SchoolConnect Administrator Guide Version 6.2

Transcription

1 SchoolConnect Administrator Guide Version 6.2 IBM Canada K-12 Education

2 Note: Before using this information and the product it supports, read the information in Appendix F Notices and Trademarks Eight Edition - Revised (May 2014) This edition applies to IBM SchoolConnect 6.2, and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2001, All rights reserved. US Government Users Restricted Rights - Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

3 Documentation Conventions The following documentation conventions are used throughout this guide: Bold type is used to indicate screen names, window titles, and lists. BOLD CAPS type is used to indicate icons, buttons or menu items to be clicked. SMALL CAPS indicate a field name where information can be entered, message text or directory and file names. Italic type is used to introduce new terms, text emphasis and for software and book titles. Note: a Note contains important and/or additional information. Attention: an Attention Notice provides additional information that the reader must know to avoid making permanent and perhaps unwanted changed to the program, system or data.

4

5 TABLE OF CONTENTS WHAT S NEW IN SCHOOLCONNECT IBM SCHOOLCONNECT OVERVIEW...3 SCHOOLCONNECT USER ROLES...5 Administrator View...5 Teacher View...9 Student View...13 Office User View...14 SCHOOLCONNECT ADMINISTRATOR TOOLS...15 USERS / MANAGE USERS...15 Search for Users...15 Display User Information...15 Show Printable Listing...15 Add a User ID...15 Edit User Information...17 Change a User s Password...17 Remove a User...17 Suspend/Enable a User...18 Disable/Enable Internet...18 Manage User s Files...18 CLASSES AND GROUPS / MANAGE CLASSES...19 Create a Class...19 Remove a Class...20 Manage Class Owners...20 ROOMS AND RESOURCES...21 Manage Rooms...21 Assign Resources (within a School)...23 UTILITIES...26 Change My Password...26 View My Account Details...26 BYOD Configuration...26 ADVANCED...27 Manage Courseware...27 Manage Student Folders...27 Show Printable Version...28 Promote Students...28 HELP...29 ADMINISTRATOR TOOLS CLASSES AND GROUPS...30 Manage Groups...30 ROOMS AND RESOURCES...31 GRADES...31 UTILITIES...31 School Utilities...31 ADVANCED...32 Import/Export Users...32 Import/Export Classes...34 Imp-Exp from a local file or the server Import/Export Associations...36 Reset Room Associations...36 Manage User Directories...37 GLOBAL UTILITY...37 Manage Schools...37 EDIT DATABASES...38 GLOBAL ADMINISTRATOR TOOLS USERS...40 Manage Itinerant Users...40 CLASSES AND GROUPS...41 Create Groups...41 GLOBAL UTILITIES...41 Manage Active Directory Tree...41 Password Self Service Portal Configuration...46 User Move Utility...49 Manage Schools...53 Manage Group Policy Objects...57 Manage AD Groups...58 Manage User Types...59 Edit Databases...60 APPENDIX A: SOFTWARE INSTALLATION APPENDIX B: PRINTER INSTALLATION APPENDIX C: DISABLE INTERNET ACCESS APPENDIX D: AD SYNC APPENDIX E: SCHOOLCONNECT 6 UPDATER APPENDIX F: NOTICES AND TRADEMARKS APPENDIX G: PRODUCT DEVELOPMENT... 88

6

7 What s New in SchoolConnect 6.2 OPERATING SYSTEM SUPPORT Server 2003, 2008, 2012R2 Window XP, 7, and 8.1 Update ios7.x and Android 4.4 NEW SERVICES School Connect ID provisioning: User ID and Group provisioning from source systems (SIS/HR) ID Federation and Synchronization management enhancements for Google and Azure Active Directory Quick Start to School Connect Web Apps: Remote File Access, Self Service Password Portal, BYOD NEW FEATURES Windows 8.1: Runs on Windows 8.1 with a Custom Tile Layout per role (student, teacher, admin) Leverages new Windows 8.1 "Start Screen control" XML files versus custom applications Fully customizable if use is a one-to-one user device type Remote File Access: WebDAV allows Drive Mapping so users can access their schoolbased home drives directly from their phone, tablet or computer from any location. Access via VPN is no longer necessary. Password Self Service Portal: has added new ID unlock feature, confirmation upon password change and encryption. BYOD Home Page has additional links for teacher specific sites. Active Directory: Group names in Active Directory show with the school code (for integration with firewall and better NTFS permission specificity if the DEFAULT is "on"). One Step Itinerant ID Creation Process (AD Sync). If AD is populated in a special field for Itinerant users, these users will automatically be enrolled into the correct schools. From the EMC, ADSynch can now scan and synch a specific school. Parent IDs may now be synchronized with SchoolConnect by Global Administrators through the SchoolConnect web interface (Manage Schools Synchronize with AD) if the parents accounts were created in AD. Search: Global Administrators now have the ability to find any element (users, groups, computers and printers) from within the SchoolConnect web interface. User Search by keyword, grade and class has been added to many screens. Keyword search is restricted to the User Type that is selected. Teachers/SCadmins can now search by first name, last name or user ID. What's New in SchoolConnect 6.2 1

8 FLEXIBILITY: Office Users can be designated as Principal, Vice-Principal and Secretary SCAdmins can change passwords for parents User printing can be enabled by site. An itinerant user can now print at whatever site they are located during the day. Cloud Configuration has both Google and Office 365 active at the same time. In Managing Rooms, NODEFAULT is able to be selected for the printer. This will allow users to set their own persistent default printer. EFFICIENCY Move User Utility can now change a user's type when moving from school to school or within the same school (e.g. a Teacher who has been promoted to Principal or moving Grade 8 students into several different High Schools) without having to back up and restore their data. Rooms can easily and quickly be renamed (versus delete and recreate) while maintaining the workstation and printer associations. The Import / Export Function can be used from the SchoolConnect Web Interface for individual users, classes and adding student to classes. Teachers no longer have to create classes and add students. In Manage Users, the SCAdmin can see all classes and groups that a user is a member of. In Manage Users, when you delete a user but have their AD credentials preserved, the directory and all of the data will remain. SCAdmins can be enabled to image workstations if required when using TPMfOSD. In Managing Rooms, if you select "NO PRINTER ASSIGNED" and click "SET DEFAULT PRINTER", all printers from the room will be removed. LEGACY GROUPS CN: If set to TRUE when a school is created, the CN of a group will not contain the school code. This is important when upgrading to SchoolConnect 6.2. SECURITY ENHANCEMENTS: SCAdmins now have rights only to Student and Teacher home folders. Office User home folders are available to Administrators. SCAdmins can no longer see all containers in AD. This function can be re-assigned as required. PERFORMANCE Adding students/users to classes with many teachers is faster. Rights Assignment is faster by allowing multiple security assignments at one time. For example, 1000 users can be loaded in approximately 6 minutes. Batch User Move will use the local server to store the batch file instead of the school server which results in less network traffic. LANSCHOOL 7.8 Chrome Browser and Chromebook updates Security enhancements 2 SchoolConnect Administrator Guide

9 IBM SchoolConnect Overview SchoolConnect is IBM s K-12 technology management solution designed to simplify, protect and automate the operations of information technology both in schools and in the district. Currently entering its 15th year of deployment, SchoolConnect provides complimentary value propositions for students, teachers and administrators: Administrators: Easily deploy Active Directory and centralized school servers based on best-practice predefined templates that include K-12 oriented organizational units, containers, user groups, shares, print queues, LanSchool channels and workstation definitions Systematically manage devices throughout the district using intelligent group policies and login scripts Leverage district-wide standards for schools, user ID s, classes, workstations, printers, teacher and student laptops and user groups to minimize the Total Cost of Ownership for technology Utilize tools such as Global User Import, User Move Utility and Active Directory Synchronization to administer User ID creation, moves and deletions Perform year-end maintenance including automated deletion of student ID s, student data and/or progression of ID s by a grade level Customize services specific to the district and systematically deploy to all schools Segment responsibilities between Global, Family of Schools and SchoolConnect Administrators such that each role is empowered with appropriate capabilities Teachers: Manage classes including class lists, software, homework, groupwork and groups Reset student passwords and force password changes Manage classroom activity Monitor, broadcast and blank screens Control access to applications and the Internet Automatically login all students in elementary classes Redirect print jobs and control print queues Access their files when not at school Share resources with their peers in the Teacher s Community Work and print itinerantly in multiple schools with a single ID and password Easily logon to Office 365, Google Apps and Moodle, Students: Work in a robust and secure Microsoft Windows environment Store files in a password protected student-specific storage area Access homework and curriculum applications in classes Submit homework via class-specific assignment folders Run productivity applications from the Desk Tools folder Access their files when not at school Access school information and resources using Smart Phones, Tablets or Computers via the BYOD web application. SchoolConnect Overview 3

10 Logon to Microsoft Office 365, Google Apps and Moodle, using their Active Directory user ID and password Attend itinerantly (multiple schools) using a single ID to access school-specific resources Windows 8 Interface Windows 8 support is essential for clients deploying Windows tablets. The traditional Windows desktop is managed by SchoolConnect s standard policies and procedures resulting in a consistent interface similar to Windows 7. SchoolConnect 6.2 customizes Windows 8 s Modern UI such that: Applications are organized into consistent, easy to understand groupings ncluding Utilities, SchoolConnect Functions and Classes. Unique interfaces are offered for students, teachers and administrators. The interfaces are centrally managed and branded in a similar manner to the SchoolConnect desktop Non-essential Windows 8 consumer applications (e.g. Window's Store: Travel, Weather, Games, Finance) can be disabled such that the default user profile size is minimized and initial login times are enhanced. The Window's Store is disabled by default and can be enabled based on a district s preference For machines that have 1:1 usage, the Windows Modern Interface is fully customizable by the user. The Start Screen Control Method uses an XML file. Option 1: the layout is locked, l users cannot make changes, remove or re-arrange items. Option 2: the layout is not locked, users can make changes however the change will revert back to the original after each new login. Windows 8 also introduces 170 new Group Policy settings for customizing the operation of the Modern UI, Internet Explorer and various Windows components. A 2012 Domain Controller is required in the SchoolConnect environment to take advantage of these new settings. 4 SchoolConnect Administrator Guide

11 SchoolConnect User Roles SchoolConnect has six separate views: Global Administrator, Administrator, SchoolConnect Administrator, Teacher, Student, and Office User, each allowing access to powerful tools with an easy-to-use interface for teachers, students and network administrators. There is also a parent user for portal access. A different Windows TM desktop wallpaper is customized for each major type of user. The Administrator screens are red, the Teacher screens are green, and the Student screens are blue. By providing different screens for different users types, SchoolConnect creates a layer of security so that a teacher can see quickly whether a student is logged on to their appropriate view. Administrator View There are three levels of administrator within SchoolConnect: SchoolConnect Administrator (SCAdmin), Administrator and Global Administrator. The default settings for each role are described within this document but all settings are customizable by each District. SchoolConnect User Roles 5

12 SCADMIN TOOLS SchoolConnect Administrators (SCAdmin) can manage functions required for the school network. Users has the typical user functions such as Add, Edit and Remove User, Change Password and Search By User. Special features include Suspend/Enable User, Disable/Enable Internet, Manage User Files and force Password Change. Classes and Groups allows administrators to create and remove a class, manage members, courseware and owners of a class. Rooms and Resources allows the administrator to create, rename and remove rooms, change the default printer, and add or remove workstations and printers to rooms within a school. Utilities allow the administrator to change their password, view their account details and customize the school s BYOD interface. Advanced Utilities Manage Courseware makes courseware available for assignment to classes by teachers. Manage Student Folders allows the SCAdmin to manage the size and content of student folders. Promote Students assigns the next grade level to students at the end of the year. ADMINISTRATOR TOOLS In addition to the tools available to the SCAdmin, Administrators has additional functions. Manage Groups allows for the management of non-schoolconnect groups. The Administrator may view groups, view membership of groups as well as create and remove groups. These groups may also be managed in Active Directory. Image Workstations allows the Administrator to click on any machine in SchoolConnect and start re- imaging based on the school location if the school district is using Tivoli Provisioning Manager for Operating System Deployment (TPMfOSD). SchoolConnect will redeploy the last image deployed to the selected workstation(s). Grades allows the Administrator to manage custom grades for the school. School Utilities allows global changes for a school s users or classes as a group. For a particular group in the school, the Administrator may remove all users, delete all files, force password changes, and enable and disable roaming profiles. For classes, the Administrator can remove all members from all classes in the school and/or remove all classes from the school. Advanced Utilities Import/Export Users, Classes and Associations allows the Administrator to import or export users and classes to or from a file as well as providing a listing of all printers, computers, classrooms, and printer-to-room and computer-to-room assignments. Reset Room Association will remove all rooms, workstations and printers. It will also remove all workstation-to-room and printer-to-room associations from the school. Manage Student Folders allows the Administrator to view a user s folders and files and to delete single or multiple users files from the system according to specific criteria. Global Utility/Manage Schools allows quick changes from school to school. Edit Databases allows the Administrator to set defaults for the school configuration. 6 SchoolConnect Administrator Guide

13 GLOBAL ADMINISTRATOR TOOLS Global Administrators can manage the entire school or district network from the Administrator Tools Console. In addition to using system functions provided by the server utilities, they also have full access to the Network Operating System (NOS) and belong to the Domain Administrator group within Windows Server 2003, 2008 or Users/Manage Users/ Itinerant Users screen allows Users and Administrators to be easily designated as members of two or more schools. Classes and Groups/Create Groups screen allows the Global Administrator to create non- SchoolConnect group such as Librarians, Department Heads etc. Global Utilities Manage Active Directory Tree provides the Global Administrator with all components within Active Directory where they can create School Families, Schools, and Non-School Objects such as Users, OUs, Computers and Groups. Create a Family of Schools allows schools to be arranged based on certain criteria: geography, school type etc. Create Non-School Objects facilitates management of non-school departments within the enterprise. Cloud Configuration enables Single Sign-on (SSO) to cloud applications such as Office 365 and Google Apps. Self Service Password Configuration updates the configuration for the Self Service Password Portal. User Move Utility will move users from one school to another on the same server. If the schools reside on another server, EMC must be installed to move users between servers. Batch Move Utility enables the creation of a batch of user moves that can consist of multiple users of multiple types from multiple schools to multiple schools. Large moves can now be scheduled during off peak hours. Manage Schools is most commonly used to allow an Administrator to select the school they want to administer by highlighting the school and clicking ADMINISTER. This section will also Create, Edit and Remove Schools as well as Import/Export Users for a given school or for all schools. Create/Edit/Remove allows the Global Administrator to create and remove a school as well as change the School s OU s and default location of user files for the chosen school. In addition, the Global Administrator can back up their information through the Export all Schools and Rooms option. Synchronize with AD will synchronize Active Directory users whose accounts exist in a school OU but are not in the SchoolConnect system. Manage Group Policies Objects will create and manage all GPOs and assign them to schools or Organizational Units (OUs). Manage AD Groups manages non-schoolconnect groups and includes View Member, View Membership of Groups as well as Create and Remove Groups. These groups may also be managed in Active Directory. Manage User Types allows you to change the default SchoolConnect functions for a chosen user type. Edit Databases SchoolConnect User Roles 7

14 The Global Administrator can set defaults for the server, set defaults for the school configuration, edit the NLS configuration database, and create/edit/remove default grade templates. 8 SchoolConnect Administrator Guide

15 Teacher View From the Teacher View, teachers can manipulate the SchoolConnect system without needing to understand the underlying technology. Teachers are able to perform such actions as creating classes with their associated students and assigning appropriate software to these classes, automatically distribute and collect assignments, change student passwords, blank-out all student monitors, and broadcast teacher and/or student screens to all classroom workstations. The Teacher desktop view (which appears as a green screen) is shown below: The Teacher s Desktop gives teachers access to all the same items as their students and a number of additional features such as access to a shared TEACHER S COMMUNITY folder where they can share files, lesson plans, receive school administration notices and useful programs for teacher-specific applications. The DESK TOOLS folder can contain software for use by both teachers and students. BULLETINS can contain school-wide announcements and information for both students and teachers. CLASS FOLDERS SchoolConnect virtual classes were designed to mirror the real world. The Class is the center of SchoolConnect, as this is where the majority of teacher and student activity will reside. Classes are arranged so that upon class creation, a class folder will be created on the Teacher s Desktop that contains the following folders: Homework folder for day to day information and homework i.e. Read Chapter 10. Assignments folder for assignments Members folder a location that contains data for students in the class NOTE: Each Member s folder also contains a Hand-in and Graded Folder for auto-collection and returning of assignments. Groupwork folder If selected when the class is created, a Groupwork folder will be created for group collaboration projects. SchoolConnect User Roles 9

16 BYOD (Bring Your Own Device) Landing Page is a tool that is a resource for teachers and students to view school and district information from their Smartphones and other portable appliances via the Internet. This information is customizable for each district and school and can consist of school contact information, links, news, calendar of events, Twitter and Facebook. Teachers can have access to all student applications as well as applications specific for teachers such as the Student Information System and special teacher resources. The information is private to students and teachers in the school as they must first logon using their SchoolConnect id. REMOTE FILE ACCESS makes it easy for teachers and students to access their school files anywhere with an Internet connection. Remote File Access gives users a choice as to how they want to work on their files. Users can download files from their HOME DRIVE at school to their computer at home, work on the file and then upload the file back to their HOME DRIVE at school, ready for use the next day. It also allows teachers and students to access their classroom folders containing their assignments from home. Users can also work on their files from their smartphone, tablet or computer directly on the school server and avoid the download/upload process using WebDAV technology. Access to their files, desktop, classes and communities is still secured by their Active Directory User ID and Password. There is no plugin required and Remote File Access supports all modern Web Browers. Using this technology, there is a single URL for the entire district. IT departments no longer have to set up a VPN for teacher access, increasing security and saving costs through reduced VPN licensing requirements. Remote File Access is also a Web Part and can be plugged into other software such as Microsoft SharePoint. 10 SchoolConnect Administrator Guide

17 The TEACHER TOOLS icon provides access to the web functions available specifically to teachers from a browser interface and allow teachers to perform the following functions: Manage Classes and Groups This feature is used to create virtual classes and groups. Create Classes allows teachers to create or delete classes and choose class icons that represent the different subjects. Manage Members allows a teacher to add students to classes by individual student, by an already created class list or by grade. Manage Courseware is used to assign software to the class. Once assigned, all members of this class now have access to these applications. Manage Class Owners allows a teacher to share their classes with a supply teacher or other teachers for team teaching or change ownership of their classes to another teacher. It also allows for teachers to create classes with only teachers in it. This helps foster mentoring among teachers. Collect and Return Assignments makes it easy for a teacher to collect assignments and then return the marked assignments automatically to the correct student. When a teacher collects assignments, SchoolConnect will place the collected assignments into a folder on the Teacher s Desktop called Collected Assignments. The assignments are arranged by Class Name, then Assignment Name. There is also a README file that is created, which will inform the teacher of what time the assignment was collected and from whom. Assignments allows teachers to create assignments for specific activities and subjects that can be shared with other teachers. If detailed activities have been created and assigned to students, teachers can view the students progress, edit the assignment or un-assign it. Download Collected Assignments, Upload Collected Assignments- This utility allows teachers who have remote access to the district network to download assignments in a ZIP FILE to their home computer. Once marked, the assignments can be uploaded to the teacher s folder at school. Return Collected Assignments is a one button click for teachers and all assignments are returned to the correct student. SchoolConnect User Roles 11

18 Manage Students Search By allows teachers to search for students by Class, Grade, Keyword or All. List Students provides multiple ways for a teacher to list the students in their class or school. Student Usernames (IDs) are provided with the list of students. Change Student Password allows a teacher to change the student s password without knowing the student s old password. Must Change Password allows teachers to force students to change their password the next time they logon. Manage Student Files allows teachers to delete student files in selected student directories and to manage groups of student files by size and extension. Show Printable Version allows teachers to print a list of all students which can be sorted by Last Name, First Name, Username or Grade (the sorting must be done in the List Users view under the Manage Students section prior to viewing/printing). Disable Internet: allows the teacher to remove access to the Internet for select or all students in a class. Rooms and Resources Change Default Printers allows a teacher to redirect the classroom s printing to another networked printer in another location. NOTE: To enable the new printer, all users must log off and log on again to pick up the new printer address. Change LanSchool Channel allows the teacher to change the channel that the LanSchool Teacher is listening on. Utilities allows the teacher to change their password, view account details and if they are an itinerant teacher, to access each school s SchoolConnect system where they teach. 12 SchoolConnect Administrator Guide

