Lenovo Software Help Center

Installing LanSchool 8.0 in Secure Mode

Problem: How to install LanSchool 8.0 in Secure mode.

Prerequisite(s):
  • LanSchool installation zip folder.
Solution(s): 

LanSchool 8.0 has the ability to install additional levels of security if desired. Two modes are available, Password Secure and Active Directory Secure, and one or both may be selected. If the option is not properly installed, however, a Teacher will not be able to communicate on the desired channel and Student access will be unavailable.

--Password Secure Mode--
This mode requires teachers to type in a password when the console is launched to see students on a particular channel. This feature adds an extra level of security to prevent unauthorized consoles from being used as teachers.

Installation Steps:

  1. After double clicking on either the teacher.msi or student.msi file, continue through the install as previously described. To install the password protected version, check the box to Enable a security mode.
  2. Select Password Secure Mode.
  3. Type in a password and re-enter it to confirm.
  4. Repeat these steps for both Teacher or Student installations.

NOTE: If LanSchool is installed using the LanSchool Connection Service (LCS) the same process of selecting Password Secure Mode must be leveraged during the installation of the LCS. The password that is configured for the LCS needs to match the password of the students, otherwise communication will not occur between the teacher and student systems.

The password is required on the Teacher install so that if a teacher computer uses the “Become a Student” feature, it can still be secure.

When a teacher launches the console or changes channels, they will be prompted for a password to view the students on that particular channel or group of channels. 

To install the password protected version on the Teacher or Student using a script or Active Directory, refer to the section, Scripting or Mass Deploying LanSchool 8.0 via MSI.

In order to use .adm or .admx templates with the secure version of LanSchool, you must login to the Customer Portal and generate a key that will go in the password section of the .adm or .admx files.

In the event that only a Teacher or a Student, but not both, was installed with Password Secure mode, the Student will not be accessible by the Teacher. This will be indicated by a Security Locked Out icon on the Student thumbnail. You can verify if this is the case by checking the version number on the Students. If you hover with your mouse over the icon in the Student system tray, it will show a version number something like:

v7.8.0.20Ls, v7.7.0.20Sd or v7.7.0.20Sds

The lowercase letters are the security identifiers, where s signifies Password Secure Mode and d signifies an Active Directory Secure Mode installation. The uppercase L and S are not actually security identifiers, rather they refer to the type of LanSchool install chosen. L is for the Light version and S indicates a Subscription license. The system is designed to lock out any devices that don’t match security models. The Students will need to be reinstalled with the correct security mode option(s) in order to correct the security lock out issue. 

NOTE: If the teacher's password is compromised, it will be necessary to re-install both Teacher and Student computers with a new password. 

--Active Directory Secure Mode--
LanSchool 8.0 has the ability to leverage Windows Active Directory to ensure that only authorized teachers can control students. This mode adds an extra level of security to prevent unauthorized consoles from being used. This mode will only function in an Active Directory Domain environment and on Windows 2000 or newer systems. 

To fully configure this mode, you must have Domain Rights to create and populate a domain User Group.

Installation Steps:

  1. After double clicking on either the teacher.msi or student.msi file, continue through the install as previously described. To install the password protected version, check the box to Enable a security mode.
  2. Select Active Directory Secure Mode
  3. Repeat these steps for both Teacher or Student computers.

NOTE: If LanSchool is installed using the LanSchool Connection Service (LCS) the same process of selecting Active Directory Secure Mode must be leveraged during the installation of the LCS. The system who is hosting the LCS needs to be a member of the domain and can see the LanSchool Teachers Group, otherwise communication will not occur between the teacher and student systems.

To install the Active Directory Secure mode on the Teacher or Student using a script or Active Directory, refer to the section, Scripting or Mass Deploying LanSchool 8.0 via MSI

When in this mode, a teacher must be a member of the Domain User Group “LanSchool Teachers”. If the teacher is not a member of that group, then Active Directory Secure
students will not interact with that teacher.

Creation of the “LanSchool Teachers” Domain User Group is done using the appropriate Windows Server 2003 or 2008 Active Directory tools. Once the group has been created, those same tools can be used to populate the group with the appropriate teachers.

