live@edu

[RabbieBurns]

this is the version you should be using:

[RabbieBurns]

Here is an updated version of my live@edu w/ ILM docs.

 

I added a few new chapters, and changed the ordering of some other chapters.

ILM for Live_AT_Edu V4.pdf

[gshaw]

I've been having a lot of thoughts about our setup in the last few days and still not sure I have the answer yet

 

We've got a lot of students coming and going all through the year (approx 6000 part-time accounts) so I need to tailor the system to suit... here's my options (bearing in mind I need \ want the Moodle functionality as well)

 

a) use SQL to pull out new student details to CSV then upload to Live via PowerShell (I've already done a funky SSIS package that does the export and calls PowerShell automatically then emails the results)

b) use SQL to pull out new student details to CSV, import to AD then let ILM provision the accounts, PCNS will be required as well to match the passwords up

c) use SQL to pull out new student details to CSV, import to AD then use SSO kit to sign in, but I think SSO only works internally judging by the docs and what an MS partner said, although these guys seem to have cracked it running over the Internet? YouTube - Live@edu Hosted SSO Solution

 

Now the other issue is for passwords, we have a lot of beginner and ESOL students so remembering passwords could be an issue, here's how it affects the above...

 

a) we set a password manually in our "fountain of truth" user database then that becomes a static password for any exports we do, will be about 8 characters and mix of case etc. Users will get their password on a student card when they start and if lost reception can refer it back from a web interface. If we want accounts on AD as well as Live@Edu we'll have to do another import (not too difficult)

b) initial password is set but must be changed for PCNS, also assumes all users are logging in at our main site (not always the case as we have external centres that aren't under our control or using our IT). Also poses the problem for how many password reset requests we might get over time! The remote issue could possibly be solved with some kind of web password reset portal but that's extra complexity creeping in, plus the setup time for ILM and PCNS

c) same as above but takes PCNS out of the equation as the AD password is the master for everything else, although I'd need to figure out how to make SSO work to Internet instead of just internal

 

On top of the above we have to make the Moodle accounts separately anyway as they have to exist before the user signs in with a LiveID, luckily we're getting an MIS link to do this so as long as the Live import works fine the Moodle accounts should tally up.

 

The only other thing we have to contend with is duplicate display names for users, I think our MIS is adding a distinct name field which would solve it but need to find that out. Usernames would probably be student ID numbers for uniqueness, although again not sure how that will go down with the users as it also becomes their email address.

 

Whatever process I use it still relies on the initial CSV process from MIS so I think what it comes down to is whether I want user-controlled passwords or not. Any feedback appreciated as I've thought about it so much the choices have started spinning

[RabbieBurns]

THe good thing about ILM is it automatically creates the accounts in Live@edu for yuo. Once an account is made in AD, ILM then creates the corresponding account in the live@edu. So whatever steps you take to create your current AD accounts, with ILM there is no extra step you have to take. If you create your AD accounts with "user requires to change password on first login" then as soon as they change their password the first time they log in, it will sync to live@edu. Do all your users have an AD account ?

 

Having to have an account in moodle is only just 1 of the steps for the live@edu plugin to work. It also reqiures the MSN value be set to their Live@edu email address too.. But moodle works with ldap, so here their AD password would work..

 

We opted against the (local) SSO because it meant that at least if a student left a machine logged in, it wuoldnt then grant them auto access to their email.

[gshaw]

At present there's no AD accounts, really going for it with the VLE is driving the other thoughts on identity management.

 

I know full well the joys of the Live@Edu plugin Why it can't be coded like the ldap plugin I don't know but our MIS link software can create the users with the correct fields set so shouldn't be too much of a problem. We wanted to use the LiveID as it then gives them the email inside the VLE (probably wouldn't be used otherwise) plus SkyDrive and Office Web Apps which I've made a little block for in their student My Moodle page.

 

Interesting with the thoughts on the SSO, I'm guessing it picks up on NTLM then so once you're logged in on the machine the portal auto authenticates once you hit the SSO URL?

 

The question I guess is whether 2 CSV imports is that much worse than doing just the one, the password issue is something that then helps decide which way to go...

 

Edited August 27, 2010 by gshaw

[RabbieBurns]

Is the webapps moodle module something you developed yourself?

 

I would be keen to try that out if you are willing to share?

 

edit: is that the hosted web apps, (is web apps part of live@edu yet, I havent checked) or is that the office 2010 local web apps ?

[PEO]

I have a stupid question

 

Whats the weblink to the live at edu student outlook login page?

[RabbieBurns]

the students just log in at Sign In

 

The admin console login is http://eduadmin.live.com

[gshaw]

Is the webapps moodle module something you developed yourself?

 

I would be keen to try that out if you are willing to share?

 

edit: is that the hosted web apps, (is web apps part of live@edu yet, I havent checked) or is that the office 2010 local web apps ?

 

Yup it's a little block I made up the other week, I'm going to add a link to SkyDrive on there as well then will upload somewhere useful. It's using the online Live@Edu web apps and SkyDrive.