19 Student View The SchoolConnect Student view provides a secure, standard WindowsTM desktop with some customized icons. The blue background makes it easy for a Teacher or Administrator to identify if a student has logged on as another user type. All desktops should appear with the uniform blue. Students can complete assignments and, if desired by the teacher, collaborate with others. Students are able to: sign onto SchoolConnect with restricted access to system files submit files to their teachers and collaborate with peers within the industry standard WindowsTM interface. launch programs specifically assigned by their teacher use applications from the Desk Tools folder. access school and district information from their smartphone or other devices (BYOD) The Student desktop view (which appears as a blue screen) is shown below. Remote File Access makes it easy for teachers and students to access their school files anywhere with an Internet connection. Remote File Access allows the user to download files from their HOME DRIVE at school to their computer at home, work on the file and then upload the file back to their HOME DRIVE at school, ready for use the next day. It also allows the teachers and students access to their classroom folders that contain their SchoolConnect assignments. With WebDAV technology, users can work on their files from their smartphone, tablet or computer directly on the school server and avoid the download/upload process. SchoolConnect User Roles 13

20 In addition, students have access to the following browser-based functions. Assignments: The Assignments desktop icon launches the Student view as shown below: For students that use WebDAV technology, they can see and work on assignments from home or wherever they have connectivity. Office User View A standard WindowsTM interface will appear on the desktop to allow access to the TEACHER S COMMUNITY icon and its folders in order to distribute information, district forms and office memos. Office users can be further identified as Principal, Vice-Principal and Secretary. 14 SchoolConnect Administrator Guide

21 SchoolConnect Administrator Tools For all administrative functions, log on to the ADMINISTRATOR TOOLS icon on the red Administrator Desktop. These default settings can be tailored to the needs of each school district. 1. Double-click the ADMINISTRATOR TOOLS icon from the desktop. 2. Enter your USERNAME and PASSWORD and press ENTER. 3. The SCAdmin will be taken directly to the main Users / Manage Users screen for their school. Users / Manage Users Users, Classes and Groups are usually added automatically by the IT department at the beginning of each semester. However, after that point in time, new users can be added individually. SchoolConnect Admins (SCADmin) can work with Teacher, Student and Parent IDs. Search for Users 1. Search for a user by clicking the Search By tab, located beneath Manager Users and choose GRADE, CLASS, USER TYPE OR KEYWORD. Click on the 2nd drop-down menu to narrow the search further. KEYWORD search is simple yet very powerful. Type a KEYWORD to search via the user s first name, last name, user name or user type. Search terms can be only part of a name ie: AN may result in all entries including AN (not case sensitive) such as Ann, Andy, Joanne, BettyAnne, Joe Trantor etc. 2. Press ENTER or click GO. 3. All of the users are listed in the centre of the screen after your search. Display User Information Users can be sorted by clicking the column titles: LAST NAME, FIRST NAME, USERNAME, USER TYPE, GRADE or STATUS fields. Show Printable Listing 1. User lists can be printed by clicking the SHOW PRINTABLE LISTING button. Add a User ID 1. Click the ADD USER button. 2. Type in a USERNAME. 3. Type in the FIRST NAME. 4. Type in the LAST NAME. 5. From the Account Type drop-down menu, select the user type: TEACHER, STUDENT or PARENT. SchoolConnect Administrator Tools 15

22 6. If Student is selected: a) STUDENT ID: Is optional, and may be a combination of letters and numbers. b) From the drop down menu Student Grade, select the Grade. This field is only available when Student is selected. c) If classes have been previously set up, from the list Select Initial Classes for this Student, highlight all classes that apply to the student. If TEACHER is selected: a) Enter Employee ID number if required b) Under Group Name, select a group or groups that the new teacher may be in if applicable. 7. Type the user s NEW PASSWORD. 8. Confirm the user s NEW PASSWORD by typing it again. 16 SchoolConnect Administrator Guide

23 9. Ensure the selection for ENABLE ROAMING PROFILE is correct for your school and/or district configuration. ATTENTION: Roaming Profile utilizes significant bandwidth. IBM K-12 recommends the setting should NOT be used. 10. Select MUST CHANGE PASSWORD to force the user to input their own new password when they next log on. 11. Click ADD. 12. The message SUCCESSFULLY CREATED USER will be displayed on the bottom left corner of the screen. Edit User Information 1. Click the user you want to edit and click EDIT USER. This will display the user s information on the screen. 2. From here you can change the Username, FIRST NAME, LAST NAME, STUDENT ID, GRADE LEVEL, Employee ID, if applicable, or PASSWORD. 3. From here you can also see all Classes and Groups of which the user is a member. 4. ENABLE ROAMING PROFILE and MUST CHANGE PASSWORD may also be selected. 5. Click the EDIT button to save any changes. 6. Click the RETURN button. ATTENTION: If changing a Username, the user MUST be logged off. NOTE: The SCAdmin can see all groups and schools that teachers are registered in by clicking on the teacher s name and clicking on EDIT. Change a User s Password 1. Search for and highlight the user that you want to change the password for. 2. Click either the EDIT USER button or the CHANGE PASSWORD button. 3. If using the EDIT USER button, delete the asterisks in the Password and Confirm Password boxes. 4. In the box called Password, enter the user s NEW PASSWORD and re-enter it in the box below called Confirm Password. OR 5. If using the CHANGE PASSWORD button, in the box called New Password, enter the user s NEW PASSWORD and re-enter it in the box below called Confirm Password. 6. Check the MUST CHANGE PASSWORD box to have the user create their own password on the next logon. 7. Click CHANGE PASSWORD when finished. Remove a User 1. Find and highlight the user to remove and then click the REMOVE USER button. 2. In the confirmation box that asks ARE YOU SURE YOU WANT TO DELETE THE SELECTED USER? be sure to SELECT Preserve Active Directory Account if you want to keep the Active Directory account but still remove the user from SchoolConnect. SchoolConnect Administrator Tools 17

24 ATTENTION: When you delete a user, the directory and all of the data for that user will be removed. When you delete a user but click PRESERVE ACTIVE DIRECTORY ACCOUNT, their directory and all of their data will remain in the original location. NOTE: If a user is removed from a school and their home directory does not exist in the default location, the home directory will not be deleted. Suspend/Enable a User 1. Find and highlight the user that you want to suspend (prevent them from logging on to any computer) and then click the SUSPEND USER button. You will see the word Suspended under the Status heading. 2. To re-enable a user, find and highlight that user and then click the ENABLE USER button. Disable/Enable Internet 1. Find and highlight the user that you want to disable from the Internet and then click the DISABLE INTERNET button. Notice that this state is captured in the Status area. 2. To re-enable the Internet, find and highlight the user and then click ENABLE INTERNET. Manage User s Files 1. Find and highlight the user that you want. 2. Click MANAGE USER S FILES. NOTE: you will be prompted to install Flash Player (an Adobe Plug-in) for this function. 3. Select files from the Show User s Files drop-down menu by clicking on ALL FILES, FILES LARGER THAN (type file size in box) or FILES WITH EXTENSION (type file extension in box). NOTE: SCAdmins have access only to Student and Teacher home folders. 18 SchoolConnect Administrator Guide

25 Classes and Groups / Manage Classes This section provides tools for managing classes within SchoolConnect. These tools include the ability to create, edit and remove a class, manage the members and courseware within that class as well as manage the owners of that class. Create a Class 1. Click the CLASSES AND GROUPS button. 2. Click MANAGE CLASSES. 3. Click the CREATE button. 4. Enter the NAME OF THE CLASS (e.g.: T12GRADE8 (User ID and Grade)). NOTE: Class names cannot include special characters such as, & / \ ^. Only numbers, letters, _, -, and spaces are allowed. 5. Click SELECT ICON (optional) to select an icon to represent the class. This icon will appear on the Teacher and Student Desktops. NOTE: Once an icon is selected, it cannot be changed. The class must be removed and recreated in order to change the icon. 6. Select the teacher who will own this class. Any Itinerant Teacher assigned to your school will appear in the list. Type Ahead can be used to find a teacher name quickly. First click any Teacher s Name and then type the last name of the teacher you want to find in the NAME box. 7. Check Allow Groupwork box if you wish students to share files. 8. Click CREATE CLASS button. 9. SUCCESSFULLY CREATED CLASS will display (including the assigned name) 10. WOULD YOU LIKE TO ASSIGN STUDENTS TO THIS CLASS NOW? If so, click ASSIGN STUDENTS button. 11. The next screen is Manage Members. Manage Members (Adding Students to a Class or Group) 1. Click the MANAGE CLASSES button. 2. On the Manage Classes screen, select the class you want to assign students to, then click the MANAGE MEMBERS button. 3. Search for your students by choosing: Grade, then select the correct Grade or by Class, and then select the correct Class or Group, or by All, and choose the student by name. 4. Click GO. 5. Click the student name from the Available Students pane (left side) and click the red RIGHT ARROW button to assign them to the class. 6. Click DONE when the class or group is complete. NOTE: You can select several students at once by holding down the CTRL key and clicking on the different students. If students are listed sequentially, hold down the SHIFT key and click the SchoolConnect Administrator Tools 19

