    And add the domain group you want to deny

  4. Thanks to siuko from:

    chazzy2501 (17th May 2010)

  5. #4

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,618
    Thank Post
    648
    Thanked 1,619 Times in 1,449 Posts
    Rep Power
    421
    Whats so special about teacher workstation that you need to restrict who can log on to them?

    Ben

  6. #5

    Join Date
    Dec 2007
    Posts
    867
    Thank Post
    90
    Thanked 165 Times in 140 Posts
    Rep Power
    49
    Hi,

    We block Student accounts from being able to log onto specific computers by applying a GPO policy on the computers in question.

    Simple create a new GPO, and assuming all the student accounts belong to a Students Global Group (called Students for example) then enter i the following location:

    Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Deny log on locally

  7. Thanks to MYK-IT from:

    chazzy2501 (13th May 2010)

  8. #6


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,638
    Thank Post
    275
    Thanked 778 Times in 605 Posts
    Rep Power
    223
    Quote Originally Posted by plexer View Post
    Whats so special about teacher workstation that you need to restrict who can log on to them?

    Ben
    Well, a practical (rather than a "yeah, you have crap security") example would be our CADCAM plasma cutter. We don't want students logging onto it because they shouldn't be there unsupervised (regardless of security permissions on the control software). By requiring a teacher before they can even log on, it discourages attempted self-amputations.

  9. #7
    chazzy2501's Avatar
    Join Date
    Jan 2008
    Location
    South West
    Posts
    1,782
    Thank Post
    213
    Thanked 263 Times in 213 Posts
    Rep Power
    67
    For me it's just that the Teacher stations are connected to the Hifi / projector in the room! A friend of mine wrote a script that checked if a teacher was logged into the workstation and if not it logged pupils off the rooms PCs and locked their account! A bit too harsh for me
    Last edited by chazzy2501; 13th May 2010 at 01:52 PM.

  10. #8
    timbo343's Avatar
    Join Date
    Dec 2005
    Location
    Leeds/York area, North Yorkshire
    Posts
    3,017
    Thank Post
    304
    Thanked 288 Times in 200 Posts
    Rep Power
    120
    We have a piece of software called Userlock. We can get a log of where kids have been logged on, how many logs they have and what they can and cannot log on to.

    Tim

  11. #9
    GAS
    GAS is offline

    Join Date
    Jan 2008
    Location
    Guildford
    Posts
    60
    Thank Post
    16
    Thanked 14 Times in 12 Posts
    Rep Power
    16

    Smile

    Hi,
    We have all admin computer on separate OU on our Server 2003 AD i have applied group policy to Deny log on locally for all students group and it’s work’s 100% (By default each student we add them to all student group)
    Attached Images Attached Images

SHARE:
+ Post New Thread

Similar Threads

  1. Teacher Laptops v Teacher Desk Computer
    By geeky in forum Wireless Networks
    Replies: 48
    Last Post: 5th February 2010, 08:21 AM
  2. Moodle - Stopping students changing name/surname
    By apoth0r in forum Virtual Learning Platforms
    Replies: 3
    Last Post: 27th March 2009, 09:40 AM
  3. Replies: 10
    Last Post: 5th March 2009, 07:56 PM
  4. Stopping students using animated cursors
    By dtester in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 2nd March 2009, 02:56 PM
  5. Logging onto the network after logging on locally
    By frankybaloney in forum Windows
    Replies: 9
    Last Post: 10th October 2008, 12:17 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •