+ Post New Thread
Results 1 to 15 of 15
Wireless Networks Thread, Home use of staff laptops - detecting/consequences of misuse in Technical; I'm aware of the argument for and against. We don't allow staff to connect their laptops to their home isp ...
  1. #1


    Join Date
    Dec 2005
    Location
    In the server room, with the lead pipe.
    Posts
    4,619
    Thank Post
    275
    Thanked 777 Times in 604 Posts
    Rep Power
    223

    Home use of staff laptops - detecting/consequences of misuse

    I'm aware of the argument for and against. We don't allow staff to connect their laptops to their home isp / network.

    For those of you who _do_ allow staff to use their laptops on t'internet at home and also connect them to the school network, what do you have in place to detect misuse and what disciplinary action is taken if users introduce problems, illegal software or malware that disrupts use of the school network?

    I'm aware of and currently testing Packetfence.

    I'm also trying to set up a "Thou shalt" and "Thou shalt not" list for home use of laptops to pre-empt a few questions that are soon to come up and would like the document to have teeth.

    So far I've got:

    1) Your other home machines must be kept clean (av/malware detection/firewall).
    1a) You will use a router.
    2) Your friends and family are not to use school equipment.
    3) Laptops will be audited and quarantined from network access if suspect or unpatched.
    4) Software installed on the laptop should be correctly licensed.
    5) Accessing inappropriate Internet content on school equipment in as unacceptable out of school as it is in-school.
    6) We will not help you diagnose problems with your home network, your laptops ability to work with the school network is our concern.
    7) Causing undue work for IT Staff or disruption to the school network or your ability to teach your subject ("my laptop is X") by allowing your laptop to become infected will be reported to your line manager.
    7a) If you phone me at stupid o'clock to fix a problem with your laptop at home, I will bill your department at my consulting rate. I am not paid to provide out-of-hours support to end-users, nor do I wish to be.

    edit: 8 ) Personal use. If you use your laptop for non-school use, it is a taxable benefit.

    This is before I work out the faffing with technical details.

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764

    Re: Home use of staff laptops - detecting/consequences of mi

    We allow the staff to use their (school provided) laptops at home and connect to both home networks and the internet. We setup internet filtering using the Surfcontrol Client Access control stuff. The AV software is also set to update over whatever connection is available. Any issues with the systems are dealt with when they bring them into school. Any home issues like router misconfiguration are outside what we support under school funding. If they want us to set up their own personal home network/printer/router then it is at their own cost.

    Almost all of the issues are solved by not giving the teachers Administrator level accounts. Some higher level teachers do have them but they know that when it slows to a crawl the level of sympathy that they will receive is hugely reduced.

  3. #3

    SimpleSi's Avatar
    Join Date
    Jun 2005
    Location
    Lancashire
    Posts
    5,780
    Thank Post
    1,469
    Thanked 591 Times in 443 Posts
    Rep Power
    168

    Re: Home use of staff laptops - detecting/consequences of mi

    AFIAC the laptops are for the teachers not me

    So AFAIC its up to them (and whatever restriction the head teacher puts on) as to what they do with them.

    I've had 2 machines, in five years, badly infected with stuff (pre- Defender days) - both times I offered to wipe them as the most efficient way of sorting them out.

    Both teachers agreed to this.

    regards

    Simon

  4. #4
    forcryingoutloud's Avatar
    Join Date
    Nov 2007
    Location
    Somewhere over the rainbow
    Posts
    49
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Home use of staff laptops - detecting/consequences of misuse

    Thank the gods! I've recently joined a high school after spending 16 years working for serious blue chip companies and I can't believe what my predecessor and the head lets the teachers get away with. We recently changed to AD 2003 and the number of moans about "..why can't I load software up..", w"hy can't I do this", "I wanna I wanna" is incredible.

    What makes it worse is when you point out the AUP & Staff handbook they default to the '...it's stopping me teaching..' excuse, although what anyone is teaching by having Championship Manager on it is anyones guess.

    SYNACK, what domain access rights/levels do your teachers have?