26 student name at the top of the list and click the student name at the bottom of the list. This will select all students in the list. NOTE: Moodle support is now included in SchoolConnect. When a class is created and students are added to it in SchoolConnect, a corresponding class is automatically created in Moodle containing those students. NOTE: Teachers and SCAdmins can create a group of students (e.g. volleyball team) by creating a class and adding the appropriate title, icon and students. Manage Courseware (Adding Software to a Class) 1. Click the MANAGE CLASSES button. 2. Select the CLASS you want to assign courseware to, and then click the MANAGE COURSEWARE button. 3. Click the SOFTWARE TITLE(S) you wish to assign to the class from the Available Courseware pane on the left side of the screen. 4. Make all of your selections and click the red RIGHT ARROW button. 5. Click DONE when all software is assigned to the class. Remove a Class 1. Find and highlight the CLASS that you want to remove and then click the REMOVE button. 2. The confirmation box will show ARE YOU SURE YOU WANT TO REMOVE THE SELECTED CLASS? 3. Click OK. ATTENTION: When you delete a class, the directory and all of the data associated with that class for all users will be permanently removed. Manage Class Owners This section allows teachers to share their classes with other teachers for team teaching or to change ownership of their classes to another teacher.. Itinerant Teachers assigned to the school will be listed here. It also allows teachers to create classes with only teachers in it. This helps with mentoring among teachers 1. Click the MANAGE CLASSES button. 2. Select the CLASS you want to assign additional teachers to. 3. Then click the MANAGE CLASS OWNERS button. 4. Click the TEACHER NAME from the Available Teachers pane (left side) and click the red RIGHT ARROW button to assign them to the class. 5. Click DONE when the class is complete. NOTE: To remove a teacher from a class, click the TEACHER NAME on the Teachers Assigned To pane (right side) and click the red LEFT ARROW button to remove the teacher from the class. 20 SchoolConnect Administrator Guide

27 Rooms and Resources This section provides tools for managing rooms and resources within SchoolConnect. These tools include the ability to create, rename and remove rooms, associate printers and workstations with existing rooms, control default printer assignments and easily update resources that have been changed at the Active Directory level. Manage Rooms In SchoolConnect, a classroom represents a group of resources (i.e. a group of workstations assigned to common printers and a common LanSchool Channel). Create/Remove Rooms 1. Click MANAGE ROOMS. 2. Click CREATE. 3. Enter the NAME OR NUMBER of the new room in the field marked Room Name/Number. 4. Click the CREATE button to create the room. NOTE: Initially, there is no printer assigned so the default printer will show as NO DEFAULT PRINTER ASSIGNED. NOTE: To remove an existing classroom, highlight the classroom and then click REMOVE to remove the room. Rename Rooms 1. From the Manage Rooms screen, highlight the ROOM that you need to change. 2. Click RENAME. 3. In the box on the right, type in the NEW NAME OR NUMBER of the room. 4. Click the RENAME button. SchoolConnect Administrator Tools 21

28 Once workstations and printers are assigned to rooms (see Assign Resources), modification are very fast and easy to make. Refresh from AD If workstation name changes, or room name changes have been made in AD, this button will reflect those changes in SchoolConnect. This button will update in SchoolConnect any changes made at the AD level to workstations or rooms in that school. Manage Resources - Add/Remove Workstations and Printers from Rooms 1. Select the ROOM from the displayed list under the Classroom Name. 2. Click on the MANAGE RESOURCES button. 3. Highlight the desired workstation(s) from the Available Workstations list in the box on the upper left. These workstations have previously been assigned to the school. 4. Click the red RIGHT ARROW to add the workstation(s) to the Assigned Workstations list on the right side of the work area. NOTE: To make workstation(s) available for assignment to another room, they must first be removed from the current room. Choose the ROOM and click on MANAGE RESOURCES. Select the desired workstation from the Assigned Workstations list on the right side of the work area, then click the LEFT ARROW button to move it back to the Available Workstations list on the left side of the work area and click the DONE button. 5. Repeat steps 3 and 4 to assign a printer(s) to the same room. Click DONE. NOTE: Printers may be assigned to more than one room at a time. To remove printer(s) from a specific room assignment, select the desired printer from the Assigned Printers list on the right side of the work area then click the LEFT ARROW button to move it back to the Available Printers list on the left side of the work area, then click the DONE button. 22 SchoolConnect Administrator Guide

29 Change Default Printer 1. Click MANAGE ROOMS. 2. Select the room from the displayed list. 3. From the corresponding drop down menus located under Default Printer, select the printer you wish to become the default printer. 4. Click on the now highlighted CHANGE DEFAULT PRINTER button. NOTE: When managing rooms, if you select "NODEFAULT and click SET DEFAULT PRINTER, it will keep all printers assigned to the room but allow users to set their own default printer. NOTE: When managing rooms, NODEFAULT allows other printers to be assigned to the room and users can then choose their own default printer. For example, students that use laptops at school will set a default printer at home. Previously, when they logged in at school, their default printer would be overwritten with the classroom's default printer. Now, when they come back to school, their home default setting stays as their default. Assign Resources (within a School) This screen is particularly useful at the initial process of assigning workstations and printers within a school. All workstations and printers can be assigned to individual rooms very quickly and easily. 1. Click the ASSIGN RESOURCES button. 2. Highlight the desired workstation(s) from the Available Workstations list in the box on the upper left. These workstations have previously been assigned to the school. 3. Highlight the ROOM in the right hand box marked All Classrooms where the workstations will be assigned. 4. Click the red RIGHT ARROW to assign the workstation(s) to the room highlighted on the right side of the work area. 5. Repeat as necessary to move all workstations into the appropriate rooms. SchoolConnect Administrator Tools 23

30 6. Repeat to assign printers to the correct room(s). 7. Click DONE. You will be returned to the Manage Rooms screen. NOTE: If you want to review the workstations and printers in each room, click the room number and then click MANAGE RESOURCES. You will see the Manage Rooms view and the workstations and printers assigned to that room. Add/Remove Workstations (to/from a School) After a workstation has joined your Domain, you must assign it to the appropriate school before room and printer associations can be applied at the school level. To do this, perform the following steps: 1. Click ADD/REMOVE WORKSTATIONS. 2. Select the desired workstation(s) from the Available Workstations list on the left side of the work area, then click the RIGHT ARROW button to move it to the Workstations Assigned To SCHOOL NAME(NUMBER) list on the right side of the work area and click the DONE button. NOTE: To make workstation(s) available for assignment to another school, they must be put back into the Available Workstations list. Select the desired workstation from the Workstations Assigned To SCHOOL NAME list on the right side of the work area then click the LEFT ARROW button to move it back to the Available Workstations list on the left side of the work area and click the DONE button. 24 SchoolConnect Administrator Guide

31 ATTENTION: Using the REMOVE button, removes any selected workstation(s) completely so that it no longer exists in your domain. Add/Remove Printers (to/from a School) After a printer has been added to your print server, you have to assign it to the school before room associations can be applied at the school level. To do this, perform the following steps: 1. Click ADD/REMOVE PRINTERS. All the printers available on the printer server assigned to your school will be listed in the Available Printer box. 2. Clicking the AUTO DETECT button will move all printers beginning with the school code into the Assigned Printer box on the right side of the work area. 3. Click the DONE button. 4. You will now see the Manage Rooms screen where you can assign printers to the rooms throughout the school. (see Add/Remove Workstations and Printers from Rooms) NOTE: to remove a printer from a specific school assignment, select the desired printer from the Assigned Printers list on the right side of the work area, then click the LEFT ARROW button to move it back to the Available Printers list on the left side of the work area, then click the DONE button. SchoolConnect Administrator Tools 25

32 Utilities Change My Password 1. Click UTILITIES. 2. Click CHANGE MY PASSWORD. 3. In the field called Old Password, enter your CURRENT PASSWORD. Then in the box called New Password, enter your NEW PASSWORD and re-enter your NEW PASSWORD in the box below called Confirm Password. 4. Click CHANGE PASSWORD. NOTE: For users that do not exist in SchoolConnect, other than the Administrator ID (SCadmin or Administrator), you cannot change your password using this utility. Please use CTRL-ALTDEL, CHANGE PASSWORD. View My Account Details 1. Click VIEW MY ACCOUNT DETAILS. From this view, you can see the details of your user account such as Full Name, Account Name (username), School Name and Code, Language, Last Log On date and time and IP Address. BYOD Configuration This tool provides customizable access to key applications such as your school contact information, links, news, calendar of events, Twitter and Facebook for students and teachers to view from their smartphones and other popular BYOD devices via the Internet. The SCAdmin will find that publishing school/district information here is very simple and quick when compared to the complexities of updating a web page. The social media links are school specific. The BYOD Landing Page can be accessed via the public wireless network in your school and works from any location with a wireless network (home, coffee shop) when outside school. 1. To create the BYOD configuration for the school, select the appropriate title from the drop down menu "Select a File" and click EDIT. The items on the BYOD interface are: Contact_config: is usually the Principal's id or a generic id at the district. Events_config: a simple school calendar listing events to show to all school members. Facebook_config: usually points to a Facebook page either at the school or district website. Images_config: the SCAdmin can link to any images viewable on the Internet to promote school activities or current events. The pictures may be school specific or the District default. News_rss: is often linked to the District News or a High School's RSS(s) feed. Quicklinks_config: can link to a page with a list of useful URLs for the students Top_Menu.config is a list of up to 5 URLS. Some suggested links are: My Files, Events, Images, News, the school website, Moodle, Office 365 and Quicklinks. Twitter_config: usually points to the school s or district's Twitter account. 26 SchoolConnect Administrator Guide

33 Advanced Manage Courseware This utility allows the SCAdmin to control which courseware will be available for teachers to assign to their classes. Courseware is the term used for all applications that teachers make available for student use. 1. Click ADVANCED. 2. Click on MANAGE COURSEWARE. 3. To make courseware available to teachers, select the COURSEWARE from the list on the left under the heading Installed Courseware. 4. To select courseware from the list, click the Courseware Title, then click the RIGHT ARROW button to assign it to the Available Courseware view. If the courseware folder has more than one application under the folder, a + sign will appear. You may select several applications at once by holding down the Ctrl key while clicking on the applications you wish to make available. 5. To remove courseware, click the title(s) under Available Courseware and click the red LEFT ARROW to remove the title(s) from the list of courseware that teachers can assign for student use. 6. Click ASSIGN ALL. 7. To remove all the courseware from the teachers, click the UN-ASSIGN ALL button. Manage Student Folders This utility allows SCAdmins to look through a listing of the contents of all Student Folders and manage the contents of these folders. SCAdmins may also print the list sorted by Last Name, First Name, Username or Disk Usage by selecting the button SHOW PRINTABLE Version. 1. Click MANAGE STUDENT FOLDERS. SchoolConnect Administrator Tools 27

34 2. Select Search By: GRADE, CLASS, or ALL to get a list of users. If you wish to search by GRADE or CLASS, narrow your search by using the 2nd drop-down menu. 3. You may sort the list by clicking on the Titles of each column. For example, to sort the list by size of disk usage, click the Disk Usage title at the top of the column. This will order the list from smallest to largest disk usage. Click the Disk Usage title again, and the users with the largest disk usage will be at the top. 4. You may expand a user s folders by clicking the STUDENT S NAME. You may be prompted to install an Adobe Flash plug-in. 5. File sizes of each of the student s folders (and subfolders and files contained in them) will be displayed in the right hand box. 6. Select any FILE, OR FOLDER that you want to delete by clicking and highlighting it and pressing the DELETE button. 7. Confirm the file or folder to be deleted by clicking OK when asked, or click CANCEL if you do not want to delete the file or folder. ATTENTION: The deletion process is permanent and cannot be undone. Show Printable Version User lists can be printed by clicking the SHOW PRINTABLE VERSION button. The list contains LAST NAME, FIRST NAME, USERNAME and DISK USAGE information. Promote Students This utility can be used to promote students to the next grade. It automatically updates all student user profiles to increase their current grade level to the next grade. Graduating students will be promoted to the graduated grade. The SCAdmin is provided with the capability to define additional grades if required. However, the SCAdmin cannot delete any grades. 28 SchoolConnect Administrator Guide

35 Click the PROMOTE STUDENTS option from the Advanced menu. You many select which Grades you would like to promote students to. Click the CONTINUE button to promote the grade of all students in the system. Click PROMOTE STUDENTS to enable this activity. You will receive a system message THIS OPERATION WILL PROMOTE EACH STUDENT ACCORDING TO THE FOLLOWING SETTINGS. THIS OPERATION CANNOT BE UNDONE. ARE YOU SURE YOU WISH TO PROCEED? 5. Click OK to proceed with the grade promotion or CANCEL to return to the previous screen. ATTENTION: This action will affect ALL grades listed. If only a single grade (e.g. Grade 2 updates to Grade 3) needs to be changed, then make sure all other grades update to the current grade. (e.g. Grade 8 updates to Grade 8). ATTENTION: Clicking the PROMOTE STUDENTS button action cannot be undone. Help SchoolConnect Online Help This is the SchoolConnect Guide in its entirety. Click on any topic in the TABLE OF CONTENTS and you will be taken directly to that topic. This enables users to receive help whenever they need it, on the tasks they are currently trying to perform and/or on tasks they have yet to attempt. Get Help for this Page Click on the GET HELP FOR THIS PAGE button to see how to use a feature. About SchoolConnect This button provides information on the current SchoolConnect Version. SchoolConnect Administrator Tools 29

36 Administrator Tools For all administrative functions, log on to the Administrator Tools icon on the Administrator Desktop. Administrators that manage more than one school will be assigned as Itinerant Administrators. 1. Double-click the ADMINISTRATOR TOOLS icon from the desktop. 2. Enter your USERNAME and PASSWORD and press ENTER. 3. Choose the school you wish to administer if you are Administrator at more than one school; if not, you will be automatically placed in your school. 4. After highlighting the SCHOOL NAME, click on ADMINISTER. In addition to the functions available to SCAdmins, the Administrator default template has these tools. Classes and Groups Manage Groups This utility located under the Classes and Groups menu allows the Administrator to manage nonschoolconnect default groups. The default SchoolConnect groups are Teachers, Students, Office users, Principals, Vice-Principals, Secretaries, SCAdmins and Admin. All personnel that do not fit the default groups in SchoolConnect should be registered initially as Office Users. Once specialized Global Groups are created at the District level, then any user can be allocated to the appropriate group (i.e.: Caretakers, EAs, TAs etc.) at the school. Itinerant users can now be members of custom user groups. Groups that are comprised mainly of students, such as Yearbook, Cheerleaders etc., are best created within the school as a CLASS. The Administrator may utilize custom school groups once they are created at the global level, add members, manager members in these groups and remove these groups from their school(s). 1. Click on CLASSES and GROUPS, then MANAGE GROUPS. 2. Highlight the group that you wish to create in your school from the Global Groups list. 3. Click the RIGHT ARROW button to move the group to your School Group list. The name of the group will be preceded by the school code. 4. To add members to this group, highlight the Group Name and click MANAGE MEMBERS. 5. Select users according to User Type or if there is an existing Group with similar members, select Group. Refine the search using the drop down menu from the 2nd box and click GO. 6. Highlight the desired members in the Available Users list on the left side of the work area and click the RIGHT ARROW to assign these members to your group on the right side of the work area. 7. Click DONE. NOTE: To remove a school group, highlight the group and click REMOVE. You will receive the message ARE YOU SURE YOU WANT TO REMOVE THE LOCAL GROUP SCHOOL CODE + GROUP NAME. Click YES and the group is removed from your school and reappears in the Global Group list. 30 SchoolConnect Administrator Guide

37 Rooms and Resources Image Workstations 1. Search for a workstation by clicking the Search By tab and choose ALL, ROOM NAME, or KEYWORD. 2. Click on the 2nd drop-down menu to narrow the search further. 3. Click GO. 4. The workstations are listed in the centre of the screen after your search. 5. Click the workstation that you want to image and click the IMAGE button. A system message will pop up that reads ARE YOU SURE YOU WANT TO IMAGE THIS WORKSTATION? 6. Click OK to image the workstation or CANCEL to return to the previous screen. 7. Click DONE to return to the MANAGE ROOMS screen. ATTENTION: This tool located under Rooms and Resources has been designed to work with TPMfOSD (IBM s Imaging Product) and may not be set up for your district. If so, you may receive the error message: "RBAGENT.EXE CANNOT BE FOUND IN THE TPM FOLDER UNDER GLOBAL DATA. IMAGING WILL NOT FUNCTION." Grades Grades allow you to create and remove unique names for grades for teacher use. Add/Remove Grades 1. Click the menu item GRADES. 2. Click ADD/REMOVE GRADES. 3. Click the CREATE button. 4. Type the NAME or NUMBER of the grade in the Grade name field. 5. Click the CREATE button to add the grade to the list. 6. To remove a grade from the list, highlight the GRADE, click REMOVE. You will receive a system message asking ARE YOU SURE YOU WANT TO REMOVE THE SELECTED GRADE? 7. Click OK to remove the grade or CANCEL to return to the previous screen. Utilities School Utilities This page allows you to perform actions on all users and/or classes as a group in the current school. This tool is used mostly for bulk end-of-year operations. Manage Users 1. Click UTILITIES and then click SCHOOL UTILITIES. 2. Select the type of user from the drop-down Manage Users menu. The following are the actions that can be applied to each type of user. Remove all users of the selected type. Force all users of the selected type to change their password the next time they login. Delete non-schoolconnect files (personal files) from the user of the selected type's home folders. Enable / disable Roaming Profiles for all users of the selected type. Administrator Tools 31

38 Manage Classes 1. Click on the REMOVE ALL CLASSES button. This will remove all students from all classes, delete the files stored in the class and remove the class groups and Moodle groups from Active Directory. 2. Click on the REMOVE ALL MEMBERS button. This will remove all students from both the SchoolConnect classes and their Moodle classes. NOTE: For each action, you will receive a system message asking ARE YOU SURE YOU WANT TO REMOVE. FROM THIS SCHOOL? Click OK to enable each action. Advanced Import/Export Users Multiple user accounts, classes and automated population of students into classes can be accomplished in one procedure, simply by importing a text file with the appropriate information using the Import Users function. Employee IDs can now be added to their SchoolConnect profile. Preparing to Import/Export Users Using a File SchoolConnect users can be imported from and exported to text files. 1. Each line of the file must contain information about a field. 2. Each field you create must be preceded by the following field names: UNAME: Must be unique. If you have several cases of students or teachers with their Last Name and First Initial the same, the system will automatically add a 1, 2 etc. e.g. Morris, Shelley MorrisS Morris, Sasha MorrisS1 FULLNAME: (Required field) A comma must separate the last name and first name. 32 SchoolConnect Administrator Guide

39 i.e.: Lastname, Firstname ACCOUNT: (Required field) Student, Teacher, SCAdmin, Administrator, Principal, VicePrincipal, Office User or Parent. GRADE: (Required field) for students. EMPLOYEE ID: (Optional) Can also be used to add Student Numbers. PASSWORD: (Optional) If left blank, the password is automatically set and is the same as the username. SUSPENDED: (Optional) No or False or Yes or True. If left blank, No is automatically set. MUSTCHANGEPASSWORD: (Optional) True or False. If left blank, False is automatically set. SCHOOLNAME: (Optional) Exact name of the destination school as it appears in SchoolConnect. GROUP: (Optional) Name of the Group. 3. Each field name must end with a colon. There should be a space before and after the colon. 4. UNAME must be the first field. The following is an example of the format required for a file of new user IDs: UNAME : Teacher1 FULLNAME : Last name, First name ACCOUNT : Teacher EMPLOYEEID: GRADE : Not Valid PASSWORD : Changeme SUSPENDED : False MUSTCHANGEPASSWORD : True SCHOOLNAME : Water Street School GROUP : EAs UNAME : Student1 FULLNAME : Smith, Matt ACCOUNT : Student GRADE : 1 PASSWORD : changeme SUSPENDED : True MUSTCHANGEPASSWORD : True SCHOOLNAME : Water Street School UNAME : Student2 FULLNAME : Jones, Heather ACCOUNT : Student GRADE: JK PASSWORD: change me SUSPENDED : No MUSTCHANGEPASSWORD: True SCHOOLNAME : Water Street School Administrator Tools 33

40 5. Place your ASCII text file in the IMP-EXP icon on your desktop. Import/Export Classes Multiple classes creation and membership can be accomplished in one procedure, simply by importing a text file with the appropriate information using the Import Classes function. Preparing to Import/Export Classes Using a File SchoolConnect Classes with Students can be imported from and exported to text files. 1. Each line of the file must contain information about a field. 2. Each field you create must be preceded by the following field names: 3. Each field name must end with a colon. There should be a space before and after the colon. 4. Place your ASCII text file in the IMP-EXP icon on your desktop. 34 SchoolConnect Administrator Guide