While Password Secure Mode requires that both Students and Teachers are installed with this option, Active Directory Mode is a bit different. If the Student has Active Directory Secure Mode enabled, then it will be Security Locked Out to any Teacher who was not installed with the Active Directory Secure Mode enabled (or is not a member of the “LanSchool Teachers” group). The restriction does not go the other way. An Active Directory Secured Teacher (who is also a member of the “LanSchool Teachers” group) will be able to control Students who do not have AD Secure Mode Enabled, without any restrictions.

NOTE: Active Directory Secure Mode is not available yet for Mac Teachers and Students and limited support when domain functional level is set to Windows 2000 mixed or Windows 2000 native mode.
    • Related Articles

    • Manually Installing LanSchool on student computer-Mac

      The following instructions will assist you in installing LanSchool on a student's Mac: Copy the student.dmg from the customer download to the student's machine. Double click the student.dmg to mount it. Double click on lanschool_student.pkg Read the ...
    • Implementing Password Secure Mode with Group Policy

      Problem: How to implement Password Secure Mode with Group Policy. Cause: N/A Prerequisite(s): Knowledge of Microsoft Group Policy LanSchool's .adm/.admx templates Access to the Customer Portal Solution(s): In order to pass the password successfully ...
    • How does AD Secure Mode work?

      Problem: How does AD Secure Mode work? Cause: N/A Prerequisite(s): LanSchool Student and TeacherSolution(s):  During the teacher-student handshake, the student will try to determine if the teacher is in the LanSchool Teachers group within the ...
    • Manually installing LanSchool 8.0 on a teacher computer - Windows

      Problem: How to manually install LanSchool 8.0 on a Teacher computer -Windows. Prerequisite(s): LanSchool installation zip folder. Solution(s): In My Computer, go to the LanSchool product download location and double-click teacher.msi in the Windows ...
    • Installing LanSchool 8.0 in a Thin Client Environment

      Problem: How to install LanSchool 8.0 in a Thin Client Environment. Prerequisite(s): LanSchool installation zip folder. Solution(s): LanSchool 8.0 supports a Terminal Server, NComputing environment. LanSchool allows thin client computers to be used ...
    • Popular Articles

    • Can a Teacher see Students outside of school?

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in LanSchool Classic General FAQ.
    • LanSchool Latest Release Notes

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in LanSchool Classic Latest Release Notes.
    • How to uninstall LanSchool Student and WebHelper from Chromebook

      This content has moved! Visit the new LanSchool Classic Help Desk It looks like you may be interested in Mass Deploying LanSchool Student for Chromebook.
    • LanSchool 8.0.2.82 Release Notes

      LanSchool™ Release Notes Updated: December 16, 2019 Component Versions LanSchool 8.0.2.82, December 16, 2019 Chromebook App 8.0.2.13, December 16, 2019 Chrome Web Helper: 8.0.2.5, December 16, 2019iOS TA and Student 8.2.0, December 16, 2019 Android ...
    • Controlling multiple students at once

      Problem: Can I remote control multiple computers at once? Cause: N/A Prerequisite(s): LanSchool Teacher and Student Solution(s): If all of the computers in the lab are the same basic image or configuration (for example. all Windows XP machines with ...
    • Recent Articles

    • Lenovo Software Newsletter

      Question Is there a way I can be notified about product updates? Solution To receive updates from Lenovo Software about product updates, we encourage customers to subscribe to our Lenovo Software Newsletter.
    • Allow Help Desk to reset Image Challenge images

      Issue Customer would like to allow Help Desk users to only be able to reset user Image Challenge images when they have been forgotten by a user. Solution This can be done by assigning specific users in the system the User Group Admin role, as well as ...
    • Troubleshoot RDS

      This is a good article, from Microsoft, on how to troubleshoot RDS/RDP logon issues. https://social.technet.microsoft.com/wiki/contents/articles/37841.remote-desktop-services-rds-logon-connectivity-overview-and-troubleshooting.aspx
    • Building an Employee Phonebook system

      Building a Mini Application Post #20 Can it really be that simple to create a little application with Report and Form Builder?  This tutorial shows you that it is - and actually helps you make a useful application at the same time as learning how to ...
    • Working with Binary Data in Report Services

      Quick Start Guide - Binary Data This tutorial is designed as a quick "How Do I Work With Binary Data" tutorial.  It walks through the steps necessary to upload an image to a database.  Every webNetwork 6.0 installation ships with a database called ...