How can I prevent student logins to Google from overriding the Library's public PC restrictions?
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@DustinB3403 our staff computers and public computers are on the same subnet at most locations. Can you group the ones to be restored by computer name, MAC address, IP address, etc?
You install an agent on each system you want to backup, point it to the server, from the server set up your preferences (like allow the user to restore etc) and then go from there.
-
@DustinB3403 OK. Sounds good. I will look into it
-
You can install the server on windows with
choco install urbackup-server
then install the agent on your same system or another to test with.I'm pretty certain you can do scheduled restores. .
-
@scottalanmiller I like the frozen concept. If you read above I used it until the hard drives started filling up.
I have been lucky so far as far as viruses through lots of restrictions including additional path rules that block executables from running in any location the restricted user has access to. -
In the worst case, you'd have to access the web page and restore the system.
-
@DustinB3403 Thanks again. I need to expand my abilities. If more than ten PCs backup from the same workstation will that violate Windows licensing? It might be better for me to try to get it going on a linux box.
-
For now I am about to put the PC that I have been working on earlier back into public service before the school crowd gets here. Maybe some of the changes I made will work but I don't really have my hopes up.
I'll be away from this discussion for a few minutes. -
@DustinB3403 said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@coliver said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Yeah I haven't referred to them at all.
The process for setting up the google restrictions you linked is from the google administration side. . .
Oh, I missed that. I thought that was the enterprise settings available via the Chrome ADMX. I don't have this in production at the moment.
-
I just realized that I did not personally reboot yesterday. I took the word of a fairly competent staff person but they do sometimes get confused while multi-tasking.
I am hopeful that today after closing I can check some computers and find that rebooting or even signing out of google then logging off and back in will work. I didn't get to check this yesterday. -
Late to the party but I'd look at DeepFreeze even if you've had bad luck with similar products in the past. It's saved us a ton of headaches for our conference rooms and even some of the machines in the manufacturing plant.
-
It sounds like your local account has too much access, would locking down this account more keep students from being able to install anything?
-
@notverypunny said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
Late to the party but I'd look at DeepFreeze even if you've had bad luck with similar products in the past. It's saved us a ton of headaches for our conference rooms and even some of the machines in the manufacturing plant.
He doesn't have the budget for SaaS of any kind.
-
@jmoore said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
It sounds like your local account has too much access, would locking down this account more keep students from being able to install anything?
There are somethings that are so time intensive that looking at alternatives like those that have been mentioned are cheaper in the long run.
-
@jmoore I am open to any suggestions. I have locked them down a good bit. There are a lot of group policy restrictions and also file permissions. No right click on the desktop or within file explorer. No command prompt. No run. Nothing on start or desktop except Office applications, browsers etc. Additional path rules in group policy.
I don't really get anything installed in Windows it is Chrome extensions that are the problem. -
@LJ Chrome extensions haven't been a problem either until students started started logging into their School managed gmail and google apps.
-
Tomorrow I will see if I find a PC with extra extensions, not logged out etc and remove the group policy restrictions and then log back in to the restricted user and see if the chrome settings have been changed. that is what I think might be happening.
-
@LJ said in How can I prevent student logins to Google from overriding the Library's public PC restrictions?:
@LJ Chrome extensions haven't been a problem either until students started started logging into their School managed gmail and google apps.
Are they logging into the website? or into Chrome itself? does signing into the google websites force the Chrome browser to sign automatically because of an enterprise policy?
-
I just looked through the options in my google.admx included options and found this:
Restrict which users are allowed to sign into Google Chrome.
This might do the trick.
-
I have been out in the public area for a while. No students are signed into school work- they are all playing. When it calms down I will pick one and ask them how they go about finding their assignments and doing their work on our computers. I will report back later today or tomorrow.
-
@Dashrender Do you think this prevents them from signing into Chrome while still allowing them to sign in to the Gsuite and email?