Grommit Posted April 16, 2008 Posted April 16, 2008 On our present setup when te students log on they have internet access.. Now a teacher is telling me it's all wrong at another school the student has to LOGON to something else to get internet access... Any Ideas how to do this ? We do have an ISA Server
Geoff Posted April 16, 2008 Posted April 16, 2008 The proxy system used at the teachers last school didn't support NTLM transparent authentication (I'd imagine it was a squid based install, where whoever set it up didn't understand samba). When someone wanted to get on the net, they'd be prompted to authenticate (using basic auth). Obviously, this is an inferior implementation to what you already have.
tom_newton Posted April 16, 2008 Posted April 16, 2008 ..unless of course what you already have isn't authenticating at all
cjohnsonuk Posted April 16, 2008 Posted April 16, 2008 Our squid is set to authenticate against just one container in the AD. To block a student we move them one container down into "blocked". Currently they just use another students login to bypass this. With NTLM they won't get the login box and it should just use their windows login details which shoudl slow them down. Then we just need to prevent multiple AD logins ...
Geoff Posted April 16, 2008 Posted April 16, 2008 Then we just need to prevent multiple AD logins Utility Spotlight: Limit Login Attempts With LimitLogin
FN-GM Posted April 16, 2008 Posted April 16, 2008 Now a teacher is telling me it's all wrong at another school the student has to LOGON to something else to get internet access... Why is she telling you how to do your job?
mortstar Posted April 16, 2008 Posted April 16, 2008 Why is she telling you how to do your job? Could be male... Though I am surprised that the OP is taking notice. Surely you set how the system works, unless told otherwise by SLG.
Grommit Posted April 16, 2008 Author Posted April 16, 2008 Why is she telling you how to do your job? Well she's shouting that the entire architecture of the school network is wrong all because she cannot control the students internet access and that her friend at another school can control internet access as there is a "double" logon to get to the internet and that the internet logon is simple to control ... We have Ranger Remote that the students always seem to be able to bypass (in her room only)
FN-GM Posted April 16, 2008 Posted April 16, 2008 We have Ranger Remote that the students always seem to be able to bypass (in her room only) Do you have IE7 with tabs?
Grommit Posted April 16, 2008 Author Posted April 16, 2008 (edited) Could be male... Though I am surprised that the OP is taking notice. Surely you set how the system works, unless told otherwise by SLG. Yes you are right... the network works.. over 1400 users and 650 Workstations with 56 IWB around the site.. Yet were does she get off telling me that it's set up wrong becuse when the kids logon the internet accesss is automatically there... What I want to know because she is getting louder and louder and the SLG are starting to hear her and questions will be asked.. ... is there a way that there is no automatic internet accesss for students ? Edited April 17, 2008 by Grommit
Geoff Posted April 17, 2008 Posted April 17, 2008 You realise of course if you do change it, you'll not have one teacher moaning, you'll have all but one instead?
mortstar Posted April 17, 2008 Posted April 17, 2008 How about setting LanView up only in her room (or all systems - like we have). Then she gets a "traffic lights" applet that runs on her workstation - or a workstation where she is logged in - and can choose when to have internet accessible or not. (Though if you are using IE, must be version 7). LanView is the best price too - FREE
gaz350 Posted April 17, 2008 Posted April 17, 2008 Well she's shouting that the entire architecture of the school network is wrong all because she cannot control the students internet access and that her friend at another school can control internet access as there is a "double" logon to get to the internet and that the internet logon is simple to control ... We have Ranger Remote that the students always seem to be able to bypass (in her room only) sounds all too familar had the same run in with a teacher here not long ago. If you add a barrier the kids would rather spend time trying to get around it than doing some work... Always amazes me though that the good teachers have no problems with kids abusing computer access in their classes. Ofc I should have not mentioned this to the teacher in question
Grommit Posted April 17, 2008 Author Posted April 17, 2008 How about setting LanView up only in her room (or all systems - like we have). Then she gets a "traffic lights" applet that runs on her workstation - or a workstation where she is logged in - and can choose when to have internet accessible or not. (Though if you are using IE, must be version 7). LanView is the best price too - FREE We have Ranger Remote which works fine for the other Teachers but this one always has problems with it...
James2k Posted April 17, 2008 Posted April 17, 2008 Look at a program called browse control. very cheap and is dummy proof.
cjohnsonuk Posted April 17, 2008 Posted April 17, 2008 Well she's shouting that the entire architecture of the school network is wrong all because she cannot control the students internet access and that her friend at another school can control internet access as there is a "double" logon to get to the internet and that the internet logon is simple to control ... We have Ranger Remote that the students always seem to be able to bypass (in her room only) Work with her to find a solution to her problem eg imperro software for classroom control. Find a price for the solution and the whole school training. Then get her to put that to leadership for funding. You've done your bit in providing a solution. Her battle is then elsewhere. Maintain her enthusiasm, support her but redirect her. Do not go for the manual proxy authentication as if you then need to block a student's internet access through the proxy they will just use their friends' account and you'll not be able to control that, at least we've found no way of doing it. As a workaround could yuo write a script linked from the teachers desktop that resets the proxies or default gateway on the class PCs to be something that doesn't allow access. Using PStools "PSExec" command to run netsh (Configure TCP/IP from the Command Prompt) or to reset the proxy using something from: CodeProject: Change Internet Proxy settings. Free source code and programming help I've not used either just done a simple google search. Set a cron job on the server to undo the changes at the end of each lesson. This wouldn't survive a reboot If you use linux for dhcp you could hard code the IP and DG for PCs in that room in dhcpd.conf and with two copies just copy one in place for her lessons so it would survive a reboot.
SpuffMonkey Posted April 17, 2008 Posted April 17, 2008 Or you could just buy AB Tutor, which gives much better control of that sort of thing, plus lots of other benefits - teachers here love it.
FN-GM Posted April 17, 2008 Posted April 17, 2008 Yes we do If you disable tabs that will fix the problem.
antoeknee Posted April 17, 2008 Posted April 17, 2008 FN whats the issue with tabs in IE7? We have RRC as well as BrowseControl (cheap and we had it before we got RRC. Staff like RRC as itallows them the control). Not seen any issue with IE7. There was another post about title checks not working with LAN Ranger and tabs in IE7. Again I've looked at this and it seems to work fine.
FN-GM Posted April 18, 2008 Posted April 18, 2008 We have RRC, if the student has more than one tab open it doesn’t register to the other tabs to the control. Thus causing normal browsing when the restrictions are applied. We had this problem, disabling tabs just simply fixed it. Defeats the object of IE7 abit though.
GaryCantley Posted April 20, 2008 Posted April 20, 2008 You could always tell the teacher that if she doesnt like your IT setup, she could move "down the road" to her friends school
TronXP Posted April 21, 2008 Posted April 21, 2008 We have a second logon at our school, (not for much longer) the current proxy filter (I inherited it) server, will not talk to NetWare servers no matter what and the company don't care, so I now have permission to buy a new proxy server and the company promises it will intergrate through LDAP perfectly with Netware!
antoeknee Posted April 21, 2008 Posted April 21, 2008 FN whats the issue with tabs in IE7? We have RRC as well as BrowseControl (cheap and we had it before we got RRC. Staff like RRC as itallows them the control). Not seen any issue with IE7. There was another post about title checks not working with LAN Ranger and tabs in IE7. Again I've looked at this and it seems to work fine. Thanks FN I'll see if we have the same here. Might drop a message to Sentinel to see if this is something they are aware of. Which version of RRC are you using? We haven't rolled out the last version yet.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now