Disabling internet in one room.

[Espada]

There should be a global.txt file for the control software which tells it how many computers there are and what the rooms are called. It should take the following format:

0431322030
ICT1|ICT2|ICT3|ICT4

04 = Number of ICT rooms

the remainder of the digits 31, 32, 20, 30 say how many machines are in each room.

 

The second line is just the room names.

 

I will try to support people with this but it is a very busy time at the moment with exams - remember I am primarily a teacher.

[cookie_monster]

I have a copy of a very small piece of software called Greenhouse it's freeware and was written by a tech at a local highschool ages ago, it was last updated for CC3 and works fine with our vanilla 2k3/XP setup (with a couple fiddles). The app is only about 80k it simply runs at logon and checks a text file for room numbers (all PC's need to be named according to room e.g. IT1_001) if the room is in the list it sets the proxy address if it's not then the proxy address is blanked. It works pretty well as long as you can prevent the students from being able to alter the proxy address.

 

Unfortunatly it isn't hosted anywhere for download but at only 20kb i'm sure it could but hosted somewhere for viewing.

[NetworkGeezer]

@Cookie_Monster

 

Hello Alistair.

 

If it's that small then you can upload it on EduGeek as an attachement.

[Guest kerrymoralee9280]

First you said it was 80k then 20k???

[projector1]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

Not actually true. Check out LanView 3 from MST Software. It has its own Internet Access Manager built in which you can use to disable access to single computers, whole rooms or just certain users. You can also set an over-ride for certain systems or users so that staff can still access the Internet.

 

And just to cap it all off, it's completely free!

 

(And no, I don't get commision from them! )

 

That looks interesting - taking a look now.

 

this software is awsome it has so many benefits and it is free (donating helps keep it going)

[projector1]

Just a vague whisper of a thought of an idea...

 

are you all on AD?

 

If so, why not have a GPO for each ICT room, and when they want a rooms' internet access shut off for a lesson, just change the proxy to anything other than what is should be....

 

e.g. trylookingatpornnow.youlittlechavscrotes.gov.uk

 

 

obviously you'd need to know about this before the chav scrotes log on in order to apply to the proxy settings, but i know we've had more than a few instances of staff asking for a whole room to be denied access to the internet for one such lesson a week.... hmmm... there must be a more clever way...

 

HTH

 

Adam

 

e.g. trylookingatpornnow.youlittlechavscrotes.gov.uk

wicked! :hello1:

[cookie_monster]

It's 20k when zipped.

 

One benefit of this is it doesn't require a client install it all runs from a network share, it's not as advanced as LANview but take no time to setup. GPO's are a bit to slow when a teacher rings and says we want the internet now in IT1 for example.

[mcloum]

We use Talmos Classroom manager which ties in with ISA Server 2004. It works fantastic but has a few little niggles such as when restricitng to 1 particular site, if images come from another source such as images.bbc.co.uk you have to give permission to that as well.

 

http://www.talmos.net/products-talmos-classroom-filter.htm

 

I think they have split the application out now into Classroom manager, which handles disabling accounts/changing password etc and Classroom Filter which does the internet part. Azzurri is a good company and the Techy boys (Neil and Simon) really know their stuff.

[Inglebob]

To disable the internet in one room (or per workstation) you can write a basic VB script to change the IP of the proxy server/router. I've had this working for 12 months now and so far (touch wood) noones managed to get onto the internet without having it enabled.

[Andi]

I'm trying to force a batch of users that we have setup for exams to use a fake proxy via GPO so that their internet access is disabled, but they still have access to the intranet. However, they can still get out to the outside world with no issues at all, as if the policy never took place.

 

We currently set a default gateway via DHCP, could it be related to that?

[FN-GM]

i haven’t read all the posts so if this has been suggested sorry. You can use netsupport school to block internet access.

[f21970]

Don't know if it's been mentioned before but Browsecontrol by Codework is cheap, effective, and can remotely turn off and on your PC's too - handy. There is a small client install + a server install. When I say cheap, I paid £400 for 300 clients and pay £95 a year maintenance on the software. Hope that helps.

[James2k]

Just a little bit of information for this thread...

 

If you are using SOPHOS Enterprise Console it has a built in Application Control which can block programs... I have been in contact with them and they are looking into adding IE to the block list...

 

It has Firefox, Firefox portable, Netscape, Opera and Torpark already listed so you could make firefox your default browser and then disable it in Sophos?

 

 

James

[Matstones]

There is a neat and elegant solution to this - depending what hardware you use. I apologise for touting Axel products - but I have had a number of positive responses to other comments I have made - so here's one more....

 

Axel provide free of charge a small program that can be installed on a Citrix/terminal server called Axmenu.

 

 

In the terminal's configuration it is configured to auto-run this program on connection. (The same program can also be auto-configured to run in the user's profile - so can be run per device or per user).

 

This program Axmenu gives a "pseudo" desktop that the administrator controls on a per user or per group basis what applications individuals users have access to.

 

The users can only run these applications which can be displayed as a menu or in the normal start button. All other features are removed from this desktop.

 

The manager can with a few clicks add or remove a browser (or any other application) thus removing it for all users in a given group.

