Disabling internet in one room.

[eejit]

Ok, I'll kick off the questions, by using the example on the homepage. How do you disable internet in one room only?

 

I'm using a Windows 2003 server with XP clients. I want the teacher to be able to switch the internet use on or off while they are in the room. If the techies had to get involved in this is could use up all our time.

 

cheers.

[Dos_Box]

Before I suggest an answer a=can I ask if you use specialist tools such as ISA server, Net Support School and Net Op, all of which will allow teachers to block access to the net at the click of a button and if you have active directory installed?

[Ric_]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

The easiest way that I have ever seen it done is using NetSupport School. The NetSupport packages are amazing and well worth the money. The teacher's interface allows clients to be selected and then the Internet connection can be turned on/off at will as well as restricting the sites that can be viewed.

 

The best value option with NetSupport is to get the Manager package which has the School package bundled with it and will give you lots of funky management controls.

 

Check it out at http://netsupportmanager.com/

 

For a free method, we would need to know more about the site setup, such as the type of proxy/firewall, etc.

[eejit]

The only other thing we have is an ISA2004 server which we've just set up, so we're not too clued up on all it's bells and whistles yet.

 

We have had a trial of Netsupport before, but kids would just hit the reset button on their PCs to disconnect from the session, thereby removing restrictions from themselves. We contacted them about that problem, but there was no solution for it at the time. (It was about a year ago)

 

Cheers for the reply though.

[eejit]

I'm just thinking out load here, but maybe it could be done without any third party software as follows:

 

1) Keep the computers for different classes in different OUs (standard practice for most schools, I presume.)

 

2) Create a group policy that adds "iexplore.exe" to the "software restriction policy".

 

3) Decrease the time that group policies refresh to every 3 minutes.

 

4) Allow teachers to enable/disable this particular policy.

 

Ok, so I don't know if point 3 would make a network insanely slow - or make virtually no difference at all. I also don't know how to implement point 4, but I believe that you can create custom built MMCs that will only show things you want.

 

Any feedback on the above?

Cheers.

[Ric_]

@eejit

You still suffer the same problem of the little darlings resetting machines with NetSupport but training with a large stick can help to avoid it - after all it isn't healthy to restart the computers that way too much.

 

There is also a tool in the Win2K resource kit called CConnect - this can prevent people loggin onto more than one machine at once and prevent future logons if the machine is not logged off correctly (e.g. if the machine is reset).

 

In theory, ISA can restrict your classes but you have to create client address sets and that doesn't work with DHCP.

[ninjabeaver]

Hi eejit,

 

I've had the exact same problem with the students playing online games etc when they should be doing their lessons.

 

We tried the NetOp solution, but it was not too successful. (This was over a year ago though)

 

In the end we went down the Web Marshal route. There is some initial layout of monies through purchasing a basic srver, Windows 2003 Server and the Web Marshal Software but the returns were more than worth it. Lessons are now far less interupted by students accessing the Internet etc and staff stress levels have also lowered. I've had nothing but good feed back from it.

 

It does not just turn the Internet on and off though. You can put rooms / individual PC's into different catagories as well. For example we have about 60 web sites that we allow access to at all times but if the staff wish to have students access search engines for example we place that room into full access etc.

 

You can demo it as well.

 

Any more questions then please PM me or add on to this.

[Dos_Box]

Quick reply. You can use ISA 2004, create a MMC for teachers and set up classroom groups which can be disabled\enabled by staff.

[Ric_]

Quick reply. You can use ISA 2004, create a MMC for teachers and set up classroom groups which can be disabled\enabled by staff.

 

As I mentioned - the client address sets use IPs rather than DNS names

[Alex]

you could stick a small firewall between each room you want to control.

 

something like a http://www.firebrick.co.uk/ that has a web interface.

 

set it for straight passthrough apart for port 80, which can be enabled / disabled from the frontpage of the firewall interface. IIRC they cost about £350 :-S

 

You could do exactly the same with a linux box & webmin - take a bit more setting up, but would cost nothin if you have some crap old PCs lying around.

[RobC]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

Not actually true. Check out LanView 3 from MST Software. It has its own Internet Access Manager built in which you can use to disable access to single computers, whole rooms or just certain users. You can also set an over-ride for certain systems or users so that staff can still access the Internet.

 

And just to cap it all off, it's completely free!

 

(And no, I don't get commision from them! )

[Geoff]

If you got confused like me and couldn't find the download link for LanView 3, you need to register with the site first.

