Net book security headaches

[martismo]

Hi all, we have issued netbooks to all of the yr 9, 10 and 11 students (230 in total). Network works well. At school, everything works well. Our school has filtered Internet on a largely wireless network.

 

Then the netbooks go home. We allowed the students to be Administrators of their own machines so that they could install software etc. The problem is that now the parents can't install K9, Norton family online or Microsoft Family Safety because the students are admins on their own machines. This means that on their home pc's the parents don't know how to control the sites that students visit, can't set time controls etc.

 

We are looking for a reasonably simple solution that parents would be able to use to control what their children are using on their home networks.

 

We are desperate for solutions.

Thanks

 

Martin

[X-13]

We are looking for a reasonably simple solution that parents would be able to use to control what their children are using on their home networks.

 

 

Supervision.

 

So cheap, it's free.

 

 

As long as there is anti-virus, you don't HAVE to do anything. [/opinion]

 

This is a case of parents not parenting.

 

 

 

Also, why do they need to install software?

[FN-GM]

Make a proxy server public facing. Set the same filtering for students as you do internally and point IE to that proxy.

[AngryTechnician]

The pupils are admins, so can just turn off the proxy setting.

 

The only solution I can think of that doesn't involve removing admin rights is to recommend the families to use something like OpenDNS to filter their home network. That won't allow for time restrictions, however.

[FN-GM]

The pupils are admins, so can just turn off the proxy setting.

 

Not if you set it by GPO

[K.C.Leblanc]

The pupils are admins, so can just turn off the proxy setting.

 

Not if you set it by GPO

 

They could still get round it by installing another browser.

[AngryTechnician]

Not if you set it by GPO

Which GPO exactly are you using? We have proxy set by GPO here, and any user granted admin rights can go in and untick the box.

 

Even if the UI was locked down, they could still remove the policy values from the registry.

[FN-GM]

Which GPO exactly are you using? We have proxy set by GPO here, and any user granted admin rights can go in and untick the box.

 

Even if the UI was locked down, they could still remove the policy values from the registry.

 

you can hide the tab some how.