[ms office - o365] Blocking students from logging into external e-mail addresses on-site.

[Llirrom]

Hi all!

 

I am looking for advice on how I would best go about blocking a student (on a managed move) from logging into the email address from their previous school when logged into our network as it appears they have been spending all of their time e-mailing old teachers.

 

Thanks!

[ITGuyNW]

Liaise with the other school to make them aware and put rules in place?

[Llirrom]

That's what I'll tell them, I wasn't too sure off the top of my head if there was any other way and thought I'd ask before shooting them down. Thanks!

[Rob_D]

If both you and the old school is 365, you could get them to SSO/auto-login to your 365 domain when the browser first opens (and block incogneto/in private). At least it makes it a bit harder if they have to log out and back in to get to their old email account (and auto-SSO would keep trying to log them back into the school account).

 

And if you're both google, there are chrome settings that can straight up stop users logging into unauthorized domains.

[pete]

Hand the old school your public IP range and ask them to put in a Conditional Access rule denying login from your site if the account matches?

 

(this does assume you're not using the same ISP or LA-provided connection)

[Rob_D]

Come to think about it, if they shouldn't be using it, then why hasn't the old school locked her account?

[FN-GM]

Smoothwall content modification could do this 6 years ago. We locked it down so they can only use our office 365 / gsuite accounts.

[pete]

Come to think about it, if they shouldn't be using it, then why hasn't the old school locked her account?

 

My guess is that the student isn't a leaver at $old_school yet (probably educated elsewhere or similar status), so there's no end date in the MIS so no reason for IT/automated tool to disable the account.

[Rob_D]

My guess is that the student isn't a leaver at $old_school yet (probably educated elsewhere or similar status), so there's no end date in the MIS so no reason for IT/automated tool to disable the account.

True. But if we're talking about blocking her ability to log on then I assume she doesn't need the old account anymore so perhaps the easiest option to ask the old school's IT lock her account early.