  5. #5
    chaz6's Avatar
    Join Date
    Nov 2007
    Location
    Aalborg, Denmark (formerly West Midlands, UK)
    Posts
    19
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Home use of staff laptops - detecting/consequences of misuse

    The HMRC fiasco came right in the middle of me trying to persuade management that staff should not get elevated rights on laptops. Guess what, it helped enormously! Our staff get the same access as a user in the group "Domain Users" and no more.

  6. #6

    witch's Avatar
    Join Date
    Nov 2005
    Location
    Dorset
    Posts
    11,050
    Thank Post
    1,318
    Thanked 2,310 Times in 1,624 Posts
    Rep Power
    692

    Re: Home use of staff laptops - detecting/consequences of misuse

    Nothing
    The head doesn't care so they have full control at home
    The only thing I have the power to do is put the antivirus on

    That's it!

  7. #7
    markcuk's Avatar
    Join Date
    Sep 2005
    Posts
    586
    Thank Post
    29
    Thanked 60 Times in 55 Posts
    Rep Power
    37

    Re: Home use of staff laptops - detecting/consequences of misuse

    we have no policy in place for laptops or staff misuse on laptops or on the school network head is not bothered. doesn't want us to lock laptops down says it the only perk teachers get!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!

    had to laugh when he told me that one :-)

    mark

  8. #8

    maniac's Avatar
    Join Date
    Feb 2007
    Location
    Kent
    Posts
    3,037
    Thank Post
    209
    Thanked 425 Times in 306 Posts
    Rep Power
    144

    Re: Home use of staff laptops - detecting/consequences of misuse

    Laptops locked down, staff are required to bring any software they want installing to us for approval first, and if required are granted temporary local administrator rights to install things like home printers/broadband etc.

    Unfortunitely that still doesn't stop them, somehow programs still end up on them. Even found limewire and other such programs installed on some staff laptops. When we do detect things like that, we collect the laptop from the staff member under the pretence of 'maintenance' and have a good look round it. No diseplinery actions been taken, but several staff have had stern e-mails from us and our line manager.

    Mike.

  9. #9
    ICT_GUY's Avatar
    Join Date
    Feb 2007
    Location
    Weymouth
    Posts
    2,261
    Thank Post
    646
    Thanked 283 Times in 204 Posts
    Rep Power
    104

    Re: Home use of staff laptops - detecting/consequences of mi

    All laptops must connect to the school network during PPA time.
    WSUS patches them, NOD updates them.

    I would be concerned if the laptops were used to access warez or illegal p0rn.

    However, I would not expect to find their porn collection on their laptop, though if I did it would be deleted and I would have a word with them.

    If unlicenced software was found they would be reimaged and they would be warned.

    So far all my teachers have been very boring, and I have had no problems.

  10. #10

    Join Date
    Nov 2006
    Location
    Reading, UK
    Posts
    486
    Thank Post
    30
    Thanked 14 Times in 8 Posts
    Rep Power
    18

    Re: Home use of staff laptops - detecting/consequences of mi

    My setup is very similar to many of yours, restricted users, sometimes grant local admin rights for home printers/broadband. We govern all applications to prevent spyware/malware being brought onto our network.

  11. #11

    Dos_Box's Avatar
    Join Date
    Jun 2005
    Location
    Preston, Lancashire
    Posts
    9,787
    Thank Post
    572
    Thanked 2,154 Times in 982 Posts
    Blog Entries
    23
    Rep Power
    626

    Re: Home use of staff laptops - detecting/consequences of misuse

    We use NetSupport DNA. The client records all activity on the computer even when at the users home and reports it back once it reconnects to your network. Very thorough.

  12. #12
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    24

    Re: Home use of staff laptops - detecting/consequences of misuse

    Quote Originally Posted by markcuk
    we have no policy in place for laptops or staff misuse on laptops or on the school network head is not bothered. doesn't want us to lock laptops down says it the only perk teachers get!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!

    had to laugh when he told me that one :-)

    mark
    we don't allow Staff Laptops onto the school network.... We hand it too them and don't want to see them again untill they leave..

  13. #13

    Join Date
    Sep 2006
    Location
    Halifax
    Posts
    35
    Thank Post
    1
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Home use of staff laptops - detecting/consequences of mi

    Quote Originally Posted by Dos_Box
    We use NetSupport DNA. The client records all activity on the computer even when at the users home and reports it back once it reconnects to your network. Very thorough.
    We have Securus, it does the same thing.

