[sims] Disable user access to SIMs

[Jaan]

Hi all,

 

Not really familiar with SIM so i thought i'd ask here.

 

I want to disable access to sims for a group of users. These users are still on role and i don't want to remove their permissions, just their ability to log into sims.

 

I know i can do it ad hoc via Focus ---- system manager ---- and untick the "active" box under "login details" just wanted to know if there's a better faster way of removing it for larger user numbers.

 

thanks

[coolhands]

not sure. As well as your method you could go into each one and reset password, then save. That way they can't actually log in. If this is to stop teachers seeing their timetables for next year there may be a different way though? After the timetable has been sent you can send across another version of the timetable (same as first) but with all blocks unbuilt (I think - just check this as it is off the top of my head).

[jthompson]

If you're using AppLocker, you could perhaps use that. Drop the relevant users into a security group in AD and then create an AppLocker rule that denies that group from executing Pulsar.exe, the main executable for launching SIMS .net.

 

It's quite a blunt thing for the users to come up against, and doesn't offer them much in the way of explaining why they can't launch SIMS .net, but it means you don't have to do anything within or to SIMS itself (so no chance of breaking it). Users would need to cycle their logins to have their group membership applied in the first instance, though.

[Boredguy]

You have to manually go into the user in System manager and either reset the password, or untick the account as being enabled, however depending on why you are needing it done could cause issues if they still need to take registers etc before the end of term.

[Andycat]

I think we're going to get the same request for results days...

[Boredguy]

Isn't there the embargo feature in Exams Organiser for just that reason? And only the Exams Officers should have rights to it, certainly how it's been here for many a years, never need to revoke access for result days

[Jaan]

We are moving from SIMS to Bromcom, so dont want people using it until we get round to removing the clients/solus.

 

We still need access in the it admin office and to the sims server until we're happy nothing is lurking...

 

Removing shortcuts, S: and using applocker seems the way to go.

 

cheers all

[Boredguy]

In that case, disabling the accounts in SIMS would be the easier method that way a valid user could still access it outside of the admin offices if needed to.

[Jaan]

We've Turned off the SIMS server now and blocked the clients with applocker.

 

Anybody using a script to remove Solous/SIMs/Discover from their system they dont mind sharing?

 

The clients will be re-imaged over time, just thinking of a script to help out a little