 

Full documentation for this free software is on the link below - it is free but only works for Axel terminals:

 

http://www.axel.com/uk2/prod_axmenu.html?mv2_pos=1

 

http://[img]http://http://www.axel.com/uk2/img/axmenu.jpg

[bonald]

I am using this method in one classroom.

I gave the teacher the right to modify the classroom OU in question.

 

I have created a policies that enforce a dummy proxy server in Internet Explorer. When the teacher activate the policies in question, after 2-3minutes depending on how long your policies are set to refresh, students can't browse the internet anymore because they are redirected to a proxy server that doesn't exist.

 

I've created a MMC Console with only this OU and the teacher only have to click Enable/Disable.

 

The other thing i've also done is I created a OU named NO-INTERNET. The teacher can drag and drop ONE or more specific computer to this OU if he only wants to block a couple of students and not the entire room.

 

Also, if the policy is not refreshing for some reason, i've installed SpecOPS Gpupdate on the teacher computer so he can do a gpupdate /force from the MMC.

 

!!

[James2k]

Just to let everyone know that Sophos Enterprise Console can now block Internet explorer 6 and 7 it is an instant thing and can't be bypassed.

[mikeymoos]

New to this site... Hello all!

 

We use SMART's 'synchroneyes' software in several schools we manage, both primary and secondary. Its awesome for teachers to manage what pupils can do from blocking internet to transferring a file/image to all PC's in a classroom.

 

The kids find ways around the internet block occasionally but we think we have secured the PC's enough now so all backdoors have been nailed shut!

 

Hope this helps

[MYK-IT]

Try ABTutor Control

 

Can install it on all your computers within the school, and you only purchase licences for the amount of Control (Teacher's) Computers required (~£130 each)

 

Key Features

 

Broadcast

Broadcast tutor screen to students

Show thumbnail of tutor screen to students

Show static, locked, screen to students

Show a student's screen to others

Annotate live demo

 

Monitor

Watch student screens (cycle and thumbnail screen options)

Monitor and log student applications

Monitor and log student web browsing

Take time and name-stamped snapshots of student screens

Simultaneous watch by multiple tutors

 

Remote Control

Take over remote mouse and keyboard

Share control with student

Launch & close down applications remotely

Lock remote machines

Classroom Management

Power up remote machines

 

Remote logon

Remote logoff and shutdown

Auto-connect to computers

Auto-reconnect when connection lost

Create defined classroom groups

Either connect to all clients or only to pre-set groups

 

Internet Control

Block ports to prevent any Internet activity

Limit web browsing to specified sites

Black-list specific sites

Filtering by keyword/wildcard

 

Application Control

Limit applications that can be launched

Specify applications that cannot be run

Close down inappropriate applications

 

Control over Student Windows Environment

Powerful ability for administrators to control key student registry settings

 

File Management and Distribution

Distribute files to student machines

Collect files from students

Remote file management

 

Communication

One-to-one and one-to-many text chat

One-to-one and one-to-many audio chat

Broadcast text messages

Optional Privacy Settings

Informs student they are being monitored

Allows student to block a watch

 

Security

Admin or tutor-level access with choice of functionality

128-bit connection password encryption

 

Maintenance

Automated remote client updates

Auto software upgrade

Terminal Services Support

Terminal Services Support (incl. Citrix) for clients

 

my 2 cents worth...

[SpuffMonkey]

AB Tutor seconded here - its tops - works over thin client too

[dparry]

Browse Control from Codeworks is a cracker for stopping internet traffic per machine or per "room"

Also includes black/white lists for exceptions to the on/off rule

Same for applications [i can turn off mspaint, at last]

Also blocks cd drives and usb ports remotely too.

 

has a server service and a as many teacher/tech consoles as needed.

will remote install the client too.

After 4 years no-one's ever got around it.

 

Not free but v good

[Eappariello]

If anyone is using Lightspeeds content filter they can use the LAB facility.

 

Define your classroom and a administrator/s for it, then the teacher can goto to a administration page, Lock or Unlock the Internet, and define domains or URL's for Allow or Block.

 

Easy to use, just not well known about

[tom_newton]

If anyone is using Lightspeeds content filter they can use the LAB facility.

 

Define your classroom and a administrator/s for it, then the teacher can goto to a administration page, Lock or Unlock the Internet, and define domains or URL's for Allow or Block.

 

Easy to use, just not well known about

 

Sure you'll change that - might be best to let people know your association with LightSpeed tho - bit of helpful advice from the local competition

 

Back OT... i'd love to hear from anyone who's used our room blocking, as it is pretty new to us, and I've had nae feedback yet.

[microbrew22]

Synchroneyes used to be the name of this monitoring software, now called smart sync.

 

You can monitor students, send files, tests, quizes, and even lock out the internet or the entire PC screen with a message "eyes to the front please"

 

I run this in a dozen or so labs with great results.

[Techie101]

This certainly is a popular subject and there isn't really an easy way of doing it (not for free).

