Students and their AD passwords

[timbo343]

It's becoming more and more of an issue where certain students come back for a password even though yesterday they had just reset it.

 

I'm just putting it out there but does anyone go down the route of having a small minority of users that have a password which they cannot change or doesn't expire to make their lives easier. The majority are fine and most of the time they get on with it but there are the small number that have issues.

[skell]

I've been mulling this over as well. The latest guidance from MS is to have 2FA instead and "Eliminate mandatory periodic password resets for user accounts."

 

https://www.semperis.com/microsoft-upends-traditional-password-recommendations-with-significant-new-guidance/

[timbo343]

So how would 2FA work in an Onsite AD situation rather than using Azure?

 

I totally get that Azure maybe targetted more than our local ADs and if we use AAD then yes we need to educate our users but.

[3s-gtech]

I'm finding that most of these type of students are also the ones that forget their username or put a space before/after it. Locking their password will make next to no difference!

[caffrey]

I find it's some of them that just want to get out of lessons for 5 minutes, I know they logged in perfectly fine the day before because of our logon scripts

[Katy]

When I was at school on our Acorn network, you had to pay 50p for a reset if you forgot your password or were put in detention. I don't remember there being many reset requests at all, shame we can't go back to that

[elsiegee40]

It's a good time waster to get out of lessons @timbo343

 

See if you can narrow it down to specific teachers being played up.

 

In any case, a quiet with whoever is leading behaviour in your school commenting on this latest trendy wheeze may be all that's needed.

[timbo343]

We've always had the issue with users and their usernames and with them wanting to get out of lessons.

 

We are going to monitor the minority who we've set the passwords to never expire and see what happens.

[timbo343]

When I was at school on our Acorn network, you had to pay 50p for a reset if you forgot your password or were put in detention. I don't remember there being many reset requests at all, shame we can't go back to that

We were going to try the £1.00 rule but thought better of it. Just imagine how much we'd make.

[timbo343]

It's a good time waster to get out of lessons @timbo343

 

See if you can narrow it down to specific teachers being played up.

 

In any case, a quiet with whoever is leading behaviour in your school commenting on this latest trendy wheeze may be all that's needed.

We tried to log a ticket for each one we had but in the end we were finding that we had nearly 30 to do per day.

 

Im wondering if there's a way to see how many times a password has been reset? That way we could run a report and report the user to the head of year for them to have a word with the student.

[Domino]

Could you not delegate trusted teaching staff the ability to change student passwords and give them a customised MMC to do so?

[elsiegee40]

We tried to log a ticket for each one we had but in the end we were finding that we had nearly 30 to do per day.

 

Im wondering if there's a way to see how many times a password has been reset? That way we could run a report and report the user to the head of year for them to have a word with the student.

 

If it's only a handful of students, a bit of A4 on a pinboard and a five bar gate tally would do

[jmcewen]

Could you not delegate trusted teaching staff the ability to change student passwords and give them a customised MMC to do so?

 

We do that, we have a tool distributed to all teacher stations that allows them to perform password resets.

Edited February 8, 2017 by jmcewen

[Arreks]

We just use a self-service reset system, the kids enter security questions/answers at the start of the year so they can use them to reset their own password.

[witch]

We allow the staff to use BCX Change Password. Works like a charm and if the student realises he or she can't get out of the classroom, it might magically cut down the number of requests

[timbo343]

Could you not delegate trusted teaching staff the ability to change student passwords and give them a customised MMC to do so?

 

We did think about that but decided against it. By having the student visit us, we get to know who the culprits are and then can follow this up later.

 

If it's only a handful of students, a bit of A4 on a pinboard and a five bar gate tally would do

 

Might look at doing something like this, like i say, pity there isn't something electronically or central that AD can do this with.

 

 

We did see one student try to do everything and anything not to log on to the network, this was with a supply/cover teacher taking the class.. again, it's classroom management. I must admit though, having Office365 sync with AD and SMHW tie into AD has cut down the number of requests but like i say, there's always going to be the minority.

[asangster]

we use biometric's here with a firm called Cunninghams catering who installed the kit. they offered us an automatic password changing device which could easily be installed in ICT rooms. The kids place their finger on the reader and it generates random 4 letter password plus 1234 if I remember correctly (kite1234) this would allow a student to login and change it. we did not buy into this, but its an idea I supposed .

[MatthewL]

We tried to log a ticket for each one we had but in the end we were finding that we had nearly 30 to do per day.

 

Im wondering if there's a way to see how many times a password has been reset? That way we could run a report and report the user to the head of year for them to have a word with the student.

 

Takes 2 minutes to log a ticket, you can have a premade template so all you do is add the user details to it and then you have a record. Also proves certain things by having a record, no matter how small everything should be logged.

[forkies]

Takes 2 minutes to log a ticket, you can have a premade template so all you do is add the user details to it and then you have a record. Also proves certain things by having a record, no matter how small everything should be logged.

 

2 minutes x 30 = 1hour. Wouldn't be wasting my time with that, basically you would spend 2 hours a day on password resets.

 

How about a custom field in AD that you just add 1 to every time. Then you could powershell it?

 

Or simpler yet a spreadsheet. Or even as mentioned above a whiteboard/a4 paper on the wall with a user tally if not that many.

[Liam]

We raise a ticket on behalf of the teacher and cc the student in.

1. Because we give the teacher the ability to do this so it's a gentle reminder.

2. I'll check their last login in ad and if it's as recent as the same day or the day before I'll make a note of this in the ticket and the teacher generally deals with it.

 

This works a treat and I can honestly say I cannot remember the last time we reset a password.

[asangster]

yip all those are good I would have preferred the Biometric rout but the school did not .. so we use help desk requests (spiceworks) from staff only and they are dealt with right away .

[kennysarmy]

We allow the staff to use BCX Change Password. Works like a charm and if the student realises he or she can't get out of the classroom, it might magically cut down the number of requests

 

Same here....

 

Students should not need to leave a classroom for a password reset even without this software - most rooms have phones or a phone in a nearby office.

[Sagima]

Staff just call us and we reset it to a specific password that they have to change on logon. The only pupils who turn up here for password help do so at break/lunch

 

Teachers used to be able to do it but would phone us to instruct them how every single time so we just gave up with that plan

[gsk]

We allow the staff to use BCX Change Password. Works like a charm and if the student realises he or she can't get out of the classroom, it might magically cut down the number of requests

 

I installed this and delegated the control on the students OU. It took a good 3 and a half minutes to sort. Wish it wasn't branded though.

[AlanD]

The trouble when a student forgets (apparently) their password - is that they have to invent a new one almost instantly....and they do this badly ...with no system in their mind....and while they might remember it for a few minutes - remembering it the next day is almost impossible for them. Edited February 11, 2018 by AlanD