Controlled Assessement domain accounts

[maxrebo]

How does everyone manage controlled assessment accounts for pupils?, currently we have had to setup 250 separate accounts for users to log on with (instead of their current account) with limited privileges to network shares etc..., is there a better way of doing this?, it just seems time very consuming to have to do it this way!

 

Regards

[clockend25]

I used to do that but now we use Impero to lock down classes for specific assessment conditions. More flexible and the more savvy staff can quickly set things up themselves.

[Boredguy]

We setup 2 different GPO policies for the controlled assessments here as some subjects say it had to be locked down totally, while others had a more relaxed requirement (based on exam board info)

 

Regardless of security level they needed, each student had a dedicated account created for that subject so they can not access resources other than those deemed acceptable by the board.

It does mean that we also have an extra 100 or so accounts each year, but it only takes us 5 minutes to generate the accounts using the SIMS class lists so it's not a headache really... but I think it would be easier to go back to the old coursework method purely for convenience

[sllorep]

We run Controlled Assessment accounts here.

 

An extra user account for each student per subject taken = A Lot of Accounts

But with this, they are in separate OU's and I've given the teachers rights to ONLY these OU's and they can enable/disable/change passwords themselves, they have the AD Users & Computers add-in installed and I create a new MSC file with only that OU Tree in it for them (using MMC).

 

I have made a GPO that runs BGINFO to add a big "EXAM CANDIDATE - - SUBJECT" notice to the desktop background so that teachers can make sure that they are logged in with the correct account.

 

For each separate CA account, we set up:

- Home Drive - Displays for that student only - full control

 

- Shared Drive - Displays for all students within that CA Subject - Read only for students Full Control for Staff (used to distribute shared work from the teacher to all CA accounts)

 

- Resources Drive - This is set up under the same folder as the accounts Documents and Desktop folders, \\Share\CA\\\Resources so is only visible to that specific users. It is used by the teachers to distribute work that has been pre-prepared before the CA and is Read Only to the student - so they need to copy and paste it into their Home Drive if they are required to edit it.

[maxrebo]

We run Controlled Assessment accounts here.

 

An extra user account for each student per subject taken = A Lot of Accounts

But with this, they are in separate OU's and I've given the teachers rights to ONLY these OU's and they can enable/disable/change passwords themselves, they have the AD Users & Computers add-in installed and I create a new MSC file with only that OU Tree in it for them (using MMC).

 

I have made a GPO that runs BGINFO to add a big "EXAM CANDIDATE - - SUBJECT" notice to the desktop background so that teachers can make sure that they are logged in with the correct account.

 

For each separate CA account, we set up:

- Home Drive - Displays for that student only - full control

 

- Shared Drive - Displays for all students within that CA Subject - Read only for students Full Control for Staff (used to distribute shared work from the teacher to all CA accounts)

 

- Resources Drive - This is set up under the same folder as the accounts Documents and Desktop folders, \\Share\CA\\\Resources so is only visible to that specific users. It is used by the teachers to distribute work that has been pre-prepared before the CA and is Read Only to the student - so they need to copy and paste it into their Home Drive if they are required to edit it.

 

Really helpful, a lot of helpful tweaks in there for us to move forward

 

thanks

[mcoyne]

Each of our students has a domain account for each of their CA subject groups, with corresponding home drives. Access to this is controlled by a script that the teachers run to enable/disable their accounts.

 

We can set this all up in literally minutes, as I have a spreadsheet that uses concatenate formulas to pull in basic information and dump them in to a setup script with a macro. It's sets up the AD OUs, home drives, permissions, accounts, automatically creates passwords, open/close scripts - literally everything. Took a while to set up and get right but now that it's in place, setting up CAs is easy as pie!