Steve21 Posted May 9, 2011 Author Posted May 9, 2011 on our system users can log on without server connection if they have previously logged on to that computer, and i realise that the system is almost totally useless without the server but say students were typing up work, without the server, theyd still be able to use a word processor and save to a external device. and it generally stops staff from frothing at the mouth if you can suggest a few little things they can still do The problem is, if you're allowing local user login. You're giving them an easy way to bypass GPOs in first place In terms of allowing access if servers down, the problem is determining if it's the "server" down, or the network. Obviously the program has no idea of what is the server, vs what is the network. Unless I'm just being stupid, it's not like you could even ping a local machine to test if there's network, as none would get an IP from the DHCP etc? Guess there's option to give a default "test if this IP is alive", but again if it's not alive. How does it know if it's due to network or server failure. Couldn't deploy a "server is down key" as obviously if servers down no way to deploy new GPO Only way I can think of doing it is by adding a special key, that's changing based on time etc, that will act as an admin unlock (aka disables relocking during that logon). Then if anything does go down you could just tell teachers to give that key out for that lesson, and it'd disable it. Only issue is obviously if a kid got hands on the codes etc, but guess you could deploy a unique keyword (as part of normal install) and use that as part of the "temporary" key. So it's unique per school. If that made any sense? Thanks, Steve
dc_mc2002 Posted May 25, 2011 Posted May 25, 2011 Just to give you more feedback. Currently tested on Win7 32Bit with EduLockV5. Had to change permission on the reg key for HKEY_LOCAL_MACHINE\SOFTWARE\EduLock to allow any user to run application and then application ran fine. GP updates not working but overall excellent application. Saved me a lot of time mucking about with VB or powershell. Happy to deploy to all the Classroom client machines as is. Will continue the feedback. Very keen on the email notification your working on, as staff are not always aware what students are doing even when looking at the their screen. Be great to have immediate notification when events like this occur. 1
Steve21 Posted May 25, 2011 Author Posted May 25, 2011 Just to give you more feedback. Currently tested on Win7 32Bit with EduLockV5. Had to change permission on the reg key for HKEY_LOCAL_MACHINE\SOFTWARE\EduLock to allow any user to run application and then application ran fine. GP updates not working but overall excellent application. Saved me a lot of time mucking about with VB or powershell. Happy to deploy to all the Classroom client machines as is. Will continue the feedback. Very keen on the email notification your working on, as staff are not always aware what students are doing even when looking at the their screen. Be great to have immediate notification when events like this occur. Glad to hear! Will have to take a look at the GP updates, need to get a test server up and running to play with Yeah sorting the emails/notification, but having few issues trying to get it to send emails without putting in usernames/pass for the email servers etc, but will get it working soon! And thanks for the feedback! Nice to see it's being used. Steve
dc_mc2002 Posted May 25, 2011 Posted May 25, 2011 Glad to hear! Will have to take a look at the GP updates, need to get a test server up and running to play with Yeah sorting the emails/notification, but having few issues trying to get it to send emails without putting in usernames/pass for the email servers etc, but will get it working soon! And thanks for the feedback! Nice to see it's being used. Steve Cant speak for everyone, but no username and password required at our school. I setup permission for the SMTP server to allow outgoing email from authenticated users. As far as im aware, this is a very common option on mail servers. Infact needed for so many other applications we use for automated reports and notification. Have you found a problem with using authenticated users access with your application?
