booths

1. You need to install a server side application with Internet access to allow comms to Pearson 2. On the student computers you install the 'testplayer' msi (pearson.pop.testplayer.msi) 3. On the Teacher workstation you install the 'invigilator' msi (pearson.pop.invigilator.msi)* 4. The Exams officer needs the Administrator application (pearson.pop.administrator.msi) It has been a while since I did this so forgive me for my lack of totall recall! The administrator downloads and sets up the tests via the server software so you specify this as your connection point. Part of this process is to set-up Invigilator accounts and assign them to a room (where the test software is installed) Once a test is downloaded you assign accounts for the students (again in administrator) Once assigned the fire up the Invigilator and use the signon/password created as above. The test students then connect to the Invigilator workstation and sign in using their allocated signon etc. The Invigilator starts the test. * In my setup the Invigilator software will not work properly unless it uses an AD account with a Roaming profile. PS. I also hated this software!

I have thought about this today and thanks to everyone for their replies etc. USB - I am going to use Netsupport DNA to register and allocate USBs to nominated staff (encrypted). Students and remaing staff will use their Google Drive. HOME ACCESS - Disable USB RDP redirection to prevent data leaving the school domain WIRELESS - ACLs for DNS, RDP and Apple Bonjour (DHCP from the Wireless Controller) Thanks

Do you have routing between the Vlans? We do and that is the source of my concern. The DHCP servers and Proxy servers sit on our Server Vlan and then we let the layer 3 switches manage the packets between the Vlans. This provides a BYOD device with a 'route' to our Server Vlan and therefore a risk. I can fix this as you would expect but I'm wondering if the GDPR compliance is making me over zealous about such things ... LOL

I'll check out BitLocker (assuming the Head will support us cost wise). Our Sophos endpoint approach only takes us so far and does often fail to clean up some Viruses and Malware. Wireless is more a question about network integrity once a devices become 'network aware'. A DHCP address is given (which is a range on our internal network).

"processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures." Is anyone considering looking at USB drive access and Wireless devices? I am considering turning both off until a 'complete' secure mode of operation can be achieved.

Our last exam attempt was shockingly bad! The kids just think we are morons and the teachers just think there is a magic button we can press to make this ridiculous software work. I can only instruct the Exams Officer to complain to Edexcel.

C drive is access is punishable by death! LOL

ECS on a server/workstation which can access the internet (and has the appropriate ports unblocked) Admin on the Exams Officer workstation I put the Invigilator software on the teacher's workstation in a couple of suites on the same VLAN. The exam software works better (I found) if it is on the same VLAN as the Invigilator. Make sure that Invigilator is active before connecting the Exam workstations (again a funny I discovered when playing around with it!)

.. Good practice with this type of software is to maybe disable any virus checking!, oh and make sure that Microsoft Visual C++ 2012 redistributable is installed.

This may help .. I had three problems with this wonderful software .. 1. Format of Proxy entry in the Edi.Advance.Tdp.ExamCentreService.exe.config (For me .. proxyaddress="http://proxy.domain.local:8080/") 2. Invalid Certificate Installation on the ECS Server. .Net requires Certificates to stored on the 'Local Computer' so I had to manually store the certificate via the snap-in etc. 3. The Invigilator software will only work with a Roaming profile. Logging on as Admin will make it work but I'm not an advocate for this kind of approach. Instead I created an account with normal restrictions etc but created a profile (roaming) for that user only. It's worth mentioning that the support I received from Edexcel was shall we say sketchy at best! LOL

We have three servers in mind :-- Email (Exchange), Vle (Moodle) and a Access24 Solution (based on VMware) StartSSL looks the favourite, thanks for the contributions

Does anyone have a recommendation for a SSL Cert provider (at a reasonable cost!) Thanks in advance

We have a pupil who has forgotten the password they set on a Word doc. Can anyone remember the password hack?