Eportal

[NetworkNinja]

Good Morning Edugeek,

 

I have been asked by the headteacher to look a issue which has only just been found. Basically a parent rang the school and told them that her son's friends has been accessing eportal and looking at details of different students.

 

I have looked at the pupils internet history but i can't seem to see anything there, is there any way to pull a list of how many times a certain member of staff has logged into eportal.

 

Thanks in advance.

[Banjo]

Not used the system for a long time, but from memory your out of luck. There is a way of seeing whose entered data or changed things via eportal but not for viewing.

 

The standard eportal admin account used to be created by default in earlier versions of the software allowing any one who new the account details to logon. Also, by changing the string (studentid) in the web address you could view other students/staff details.

 

You need to reset all the staff passwords and send them out ASAP.

[Achandler]

I would mass reset all the passwords, then get your head to email staff sayign what has happened and highlight the importance of passwords.

 

Staff use awfully guessable passwords all the time ePortal has poor restrictions on what they are allowed. The only way you might find out is through IIS logs.