Don__1 Posted June 26, 2011 Posted June 26, 2011 Are there still 3 passwords and if so, are they still as listed here - http://www.edugeek.net/forums/network-classroom-management/74425-solution-stop-people-disconnecting-network-cables-testers-wanted-please-2.html#post663879
Steve21 Posted June 26, 2011 Author Posted June 26, 2011 Are there still 3 passwords and if so, are they still as listed here - http://www.edugeek.net/forums/network-classroom-management/74425-solution-stop-people-disconnecting-network-cables-testers-wanted-please-2.html#post663879 There are three, however they were updated as mentioned on website. eduapps.edutechhosting.co.uk What are the passwords? By default: Admin Login Password: adminlogin Admin Unlock Password: adminunlock Teacher Unlock Password: teacherunlock (remember regsettings too) Every update is done on that site, or in this thread. All old ones can be ignored. Hope that helps. Steve
Steve21 Posted June 27, 2011 Author Posted June 27, 2011 Thanks for the rapid reply Steve. No problem, if you get any problems just gimme a shout, usually flicking through ispylist every now and then Steve
meastaugh1 Posted June 27, 2011 Posted June 27, 2011 Looks good, just a few suggesstions/questions: When you right click the sys tray icon, did you intend for this password field to still show white text on a white background, as opposed to it being a proper password field? I can understand why you might do this while developing, as you can highlight to see what has been written. Any chance this can run be made to run as a service, so that the process can be made to re-start if it crashes? It's only happened once while testing it. The passwords are currently stored in plain text in the registry, have you considered encyrpting? Is there a good reason for students to need to write to the registry in order for the app to run? Thanks
Steve21 Posted June 27, 2011 Author Posted June 27, 2011 Hey, When you right click the sys tray icon, did you intend for this password field to still show white text on a white background, as opposed to it being a proper password field? I can understand why you might do this while developing, as you can highlight to see what has been written. There was a reason I did it originally, Can't remember why now. Either it was because the specific way I did that input box it didn't give a "password-char" option, or it was due to querying it later. However this should "only" ever need to be logged into once while setting it up to deploy. The idea being you disable the login totally after deploying it. As the icon "in my view" shouldn't be visible anyway. Any chance this can run be made to run as a service, so that the process can be made to re-start if it crashes? It's only happened once while testing it. I can certainly look into it, yes. The passwords are currently stored in plain text in the registry, have you considered encyrpting? I have considered it, however, a) I'm assuming students can't view the registry anyway. b) If you encrypt the password you'd have to apply the password (as the reg files) already encrypting. Making it harder to deploy network wide password changes etc. As it is now, you can just deploy the regkey and it's done. (guess I can give the option to encrypt/not, in future versions) Is there a good reason for students to need to write to the registry in order for the app to run? From my memory (Been a little busy recently), The software automatically looks to "read" the keys from the registry. If they exist it won't write anything to the registry. However "if they don't exist" it'll create a regkey with the default passwords, as when the program loads it reads the keys, and loads them into itself as such. So "if" you can ensure the regkeys are deployed it shouldn't need write access (from how I remember it, I can check tonight or tomorrow though if you want a 100% answer) Hope that helps a bit? Steve
meastaugh1 Posted June 27, 2011 Posted June 27, 2011 Thanks for the quick reply. I take your points about the systray password field and encryption. I get the .net error regardless of whether the values are already created. It will only seem to launch if the user (student) has write access to the EduLock key. 1
Steve21 Posted June 27, 2011 Author Posted June 27, 2011 Thanks for the quick reply. I take your points about the systray password field and encryption. I get the .net error regardless of whether the values are already created. It will only seem to launch if the user (student) has write access to the EduLock key. Could you screenie what the error is? Just curious. Will take a look at it tonight when I got source handy. Must be just me missing something obvious, but can't remember offhand. Steve
meastaugh1 Posted June 27, 2011 Posted June 27, 2011 Screenshot and exception below: See the end of this message for details on invoking just-in-time (JIT) debugging instead of this dialog box. ************** Exception Text ************** System.Security.SecurityException: Requested registry access is not allowed. at System.ThrowHelper.ThrowSecurityException(ExceptionResource resource) at Microsoft.Win32.RegistryKey.OpenSubKey(String name, Boolean writable) at EduLock.Form1.ReadFromReg() at EduLock.Form1.Form1_Load(Object sender, EventArgs e) at System.EventHandler.Invoke(Object sender, EventArgs e) at System.Windows.Forms.Form.OnLoad(EventArgs e) at System.Windows.Forms.Form.OnCreateControl() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.ContainerControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) The Zone of the assembly that failed was: MyComputer ************** Loaded Assemblies ************** mscorlib Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll[/url] ---------------------------------------- EduLock Assembly Version: 1.0.0.0 Win32 Version: 1.0.0.0 CodeBase: [url]file:///C:/Program Files/Edulock/Edulock.exe[/url] ---------------------------------------- Microsoft.VisualBasic Assembly Version: 8.0.0.0 Win32 Version: 8.