Stopping Students from logging on to 'Teacher' Wiorkstaions

[prad]

There are many ways of doing it.. but I wondered how most network managers on a vanilla Microsoft environment lmit the use of 'teacher' computers to teachers.

[chazzy2501]

Me to, without adding all 500 curic PCs (thus excluding teacher and admin PCs) to the "log on to" button in AD.

[siuko]

We have an OU with the staff computers in

 

Edit the Policy for that OU then go to:

 

Computer Configuration > Windows Settings > Security Settings > Local Polices > User Rights Assignments > Deny Log on locally

 

And add the domain group you want to deny

[plexer]

Whats so special about teacher workstation that you need to restrict who can log on to them?

 

Ben

[MYK-IT]

Hi,

 

We block Student accounts from being able to log onto specific computers by applying a GPO policy on the computers in question.

 

Simple create a new GPO, and assuming all the student accounts belong to a Students Global Group (called Students for example) then enter i the following location:

 

Computer Configuration > Windows Settings > Security Settings > Local Policies > User Rights Assignment > Deny log on locally

[pete]

Whats so special about teacher workstation that you need to restrict who can log on to them?

 

Ben

 

Well, a practical (rather than a "yeah, you have crap security") example would be our CADCAM plasma cutter. We don't want students logging onto it because they shouldn't be there unsupervised (regardless of security permissions on the control software). By requiring a teacher before they can even log on, it discourages attempted self-amputations.

[chazzy2501]

For me it's just that the Teacher stations are connected to the Hifi / projector in the room! A friend of mine wrote a script that checked if a teacher was logged into the workstation and if not it logged pupils off the rooms PCs and locked their account! A bit too harsh for me:) Edited May 13, 2010 by chazzy2501

[timbo343]

We have a piece of software called Userlock. We can get a log of where kids have been logged on, how many logs they have and what they can and cannot log on to.

 

Tim

[GAS]

Hi,

We have all admin computer on separate OU on our Server 2003 AD i have applied group policy to Deny log on locally for all students group and it’s work’s 100% (By default each student we add them to all student group)