[Alex]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

Not actually true. Check out LanView 3 from MST Software. It has its own Internet Access Manager built in which you can use to disable access to single computers, whole rooms or just certain users. You can also set an over-ride for certain systems or users so that staff can still access the Internet.

 

And just to cap it all off, it's completely free!

 

(And no, I don't get commision from them! )

 

That looks interesting - taking a look now.

[Ric_]

If you got confused like me and couldn't find the download link for LanView 3, you need to register with the site first.

 

Just waiting for the email - stupid mail relays take eons to deliver mail to here

 

That software does look rather good - some of their other products look pretty cool too.

[ninjabeaver]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

Not actually true. Check out LanView 3 from MST Software. It has its own Internet Access Manager built in which you can use to disable access to single computers, whole rooms or just certain users. You can also set an over-ride for certain systems or users so that staff can still access the Internet.

 

And just to cap it all off, it's completely free!

 

(And no, I don't get commision from them! )

 

8O *Dribbles* 8O

 

How come I can never find stuff like this when I need it. Thanks.

[Geoff]

Not asking Google the right question?

[altecsole]

Censornet (free Linux based proxy designed for educational use) allows you to do this. You have to add all your machine MAC addresses to it for it to work.

 

I used it at my last school and teachers could control individual or groups of computers very easily. You can schedule internet access too.

[ChrisH]

I use Censornet also. I dont let the teachers at the admin control panel though :twisted:

[altecsole]

I use Censornet also. I dont let the teachers at the admin control panel though

If you get them to login as Manager, rather than Admin, they have less permission to do things.

[ChrisH]

I know but some have trouble entering their name for proxy authentication never mind controling rooms

[MkII]

Group Policy does the do - for no extra cost - put you machines into groups of rooms, then change the proxy setting on the group you want to have no access - or for indivuidual users create a seperate OU for no internet and move the student into it. This is a little involved for a 'non technical user'.

 

LanView looks just the job - just installing it now....

[Diello]

First off - I'll admit that I am affiliated with MST Software - however, I say this as a Network Manager...

 

LanView will quite simply make your life easier. The Internet banning of machines by room is excellent, it's also configurable, allowing you to specifiy which applications are block, f.x. we manually added Outlook to the list of banned apps, it's also on the fly - knocking them out straight away, we've seen some solutions that required a re-logon. It's easy for teachers to use, they simply get a red and green light on their desktops and can pick whichever one they need with ease.

 

The rest of LanView is a good send to - remote control via VNC-based connections (note that you also need to install WinVNC as a seperate app to get remote control, TightVNC is the best I've found so far), remote shutdown, logoff, reboot, startup etc. Easy messaging of users or groups of users, scheduled tasks, remote application execution, and the lovely "get attention" system - allowing you to force the kids to pay attention to you whilst teaching - or when you need to "lock down" active users for something.

 

Those are what we use here mostly anyway.

[eejit]

First off - I'll admit that I am affiliated with MST Software - however, I say this as a Network Manager...

 

The rest of LanView is a good send to - remote control via VNC-based connections (note that you also need to install WinVNC as a seperate app to get remote control, TightVNC is the best I've found so far), remote shutdown, logoff, reboot, startup etc

 

So, people with generic networks should use TightVNC? Your documentation seems to imply that that should be used with RM, I wasn't sure what to use for our network.

 

Also, can you change the server menu so it just shows "internet on" or "internet off" buttons for a teacher? If this could be done with a logon script that would be fine too.

 

I've just downloaded it, but first impressions are pretty good.

[russdev]

I think that is lot to do with how it it evolved with kev being from a rm background...

 

we are looking at documentation and anyideas help etc you have how can help you with that in a non rm way is always welcome email [email protected] if anyideas...

 

Russ (waving his mst badge so every one can see...)

[tarquel]

Didnt seem to get anything out of LanView when I had a blast earlier but gonna give it a go again.

 

As I'm looking into a vpn/firewall solution, other than the complex (and costly) CISCO route, some of these hardware systems have enabling/disabling the internet in their web interface/setup. I hear some are easier to use than others.

 

FYI I've been currently looking up Zyxel products - in particular, the ZyWall 70. Any suggestions on this or alternatives would be good - tho the primary use for the system is VPN (endpoint) from a external IP thru the county network to our schools subnet....but i digress sorry [not interested in a linux sol but thanks]

 

regards

Nath.