We are a small private school, about 100 students. We have 35 workstations on W2003 domain with separate Ex 2003 server for staff.
We have 15 computers in the lab that are used by students (K-6th). The server we are using for the lab is also Win2003, I am planning to have this be a separate domain. I do not want lab computers to be able to access staff servers, there is no need. I also want active directory separate so that students accounts are setup only on lab server. We will have folders on the lab server, one for each classroom then individual folders for each student. These will be on the labserver so students can access. However, the teachers and librarian who are logged into the staff server need to be able to access the folders on the labserver so they can pull up the student's work on their computer.
I would prefer to use generic logins at each lab computer, i.e., computer1, computer2, etc. then when the student need to save their work they select the class folder, then their folder which prompts them for their username and password. We do not want the students to be able to access other student's folders.
The generic login will be locked down via group policies so they will not be able to add programs, etc.
What I'm looking for is a way to do the above without them being able to login the computer as themselves.
Hopefully this makes sense. We had a setup using MS Shared Computer Toolkit but the kids figured out how to login as themselves which caused a big problem. I'm not that familiar with the shared toolkit so I am not planning to use that.
I am open to other suggestions, if there is a better way to do this.
Start Free Trial
