🚀 go-pugleaf

----------------------------Original message----------------------------
Previously...
>Is there a program out there that will make it so the students have to login
>to the network to run any programs, not allow them to put programs on
>the computer and yet can get thier files from the desktop.  At Ease was
>doing great until this new problem came up.

We're currently using PowerOn's OnGuard, which is fairly nice. It's good
about not interfering with system activity but still prevents users from
doing bad things. It can't require network login though. I'm surprised to
find out that At Ease *does* do this. I wish I'd known. I had been hoping to
find a way to integrate our user authentication system with the existing
email authentication system, but felt stymied... Too bad. A unix CAP server
sharing /etc/passwd with the email server could have accomplished this and
given us per-user accountability... well, it's too late for my
recriminations... back to your problem.

>What are other labs with CD players doing.  Any ideas or suggestions
>welcome.  We are an unsupervised lab open 24hrs a day (yes that does
>create more problems).  I have TA's that work different shifts and I'm in
>and out of there during the work day but alot of things happen to our
>computers at 2:00am, when noone is there.

We have a similar setup (CD players and unsupervised lab). On Guard seems to
be pretty flexible. Check out their demo. The restrictions editor is *very*
nice/flexible. Control over Open, Save, Launch, Eject on the basis of disk
type, with an in-depth exceptions editor. My suggestion would be locking all
apps (if possible; some things, I know, don't like this) on server behind the
server authentication and use an affordable security package like On Guard or
SmartStuff FoolProof (~$500 for a lab for either) to lock things down
locally. For more info on security packages, I made some HTML a while back:

http://www.best.com/~mikehan/work/security.html

And you might want to check out Tim's page at Davis (forget the URL, but he
posts occassionally to the labmgr list) on integrating Unix servers into a
Mac/PC LAN as secure servers, although I know you're using Netware servers at
Berkeley.

>There is too much blood in my caffeine system.
>
>Candy Lappen              Candy@cchem.berkeley.edu
>UC Berkeley
>College of Chemistry
>
>All opinions expressed are my own and in now way can be considered
>actual ideas.

PS- I LOVE your sig.
_________
mike (han@library.ucsf.edu)
"I had lately learned that another way of writing FALL IN LOVE is WALK THE
PLANK." - Jeanette Winterson