Faronics Insight Tech Console - Manual (Page 19)

Installing Tech Console in Secure Mode
|
19
Insight Tech Console User Guide
Active Directory Secure Mode
Tech Console has the ability to leverage Windows Active Directory to ensure that only authorized
techs can control students. This mode adds an extra level of security to prevent unauthorized
consoles from being used. This mode will only function in an Active Directory Domain
environment and on Windows 2000 or newer systems.
To fully configure this mode, you must have Domain Rights to create and populate a domain User
Group.
Installation Steps:
1. After double clicking on either the TechConsole.msi or Student.msi file, continue through the
install as previously described. To install the Active Directory Secure Mode version, check the
box to Enable a security mode.
2. Select Active Directory Secure Mode.
3. Repeat these steps for both Tech or Student computers.
To install the Active Directory Secure mode on the Student using a script or Active Directory, refer
to the section, “Scripting or Mass Deploying Students via MSI”.
When in this mode, a tech must be a member of the Domain User Group “Faronics Tech Console
Admins. " If the tech is not a member of that group, then Active Directory Secure students will not
interact with that tech.
Creation of the “Faronics Tech Console Admins” Domain User Group is done using the
appropriate Windows Server 2003 or 2008 Active Directory tools. Once the group has been
created, those same tools can be used to populate the group with the appropriate users.
While Password Secure Mode requires that students and techs both be installed with this option,
Active Directory Mode is a bit different. If the Student has Active Directory Secure Mode enabled,
then it will be Security Locked Out to any Tech who was not installed with the Active Directory
Secure Mode enabled (or is not a member of the “Insight Teachers” or Insight Tech Console
Admins" group). The restriction does not go the other way. An Active Directory Secured Tech (who
is also a a member of the “Insight Tech Console Admins” group) will be able to control Students
who do not have AD Secure Mode Enabled, without any restrictions.
Note: Active Directory Secure Mode is not available yet for Mac Tech Console or Students.