  14. #14
    Pete10141748's Avatar
    Join Date
    Nov 2007
    Posts
    1,356
    Thank Post
    104
    Thanked 220 Times in 130 Posts
    Rep Power
    86

    Re: Home use of staff laptops - detecting/consequences of misuse

    We have ours locked down so that staff can't install programs and so have to come to us to do it for them. Other than that, we generally just let them use it. It seems like no matter what we do, staff ignore our policies and the senior members of the staff who actually *could* put disicplinary actions in place just dont care.

    "you can't ban them from the network, you can't take away their access, you can't give them any sort of punishment at all, even if they break every law under the policy which you wrote to protect the school from liability. you're here to fix any problem that (they) might cause in the process of using the laptop un-trained, and as long as they somehow manage to make something work and can teach, you just fix problems and keep quiet" seems to be the feeling around here. I don't think that anyone has quiet got the idea yet that we *are in charge* of the network and all the ICT equipment, and we are *not* just repair-men sitting in the server room in the dark waiting for someone to cause an issue.

  15. #15

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764

    Re: Home use of staff laptops - detecting/consequences of mi

    Quote Originally Posted by forcryingoutloud
    Thank the gods! I've recently joined a high school after spending 16 years working for serious blue chip companies and I can't believe what my predecessor and the head lets the teachers get away with. We recently changed to AD 2003 and the number of moans about "..why can't I load software up..", w"hy can't I do this", "I wanna I wanna" is incredible.

    What makes it worse is when you point out the AUP & Staff handbook they default to the '...it's stopping me teaching..' excuse, although what anyone is teaching by having Championship Manager on it is anyones guess.

    SYNACK, what domain access rights/levels do your teachers have?
    As for privileges on the domain all teachers are logged in as limited users with roaming profiles. They are not locked down exceptionally harshly but all the things that need to be defined for it to work are enforced by group policy. For example all of the laptops are forced to synchronize offline documents and user changes to this are locked out. All of the printers are mapped at login time by a script and the teachers have been prevented from deleting any printers mid session as this to has caused problems to.

    Their is also an enforced 15 minute station lock on all teacher accounts as they had a habit of leaving them logged in unattended during the day or even overnight. This mostly occoured because they were in the middle of typing something and couldn't be bothered saving it. Objections were silenced by reminding everyone that if it was left logged on and unlocked anyone could delete their documents or reports.

    All of the documents and files are locked to the user via NTFS file permissions and the summary of any objectionable web activity is emailed to management daily.

    Only the senior teachers are given local admin access on the laptops (most definatly not the domain). This is to test out new software that they or their subordinate teachers wish to use before it is brought to IT to be installed on workstations.

    Home printers, scanners etc must be installed by IT, we have not added any lockouts on the network adapters as this has not caused any problems yet as most home networking gear is automatic (i like DHCP).

    Our primary mandate is to provide a working computer that allows them to do school work (this means email, reports, office documents, web research and does not include downloading of illegal music, IMing and Bloging the day away or installing 'helpful' toolbars and system tray inhabiting rubbish). The price of this mandate is either highly enforced security or a combination of high competency and responsibility on the part of the teachers. As you may imagine it was quite easy to justify the lockouts that were required on cost alone.

SHARE:
+ Post New Thread

Similar Threads

  1. Staff Access from home????
    By thegrassisgreener in forum Windows
    Replies: 27
    Last Post: 3rd April 2008, 10:41 AM
  2. Getting stick for locking down staff laptops
    By Oops_my_bad in forum School ICT Policies
    Replies: 22
    Last Post: 20th January 2008, 08:21 PM
  3. Staff laptops at home
    By button_ripple in forum Hardware
    Replies: 15
    Last Post: 3rd January 2008, 10:55 PM
  4. BSF and staff laptops?
    By tosca925 in forum BSF
    Replies: 1
    Last Post: 11th August 2007, 12:42 PM
  5. Need a home PC for a member of staff
    By Dos_Box in forum Recommended Suppliers
    Replies: 8
    Last Post: 5th January 2007, 06:12 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •