How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
Late to the party but I'd look at DeepFreeze even if you've had bad luck with similar products in the past. It's saved us a ton of headaches for our conference rooms and even some of the machines in the manufacturing plant.
-
It sounds like your local account has too much access, would locking down this account more keep students from being able to install anything?
-
@notverypunny said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Late to the party but I'd look at DeepFreeze even if you've had bad luck with similar products in the past. It's saved us a ton of headaches for our conference rooms and even some of the machines in the manufacturing plant.
He doesn't have the budget for SaaS of any kind.
-
@jmoore said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
It sounds like your local account has too much access, would locking down this account more keep students from being able to install anything?
There are somethings that are so time intensive that looking at alternatives like those that have been mentioned are cheaper in the long run.
-
@jmoore I am open to any suggestions. I have locked them down a good bit. There are a lot of group policy restrictions and also file permissions. No right click on the desktop or within file explorer. No command prompt. No run. Nothing on start or desktop except Office applications, browsers etc. Additional path rules in group policy.
I don't really get anything installed in Windows it is Chrome extensions that are the problem. -
@LJ Chrome extensions haven't been a problem either until students started started logging into their School managed gmail and google apps.
-
Tomorrow I will see if I find a PC with extra extensions, not logged out etc and remove the group policy restrictions and then log back in to the restricted user and see if the chrome settings have been changed. that is what I think might be happening.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ Chrome extensions haven't been a problem either until students started started logging into their School managed gmail and google apps.
Are they logging into the website? or into Chrome itself? does signing into the google websites force the Chrome browser to sign automatically because of an enterprise policy?
-
I just looked through the options in my google.admx included options and found this:
Restrict which users are allowed to sign into Google Chrome.
This might do the trick.
-
I have been out in the public area for a while. No students are signed into school work- they are all playing. When it calms down I will pick one and ask them how they go about finding their assignments and doing their work on our computers. I will report back later today or tomorrow.
-
@Dashrender Do you think this prevents them from signing into Chrome while still allowing them to sign in to the Gsuite and email?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@Dashrender Do you think this prevents them from signing into Chrome while still allowing them to sign in to the Gsuite and email?
I do believe that - one has nothing to do with the other.. otherwise you likely wouldn't be able to use Google services from another browser.
-
Now, because of the nature that everything involved is Google based ( Google's g-suite, and Google's Chrome) - of course they could do whatever they want, and the enterprise stuff could still over ride this setting, but here's hoping.
You would think Google would have a way to not apply all that enterprise shit to just any ol' computer a g-suite user signs into.
-
@Dashrender I just booted up another public computer and found that setting. I will try to get to a public PC and set that and see find a student to try it.
-
@LJ That setting was in place already. I had a student who was using Google classroom on IE open Chrome, and login to his school email and Google Classroom. Then I had him close the browser without logging out. When he re-opened Chrome he was not logged in on either.
I either have a couple of computers not configured correctly or it may be that once logged in he could have had it remember his account and password and install extensions etc. He was heavily involved in school work but I told him to find me when he was though if his ride wasn't here. More info later. -
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ That setting was in place already. I had a student who was using Google classroom on IE open Chrome, and login to his school email and Google Classroom. Then I had him close the browser without logging out. When he re-opened Chrome he was not logged in on either.
I either have a couple of computers not configured correctly or it may be that once logged in he could have had it remember his account and password and install extensions etc. He was heavily involved in school work but I told him to find me when he was though if his ride wasn't here. More info later.OK, so you had him log into the webpage... what happens if he logs into Chrome itself?
-
@Dashrender I don't know darn it. I went back out there and he was getting in a car. Maybe some more students will come in. I wish I had had him try to install extensions while he was logged in.
I create an MMC for computer policy and non admin users then log in and out to create these folders
After that I paste into the contents of the GP and GP users folders from an already configured computer. I may have just missed a couple when I was updating my policies. I hope that is all it is. -
@Dashrender I am wrong . The setting isn't in place. the setting to clear contents etc on exit is in place and that must be what logged him out when he closed Chrome.
I'll go install that setting on some right now. -
I just tried setting the setting "restrict which users are allow to sign in to Google Chrome" to enabled and used*.@nologin as the allowed user.
I was still able to login from the restricted user. For this setting should you leave it blank for users or what? thanks. -
Use Incognito mode availability > Incognito mode forced
That shouldn't allow anyway of signing in at all.
