StewartKnight Posted November 10, 2005 Posted November 10, 2005 Some of the Y10's have had their folders deleted (I'm assuming that a teachers password has been breached) Is there a log in windows 2k3 that can tell me who did it. Thanks
Guest Posted November 10, 2005 Posted November 10, 2005 How come your satff have delete access to the users root folder?
tosca925 Posted November 10, 2005 Posted November 10, 2005 Have you double checked they have no just been moved by a memebr of staff accidently, I had this happen to me yesterday, i did a search on the years home directories and they had been dropped inside some other pupils. Just a thought.
Guest Posted November 10, 2005 Posted November 10, 2005 And teachers complain when we don't give them access?
StewartKnight Posted November 10, 2005 Author Posted November 10, 2005 does anyone know which log please!!!!!
Ric_ Posted November 10, 2005 Posted November 10, 2005 @StewartKnight: You need to have enabled auditing of file deletion - not something that is enabled by default. If it was enabled it will be in the System(?) log. I would also check that the little darlings haven't deleted their own work - always liekly! Otherwise it will be a Shadow Copy restore or restore from backup.
StewartKnight Posted November 10, 2005 Author Posted November 10, 2005 I've done a backup, I just want to nail the person who did this on day 1 of our Ofsted inspection!!!
Ric_ Posted November 10, 2005 Posted November 10, 2005 If you have Shadow Copy enabled, you can find out when the volume changed to not having the folders and cross-reference that with who was logged on
sahmeepee Posted November 10, 2005 Posted November 10, 2005 @StewartKnight: You need to have enabled auditing of file deletion - not something that is enabled by default. If it was enabled it will be in the System(?) log. Yep, but I think it's in Security rather than System. Even if you enable the auditing option you need to enable auditing on the folder/file as well. Pretty unlikely to do that by accident.
E1uSiV3 Posted November 10, 2005 Posted November 10, 2005 Teachers have read only here for several reasons... They dont need write access to mark work, if they need to leave comments they could always create a doc elsewhere or print and write on it... thres also issues about the fact teachers could "improve" the students work for them and its hard to proove otherwise.
tarquel Posted November 11, 2005 Posted November 11, 2005 Same reasoning here E1uSiV3 I have it so that teachers have read only access to the entire pupils home folders but no create or write permissions There's also the issue that teachers could delete certain work if a pupil upset them [or whatever the reason] We have a pool drive where teachers leave resources and work and the pupils can only read the drive [a vice versa situation I guess hehe]. Never had any complaints about that side of things yet Cheers Nath
russdev Posted November 11, 2005 Posted November 11, 2005 dotn give them access at all we have shared area where teacher can creste a handing in point which students can write but not modify and teachers can access.. russ
tarquel Posted November 11, 2005 Posted November 11, 2005 The point of having it read only allows them to check to see whether any work has been done - etc. I did set up a submitting / for marking folder in the pool drive for this purpose - think i might make it more obvious - putting it in the route of the pool drive. This folder I'm thinking will be: Pupils = Write only [to prevent pupils looking at other pupils work] Staff = Read & Modify Administrator = No Access [lol only jokin ] Sorry this is no help to your question Stewart Cheers N.
StewartKnight Posted November 11, 2005 Author Posted November 11, 2005 you raise a good point though Nath, I'll lower the teachers permssions!
MkII Posted December 4, 2005 Posted December 4, 2005 To come back to this... I thought this was a very good idea [giving teachers read only access instead of full] for the reasons outlined above. I now have my Head of IT on my back trying to force me to reinstate full permissions for staff. His reason: He has some pictures on a camera he wants to put into the kids folders. I too have always had a whole school access share I open up for full access to students when needed [if I leave it open it just gets abused, although of course the ownership of the files always gives away the culprit :twisted:], Year Group read only shares, and a For Marking drop folder - write only. So the Head of IT could always drop the files in one of the read shares for the kids to pick up themselves. I intend to air the issue with the Head to get a policy statement on this. Just wondered if anyone could think of reasons for and against so we can make a more informed descision. [Not that I don't think the temptation to cheat argument isn't very good reasoning.] Cheers.
