+ Post New Thread
Results 1 to 11 of 11
Windows Thread, Staff Permissions / Freedom in Technical; Hi All, We're having a bit of a debate at the moment just wonder what other people do, Regarding how ...
  1. #1
    mmoseley's Avatar
    Join Date
    Apr 2007
    Location
    Birmingham
    Posts
    751
    Thank Post
    109
    Thanked 105 Times in 80 Posts
    Blog Entries
    2
    Rep Power
    43

    Staff Permissions / Freedom

    Hi All,

    We're having a bit of a debate at the moment just wonder what other people do,

    Regarding how much freedom/permissions they have to yoru network/workstation,

    Do you allow them to change their background, allow access to command prompt...etc etc...

    Cheers,

    Mart

  2. #2
    nicholab's Avatar
    Join Date
    Nov 2006
    Location
    Birmingham
    Posts
    1,463
    Thank Post
    4
    Thanked 97 Times in 93 Posts
    Blog Entries
    1
    Rep Power
    50
    Command prompt no way. Background is set to our school one. Our aim is to delivery what they need to teach.

  3. #3

    Join Date
    Oct 2008
    Location
    Lincolnshire
    Posts
    2,160
    Thank Post
    12
    Thanked 224 Times in 214 Posts
    Rep Power
    66
    If it was us it would be locked down and just access to what they need i.e. applications, corporate desktop etc.

    Even our department are locked down to show that everyone is equal.

  4. #4

    Join Date
    Mar 2007
    Location
    Wales
    Posts
    28
    Thank Post
    7
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Quote Originally Posted by nicholab View Post
    Command prompt no way. Background is set to our school one. Our aim is to delivery what they need to teach.
    Teachers are professionals too. I think what we are all forgetting here is that while they might have limited IT knowledge (some) they aren't about to deliberately write commands like format c:

    Yes they do sometimes leave the Pc's logged on, and yes there is a security risk involved in that, but the Teacher is then responsible for the damage caused (if any).

    ScreenSaver locking times adjusted, down to 5 mins, restricting applications is more beneficial than simply removing access to most of the operating system.

    I've found file screens are effective, preventing anyone from saving pre-configured extensions to the network. No exe's in user storage, no scripts, no batch files etc.

    G

  5. #5

    SpuffMonkey's Avatar
    Join Date
    Jul 2005
    Posts
    2,230
    Thank Post
    54
    Thanked 278 Times in 186 Posts
    Rep Power
    134
    Its the old Flexibility/Reliability/Cost triangle - you can have any 2 of the 3 - let them have whatever they want - but it'll either cost a lot to support properly, or become unreliable

  6. #6

    Join Date
    Sep 2009
    Posts
    224
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    12
    Personally speaking, i think it you "lock them down", it will make them turn against ICT.

    On the network i used to manage at a school before i change jobs to my new compnay, i used to allow staff to have local admin rights on the PC they were currently on.

    Staff knew the score when it came to installing software they shouldnt be.....i'd just re-build the computer with an image.

    It worked very well for us.

  7. #7
    Pete10141748's Avatar
    Join Date
    Nov 2007
    Posts
    1,365
    Thank Post
    106
    Thanked 220 Times in 130 Posts
    Rep Power
    86
    Staff here are unable to run any installations for themselves.

    We used to let them change their screensaver but they mostly just turned them off, which when they leave their projectors on all day long is not a good thing! So now they are all set to be the smart bulb saver and can't be changed.

    They can change their background picture as most use topical pictures of their class name picture (ducklings, puffins, wolves etc)

    They can get to the control panel but not access all things (can't get to Add/Remove programs, can change the power options and so on)

    From my POV I deny access to the things that they do not need; it makes sense to not allow them to install whatever they want because that also means I spend far less time sorting out botched installations, removing things that shouldn't be there or re-doing settings that they had no need to change in the first place.

    Give them access to what they need to teach, they don't need to be administrating their computer though, that's your job! :P

  8. #8
    skunk's Avatar
    Join Date
    Mar 2006
    Location
    North West
    Posts
    311
    Thank Post
    88
    Thanked 40 Times in 33 Posts
    Rep Power
    29
    Staff here have complete freedom to use any of the software on the system. If they need other software we are happy to provide it for them as long as it is within their budget and is interoperable with the system. Our philosophy is that the stability of the system is the highest priority. Most software (and all in the near future) is deployed centrally so they have no need to install software. When we moved to this system it dramatically dropped the amount of PCs/Laptops we were fixing due to "I only downloaded this software and it suddenly nothing works...." and as for ISP disks screwing up the network settings, a thing of the past. The earache, whiging, politics and backstabbing was something to behold when we went to this. However, the head stood behind us and said "I pay these guys to make these decisions and support them 100%"

    The permissions are set up so that they could not format the C: drive when using the cmd prompt even if they tried.

    Software compliance would be a minefield if we let anyone install anything they wished.

  9. #9


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,629
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223
    Lab machines / general use computers are locked down - they should be consistent and reliable. Your own desktop/laptop (as in, if you create a pink-on-pink-on-pink colour scheme and then can't find anything on screen, no-one else is affected) there's more leeway, but it's still based on the user in question and leans towards ensuring the stuff works.

    No-one gets local admin rights for use as their normal account because it's too easy for drive-by malware to take advantage of that (why hello Adobe).

    Quote Originally Posted by Mr.G View Post
    but the Teacher is then responsible for the damage caused (if any).
    The enforcement of this varies greatly from school-to-school. In certain places there's nothing more than "ooh, aren't computers funny, when are you going to fix it?" and in others you won't find more than a vigorous telling off.

    If I lose mission-critical data without chance of recovery because of something I knowingly failed to do, I stand a good chance of getting fired. How many teachers (in a similar, clearly explained to them not to do X and why not) would? Excluding clear DP/Child Protection breaches?
    Last edited by pete; 2nd December 2010 at 12:41 PM.

  10. #10
    Marci's Avatar
    Join Date
    Jun 2008
    Location
    Wakefield, West Yorkshire
    Posts
    888
    Thank Post
    84
    Thanked 234 Times in 193 Posts
    Rep Power
    82
    Staff here are set as priviledged users on their regular machine, but on any other machine they're locked down. Priviledged users are set to allow changes to themes - visuals, sounds, fonts, resolution etc etc but can't install software.

  11. #11

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,711
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    Teachers here are totally locked down, as much as students. Different shares and folders obviously. The reasoning is maintenance and useability - Windows is much more hardy to attack when locked down, and I don't have to go round fixing installed trials/demos/torrents. Useability - nothing has been requested to be available that the staff don't have already. Why do they need access to the command prompt, Control Panel, etc, to teach? If they need a software install, they let me know as it's my job. Teachers often say they don't have enough time in the day, adding IT jobs into that would not improve the situation.

    School admin staff are Power Users however - this is due to some of the apps they use. Still no cmd though.

SHARE:
+ Post New Thread

Similar Threads

  1. Document Freedom Day
    By garethedmondson in forum General Chat
    Replies: 0
    Last Post: 30th March 2010, 01:28 PM
  2. Replies: 2
    Last Post: 20th June 2009, 11:18 AM
  3. Non-tech staff setting share permissions
    By ITWombat in forum How do you do....it?
    Replies: 26
    Last Post: 18th July 2006, 10:23 AM
  4. Freedom of speech
    By unixman in forum General Chat
    Replies: 4
    Last Post: 1st June 2006, 03:54 PM
  5. Replies: 16
    Last Post: 10th February 2006, 07:27 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •