Impero - Advanced Policies, etc.

[timlineuk]

Hi All,

 

We've just got Impero and i'm rolling it across our site currently just to our student machines and we're now the most hated people in the school

I will be getting it out onto our staff devices but this is going to require a bit of politics.

 

I was just wondering if anyone has any advice on how they run their advanced policies for their users?

We've got Impero's e-safety keywords enforced and this is pinging up violation all over the show, which is fine for now but looks like it need dialing down slightly in and appropriate way.

 

Also how have you got your access rights set? do you find that basic console is good enough?

 

Many thanks

[mfurneaux]

We've never had any issues from staff regarding Impero being on their computers, but that may be because it's been here for years and is just accepted. Provided your AUP specifies that their activity will be logged I don't think you really need to consult them, but if you need to then push the remote support - "we can help you much more easily and quickly" etc. We don't give staff access to the console, it's just for us admins, but if you're going to then classroom management can be another plus. As for logging, each school will have different needs, but I'd suggest too much info is better than not enough - provided you're just logging violations and not blocking. If the logs start to become unmanageable then review your key words and ease things back.

[Boredguy]

Most of our Office machines are grouped within their own folder, and don't have as strict rules applied as we do for the classrooms.

We also ensured that our console stations can only see computers within certain folders so ensure that no-one can see an office computer from the classroom.

 

To date, no-one has an issue with it, as most of our users are happy that they can call us up and we can resolve the issue over the phone seeing exactly what they are doing. But it comes down to a) trust and b) what your policies are in the first place

[clareq]

We allow staff access to the console, and issue instructions on how they can change student passwords with it. The machines that run the IWB boards in computer rooms are set to manage that room. Impero is "sold" as a program for their use, to manage their classroom.

[RichCowell]

We've not had an issue with it for staff either... Slightly off topic, but someone's mentioned the key words, so I'd definitely recommend getting the Keyword Lists from Impero if you've not already (they're not installed by default so you need to ask)...

 

I went from loads of false positives a day to very few a month once I'd switched... I then directed them to the heads of year for them to deal with directly...

 

The teachers PCs in the ICT suites have access to the console, but nowhere else... I don't restrict anyone to the basic console as it's a bit too basic, and I don't think student passwords can be reset that way, but I do limit what they can access - the controls for that are quite good on the Impero Server so worth looking into...

[timlineuk]

Cheers guys that's very handy - i don't think i'll have a problem with the staff but unfortunately they felt the previous network manager was constantly watching, judging and impeding them (and i can see why) rather than intelligently guiding and assisting them.

Most can see the benefit but others don't like change and feel their just being monitored... anyway it'll be fine, slow and steady and all that.

 

RichCowell - yes thanks i've got their lists already. still get a load of false positives though.

 

Does anyone use it for blocking proxy sites? i've got it currently blocking for all users, but this is causing some problems for students genuinely researching proxy servers.

We currently just have our firewall doing our web filtering so it would be great if impero could help me out with a bit of web stuff too.

Edited February 5, 2016 by timlineuk

[RichCowell]

Have you looked into tweaking their lists? Or the items you get the most false positives for anyway... there could be some terms local to your area that have quite different definitions elsewhere etc.

 

Nope, I use it for very basic blocking compared to proxy sites - I've never been asked to allow anything like that, nor would I if asked... I use it to block games / control YouTube access etc. the more typical/serious filtering is done on our firewall...

Edited February 5, 2016 by RichCowell

[timlineuk]

Cheers, no i certainly don't want to allow actual internet proxy sites but some students require access to research information on proxy servers and their uses but as I've got *proxy* blocked it's causing me a couple of problems... but not having that in would cause me more.

[RichCowell]

Doesn't your firewall block access to proxy sites? If so you could change Proxy from a block, to a notification, so attempts are logged, but not blocked, allowing them to research...

[timlineuk]

I've just been through and tightened up the bypass proxy stuff, we'll see how that goes! annoyingly ultrasurf was already in there to drop but was still working for some scroty users

[timlineuk]

Is there any way to disable the log viewer for staff without using basic console?

[RichCowell]

Is there any way to disable the log viewer for staff without using basic console?

 

Yes - you can set it on the Impero Server...

 

Settings - Console Access Rights

 

Select the User / PC to change - look down the list for Central Log Viewer and untick it...

 

there's loads of options in there you'll want to untick for the majority of staff...

[timlineuk]

Thanks, That looks like it should do it but doesn't

I'll give them a call

[RichCowell]

Hmmm... if the boxes below it are unticked too, they should be able to see very little in the logs... I'll try to have a look later and see... Edited February 12, 2016 by RichCowell

[timlineuk]

Sorted! easy resolution as my test account had a conflict with another group

[RichCowell]

Sorted! easy resolution as my test account had a conflict with another group

 

Cool :-)