Student Access to Storate

[Psymon]

Hi,

 

Before i start we are an independent international boarding school, so this might seem like a strange request for some.

 

Been looking at letting students personal laptops access there files on their home shares.

 

Looked at "Network Policy and Access Services" on a couple of occasions, which is the Microsoft solution. I am aware it might not be happy with Apple and Linux machines, however we havent got a spend available in invest in a solution that is all singing and dancing

 

Has anyone got this, or a similar solution in place?

 

Just curious before i dive in head first.

 

Simon

[ricki]

Hi

 

I have seen it done but making it secure is the problem. I have seen it done with a terminal server so the students can remote desktop into the terminal server and access files and programs like they were sitting at a school pc well I surpose they are really and the session has all the restrictions.

 

The problem is if students can plug laptops in how are you going to secure them and give them access to the internet in a safe way. Remember you will not have control over an antivirus and what the student has on the computer. Just think a student can come in with a dhcp server on a laptop and break the entire network. Remember as well all the other hacking and probing software they could run to find passwords, etc.

 

Think this one through very carefully you could create yourself a big head ache.

 

Richard

[Psymon]

I have seen it done but making it secure is the problem. I have seen it done with a terminal server so the students can remote desktop into the terminal server and access files and programs like they were sitting at a school pc well I surpose they are really and the session has all the restrictions.

 

This sounds like a pretty safe idea actually. Makes sense for external access as well. Just the licensing might be costly?

 

Simon

[browolf]

Take the terminal server idea and then give internal students wireless access to the internet on a vlan'ed system that doesn't see the main network and let them into the network through the secured external link.