Univention Bugzilla – Bug 30834
Exam mode: collect / test GPOs
Last modified: 2013-06-07 21:39:19 CEST
One of the main parts of the exam mode is a collection of Windows GPOs activated together with the exam mode for the involved users/clients. A reasonable list of GPOs for the exam mode shall be arranged, tested and documented. Desired features: - force proxy settings for all browsers - disable USB storage devices - limit available applications - ...
USB is a bit tricky: * http://pc.de/software/usb-speicher-gefahr-raeumen-931 * http://support.microsoft.com/kb/555324/en-us * http://support.microsoft.com/kb/823732/en-us
- force proxy settings for all browsers: See ADMX templates and GPO configuration instructions on Bug 30835 Comment 1.
Created attachment 5193 [details] deny-and-allow-workstation-logons.txt
Created attachment 5194 [details] denycmd.txt
Created attachment 5205 [details] software-restriction-policies-etc.txt
Created attachment 5206 [details] software-restriction-policies-etc.txt (rev1) An additional note with links to MS documentation about Software Restriction Policies was added together with a disclaimer regarding non-completeness of the examples given.
All GPO settings collected here and on Bug 30835 are now gathered as examples into a section within the general chapter about the Exam Mode in the UCS@school administrator manual (schoolexam-de.xml).
The documentation was updated according to the test results. Not that errata Bug 31272 needs to be fixed for the security filter based targeting of GPO evaluation.
The GPO templates exists, are working and are correctly documented.
*** Bug 31583 has been marked as a duplicate of this bug. ***
UCS@school 3.1 R2 has been released: http://download.univention.de/doc/release-notes-ucsschool-3.1-rev2.pdf If this error occurs again, please use "Clone This Bug".