Disabling internet in one room.

[browolf]

i have it working on a per room basis with ISA server. fortunately we've always used static addreses with a subnet per room.

adding and removing rooms from an access rule is a total pain in the a$$ so i created a web backend in asp that allows me to add rooms easily and be safe in the knowledge that a scheduled script will remove them at the end of lessons.

 

attached asp files if anyone is interested.

[Guest metalmonkey]

Re: LanView3

 

Just to let everyone know, the problem with accessing the internet through windows explorer is fixed in the latest client and server releases. This is available at my site http://www.mst-software.co.uk/portal/

 

I still need feedback on this.

 

Note that there are Windows 2003 server issues I am trying to resolve. Details in the LV3 Support part of the site.

 

As always, test new releases on one or two PC's before installing on all PC's, especially with this release as the way of banning is radically different.

 

Regards

 

Kevin Figg

MST Software

[Sirbendy]

We use a script to map to the C of each machine in a suite (via batch file), and run CACLS to set permissions on IEXPLORE.EXE, MSHTML.DLL and a few others to deny student access, followed by taskkill to remove any instances of IE that may be running at the time.

 

Takes 30-40 seconds to knock off a room, about the same to re-enable. Teacher-wise, I'm looking to develop a "nice" interface using an image map of the suites or similar.

 

The kids really hate the script. *grin*

[MkII]

Sounds great SirBendy! gimme! ...er, any chance of sharing that

[Sirbendy]

One sec...I'll poke the CCTV server.

 

OK...all our machines are named "taw900wxxx" where xxx is the numeric ID.

 

Here is the "Internet on" script:

 

net use i: \\taw900w%1\c$

cacls i:\progra~1\intern~1\iexplore.exe /e /p students:r

cacls i:\windows\system32\mshtml.dll /e /p students:r

cacls i:\progra~1\window~3\wmplayer.exe /e /p students:r

cacls i:\progra~1\window~3\mplayer2.exe /e /p students:r

cacls i:\windows\system32\atl.dll /e /p students:r

net use i: /delete

 

 

Here's the "internet off" script:

 

net use i: \\taw900w%1\c$

cacls i:\progra~1\intern~1\iexplore.exe /e /d students

cacls i:\windows\system32\mshtml.dll /e /d students

cacls i:\progra~1\window~3\wmplayer.exe /e /d students

cacls i:\progra~1\window~3\mplayer2.exe /e /d students

cacls i:\windows\system32\atl.dll /e /d students

taskkill /s taw900w%1 /im iexplore.exe

net use i: /delete

 

I have them saved as "on.bat" and "off.bat" respectively. Literally, to "ban" the net on..say w133, you'd type "off 133", then "on 133" to enable it again.

 

I then just wrote another batch file script to prompt with a text menu for the 4 suites, and to choose between "on" and "off".

 

Literally, the batch file just calls "on" or "off" with the machine numbers I want to do, one after the other.

 

(it also kills Windows Media Player, and Mplayer classic. Just a personal hatred)

[ChrisH]

That a nice script. Would you mind if I converted it to vb script and stuck a basic front end on it and resposted it? Giving you credit ofc.

[Sirbendy]

go for it.. No problems here!

[MkII]

Oooh! Too nice!

[StewartKnight]

Metalmonkey,

 

I've tried the latest version of Lanviewer3 on one machine, and it seems to work fine. I'll extend it to a classroom today, and let you know if the kids manage to hack it next week.

 

Thanks for the software!

[Guest metalmonkey]

Thanks for the update. The IAM feature is working here, but we've had to made substational changes to our network to make it work due to the fact Windows Explorer always allows access.

 

A full article on all known workarounds is here, along with possible solutions.

 

Some people might not like the changes that need to be made though.

 

http://www.mst-software.co.uk/portal/index.php?option=com_content&task=view&id=222&Itemid=97

 

Thanks

 

Kevin

[Simcfc73]

Sorry if this has been suggested before but its a fun product.

 

The new version of Browsecontrol can be setup using a server / client system now so you can have multiple consoles controlling different rooms. It also has application blocking built in and is a piece of cake to use, even for teachers.

 

It only cost a couple of hundred quid for us as I only got 100 licenses.

 

Well worth the £££ if you can afford it.

 

Ohh and its not a M$ subscription based fee either, you pay once and thats it.

[theshirt]

Browse control 2 from codework free useable download 30 day trial £400 for 175 users. We use it to give classroom teachers control of their own group of PCs, you can black list, white list, control applicatioins, shut of one machine or the whole class group, I use it alongside Dameware to keep an eye on pupils and their 'activities' but can also use it for teaching, (OOps let that one slip a traitor in the camp)

 

Yes these are classroom management issues but technical help is a tool for management as well as teaching.

[Sirbendy]

We got bollocked for using Dameware by the NGFL..."not authorised software". Sod 'em-they use RAdmin, and that does an OK job. If you are using RAdmin though-download the latest V3 viewer. It's much better.

[Guest]

Nothing wrong with Dameware. Hell our LEA use it for remote access too.

[Simcfc73]

Sorry if this has been suggested before but its a fun product.