41 The following is the format required for a file of classes with teachers and students: ======== CLASSES === CLASSNAME : (Required Field) The name of the class to be created or to add an owner to OWNER : (Required field) The Username of a teacher who is an owner of this class. If there are multiple owners of the class then each owner should have a CLASSNAME line and OWNER line for each teacher. SCHOOLNAME: (Optional Field) Exact name of the destination school as it appears in SchoolConnect. (Only used when importing classes to multiple schools at once) ======== CLASS MEMBERS === CLASSBELONG : (Required Field) The name of the class to add the student to CLASSMEMBER : (Required Field) The Username of the student to add to this class SCHOOLNAME: (Optional Field) ) Exact name of the destination school as it appears in SchoolConnect. (Only used when importing classes to multiple schools at once) The following is an example of the format required for a file of classes with teachers and students: ======== CLASSES === CLASSNAME : MATH 101 OWNER : Jim.Smith ======== CLASS MEMBERS === CLASSBELONG : MATH 101 CLASSMEMBER : John.Jennings CLASSBELONG : MATH 101 CLASSMEMBER : Anne.Paterson Imp-Exp from a local file or the server. The Imp-Exp folder is used to store all of the batch user import/export files. A user import file in SchoolConnect format must be placed in this folder in order to input the file using the Administrator Tools web interface. The Import Files utility in Administrator Tools only searches for files in the Imp-Exp folder. Likewise, the Export Files utility in Administrator Tools exports the desired file format to the Imp-Exp folder. Instructions for Importing Users 1. Click IMPORT/EXPORT USERS. 2. Choose the location where the file resides. Click either IMPORT FROM LOCAL FILE or IMPORT FROM FILE ON SERVER. 3. Type in the FILE LOCATION and NAME. Or choose the BROWSE button to find the desired file and location. 4. Click on the IMPORT FILE button. Instructions for Exporting Users 1. Click IMPORT/EXPORT USERS. 2. Click EXPORT USERS. 3. Click the EXPORT FILE button. Administrator Tools 35

42 Import/Export Associations Import or export a listing of printers, workstations, classrooms, printer-to-room assignments, and workstation-to-room assignments as imported from or exported to a text file. Import Associations 1. Click IMPORT/EXPORT ASSOCIATIONS. 2. Click the IMPORT ASSOCIATIONS button. 3. Choose the location where the file resides. Click either IMPORT FROM LOCAL FILE or IMPORT FROM FILE ON SERVER. 4. Type in the FILE LOCATION and NAME, or choose the BROWSE button to find the desired file and location. 5. Click the IMPORT FILE button. Export Associations 1. Click IMPORT/EXPORT ASSOCIATIONS. 2. Click the EXPORT ASSOCIATIONS button. 3. Click EXPORT FILE. Reset Room Associations This function allows Administrators to reset (electronically remove) the rooms, workstations and printers. This utility will un-assign all workstations from their assigned rooms and will also unassign all printers from the school. 1. Click RESET ROOM ASSOCIATIONS. 2. Click the RESET SYSTEM button. THIS OPERATION WILL REMOVE ALL SCHOOL PRINTERS FROM THE SYSTEM AND RESET ALL ROOM ASSOCIATIONS. 3. Confirm this action by clicking the RESET SYSTEM button again when asked. ARE YOU SURE YOU WANT TO PROCEED? If you do not wish to clear all rooms, workstations and printers at this point, click the CANCEL button. 36 SchoolConnect Administrator Guide

43 ATTENTION: If you click RESET SYSTEM, all rooms, WindowsTM workstations and printers will be removed from the school at this point. This action is permanent and cannot be undone. It is recommended that you export these settings using Import/Export Associations before resetting the system. Manage User Directories This utility allows administrators to look through a listing of the contents of all User Directories (Administrators, SCAdmins, Office Users, Teachers, Students and Parents) and manage the contents of these directories. Administrators may also print the list sorted by Last Name, First Name, Username or Disk Usage by selecting the button SHOW PRINTABLE VERSION. 1. Click MANAGE USER DIRECTORIES. 2. Select Search By: GRADE, CLASS, USER TYPE or ALL to get a list of users. If you wish to search by GRADE or CLASS, or USER TYPE, narrow your search by using the 2nd dropdown menu. 3. You may sort the list by clicking on the Titles of each column. For example, to sort the list by size of disk usage, click the Disk Usage title at the top of the column. This will order the list from smallest to largest disk usage. Click the Disk Usage title again, and the users with the largest disk usage will be at the top. 4. You may expand a user s directory by clicking the USER S NAME. You may be prompted to install an Adobe Flash plug-in. 5. File sizes of each of the user s directories (and subdirectories and files contained in them) will be displayed in the right hand box. 6. Select any FILE, FOLDER or DIRECTORY that you want to delete by clicking and highlighting it and pressing the DELETE button. 7. Confirm the file or directory to be deleted by clicking OK when asked, or click CANCEL if you do not want to delete the file or directory. ATTENTION: The deletion process is permanent and cannot be undone. Global Utility Manage Schools Administrators that manage more than one school will be assigned as Itinerant Administrators. This section allows the Administrator to change schools quickly. 1. Click on GLOBAL UTILITIES. 2. Click on MANAGE SCHOOLS. 3. Highlight the School Name. 4. Click on ADMINISTER to change to the highlighted school. You will see the Users / Manage Users screen. Administrator Tools 37

44 Edit Databases Edit School Configuration This utility allows the administrator to set defaults for the school configuration. Explanations of each line follow but are also found when hovering the mouse over each line item. COURSEWARE DIR DRIVE: This is the drive letter which the server applications are run from. DOMAIN NAME: Domain of the server in which SchoolConnect installed. PDC NAME: The Primary Domain Controller server name of the domain that the SchoolConnect server belongs to. BDC NAME: Backup Domain Controller of the domain that SchoolConnect is installed on. This machine is checked for printer queues and the list of found printers form the PDC, BDC and PRINTER_SERVER. PRINT SERVER NAME: Name of the machine that holds printer queues to be assigned to workstations. The system will check this machine for print queues to present to the user when user wants to set the default printer. MP LIST PATH: This is the folder from which the printer configuration is read by the client workstations. Path (Full or UNC) to the Machine-Printer-List.txt file. OS DRIVE: Drive on which the server operating system is installed. DRIVE: The drive where the SchoolConnect system folder is installed. HOME DIR DRIVE: This is the drive that is mapped to the user for their home directory. Usually shows in Explorer and points to the HOME DRIVE on the server. BATCH FILE PATH: Path where the user import and export files are located on the server. Must have slash (\) at the beginning. 38 SchoolConnect Administrator Guide

45 ICON PATH: This path is concatenated with an icon file name to form the path to an icon on the workstation. For example, when a teacher creates a class, they are allowed to choose an icon that represents the class. The ICON-PATH is pre-pended to the ICON name and put into the shortcut. This path needs to exist on both the server and the workstations. It needs to be on the server when the shortcut is created. If there is no valid path during creation, the creation will fail. It needs to be on the workstation for the icon to display. HOME PATH The subfolder path under the school folder where user shares are created. CLASSES PATH: The relative path to the Classes Folder (from the School s Directory). CLASS SECURITY GROUP TYPE: Chose the type of security group to create for each class (Universal, Domain Local and Global). DEFAULT LANGUAGE: The web interface will default to this language. This is the language for the user seen folders, such as Assignments, Homework, Groupwork, Members, Hand-in, Graded etc. It is used for the language of the front end web pages also. LANSCHOOL PREFIX: Range from 0 to 255. LanSchool Channel Prefix is used for ensuring unique channel numbers in multi school operations within the same building. Each prefix number must be unique to each school so that two rooms in the same building are not on the same channel. Generally leave as 0 for single school operation. This allows the Administrator to see all computers in the school and gives the ability for the Administrator to provide remote support for teachers. AUTOCREATEGRADES If this value is YES, the system will automatically add a grade to the grades list when a user list is imported with a grade that does not currently exist in the system. This is useful when adding a list of student who belong to grades that you want to exist on the system but do not yet exist. ENABLE ROAMING PROFILES: This specifies the default behaviour for enabling Roaming Profiles. TRUE means that by default new users (including imported users) will have Roaming Profiles enabled. DEBUG ON: If this value is YES, the system writes debugging information to the log file (specified in TRACE_LOG_FILE). This file is intended to be used by the Development Team to solve defects. TRACE LOG FILE: relative path of the Trace Log File (from the School s Directory). ERROR LOG FILE: relative path of the Error Log File (from the School s Directory). Administrator Tools 39

46 Global Administrator Tools The following functions are only available to members of the Global Administrators Group which is defined during the installation of SchoolConnect. When you log on to the Administrator Screen of SchoolConnect, you are automatically placed in the MANAGE SCHOOLS section where you may choose the school that you want to work with. The last school where you worked is shown beneath the Administration Tools title on the left. The following are the SchoolConnect default utilities available to Global Administrators in addition to those described for SCAdmin and Administrator IDs. Users Manage Itinerant Users Employees within a school district often work in more than one school. This utility provides a fast and simple means of registering these users in multiple schools. Add SchoolConnect members to multiple schools. 1. Find and highlight the user that you want by searching by GRADE, CLASS or USER TYPE. 2. Click the 2nd box to narrow your search criteria. 3. Click GO. 4. Highlight the user that needs to be a member in other schools. 5. Click the SCHOOL NAME where the user should be a member. 6. Click the red RIGHT ARROW to register the user in the second school. You will receive a message SUCCESSFULLY ADDED USERNAME AS A MEMBER OF SELECTED SCHOOL in the lower left of your screen. Find / Remove schools where users are SchoolConnect members. 1. Find and highlight the user that you want by searching by GRADE, CLASS or USER TYPE. 2. Click the 2nd box to narrow your search criteria. 3. Click and highlight the USER S NAME. 4. Click DETECT SCHOOLS. All schools where the user is a member are highlighted in the right hand box along with the ARROW keys. 5. To remove a user from a school, keep highlighted the schools where you want the user id removed from and click the LEFT ARROW button. You will receive a message SUCCESSFULLY REMOVED USERNAME AS A MEMBER OF SELECTED SCHOOL in the lower left of your screen. 40 SchoolConnect Administrator Guide

