what do you do - student laptops on domain

[e_g_r]

Our school is fully inclusive and has a number of students with dasabilities and some use their own laptops that have modifications on them to allow for easy use.

 

What is the position on joining these to a school domain?

 

Licencing, security, virus etc..

 

Anyone in a similar situation where pupil owned laptops need to join the domain.

[acrobson]

Our school is fully inclusive and has a number of students with dasabilities and some use their own laptops that have modifications on them to allow for easy use.

 

What is the position on joining these to a school domain?

 

Licencing, security, virus etc..

 

Anyone in a similar situation where pupil owned laptops need to join the domain.

We have a similar problem at my school, at present we have banned any machines that do not belong to the LEA and un-patched any un-used network points, we have also gathered all the MAC addresses from any machines that do connect using 'newt freeware' and then created a new scope on the subnet which prevented DHCP assigning them an IP address, as after all any machine with a user that has Admins rights and an IP address gives them all the access they need with he right utilities.

 

We also have the power from our LEA to remove equipment from users if they breach the site user agreement after a certain amount of time and can remove the equipment for up to one month after we give a receipt to the user. This is not often enforced once the user has been warned.

 

Any comments expressed by myself are that of my self and not that of my employer/team.

[StewartKnight]

I have a simple policy:

 

NO NO NO NO NO

 

The kids know that I study the DHCP logs, so they don't expect to get away with it!

[Geoff]

I use Packetfence to ensure anything coming on the network plays by certain rules (passive scanning with Snort and active scanning with Nessus) and that the user connecting to it agrees to a AUP (via a captive portal).

 

The moment the machine does something bad (for a given value of 'bad'), it gets disconnected.

 

http://www.packetfence.org/

[MkII]

Looks really good Geoff - must give that a try.

 

Interesting policy acrobson. I must draw something up as our LA has rules of connection we must abide by.

[smurf]

Its also interesting for 3rd party contractor access. You should ensure a proper policy governing all "None School/LA" equipment plugged into the network. Also, AUP's to ensure that any disaplinary will stand up. Its important that the AUP/Security Policy is also given to the users in order to enforce them. If adequate training isn't provided then it will not stand up in court or appeals.