 

The easiest way that I have ever seen it done is using NetSupport School. The NetSupport packages are amazing and well worth the money. The teacher's interface allows clients to be selected and then the Internet connection can be turned on/off at will as well as restricting the sites that can be viewed.

 

The best value option with NetSupport is to get the Manager package which has the School package bundled with it and will give you lots of funky management controls.

 

Check it out at NetSupport Manager v10: The latest evolution in remote PC Support and Desktop Management

 

For a free method, we would need to know more about the site setup, such as the type of proxy/firewall, etc.

 

Lol, can't even open the site, LEA have blocked it!!

[Flakes]

Could someone here clarify if this sticky has already been answered?

 

this is how i currently block websites on a room basis...

 

assign the classroom computers a static IP address, then using ISA Server 2003 i use a rule that denies all traffic from that IP Range, now this is the fun part i have an exceptions list in the Deny all that acts as a whitelist of sites, these sites are confirmed through teachers then placed as an exception for that room.

 

Our current use is to cut the amount of bad behaviour we get over lunch and break, so the rule is timed to enable and disable using a script from Jason Fossen this script is run at specific times using the built in windows scheduler NOT the ISA scheduler since the ISA server is limited by hours.

 

heres the script

 

'*************************************************************************************
' Script Name: ISA_Enable-Disable_Rule.vbs
'     Version: 1.0
'      Author: Jason Fossen 
'Last Updated: 16.Oct.2005
'     Purpose: Enables or disables a rule in the Firewall Policy of an ISA Server array,
'              Standard or Enterprise edition.  But cannot manage System Policy rules or
'              Enterprise Policy rules, array or single-server rules only.
'       Legal: Public Domain.  Modify and redistribute freely.  No rights reserved.
'              SCRIPT PROVIDED "AS IS" WITHOUT WARRANTIES OR GUARANTEES OF ANY KIND.
'              USE AT YOUR OWN RISK.  Test on non-production servers first.
'*************************************************************************************


If WScript.Arguments.Count <> 2 Then Call ShowHelpAndQuit()
sRuleName = WScript.Arguments.Item(0)
sAction   = WScript.Arguments.Item(1)
If (LCase(sRuleName) = "/?") Or (LCase(sRuleName) = "/h") Or (LCase(sRuleName) = "-h") Then Call ShowHelpAndQuit()


If EnableOrDisableRule(sRuleName, sAction) Then
   WScript.Echo vbCrLf & "Success! " & UCase(sRuleName) & " = " & UCase(sAction) & "D"
Else
   WScript.Echo vbCrLf & "ERROR: " & Err.Number & " " & Err.Description
End If






'*************************************************************************************
' Functions() & Procedures()
'*************************************************************************************


'
' sRuleName is the name of the rule, in doublequotes if it contains spaces.
' sAction is either "enable" or "disable" (or just "e" and "d").
' 
' Function returns true if either it is successful or if sRuleName Is
' already set to sAction specified.
'
Function EnableOrDisableRule(sRuleName, sAction)
   On Error Resume Next
   If Not IsObject(oFPC) Then Set oFPC = CreateObject("FPC.Root")
   Set oPolicyRule = oFPC.GetContainingArray.ArrayPolicy.PolicyRules.Item(sRuleName)
   'If Err.Number = -2147024894 Then WScript.Echo "Cannot find the rule named " & sRuleName
   If Err.Number <> 0 Then EnableOrDisableRule = False : Exit Function
   If Left(LCase(sAction),1) = "e" Then bState = True Else bState = False
   If oPolicyRule.Enabled = bState Then EnableOrDisableRule = True : Exit Function
   oPolicyRule.Enabled = bState
   oPolicyRule.Save
   If Err.Number = 0 Then EnableOrDisableRule = True Else EnableOrDisableRule = False
   'If Err.Number <> 0 Then WScript.Echo "Problem changing rule state."
   On Error Goto 0
End Function



Sub ShowHelpAndQuit()
   Dim sUsage : sUsage = vbCrLf
   sUsage = sUsage & vbCrLf
   sUsage = sUsage & "ISA_Enable-Disable_Rule.vbs rulename action" & vbCrLf
   sUsage = sUsage & vbCrLf
   sUsage = sUsage & "Purpose: Enables or disables a rule, not including System Policy rules." & vbCrLf
   sUsage = sUsage & vbCrLf
   sUsage = sUsage & "   Args: rulename = Name of the rule, placed in doublequotes if necessary." & vbCrLf
   sUsage = sUsage & "         action   = The word ""Enable"" or ""Disable"" (not case sensitive)." & vbCrLf
   sUsage = sUsage & vbCrLf
   sUsage = sUsage & "  Legal: SCRIPT PROVIDED ""AS IS"" WITHOUT WARRANTIES OR GUARANTEES OF ANY" & vbCrLf
   sUsage = sUsage & "         KIND. USE AT YOUR OWN RISK. Public domain, no rights reserved." & vbCrLf
   sUsage = sUsage & "         ( website )" & vbCrLf
   sUsage = sUsage & vbCrLf
   WScript.Echo sUsage
   WScript.Quit
End Sub


'EOF*******************************************************************************

 

site wont let me post the URL so you will just have to look up Jason Fossen in google.