ITGuyWestMidlands Posted August 14, 2015 Posted August 14, 2015 (edited) So if I have understood this correctly users will need a Google Apps account, to login to, in order to fully use YouTube? That leads me to ask whether accounts can be setup just for YouTube, with Email, Docs etc disabled? Yep they can Its free. Why not make it an option for everyone. Get adfs and single sign on sorted and it should be great - im working on this now (well, not tonight) Edited August 14, 2015 by ITGuyWestMidlands
Edu-IT Posted August 14, 2015 Posted August 14, 2015 Yep they can Its free. Why not make it an option for everyone. Get adfs and single sign on sorted and it should be great - im working on this now (well, not tonight) Already have 365 implemented so don't need another email service. That's why I was asking.
free780 Posted August 14, 2015 Posted August 14, 2015 It's almost like how Microsoft used to be. You can use OWA but you need to use IE. Putting another cloud link to your LDAP is concerning just to filter YouTube. The trouble is YouTube has too much of a monopoly. I think Google have seen the opportunity and maybe feel threatened by office 365. Some places will allow YouTube with the restricted mode enforced and some will just block youtube. Again no one from Google seems to speak to the IT staff in education, they just act like Microsoft in the glory days of windows XP.
ITGuyWestMidlands Posted August 14, 2015 Posted August 14, 2015 Google forms alone is a great reason to have an account
caffrey Posted August 15, 2015 Posted August 15, 2015 If a school moves to mobile devices then a cloud service is more or less essential and GAFE is probably the best of the bunch (classroom etc.).
CyberNerd Posted August 15, 2015 Posted August 15, 2015 It's almost like how Microsoft used to be. You can use OWA but you need to use IE. Putting another cloud link to your LDAP is concerning just to filter YouTube. The trouble is YouTube has too much of a monopoly. I think Google have seen the opportunity and maybe feel threatened by office 365. Some places will allow YouTube with the restricted mode enforced and some will just block youtube. Again no one from Google seems to speak to the IT staff in education, they just act like Microsoft in the glory days of windows XP. you are in the wrong circles. We often feedback to google development teams or the uk edu team. 1
dhicks Posted August 15, 2015 Posted August 15, 2015 you are in the wrong circles. We often feedback to google development teams or the uk edu team. That's handy - when you next speak to them, could you maybe ask for some provision to be made to assign a default YouTube access level based on an originating IP address, please? That way we could have a default setup where all YouTube requests from our site get filtered (default "restricted mode" sites + site-defined whitelist), with no requirement for end users to be logged in to a Google account. That way any guest user or similar that comes in can be given YouTube access, and we can un-block anything specific they need, without having to dish out any account details. 1
Edu-IT Posted August 15, 2015 Posted August 15, 2015 That's handy - when you next speak to them, could you maybe ask for some provision to be made to assign a default YouTube access level based on an originating IP address, please? That way we could have a default setup where all YouTube requests from our site get filtered (default "restricted mode" sites + site-defined whitelist), with no requirement for end users to be logged in to a Google account. That way any guest user or similar that comes in can be given YouTube access, and we can un-block anything specific they need, without having to dish out any account details. That sounds a perfect solution.
CyberNerd Posted August 16, 2015 Posted August 16, 2015 That's handy - when you next speak to them, could you maybe ask for some provision to be made to assign a default YouTube access level based on an originating IP address, please? That way we could have a default setup where all YouTube requests from our site get filtered (default "restricted mode" sites + site-defined whitelist), with no requirement for end users to be logged in to a Google account. That way any guest user or similar that comes in can be given YouTube access, and we can un-block anything specific they need, without having to dish out any account details. I will. I think the issue with this is similar to the original problem with youtube, it was a complete shambles: videos were (randomly) being labelled 'inappropriate' to the point where perfectly good teaching resources were not accessible. What's fine for year 12 isn't good for year 2. I think the problem stems from the fact that disaffected students could click a link to report and therefore blacklist resources. I'll certainly feedback your suggestion but I feel that the solution Google have is the best: teachers are given the freedom to whitelist resources that are appropriate to the class. 1
Opendium_Steve Posted August 17, 2015 Posted August 17, 2015 That's handy - when you next speak to them, could you maybe ask for some provision to be made to assign a default YouTube access level based on an originating IP address, please? That way we could have a default setup where all YouTube requests from our site get filtered (default "restricted mode" sites + site-defined whitelist), with no requirement for end users to be logged in to a Google account. That way any guest user or similar that comes in can be given YouTube access, and we can un-block anything specific they need, without having to dish out any account details. A very simple solution would be for YouTube to stick the "rating" and unique video ID in the HTTP response headers of any request relating to a video. That way, your local web filter could allow everything with a "clean" rating, but also allow/block other videos based on its own list of approved videos (which could, of course, be updated by the school's staff). You'd need to intercept the HTTPS traffic, but most schools do that anyway so it isn't a big deal.
fiza Posted August 17, 2015 Posted August 17, 2015 This might help? Setting up the new YouTube Restrictions! (and enforcing them via Windows DNS) Has anyone tried this method? - - - Updated - - - With Chromebooks / boxes you can also restrict personal accounts from logging in How do you do that?
dhicks Posted August 17, 2015 Posted August 17, 2015 You'd need to intercept the HTTPS traffic, but most schools do that anyway so it isn't a big deal. Does that work without having to distribute an HTTPS certificate to each client device? If not, then it's fine for domain PCs, but not for guest devices without further configuration.
