Students getting around restrictions

[DavetheITguy]

Hi, All.

 

This one should get you thinking. A few 'lovely' students have found a way around the restrictions in place, if they log on the computer and then pull the network cable out just before it applies settings they have full access to the computer and pretty much full access to mstsc, CMD etc. They are also able to UNC to places, my network is pretty much locked down so they can't access it.

 

Anyone had this trouble ?

 

Any input would be appreciated.

 

Thanks,

 

David

Edited February 6, 2015 by DavetheITguy

[6Foot2]

This has come up before. This thread:

 

Link: http://www.edugeek.net/forums/security/49064-login-then-pull-out-network-cable-admin.html

 

contains a reply that has been accepted as a solution by the post creator.

 

If you have Impero you can get the console to lock the screen until the connection is restored.

 

HTH.

[3s-gtech]

Super mandatory profiles should also help with this issue, as they require access to the network profile to complete the logon. That's what we use.

 

User profiles become super-mandatory when the folder name of the profile path ends in .man; for example, \\server\share\mandatoryprofile.man\.

 

Super-mandatory user profiles are similar to normal mandatory profiles, with the exception that users who have super-mandatory profiles cannot log on when the server that stores the mandatory profile is unavailable. Users with normal mandatory profiles can log on with the locally cached copy of the mandatory profile.

 

https://msdn.microsoft.com/en-us/library/windows/desktop/bb776895%28v=vs.85%29.aspx

[Arreks]

If you have Impero you can get the console to lock the screen until the connection is restored.

 

HTH.

 

I didn't know this - how would you go about doing it?

[6Foot2]

I didn't know this - how would you go about doing it?

 

Right click the group in the Impero console you want to make the change for and select 'Properties' From there select the 'Group settings' tab. In there you will see a number of tick boxes:

 

http://i.snag.gy/7MNM6.jpg

 

Put a tick in the box beside 'Lock the users screen when the cable is pulled out'

 

Click OK.

 

Job done.

 

[Arreks]

Right click the group in the Impero console you want to make the change for and select 'Properties' From there select the 'Group settings' tab. In there you will see a number of tick boxes:

 

 

 

Put a tick in the box beside 'Lock the users screen when the cable is pulled out'

 

Click OK.

 

Job done.

 

 

Tyvm! Been using Impero for ages and I still find out new things

[6Foot2]

Tyvm! Been using Impero for ages and I still find out new things

 

You can customize the lock screen too!

 

You have to logon to your Impero server for this:

 

At the Impero server select the 'Settings' tab and then select 'Lock screen'

 

http://i.snag.gy/OCqfq.jpg

 

From there you can use a custom lock screen image, change the text colour and on screen messages when Impero has taken some action.

 

Happy days.