 

It's nothing too clever, just the icons with links to create a new online document in the My Documents folder (as in the root you can't move files around which is a tad strange) but does make life easier for students looking for the service

 

It also auto-hides if you don't sign in using LiveID authentication so people logging in through ldap won't see something that's of no use to them.

Edited August 31, 2010 by gshaw

[gshaw]

I have a stupid question

 

Whats the weblink to the live at edu student outlook login page?

 

http://www.outlook.com should do the trick

 

Is the webapps moodle module something you developed yourself?

 

I would be keen to try that out if you are willing to share?

 

edit: is that the hosted web apps, (is web apps part of live@edu yet, I havent checked) or is that the office 2010 local web apps ?

 

Just posted the most recent files on my blog, take a look and let me know how you get on (comments on the blog would be much appreciated!)

 

gshaw0 Wordpress blog

[RabbieBurns]

http://www.outlook.com should do the trick

 

 

 

Just posted the most recent files on my blog, take a look and let me know how you get on (comments on the blog would be much appreciated!)

 

gshaw0 Wordpress blog

 

I don't have anything to do with our moodle, but Ive sent the link to the boss and suggested its something we look at.

[RabbieBurns]

Ive updated my ILM implementation docs a little bit as well, will upload tomorrow. I think this'll be the last iteration

[Jake]

Well, our students are now happily using their live@edu accounts, took a while to get all 3000 accounts working nicely, but its finally all done !

 

Now to just get the microsoft live services moodle module working without having to go out of the vle site.

[gshaw]

What's up with the plugin on your site?

 

How do you deal with the password sync needing a password change before it works? Do all your students first sign on a network PC before accessing your VLE?

[nadeem]

Has anyone got a PowerShell script to run against a csv to do a bulk import, I had one but its stopped working, possibly because I have a vague idea that PowerShell V2 CTP3 is no longer supported. Failing that which version of Powershell should I be using (laptop running Vista) - it might just be me but I can't see where to grab a copy of Powershell from.

 

If I can't fix the script, I'm going to need to type a lot of new account details in!!!!

[nadeem]

Can you not use the import feature already available? Takes about ten minutes and doesn't report a success (for me) but it works.

 

Log in to http://www.outlook.com as the administrator, click the IMPORT USERS icon under mailboxes and select your CSV.

 

Would you belive I've never noticed that before!!! I've always used my PowerShell script. Thank sfor pointing out the blinding obvious, I've give this a whirl in a bit.

[gshaw]

Has anyone got a PowerShell script to run against a csv to do a bulk import, I had one but its stopped working, possibly because I have a vague idea that PowerShell V2 CTP3 is no longer supported. Failing that which version of Powershell should I be using (laptop running Vista) - it might just be me but I can't see where to grab a copy of Powershell from.

 

If I can't fix the script, I'm going to need to type a lot of new account details in!!!!

 

Have you got the newest version from Microsoft Connect?

 

I prefer the PowerShell one as I can see what's going on, the web import works but sometimes you think it's still running until you manually refresh the page and realise it finished 10 minutes ago

[mrbios]

I signed up for this last week, updated DNS on my domain name as required, but it's not confirming ownership, all ive done is gone on 123-reg and change the DNS CNAME to point to it as it tells me, have i got the wrong end of the stick or is that correct?

[gshaw]

Sounds right to me, might be worth re-creating the record and also double-check the TTL values if 123-reg gives you that option...

[nadeem]

Have you got the newest version from Microsoft Connect?

 

I prefer the PowerShell one as I can see what's going on, the web import works but sometimes you think it's still running until you manually refresh the page and realise it finished 10 minutes ago

 

Nope - how do I get to Microsoft Connect?

[gshaw]

https://connect.microsoft.com/site452/Downloads/DownloadDetails.aspx?DownloadID=22806

 

Sign in with any Windows Live ID and that should do the trick

[nadeem]

https://connect.microsoft.com/site452/Downloads/DownloadDetails.aspx?DownloadID=22806

 

Sign in with any Windows Live ID and that should do the trick

 

Thanks - didn't even need to sign in!

[drewp]

Hello, We are thinking about using Live@EDU and was wondering if anyone could give some advise on the simplest way to get it running.

 

We have thought that a second domain name for pupils to use would be the simplest, but we would need to create external contacts in each mail system to allow pupils to e-mail teachers.

 

I would also be interested to know at what age do you give your pupils mailboxes?

 

Thanks

[RabbieBurns]

we created a subdomain for the students, and added the teachers as "mail-users".. (different from mail-box). This means they use their local exchange account for mail, but still get a windows live ID (the same as their email address) so they can login and use skydrive, apps, etc. It also lists them in the live@edu global address list.

[nadeem]

We have 2 domains (one for students & alumni) the other for staff.

 

It's simple to add in external contacts in needed, the slightly harder trick is to create in your staff email system all the contacts for the students!