GrumbleDook Posted December 5, 2005 Posted December 5, 2005 The arguement goes something like this. The understanding of correct file management is essential for students, both as part of their ICT lessons and in the general world outside when they seek employment. It is common practice for resources to be place *once* in a central store that users then access and collate only the exact resources they need (ie only 10 of the 24 files made available). The choosing of the correct files constitutes a valuable skill of research. In addition to this, although the price of storage has seriously decreased, would it be fair to allow a teacher (or HoD) to place 30 1 MB photos on a central store when they know students will only use 3 or 4 pictures, or should the teacher put all 30 on each home area of 200+ students. The difference is around 200 MB (after the students have of course only chosen the pictures they need, and then converted them to jpeg files of the relevant quality to save space - another valuable skill they should be demonstrating) or 6 - 8 GB ... Also, there is the small matter of the valuable time of teaching staff. It is far quicker and more efficient for a teacher to leave the files in a central location once, than to copy them to 200 locations. To copy them to this many would be an admin task, and probably have the unions demanding that you subsequently give that teacher 3 days to lie down afterwards (ok ... getting silly now ... but you get the idea) Educationally ... a teacher might say that they want to make sure the student really gets the files ... the response is "yes ... the student may have them in their home area now that you have put them there, but there is nothing to say that they know they are there or that they will use them. By forcing them to collect them from a central read only store then you know that they know what they are and what they are for." I have more arguements on this if needed ... I have been collecting them from uk.ed.schools-it for the last few years.
_Bob_ Posted December 5, 2005 Posted December 5, 2005 I have resisted having an area 'open' for all students as these quickly fill up with junk. Staff have write access to an resources folder which the kids have read access on. This folder is organised into subject areas so i know who to nag if it starts getting messy/bloated (especially this time of year, when shrek2.avi files start appearing on network shares)
MkII Posted December 6, 2005 Posted December 6, 2005 Just had the meeting to make a policy descision on staff write access to student home folders. The very strong thrust of the discussion was that teaching staff should be allowed write access to mark childrens work. They should be able to open a word file for example, even if the work wasn't completed but a work in progress, add comments to that file for the student to see. The Head want's to talk with people that have read only access rights for Teachers so that she can see the educational reasoning. Any offers?
DMcCoy Posted December 6, 2005 Posted December 6, 2005 Just had the meeting to make a policy descision on staff write access to student home folders. The very strong thrust of the discussion was that teaching staff should be allowed write access to mark childrens work. They should be able to open a word file for example, even if the work wasn't completed but a work in progress, add comments to that file for the student to see. The Head want's to talk with people that have read only access rights for Teachers so that she can see the educational reasoning. Any offers? How can you prove is its been commented rather than changed? This leaves staff free to modify work to improve grades does it not? I can also see work being inadvertantly damaged. Will they only be able to modify existing work or write new files, what level of auditing will be in place to prove who wrote files to the students folder in the case of inappropriate material? Read only access protects the students and the teachers. I can't justify write here plus I also got fed up of searching for students folders after teachers dragged and dropped them elsewhere when we had write access on netware.
tarquel Posted December 6, 2005 Posted December 6, 2005 hehe No thanks I have no need for it and you can tell her that not one of the teachers has asked me why they cant write to the pupils folders. The logical way to do it is on a "pool"-style share mapped to a drive. Have a specific folder that both teachers and pupils can write to. The other way is if they want to do it digitally, send the teacher it via email with a certain dead line. The teacher can save the files from the email and then mark it and return it marked if needs be...converted to a pdf even lol There is plenty of ways for not needing write access to pupils folders - and i think in my earlier posts, I mentioned the possible foul play aspect - that alone is good enough reason i'd say. EDIT: Sorry guys - was too slow in replying yet again Nath
Geoff Posted December 6, 2005 Posted December 6, 2005 What about using Shadow Copy? That will enable you to restore previous versions of files.
MkII Posted December 7, 2005 Posted December 7, 2005 Does anyone know the configuration of RM Connect 3? A local school is saying they think it's staff write access by default. I was asked by my Head to do a survey of High Schools in our authority, and 12 out of 12 do not give write access to teachers.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now