Limit Internet Access at certain times (School Network)

[PatBo]

We want to control access to the Internet for students during classtime.
Each student has a check box for access to the Internet (NT4 policies) so they either have it or not. Broadband Internet is provided through a Proxy Server. We plan to give them access through a file as and when it is required by the teacher.
How could we automatically delete this file on logoff.
Sorry for the vagueness but students read this site also.

Any ideas gratefully appreciated.

Slán agus beannacht.
Patrick Boland

 

[OzDog]

Best bet for controlling access is to use something like SurfControl (software) or St Bernard's iPrism (appliance). That is, if you want to do it properly.

Both can be set up to control access based on time of day, quotas, site categories and users/groups. You could have an NT Group set up that allows access, but at the same time a quota that says students can only get sports pages for 1 hour per week (or whatever).

Have run both (plus others), and would recommend the iPrism, as the classification database is WAY better than the Surf Control one. It's also far cheaper than Surf Control, and it also removes the need for a proxy server, so that saves evenb more money.

If you can't do that (budget etc) then Win2K & Active Directory gives you the ability to run 4 event-based scripts - Machine Startup & Shutdown, and User Logon & logoff. Your logoff script would be as simple as &quot;if exist <filename> del <filename>&quot;.

That said, an upgrade might be expensive!

Cheers,
Sam

Please let members know if you found their posts helpful.

 

[browolf]

disallow all students from accessing the proxy. create an account called say "internet" that does have access thru the proxy.

use a perl/wsh script to randomly change the password of that account between lessons. teachers have to phone up your office to get the password, or look on a staff intranet. students cant access the net unless the teacher gives them the password. Because the password changes they cant go to the next lesson and use the internet.

it's how we do it.

===============
Security Forums

http://www.security-forums.com