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/assembly/GAC_MSIL/Microsoft.VisualBasic/8.0.0.0__b03f5f7f11d50a3a/Microsoft.VisualBasic.dll[/url] ---------------------------------------- System Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll[/url] ---------------------------------------- System.Windows.Forms Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll[/url] ---------------------------------------- System.Drawing Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll[/url] ---------------------------------------- System.Runtime.Remoting Assembly Version: 2.0.0.0 Win32 Version: 2.0.50727.42 (RTM.050727-4200) CodeBase: [url]file:///C:/WINDOWS/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll[/url] ---------------------------------------- ************** JIT Debugging ************** To enable just-in-time (JIT) debugging, the .config file for this application or computer (machine.config) must have the jitDebugging value set in the system.windows.forms section. The application must also be compiled with debugging enabled. For example: When JIT debugging is enabled, any unhandled exception will be sent to the JIT debugger registered on the computer rather than be handled by this dialog box. 1
Steve21 Posted June 27, 2011 Author Posted June 27, 2011 Screenshot and exception below: Many thanks, Will take a look tonight. Steve
Steve21 Posted June 28, 2011 Author Posted June 28, 2011 Doubled check code, and I stand by my earlier comment. If you deployed keys it won't or shouldn't write to it Can you confirm what your reg settings look like for it, obviouslyy hide password maybe I can shed some light if keys setup wrong Thanks Steve
meastaugh1 Posted June 28, 2011 Posted June 28, 2011 Hi Steve, I've tried it on XP this morning to ensure it's not a Win7 thing, I get the same problem on both OS. I've included a screenshot of the reg table from the MSI I am using to deploy. If I give everyone Full Control, the error goes away. If I withdraw that permission, the error comes back.
Steve21 Posted June 28, 2011 Author Posted June 28, 2011 If I give everyone Full Control, the error goes away. If I withdraw that permission, the error comes back. Can you confirm you're setting those reg keys to: HKEY_LOCAL_MACHINE\SOFTWARE\EduLock Not Local User etc? (Assuming it is from the #2 in regtable) just confusing me as to why it's doing this mmm. And you've double checked it's actually applied the regkeys to the right place? It's not missing them or something stupid? If it's not something silly I'll try to throw together a debugging version tonight, that hopefully you could just test on 1 computer, and it'll hopefully give the answer Many thanks, Steve
meastaugh1 Posted June 28, 2011 Posted June 28, 2011 Looks good to me. Regedit screenshot below. Thanks for your perseverance.
Steve21 Posted June 28, 2011 Author Posted June 28, 2011 Looks good to me. Regedit screenshot below. Thanks for your perseverance. [ATTACH=CONFIG]10568[/ATTACH] Worked out what it is "I think" think it's me being silly. Dim regKey As Object = Registry.LocalMachine.OpenSubKey("Software\EduLock", True) Is part of the line that reads the registry, and the true parameter opens it with write access. I'm assuming that's where it's going wrong as even though it's not writing anything, it needs access to open it like that. Can you quickly test this on the machine you're testing it on: WindowsApplication4.zip Hopefully the "New version" shouldn't break for you. If so I can make a change in the main program when I'm at home, with the source. Many thanks, Steve
meastaugh1 Posted June 28, 2011 Posted June 28, 2011 That's the one, new version retrieves reg values, old version generates the crash error. 1
Steve21 Posted June 28, 2011 Author Posted June 28, 2011 That's the one, new version retrieves reg values, old version generates the crash error. Awesome, Will make an update to main source if I got time tonight. One of those silly bugs! Many thanks, Steve
Steve21 Posted June 28, 2011 Author Posted June 28, 2011 When you right click the sys tray icon, did you intend for this password field to still show white text on a white background, as opposed to it being a proper password field? I can understand why you might do this while developing, as you can highlight to see what has been written. Latest version (mini update) should now have passworded chars and black text on the login box rather than white Also the registry bug should be fixed in the new version for you! Any feedback on if it's working etc would be great (obviously no rush ) Many thanks, Steve
meastaugh1 Posted June 29, 2011 Posted June 29, 2011 I've allocated the new version to a room and it's working fine with read-only permission now, thanks. 1
Steve21 Posted June 29, 2011 Author Posted June 29, 2011 I've allocated the new version to a room and it's working fine with read-only permission now, thanks. Cool, Good to hear Steve
LeighMJ Posted June 30, 2011 Posted June 30, 2011 (edited) I downloaded your program yesterday and have been 'playing' with it today. Is it possible to remove the Steve21 from the lock screen? The only reason I ask is because a google search for steve21 comes up with info about the program and the less info you give the 'Little Darlings', the better. Leigh Edited July 19, 2011 by TheScarfedOne Language
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now