Internet and computer access restrictions

['putertutor]

I know this discussion has been had before, just wondering if anyone has found anything new for restricting internet and computer access. Specifically I am looking for restrictions based on users. Here's the scenario I am trying to tackle today, but this situation is not uncommon in my area.

A small, private school computer lab, with 6-9 computers and up to 24 individual users. No servers are involved. Some users (staff) have full privileges and need almost no internet restrictions. Some students need a very basic white/black list, and other students land somewhere in the middle. Because of multiple users/accounts per computer, configuring has been problematic for them, but they have to have each student with their own login, so a single configuration per computer will not work.

Right now their solution is to use windows parental controls (these are all Vista machines with a planned upgrade to 7 in the ear future) and configure the web access list for each user. Proxies have been an issue for them, and apparently Windows Parental Controls does not restrict any secure browsing, so https gets students past that.

In addition to internet restrictions, they need a way to restrict certain activities and access to programs. Some users can Skype, others may not. some can access games, others can not. Some programs should only be accessible to staff never to students. Admins only in the control panel, and a generally restricted list of programs for most users.

Lastly, once implemented they are hoping to manage this system themselves, so a fairly user-friendly interface is desirable.

Once we get the win7 machines in, some of the application and windows based restrictions will be handled through the gpeditor, but internet access restrictions will still need a 3rd party app, I believe. I'm open to suggestions.

 

[Kitten Kong]

Would K9 fit the bill on this one, or net nanny?

 

['putertutor]

I have them on the list to test. I'd like to find an all in one solution, if possible, for both internet and computer access control.

 

[YeOldeStonecat]

I use Untangle for that. They have a great price setup for Educational facilities..and a good bundle for schools.
https://www.untangle.com/store/ngfw-education-complete-conf.html

I have it setup at one school doing what you need, applies different policies to students, staff, etc.

https://www.untangle.com/store/ngfw-education-complete-conf.html

 

[Markverhyden]

To be quite honest I doubt your will find a simple, easy solution that they can manage themselves and accomplish all that they want. What you have described is the basic premise for development of Active Directory w/ Group Policy Objects and Single Sign On.

That being said I do believe that many of the MDM companies are working on implementing controls for regular desktop OS's on top of the mobile ones they advertise. I did a 30 day trial for air-watch. They advertised clients for OS X as well as Windows. The OS X client existed but had little functionality and the M$ client was just on paper.

Personally I think that this might be a very lucrative niche for those companies since small organizations need those types of services but cannot afford to pay for a full blown M$ solution.

 

['putertutor]

I use Untangle for that. They have a great price setup for Educational facilities..and a good bundle for schools.
https://www.untangle.com/store/ngfw-education-complete-conf.html

I have it setup at one school doing what you need, applies different policies to students, staff, etc.

https://www.untangle.com/store/ngfw-education-complete-conf.html

I like the looks of this, except for the subscription based pricing. Most of my customers are not fans of that, but if it provides the right solution.....

Thanks!