turning internet off in the evenings

[mikeymike]

hi guys i have been asked if we can turn the internet off in the evenings and at wk/ends as some of our boys have been coming down from the residential units without permission and using the internet. instead of literally pulling the cable out is there a better way of doing this?? using server 2003 by the way Edited May 6, 2008 by mikeymike

[webman]

Do you have a proxy server that all workstations must use to access the internet?

[mikeymike]

Do you have a proxy server that all workstations must use to access the internet?

 

yes mate

[elsiegee40]

Can you put a simple timer on the Power Supply to the Router? No power = no internet

 

This sort of thing: QVS Electrical Supplies :: Timer Switches :: 24 Hour Plug-In Timer

[Domino]

Can you put a simple timer on the Power Supply to the Router? No power = no internet

 

This sort of thing: QVS Electrical Supplies :: Timer Switches :: 24 Hour Plug-In Timer

 

would work, however networking equipment is like old people - put it off for the night and a few don't get back up....

 

What proxy are you using, most have the feature to allow or deny by time built in

[pallen]

If they dont have permision, should they be using the network at all? You could just put time restrictions on their accounts so they cant logon.

[mikeymike]

would work, however networking equipment is like old people - put it off for the night and a few don't get back up....

 

What proxy are you using, most have the feature to allow or deny by time built in

sorry bit knew to this how do i find what proxy im using??

[Edu-IT]

If you try to access an unsuitable website is there a 'blocked' page which comes up? This might tell you what proxy you're using.

[everton4europe]

Within active directory users and computers you are able to set the logon times of users. So at evenings and weekends they will not be able to access the system.

[elsiegee40]

Within active directory users and computers you are able to set the logon times of users. So at evenings and weekends they will not be able to access the system.

 

Setting logon hours in AD prevents logging in outside hours, but does not force a logoff - so anyone logged in would be able to carry on using their logon and hence the internet unless you set Group Policy to force logoff when logon hours expire.

 

We do this for teachers and pupils, but not Office Staff

 

Group Policy:

Computer Settings > Windows settings > Security Settings > Local Policies > Security Options

Enable " Network: Force logoff when logon hours expire"

[mikeymike]

Within active directory users and computers you are able to set the logon times of users. So at evenings and weekends they will not be able to access the system.

im looking at where you mean and seeing the account properties but i cannot see anything aiming towards logging on at certain times??

[elsiegee40]

im looking at where you mean and seeing the account properties but i cannot see anything aiming towards logging on at certain times??

 

It's on the Account Tab of user properties - there's a Logon Hours button

 

You can select a group of pupils and do them all in one go.

[Edu-IT]

More information can be found here.

 

HOW TO: Limit User Logon Time in a Domain in Windows Server 2003

[antoeknee]

There is a fairly cheap (less that £1/client, well thats what we pay) program 'BrowseControl' which amongst other things allows you to schedule internet access.

 

If you structure the groups correctly you can do this for individual groups of machines or all at once.

[mikeymike]

It's on the Account Tab of user properties - there's a Logon Hours button

 

You can select a group of pupils and do them all in one go.

excellent ye that seems to of worked on 1 account but how will i select more than 1 shall i simply highlight more names then do properties and select the time??

[Edu-IT]

excellent ye that seems to of worked on 1 account but how will i select more than 1 shall i simply highlight more names then do properties and select the time??

Yes. That should do it.

[mikeymike]

brilliant thank you everyone for your replies much appreciated.

[Edu-IT]

brilliant thank you everyone for your replies much appreciated.

As a question for everyone, what clock is used to determine what time it is when login restrictions are used? Is it the clock on the client machines or the clock on the server or something else altogether?

[elsiegee40]

excellent ye that seems to of worked on 1 account but how will i select more than 1 shall i simply highlight more names then do properties and select the time??

 

It's the standard:

 

Click on the first one, hold down the Shift key, click on the last one, right click and choose properties.

[elsiegee40]

As a question for everyone, what clock is used to determine what time it is when login restrictions are used? Is it the clock on the client machines or the clock on the server or something else altogether?

 

 

I imagine it's the server clock, but I could be wrong. Hopefully the clocks aren't that far out in any case.

[Edu-IT]

I imagine it's the server clock, but I could be wrong. Hopefully the clocks aren't that far out in any case.

What I was thinking is that mikeymike should make sure that users cannot change the system time on the client machines.

[strawberry]

What I was thinking is that mikeymike should make sure that users cannot change the system time on the client machines.

 

If they did it by more than 5 minutes they'd soon drop off the domain as the kerberos ticket would no longer be valid.

[jmcdermott]

You could just disable your dhcp server, this would stop them unless they know what range you use.

 

You could do this by setting a net stop/ net start command in the windows tasks on the server.

[mikeymike]

we have it so students cannot go in and adjust the time/date anyway.

but another question just thought of is what if a student has left his account on and then comes back to it after the expired time will it still work?

Edited May 6, 2008 by mikeymike

[Edu-IT]

we have it so students cannot go in and adjust the time/date anyway.

but another question just thought of is what if a student has left his account on and then comes back to it after the expired time will it still work?

I would assume that by forcing logoff the user will have no alternative but to log off when they returned.