Virtualbox + image for programming classes

[gumbygaz]

Nice easy one, just finished doing ours.

Look up the shared folders option - we have ours set to the home drive. Networking is disabled apart from "host only network" for that to work.

And yeah, keep it on the C: drive unless you have another drive specifically for the VM.

 

If you want to push out Virtual Box by MSI (GPO, SCCM etc) then you'll need to install the certificate so the drivers will install without intervention - if you need that, give me a poke. I've just finished packaging the VM itself too (we used a stripped down version of Windows 7 - the image is 10GB including Netbeans, Notepad++, all windows updates, .net framework 4.5, Python etc)

 

Morning,

 

Been tasked with this and getting a 1604 MSI failure when pushing Virtualbox out. Guess it's down to the unsigned drivers. Any chance you could give me a couple pointers how you managed to get round that issues @synaesthesia? Huge thanks!

 

Gaz

[synaesthesia]

The certificate is within a cabinet file, within the MSI - send that out to your clients via GPO. I'll inbox you the certificate to save time.

 

Import it via GPO> computer policies, windows settings, security settings, Public Key Policies, Trusted Publishers Certificates

Push that out first, then try the package again.

[gumbygaz]

Wahey! Worked first time, damn simple in the end! Didn't know it was lurking in the cab file. Huge thanks for that - owe ya one!

[synaesthesia]

No worries

[Divaldo]

Thanks to the useful tips from you guys, I have got VirtualBox set up and ready for our forthcoming computing/programming classes.

 

The only problem I'm having at our place, is that we don't allow students to run batch files, vbs or the command prompt (which is one of the reasons for the unrestricted virtual session). With that in mind, do any of you have any tips on how to allow students to actually launch VirtualBox? I don't want them to be able to run the VirtualBox Manager or alter any of the settings so I like the method of launching it via vboxmanage.exe with all the restrictions in place.

 

I'm currently launching it from the following batch file which works really well for the teachers who do have access to the command prompt:

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" registervm "C:\VirtualBox VMs\VirtualPC.vbox"

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" setextradata "C:\VirtualBox VMs\VirtualPC.vbox" GUI/SuppressMessages remindAboutAutoCapture,remindAboutMouseIntegrationOn,showRuntimeError.warning.HostAudioNotResponding,remindAboutGoingSeamless,remindAboutInputCapture,remindAboutGoingFullscreen,remindAboutMouseIntegrationOff,confirmGoingSeamless,confirmInputCapture,remindAboutPausedVMInput,confirmVMReset,confirmGoingFullscreen,remindAboutWrongColorDepth

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" setextradata global GUI/RestrictedGlobalSettingsPages General,Input,Update,Language,Display,Network,Extensions,Proxy

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" setextradata "C:\VirtualBox VMs\VirtualPC.vbox" GUI/RestrictedRuntimeMenus Machine,View,Devices,Help,Debug

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" setextradata "C:\VirtualBox VMs\VirtualPC.vbox" GUI/RestrictedStatusBarIndicators HardDisks,OpticalDisks,FloppyDisks,Network,USB,SharedFolders,Features,Mouse,Keyboard,VideoCapture

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" setextradata "C:\VirtualBox VMs\VirtualPC.vbox" GUI/RestrictedCloseActions SaveState,PowerOff,Restore

 

"C:\Program Files\Oracle\VirtualBox\vboxmanage.exe" startvm "C:\VirtualBox VMs\VirtualPC.vbox"

[synaesthesia]

The same way you let students run any programs? Install it somewhere decent, create an exception, hash allowance or whatever you use for them to run it, and create a shortcut. No different to any other program like Word etc

[Steve21]

I'm currently launching it from the following batch file which works really well for the teachers who do have access to the command prompt:

 

I made myself a custom exe that wrapped all the commands together, so it's that exe that they are allowed to run and the rest is called from that. No bat/vbs etc

 

Steve

[Divaldo]

Thanks Steve, that sounds like it will do the trick. Can you tell me what you used to do that?

 

Thanks.

[Steve21]

Just used a VB.net program calling the commands via shell etc Basic but does the job and doesn't require anything modified in terms of bat/vbs/scripts etc

 

But you could use any exe creator really.

 

Steve

[Divaldo]

Brilliant, I'll give it a bash. Cheers.

[Divaldo]

This worked like a dream, thanks.

[fiza]

This worked like a dream, thanks.

 

what did you use to wrap it all up in an exe?

[Divaldo]

I used 'Advanced BAT to EXE converter v2.83' , Advanced BAT to EXE Converter - Freeware compile batch files to exe with Mouse Input

 

The site looks a bit dodgy, but after scans with a couple of anti-virus products, it seems safe.

[jamin100]

Hi all,

 

I've got round to this and im using the bat script shourtcut further up in the thread - thanks for that..

 

Anyway, once the VM is up and running, the students can then right click on the Vbox Manage icon on the taskbar and can get into the settings for the VM. They cant change the important ones but some they can. Is there anyway of locking that down?

 

Thanks!

[Steve21]

Hi all,

 

I've got round to this and im using the bat script shourtcut further up in the thread - thanks for that..

 

Anyway, once the VM is up and running, the students can then right click on the Vbox Manage icon on the taskbar and can get into the settings for the VM. They cant change the important ones but some they can. Is there anyway of locking that down?

 

Thanks!

 

Don't use vboxmanage, use vboxsdl No menus/buttons etc etc, just the VM.

 

"C:\Program Files\Oracle\VirtualBox\vboxsdl.exe" -vm "My Python"

etc.

 

Steve

[jamin100]

When I use vboxsdl I get the error

 

The computer can't start because MSVCR71.dll is missing from your computer

[jaminben]

Great thread... many thanks to all those involved

 

However (theirs always a 'however') I'm seeing the same issue as others where I can right click on the task bar and select the 'Oracle VM Virtualbox.exe' to gain access to some settings. I've tried using vboxsdl but it doesn't appear to work.

 

Also where are you all allowing the students to save their work?

 

Thanks

 

Ben

[robjduk]

how does Virtualbox handle network cards. I gather a common problem with allowing students access to this kind of stuff is they can add network adapters and play. Although unlikely, they could in theory replicate a DC's IP or something.

I have gathered that only the paid VMWare workstation got round this (which is what I told my IT teacher when he asked) so would love to hear.

[jamin100]

You can disable networks cards and adding network cards with the batch file shortcut as above

[Spikeh]

Hey guys, found myself on here after doing some research in to a solution for creating a coder environment.

I have everything all set and working however I am in the same situation as Divaldo originally was before using BAT to EXE converter.

 

Just wondering how this program works, can I put the commands from my BAT file directly in to this and create the EXE or do I need to use different commands like rem LaunchSilent etc?

 

My BAT currently resembles the one originally posted by synaesthesia because I liked the bulletproof approach

[Divaldo]

I just pasted the commands as they were directly into the convertor, it seemed to do the trick.

[Spikeh]

Thanks for the response, just gave that a go and it still seems to load a CMD window when launching the exe - which as a student just ends up being a CMD window letting them know that CMD is disabled by the administrator.

Am I missing something?

[Divaldo]

That worked for me, all I had to check was that my student lockdown GPO was allowing command prompt script processing, but preventing access to the command prompt.

[Spikeh]

I'll have to look in to that - that's probably the issue as some of our settings are a bit overzealous.

Am I right in thinking that even with script processing is enabled it will still stop the students from running their own batch/ script files because it would be attempting to launch CMD with their permissions?

[Divaldo]

That's right, that's how we have it set up and they can't do anything like that. Might also be worth checking whether you have any additional software restriction policies set up that might be having an effect.