Opendium_Steve Posted August 17, 2015 Posted August 17, 2015 Does that work without having to distribute an HTTPS certificate to each client device? If not, then it's fine for domain PCs, but not for guest devices without further configuration. You can't do HTTPS interception without distributing a certificate to client devices, so for devices that you can't distribute a certificate to (e.g. visitors) then you would have to accept a reduced level of filtering. But that's pretty much where we stand with all the other HTTPS sites anyway. Even with Google's current solution, you need to set up Google Apps accounts for your visitors, so I'm not sure its any better than my suggestion. 2
CyberNerd Posted August 17, 2015 Posted August 17, 2015 How do you do that? https://support.google.com/chrome/a/answer/1375678?hl=en#restrictsignin 1
fiza Posted August 17, 2015 Posted August 17, 2015 https://support.google.com/chrome/a/answer/1375678?hl=en#restrictsignin Ah.. I thought it was something else. I was aware of this restriction. The problem is that students, once logged into the chromebook can then sign out of chrome and sign in with a personal account. I was hoping there was a way to stop them.
CyberNerd Posted August 18, 2015 Posted August 18, 2015 Ah.. I thought it was something else. I was aware of this restriction. The problem is that students, once logged into the chromebook can then sign out of chrome and sign in with a personal account. I was hoping there was a way to stop them. The disconnect/ signout page is blanked out on our chromeos - how do you do this ? There must be an additional setting somewhere
fiza Posted August 18, 2015 Posted August 18, 2015 The disconnect/ signout page is blanked out on our chromeos - how do you do this ? There must be an additional setting somewhere Not the ChromeOS. Once the students are signed into the Chromebook and they get the standard Google search page. They can sign out of the Chrome Browser and sign in again with their own personal Google account.
CyberNerd Posted August 18, 2015 Posted August 18, 2015 Not the ChromeOS. Once the students are signed into the Chromebook and they get the standard Google search page. They can sign out of the Chrome Browser and sign in again with their own personal Google account. oh I see - it's still restricted youtube though.
dhicks Posted August 18, 2015 Posted August 18, 2015 You can't do HTTPS interception without distributing a certificate to client devices Right-oh, that makes sense, so next time CyberNerd talks to Google it would be handy if he could convince Google to allow for a default filter on a per-site basis to allow for easier handling of non-authenticated guests. Thinking about how Google would want to handle that, it'd probably be a case of assigning a source IP address to a particular Google account from your domain (user "guest" or similar), which would then have a blacklist/whitelist of disallowed/allowed videos assigned to it.
rogerdnixon Posted August 18, 2015 Posted August 18, 2015 There is, block https://accounts.google.com/AccountChooser & https://accounts.google.com/AddSession in the management console. See my blog post: IT Ideas: Some frequently asked questions about locking down managed chromebooks You might also want to restrict access to settings as well. Assuming a student did use a private account (and could) all they would get is restricted mode if you have set the restriction network wide. Seems to work very well and easy for staff to approve content. 1
ADMaster Posted August 18, 2015 Posted August 18, 2015 Hi all, I have setup the google apps admin console to allow staff and verified classroom teachers to approve videos. I have followed the network setup for users not signed in to get restricted mode. Also the cname method seems to be working on my windows dns. I didn’t have to do the hack with the IP address etc. I can sign out and I get restricted youtube, I sign in and I have full access. All appears to be well. I created a test student account and when I try to sign into youtube I get the message the service is not available on my domain. We have youtube turned on for staff and off for students in the admin console. Do I have to allow students to have youtube accounts to take full advantage of the new settings. Are there new settings I’m overlooking that gives view only access. I don’t think we want students uploading their own videos to their school accounts. Thank you,
rogerdnixon Posted August 19, 2015 Posted August 19, 2015 You do need to enable YouTube as a service for your students for them to be able to view approved content (otherwise they will just get restricted content). For them to be able to upload content, you currently need to enable G+ as well (13+ only). We allow Y10+ to have their own school channels which are used extensively - particularly in PE/Drama etc.
dastrix Posted August 19, 2015 Posted August 19, 2015 Ok so i have a question, we run a 1:1 scheme on Chromebooks my understanding of this new services is that the students 1:1 devices will also have restricted youtube at home? is this correct?
rogerdnixon Posted August 19, 2015 Posted August 19, 2015 Correct - unless you allow signin with private accounts - where the restriction won't apply offsite. Management policies apply anywhere.
dastrix Posted August 19, 2015 Posted August 19, 2015 Don't like it I'm all for letting students do what they want when at home they love watching videos etc 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now