StewartKnight Posted June 21, 2005 Posted June 21, 2005 Help!!! I've installed the software, but how do I remove stations from the groups I put them in; i.e. how do I unblock the internet? Stewart Knight Network Manager Appleby Grammar School
ChrisH Posted June 21, 2005 Posted June 21, 2005 This one got me at first as well. You have to go inoto the properties of the group and then right click on the machine, remove.
StewartKnight Posted June 21, 2005 Posted June 21, 2005 Phew! Thanks for that, I was in danger of getting lynched (even though it was only one machine i'd disabled!) Stewart Knight Network Manager Appleby Grammar School
tarquel Posted July 19, 2005 Posted July 19, 2005 sticky'd thread for new folk to see before posting something similar Also as its a question many ppl have I think too Nath.
StewartKnight Posted July 19, 2005 Posted July 19, 2005 LanView3 is ok... you can lock the machine so the kiddie can't do anything, but it only took the kids 1/2 a day to figure out they could use Windows Explorer instead of Internet Explorer to get on the web. ah well, back to the drawing board!
Adam Posted July 19, 2005 Posted July 19, 2005 Just a vague whisper of a thought of an idea... are you all on AD? If so, why not have a GPO for each ICT room, and when they want a rooms' internet access shut off for a lesson, just change the proxy to anything other than what is should be.... e.g. trylookingatpornnow.youlittlechavscrotes.gov.uk obviously you'd need to know about this before the chav scrotes log on in order to apply to the proxy settings, but i know we've had more than a few instances of staff asking for a whole room to be denied access to the internet for one such lesson a week.... hmmm... there must be a more clever way... HTH Adam
StewartKnight Posted July 19, 2005 Posted July 19, 2005 To get on the internet, you have to go by a proxy. I have a catagory in AD where the proxy is null, you just move the student into Internet Banned before they log on. The only problem is... the ICT teacher want to do that, and he really is such a techophobe, I dare not let him near AD.. I get into a sweat thinking of the damage he could do 8O
Adam Posted July 19, 2005 Posted July 19, 2005 That just doesn't bear thinking about ..... the phrase 'NO' should be firmly inserted i feel. Adam
GrumbleDook Posted July 19, 2005 Posted July 19, 2005 In theory, ISA can restrict your classes but you have to create client address sets and that doesn't work with DHCP. Set up scopes for each room and reserve IPs against MAC addresses ... That gets round the issue of DHCP causing a problem.
Ric_ Posted July 19, 2005 Posted July 19, 2005 In theory, ISA can restrict your classes but you have to create client address sets and that doesn't work with DHCP. Set up scopes for each room and reserve IPs against MAC addresses ... That gets round the issue of DHCP causing a problem. The point is that this is a pain in the ass and isn't really practical. It also requires admin access to the ISA server to enable/disable access. This would also get to be a pain in the ass.
inkyscribe Posted July 21, 2005 Posted July 21, 2005 In our school we have different OUs in Active Directory for each classroom. We also have an OU called "Disabled Internet". We move computer objects from the Room's OU to the Disabled Internet OU when we want to prevent access to the internet for that room. The Disabled Internet OU has a GPO in force which changes the Internet Explorer proxy settings. HTH
MkII Posted July 21, 2005 Posted July 21, 2005 How do you get that policy to be effective inkyscribe? Do you have policies set on the Students OU and the room OU??
MkII Posted July 21, 2005 Posted July 21, 2005 I wondered if that was the case. Do you do loopbach Chris? where do you enable it if so - i'm not sure which OU to set it on...
ChrisH Posted July 21, 2005 Posted July 21, 2005 Im at home now so I cant look at the section but it is under the machine section of the GPO. This would be set in the GPO that is targeted at the users OU. "Enable loopback policy processing" Then you choose merge or replace. Most cases you want merge. People have mixed results sometimes with loopback policys though so be warned eg sometimes not applying.
MkII Posted July 21, 2005 Posted July 21, 2005 I have tried it here with mixed results - so funny you should say that about it not always applying! hehe! At one point I had a script that wouldn't run - and it stopped loopback processing happening altogether - quite a nightmare! Thing is though - I used to just have Student OU's - and I made a seperate 'no internet OU' which I used as described above. But since enabling loopback that doesn't work - so if I made a room OU with no internet that'd work you recon?? But then I have different software images and different start menus re-directed to these rooms. It's all too complicated!!! :brain explodes:!!! Aaargh!!!
inkyscribe Posted July 22, 2005 Posted July 22, 2005 No it isn't loopback. We have a policy in place at the domain level - this sets the correct proxy settings which the client machines pick up. Any machines in the "disabled internet" OU have a GPO which (deliberately) contains the wrong proxy settings, thereby effectively disabling their internet connection.
Ric_ Posted July 22, 2005 Posted July 22, 2005 It must be loopback, since proxy settings are a per user policy.
inkyscribe Posted July 22, 2005 Posted July 22, 2005 doh, you're right too. I have it set to loopback / merge
tarquel Posted July 22, 2005 Posted July 22, 2005 It must be loopback, since proxy settings are a per user policy. Didn't i see somewhere a option to make it machine-based over user based? (probably in my imagination but so what else is new lol) Nath
ChrisH Posted July 22, 2005 Posted July 22, 2005 There is a setting to make proxy settings per machine rather than per user I believe, but I think this just acts like a default and will be overidden by the user section of a GPO due to the order in which GPOs are applied.
eduabncs Posted August 4, 2005 Posted August 4, 2005 At the end of the day this is all actually a teaching and discipline issue. If the teacher is teaching such a boring & unchallenging lesson that the kids are so bored that they start to surf the net & play games etc, that is the teachers problem! Also if AUP is not enforced the kids will take it a mile in the blink on a eye! This therefore means enforcement of the school AUP. A few of our schools have come down hard a few times initially (and now whenever a serious breach occurs) the message soon got around! But this in turn means SMT support, and we all know how strong that is when it relates to IT in schools! We are looking into software for our schools to buy that monitors internet usage and also has desktop level filtering and all this controlled from a central point with nice reporting capabilities i.e. policy central & netintelligence to name but a few suppliers. This is in addition to our LEA level filtering. The software will allow the schools that buy the software to fulfil their due diligence and enforce the AUP effectively.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now