Policy for students' own laptops on network

[Craggus2000]

Hi,

Apologies if this has already been covered, but a few searches didn't really bring an awful lot up...

 

Does anyone have any written policies that they use for students connecting their own laptops to the school wireless network they wouldn't mind sharing? How do you do it and what security to you implement to help prevent the spread of nasties?

Rather annoyingly, the powers that be say they want students to be able to do this after Christmas, and won't take no for an answer, so therefore I need a bullet-proof as possible policy/aup so we can nail the suckers up if they do anything stupid!

 

Whilst I'm planning on only giving them internet access and possibly printing access on a separate SSID, there is always the potential for things to go wrong.

 

Any help will be lovingly appreciated...

[Guest TheLibrarian]

We strictly forbid it.

 

For one thing the LEA's T&C's say that any PC that accesses their network (for Internet provision) has to have an up-to-date LEA approved anti-virus.

The school won't cover that cost, which neatly gives us a get out on the LEA's T&C's.

 

We also inform any students of what restrictions joining our domain slaps on their laptop, when they hear that, they suddenly decide they wouldn't want their laptop on our domain anyway.

 

If the SMT are really all on for student laptops accessing the network, you may want to suggest to them this Cisco NAC Appliance (Clean Access) - Products & Services - Cisco Systems.

 

If they won't buy anything to protect your network from the many unknowns of privately owned PC's, write yourself up some CYA memos detailing your suggestions and reservations.

 

Good luck.