Hi all,
Has anyone else had the request to allow students in computing (Y11 and Y13) to install EXE files? It's apparently part of the curriculum now but I've not heard of it. It's a very random end of year request! Now, the obvious security issues aside; Realistically, as programming and so on continues to be taught and the subject matter increases in complexity this will be needed if not now but in the future. Rather than work against the curriculum being taught, I'm exploring options to work with them in a controlled way and to implement it with security as the key design point.
I'm considering implementing windows sandboxing but this will mean upgrading to Pro or Enterprise which is fine but I'd be interested to know how others have/would deal with this? The areas I'm also looking at is completely offline devices that can be used, GPOs with accounts only allowed to work on certain machines and only for allocated times and having a mini switch with select numbers of devices VLANed off in an isolated and filtered way (I'm tempted to do this as I'm going to be creating a privileged access VLAN for admin works so can use it as a test). I may even do a combination of them all.
Cheers