47 Classes and Groups Create Groups This utility located under the Classes and Groups menu allows the Global Administrator to create non-schoolconnect groups such as Librarians, Department Heads, Reading Assistants etc. Once the Global Group is created for the district, the Administrator may add and remove these groups from their school(s) as well as view and manage members in these school groups. 1. Click on CLASSES and GROUPS, then MANAGE GROUPS. 2. Click CREATE under the Global Groups box and type in a GROUP NAME. 3. Click CREATE. 4. Click MANAGE GROUPS. The new group is now listed under Global Groups. 5. Highlight the Group. 6. Click the RIGHT ARROW to add the new group to a school. Alternately, a group can be created as a School Group and moved to the Global Group Box. 1. Click on CLASSES and GROUPS, then on MANAGE GROUPS. 2. Click CREATE under the School Groups box and type in a GROUP NAME. 3. Click CREATE. 4. Click MANAGE GROUPS. The new group is now listed under School Groups. 5. Click REMOVE and the new group will appear in the Global Groups box. The GLOBAL CREATE button will create a non-school specific group in the Global Groups OU as specified in the Global Configuration. The SCHOOL GROUPS CREATE button will first create the Global Group as above, then create a School Specific Group in the group s OU in the school and add it as a member of the Global Group. NOTE: The Global Administrator will have to assign rights and privileges to any non-schoolconnect group created. Global Utilities Manage Active Directory Tree The tools located under GLOBAL UTILITIES/MANAGE ACTIVE DIRECTORY TREE are used to design and manage your Active Directory environment. It is from within this section that you can: Create Families of Schools Create Schools Create Generic OUs Create Generic Users and Groups Manage Schools Manage GPOs Manage AD Groups Global Administrator Tools 41

48 ACTIVE DIRECTORY "FIND AD OBJECTS" FUNCTION This functions allows the Global Administrator to quickly find Individual Users, Workstations or Groups (classes, custom user groups, generic groups such as SCADmins, teachers). One example of where this is particularly useful is with re-imaging workstations, when you need to find and remove the previous name of the workstation(s). Another example is when an administrator tries to create a new user but that user already exists. It is now very fast and simple to find where the user exists. 1. Click on FIND. 2. Choose Object Type from the drop down menu 3. Enter search criteria for Users, Computers, or Groups. Search terms can be part of the name of the object. SchoolConnect will return all objects that match your criteria. 4. Enter at least 3 LETTERS in the OBJECT NAME FIELD and the SEARCH button will become active. 5. Click on SEARCH. 6. Click on the item that you want. 7. If the object is in a school, the ADMINISTER button will be enabled. 8. Click ADMINISTER to manage the object in that school. NOTE: If searching for a particular Workstation, you will be taken to the Manage Rooms and Resources page and SchoolConnect will indicate which room the workstation is in. NOTE: If searching for a User or Group, you will be taken to the Manage Users screen to work with that ID. NOTE: When you click on an object, the fully qualified path to that object is displayed. 42 SchoolConnect Administrator Guide

49 Creating a Family of Schools - Optional A Family of Schools is a logical arrangement of schools based on certain criteria. You may wish to arrange your schools by geographical location, by school type such as primary or secondary, or another criterion. To create a School Family, perform the following steps: 1. From GLOBAL UTILITIES, click MANAGE ACTIVE DIRECTORY TREE. 2. You will be presented with a screen showing your Active Directory design. Highlight the location in which you would like to build your School Family. If this is a new installation, you may choose to locate this in the root of your tree. 3. From the drop down list Choose Object Type, select Family, and then click the CREATE button. 4. Enter in the NAME you would like to use for your School Family. 5. Then click CREATE. Global Administrator Tools 43

50 Creating Non-School Objects SchoolConnect allows you to manage not only your schools educational technology environment, but your entire enterprise as well. Included in the Global Administration web pages are generic Active Directory Objects. These objects are: User Computer Group School Family Generic Organizational Units To create a Non-School object, 1. Highlight a location within Active Directory and choose from the drop down list the type of object you would like to create. 2. Click the CREATE button. Enter in the appropriate information depending on the type of object you are creating. If you are creating a generic user, you will need to enter in such information as: FIRST NAME, LAST NAME, AND PASSWORD. 44 SchoolConnect Administrator Guide

51 Cloud Application Management SchoolConnect enables single sign-on (SSO) to Office 365 and/or Google Apps. This utility manages user creation in the cloud directories and enables various licence features in Office 365. Individual schools can have unique profiles. The Global Administrator can proactively update an entire Active Directory for easy cloud service enablement with new IDs populating configuration information automatically in Active Directory. 1. From GLOBAL UTILITIES, click CLOUD CONFIG. The configuration is pre-filled in and grayed out but can be changed in Edit Databases, Edit Global Configuration. GLOBAL is the default setting (highlighted in red). For a single school, see below. Staff UPN Domain: The Domain used for SSO to the Cloud for staff Student UPN Domain: The Domain used for SSO to the Cloud for students Staff Domain: Cloud domain for staff Student Domain: Cloud domain for students AD Data Field: Active Directory field where the user s cloud configuration will be published. 2. Click the box(es) labelled ENABLE OFFICE 365 and/or GOOGLE. 3. Choose the license options that you have for Staff and Students. SchoolConnect is preconfigured with the defaults that most school districts have. 4. Click SAVE. 5. Click UPDATE USERS to update all users with the current cloud configuration. 6. Click UPDATE SERVERS which will push the cloud configuration to child servers so when users are added, edited, or moved they will have the correct cloud configuration. RESET If you have made mistakes changing values, click reset to reload the cloud configuration without saving the changes. DELETE If you are creating a custom cloud configuration for a school, you can delete the configuration to revert it to the global default. Global Administrator Tools 45

52 To create a Custom School based cloud configuration. 1. Click on GLOBAL UTILITIES. 2. Click CLOUD CONFIG from the left hand menu, then click on the SCHOOL NAME in the gray box. This will create an empty cloud configuration for the school which you can customize for that individual school. Password Self Service Portal Configuration This page is configured from the EMC in SchoolConnect and allows you to update the configuration for your Self Service Password Portal. Each user must first register in the SSP by logging in with their SchoolConnect ID and Password. They then choose 3 questions and provide the answers. When a password reset is requested, the user must correctly answer 2 of these questions which will be presented in random order. The SSP is highly customizable as to who has access to this page, when it will timeout and when to reset the attempt counter. It can also be segmented by grades (e.g. K-3 vs 4-12). All information is encrypted end to end. 46 SchoolConnect Administrator Guide

53 responses is a security measure to ensure that any password change is initiated by the user owning the account. Should a password be changed by someone other than the account owner, then the account owner will be notified that their account has potentially been compromised. Unlock User Account: Many users now have multiple devices (computer, tablet and/or phone) which use the same AD credentials to access their resources ( , files, internal portal etc). If the user changes their password on one device only, the other devices will continue to use the old password, resulting in the user being locked out because of failed login attempts. In the past, this has resulted in a call to the IT Help Desk. Now when a user is locked out, they can activate the Unlock Function in order to regain access to their files and resources by first changing their password on all devices and then utilizing the Unlock User Account feature of SchoolConnect to automatically unlock their account. ADMIN PWD: This is the password for an Active Directory user that has access to reset user passwords. ADMIN USERNAME: This is the user name for an Active Directory user that has access to reset user passwords. DOMAIN NAME: This is the fully qualified domain name for the users who will be able to reset their password with the Self Service Password Portal. CHG: This is the confirmation sent to confirm a change in their AD password. REG: This is the confirmation sent once a user has chosen their security questions and supplied the answers. RES: This is the confirmation sent when a user's Active Directory password has been reset through answering the security questions. UNL: This is the confirmation sent to the user when their AD user id is unlocked. Global Administrator Tools 47

54 MAX FAILED LOGIN ATTEMPTS: This is the maximum number of fail login attempts before a user is locked out from the Self Server Password Portal. The lockout time default is one hour but this is modifiable. MAX FAILED QA ATTEMPTS: This is the maximum number of times a user can attempt to fill in their recovery questions before they are locked out from resetting their password. The lockout time default is one hour but this is modifiable. PASSWORD REQUIREMENTS TEXT: This line is modifiable to reflect the district password requirements on the main screen as a aid to users when resetting their password. PASSWORD RESET TIMEOUT: This is the number of seconds that a user has to reset their password or unlock their account. This additional security is in place should a user leave their workstation before completing password reset or account unlock. SMTP This is the address that the notification will be sent from. SMTP HOST: This is the server name. SMTP PASSWORD: This is the password for sending . SMTP SSL: If the server requires SSL, this must be set to "True" SMTP USERNAME: This is the username for sending . The password questions are entered in the box below; one line per question. We recommend that at least 5 questions be used to provide enough choice to the user. Examples are: 48 SchoolConnect Administrator Guide

55 User Move Utility This tool is used to move SchoolConnect users from one school to another with or without their data. Users can be searched for by keyword, grade, class and user type. Global Administrators can now save significant time when changing a user's type within a school or when moving users from one school to several schools (such as when moving students in Grade 8 to different high schools) Users can now be moved easily within a school via the User Move Utility without the complicated process of having to backup and restore their home directory/data, deleting the user, recreating the user and re-assigning their data. Examples would be a Teacher who has been promoted to Principal or a Principal who teaches classes can be moved to a Teacher, or a Teacher to an SCAdmin. 1. Open the GLOBAL UTILITIES sub-menu and click the USER MOVE UTILITY button. 2. Highlight the SOURCE SCHOOL you are moving user(s) from. 3. From the drop-down menu located below the Last Name list, select the search criteria: Grade, Class, USER TYPE or Keyword. If Keyword is used, select the User Type and type in a mart of the first name, last name or username. 4. Hit Enter or click Go 5. Highlight the USER(S) to be moved. (Hold CTRL while selecting to multi-select) 6. You must check the box for MOVE USER DATA if you want to copy the user s data to the new school. 7. Highlight the DESTINATION SCHOOLCONNECT SCHOOL. 8. Click the User Type Destination box if the User Type is to change in the Source School. 9. Click the ARROW BUTTON to begin the move process. 10. Click OK to confirm that the User information is correct. Global Administrator Tools 49

56 NOTE: If you are moving students, you will get a prompt to choose what grade you would like the student(s) in. If moving multiple students, they will ALL be put in the new grade that you have chosen or remain in their current grade. 11. The process status will be displayed at the bottom of the screen. ATTENTION: you MUST NOT navigate away from or close the User Move Utility page during this process. 12. Once complete, a SUCCESSFULLY MOVED USER status window will be displayed 13. Click OK to continue working in Administration Tool. ATTENTION: A system message will appear THIS WILL MOVE USERS TO " " SCHOOL. ALL SCHOOL SPECIFIC DATA (CLASSES ETC.) WILL BE ERASED DURING THE MOVE. This action is permanent and cannot be undone. 50 SchoolConnect Administrator Guide