 

The new version of Browsecontrol can be setup using a server / client system now so you can have multiple consoles controlling different rooms. It also has application blocking built in and is a piece of cake to use, even for teachers.

 

It only cost a couple of hundred quid for us as I only got 100 licenses.

 

Well worth the £££ if you can afford it.

 

Ohh and its not a M$ subscription based fee either, you pay once and thats it.

 

Did I call it fun.??????? Man I must have been tired.

 

I have Tightvnc running in view only mode for the teachers using a intranet page with a map of the classroom. When they click the pc it opens up a vnc viewer in a 50% window allowing them to see what the little brats are doing. I don't like allowing them to interact which some would like but they should be telling the kids not to do it. From a technicians point of view I use RDP which is superb. The remote desktop part of 2003 server is usefuel too, allowing you to view several at once (which I use for my servers).

[webman]

Hello

 

Sirbendy: I've been playing with that bit of code you provided today and I must say, it works a treat, thanks very much

 

I've built on to that a script for our needs and would like to share it with others, if anyone finds it useful. The main script supports whole-room "on" or "off" states, whereas the "individual" ones will allow you to do it PC-by-PC. I haven't written any documentation yet, I thought I'd see what other people thought.

 

In the ZIP file are all the files you should need. Basically, the text files in the root of the folder are the room names with a .txt extension simply contatining a list of machines in that room.

 

Edit the first section of choose.cmd to alter room names etc. Unfortunately I haven't been able to figure out how to sort that so it doesn't need editing by hand.

 

When you run choose.cmd (make a shortcut to it with the nice icon in the Icons folder ) it will ask you which room you want to control, and then if you want to turn them on or off. Press 0 (to turn off) or 1 (to turn on), check the information then press any key. It will then go through all the machines and turn the internet on/off using Sirbendy's bit of code. (CACLS.EXE).

 

To make individual icons, drag each text file over to the Create Individual Controls.vbs file - the icons will be made in the folder \Individuals\$room\ON $machine etc.

 

No warranty, use at your own risk 8)

 

I was thinking about an ASP version on the server using a web UI but worried that it'll be a resource hog and/or time out. :?

inetctl.zip

[jonny_valentine]

I work in approx 24 schools in East Midlands. A few years ago I decided to create a product to do exactly what you're asking and more. PM Me for details/download link.

[DMcCoy]

Ok, I'll kick off the questions, by using the example on the homepage. How do you disable internet in one room only?

 

I'm using a Windows 2003 server with XP clients. I want the teacher to be able to switch the internet use on or off while they are in the room. If the techies had to get involved in this is could use up all our time.

 

cheers.

 

 

I work in approx 24 schools in East Midlands, and 90% of them use name filtered by admin to do what you're asking, and more.. site filtered by admin

 

The one thing that all the schools ask me is 'how much' and from my research, name filtered by admin is the cheapest about, and its updated all the time to include any features you request.

 

Hope that helps :!:

 

But of course you would say that, as it appears thats who you are/work for.

[jonny_valentine]

thanks, but i work for LEA in nottingham city.. and i have worked at Henry Mellish School as the network manager for 5 years. We use Impero, and i recommend the product as a solution to the forum topic.

[webman]

UPDATE: I've worked on a new interface for internet control with a few extra features, it is now controlled via an HTA with nice menus and buttons 8) I'll post it here tomorrow Here is a screenshot.

[ChrisH]

Looks good Webman I was going to do exactly the same with a HTA but I havent got round to it. I look forward to yours

 

Oh can you post it in the scripts forum and mention it here with a link so we keep everything in the right sections. I will put up a sticky for member contributed scripts and such.

[DMcCoy]

thanks, but i work for LEA in nottingham city.. and i have worked at Henry Mellish School as the network manager for 5 years. We use Impero, and i recommend the product as a solution to the forum topic.

 

I can't say I believe you. You joined this forum then recommended a product as your first 5-6 posts. Its also suspicious (or blatant) that someone with the exact same name is a contact for the company mentioned on this page. You could well be a network manager at a school, I don't dispute that. This doesn't mean you don't sell software too. Why would you be a contact for the company if you only use the software. I do not see how you can be impartial.

 

David

[MkII]

UPDATE: I've worked on a new interface for internet control with a few extra features, it is now controlled via an HTA with nice menus and buttons 8) I'll post it here tomorrow Here is a screenshot.

 

Looks very nice webman

[jonny_valentine]

thanks, but i work for LEA in nottingham city.. and i have worked at Henry Mellish School as the network manager for 5 years. We use Impero, and i recommend the product as a solution to the forum topic.

 

I can't say I believe you. You joined this forum then recommended a product as your first 5-6 posts. Its also suspicious (or blatant) that someone with the exact same name is a contact for the company mentioned on this page. You could well be a network manager at a school, I don't dispute that. This doesn't mean you don't sell software too. Why would you be a contact for the company if you only use the software. I do not see how you can be impartial.

 

David

 

 

Most of the posts in this forum are questions related to the same thing.

People tend to answer questions if they know the answer.. and i knew 'a' solution to the posts i've replied to.

[webman]

Thanks for the comments 8) I'll hopefully get it posted up here this afternoon