Impero and Policy

[pickman]

Recently had Impero installed.

 

Staff using it only have access to the rooms they teach. Myself and my staff have access to the entire network along with the Principal. Just wanted to cover ourselves in the acceptable use policy.

Something along the lines of screens may be viewed at any time. Any staff who deal with CP don't have it on their machines.

 

Anyone have this covered in their policy's ?

[mrbios]

I can't offer advice on the AUP, but what i will say is be very careful who you give entire network access to. We had an incident where a technician restarted every PC with the client on in one go a few months ago (550 PCs including offices etc.) We've since retracted entire network view / power commands from being so easily available.

[synaesthesia]

Why not set up a group called "Staff" and add all staff to it, maybe with exceptions for certain people. In this group enable the option that means the end users are asked to give you permission to view/control their screen.

It can be set up easily to deny after 10 seconds, allow after 10 seconds or just allow/deny flat. You can write a policy based around that and will help keep you covered.

You can also add them as an exception in that policy if they come to your office to ask about something on their screen at the other end of the school so you can get work around it (as they are present you clearly can have their permission in person)