57 Batch Move Utility This section allows you to create a batch of user moves that are to be run at the same time. Batch user move will use the local server to store the batch file instead of the school server. 1. Click USER MOVE UTILITY, BATCH MOVE, CREATE. This provides an auto-name file (your user name and date). 2. The new and empty EXISTING BATCH MOVE FILE is highlighted. 3. Click ADD TO BATCH. To modify an existing batch, click the EDIT button. 4. Select the Source School. 5. Select the User Type from the box below. 6. Select the User(s). If you have chosen students to move, you will receive the message: PLEASE SELECT THE DESTINATION GRADE FOR THE SELECTED STUDENTS. 7. Click YES in the Move User Data box if you want to move their data. This is normally done for teachers but not students. 8. Click the Destination School. 9. Click the ARROW BUTTON. You will see the message SUCCESSFULLY ADDED # USER(S) TO THE FILE FOR LATER PROCESSING. 10. Click RETURN. 11. Then click RUN BATCH if you want the batch process to run immediately. 12. Or click SCHEDULE to schedule the run for a later time. 13. On the next screen, your User ID, and Password are already filled in. 14. Select the Date, and Time for the run. 15. Click SCHEDULE. You will receive a system message: SUCCESSFULLY SCHEDULED USERNAME, DATE.UMB. NOTE: Multiple user types and school sources and destinations can be included in the same file. NOTE: Only one batch move can be created per day per Administrator. Global Administrator Tools 51

58 Edit Batch Move Utility Click USER MOVE UTILITY, BATCH MOVE. Highlight the EXISTING BATCH MOVE FILE that is to be edited. Click the EDIT BUTTON. This will display the options. Highlight the LINE to be changed. DELETE LINE removes the LINE. Click EDIT LINE which allows any variable to be changed. SAVE LINE saves the changes. ADD TO BATCH will allow the addition of more user moves to this batch file. 52 SchoolConnect Administrator Guide

59 Manage Schools This section allows the Global Administrator to change schools quickly. 1. Click on GLOBAL UTILITIES. 2. Click on MANAGE SCHOOLS. 3. Highlight the School Name. 4. Click on ADMINISTER to change to the highlighted school. You will see the Users / Manage Users screen. Create a School A school is a logical arrangement of users and resources which are associated with a specific school. Newly created schools will have the Schoolcode in the CN (Common Name) for groups. To create a school, perform the following steps From GLOBAL UTILITIES, click MANAGE SCHOOLS. You will be presented with a screen showing previously created schools. Click the CREATE button. You will be presented with a number of options for school creation. They are as follows: a. School Name this is the name of the school you are creating. b. School Code this is the School Code of the school you are creating. This can be an alphanumeric value. c. Target Drive this is where you would like the school-related file system created. This is the location where home folders, courseware, etc. will be located. This can be a fixed drive or a UNC. d. User Home Drive Letter SchoolConnect uses H as the default drive. This is modifiable. e. Courseware Drive SchoolConnect uses K as the default drive. This can be modified. f. Default Language English g. Base OU Path Enter the path of the correct OU where you want the school to be created. If this is done under the MANAGE ACTIVE DIRECTORY TREE button, the path is automatically filled in. h. School OUs you have the choice of letting SchoolConnect define the Organizational Units (OUs) for your school or you can define them yourself. SchoolConnect s default OUs that will be created are: Students Teachers Office Users Parents SCAdmins Administrator Workstation Groups Classes NOTE: If you have a pre-existing school design, choose CUSTOM OUs. You will be presented with a screen that will allow you to browse your Active Directory tree and select the OUs you would like to use. To do this, click the graphic representing a folder. Global Administrator Tools 53

60 i. Location of User Files for example: DRIVELETTER/SCHOOLCONNECT/SCHOOLNAME/SYSTEM/HOME/USERTYPE/USERNAME j. School Grades This option allows you to specify OUs for each grade. By associating students with Grade OUs, it allows you the ability to specify Group Policy Objects (GPOs) to students of various levels. For example, you may wish to have students in lower grades with non-complex passwords and complex passwords for higher grades. The drop down list for grades contains the following pre-defined grade levels. School Type Elementary School Elementary School (feeds to Middle School) Elementary School with J/S Kindergarten Middle School Junior High School High School Senior High School Grade OUs Created JK,SK, 1,2,3,4,5,6,7,8 Graduated K,1,2,3,4,5,Graduated JK,SK,1,2,3,4,5,6,Graduated 6,7,8,Graduated 8,9,10,Graduated 9,10,11,12, Graduated 11,12,Graduated NOTE: If you would like to add more grades or use non-standard grade levels, type the new grade into the box and click on ADD. 5. Once you have finished defining your School, click the CREATE button and your school will be created. 54 SchoolConnect Administrator Guide

61 The following is performed automatically for you upon school creation: 1. School specific Organizational Units are created and populated with the above data. 2. School specific groups are created. 3. GPOs for each User Type are assigned to the correct OUs. 4. Delegation is provided to Teachers, SCAdmins, Administrators and Global Administrators to the correct Organizational Units. 5. School folders are created on the destination drive. 6. School specific shares are automatically created. 7. NTFS permissions are set on the appropriate folders to provide the correct level of file access to each User Type. 8. Newly created schools will have the school code in the CN (Common Name) for groups. Edit a School The EDIT function within MANAGE SCHOOLS is used to modify an existing school s OU Path and/or File System. Remove a School Use this feature to remove schools from Active Directory and from within SchoolConnect. This feature will remove all the school files, home directories, school shares, all school Active Directory Components and all users accounts. ATTENTION: This cannot be undone and all user, school and class data will be permanently removed. Global Administrator Tools 55

62 Import and Export Users Use this feature to import users into previously created schools. See the section marked Import Users (under Advanced Administration) for instructions on how to create a SchoolConnect import file. Export All Schools Use this feature to export all users and classes from all the schools to a single file. NOTE: Passwords are not exported. Export All Rooms Use this feature to export all workstation, rooms, and printers in all the schools to a single file. Synchronize with AD This tool is used to add existing Active Directory accounts to SchoolConnect. If you move a user in Active Directory into the school s Teacher s OU, for example, SchoolConnect will locate this account and give you the option to add it to SchoolConnect. If you choose to synchronize this account, SchoolConnect will create a home folder and set all NTFS permissions and group membership automatically based on the account type. NOTE: This is a very handy tool if you have existing accounts you would like to be managed by SchoolConnect. To add unsynchronized accounts, simply highlight a SCHOOL and click the SYNCHRONIZE WITH AD button. SchoolConnect will now examine Active Directory for users that do not belong to SchoolConnect. When it finds these IDs, it will display them in a list for your selection. SchoolConnect will make some guesses as to the type of the ID. If it finds the ID in an OU marked as a Teacher s OU, it will assume the ID is a teacher. You have the option to change the selection if it is incorrect. You may also select Principal, Vice-Principal or Secretary and Parents as a user type when synchronizing users. NOTE: Students, Teachers, Office Users, SCAdmin, Admins, and Parents IDs may now be synchronized with SchoolConnect if their accounts were created outside SchoolConnect in AD. NOTE: If Synch with AD discovers users in the Office Users OU, you now have the ability to designate these users as Principal, Vice-Principal and Secretary. 56 SchoolConnect Administrator Guide

63 Manage Group Policy Objects The tools located under MANAGE GROUP POLICY OBJECTS are used to assign and un-assign GPOs to various Organizational Units within your Active Directory Tree. Group Policy Objects (GPOs) are objects within Active Directory that allow you to control in very finite detail the behaviour of your Windows XP/Windows 7 workstations. There are over 1200 different settings that can be modified in a Microsoft Group Policy. By default, when you create a school within SchoolConnect, GPOs are automatically set for different user types. However, there are many different ways you would like to see your workstations behave. SchoolConnect offers you a default that can be modified to whatever suits your school s needs. From within this function you can do most of your Group Policy Object Management. Creating GPOs 1. Click on the Manage GPOs button. This will start the SchoolConnect Active X Plug-in. 2. Right-Click in a blank area and choose NEW. This will create a new GPO that is now available to EDIT. Edit GPOs 1. RIGHT CLICK on the GPO you would like to edit and select EDIT. You will now be able to modify any of the properties within the GPO from here. Assign GPOs 1. In the right hand pane, BROWSE to an OU, then in the left screen, HIGHLIGHT a GPO and click on the RIGHT POINTING ARROW to assign. 2. Reverse these steps to un-assign a GPO. Global Administrator Tools 57

64 View GPOs 1. Highlight the OU in the Active Directory window that you wish to view. 2. Click on VIEW GPOs. This will show the GPOs assigned to the OU and allow the addition of other GPOs if required. Manage AD Groups This tool is used to manage Groups and Group Membership within your entire enterprise. 1. Click CREATE and name the group. 2. Objective: why the group exists. 3. Choose GROUP SCOPE. 4. Click CHOOSE. View Members This button shows all the Members of the Group (that you have chosen). You can add or remove members using the ASSIGNMENT BUTTON. View Membership This button shows all the Groups that the group you have chosen is a member of. You can add or remove this group as a member of other groups by using the ASSIGNMENT BUTTON. 58 SchoolConnect Administrator Guide

65 Manage User Types SchoolConnect Default Menus This utility shows you the SchoolConnect default menus for each of your user types such as: SCAdmins, Administrators, ITSupport (Global Administrators), Teacher, and Student. Each district has the flexibility to change the default menus for their user types. Create a New User Type (or Group) Custom user groups can be created from the basic template of Administrator, Teacher or Student. For example, a Global Education Assistant (EA) group can be created with a subset of the Teacher functionality. This feature allows the creation of a school EA group that contains members from the Global EA group. Import-Export A file can be created to keep a record of the default screens applied to each User Type. The Global Administrator can use the export file from one server to apply the same settings to another server. Commit to Schools This is a very useful tool to push the configuration settings to the schools. If User Types are created on the SchoolConnect Enterprise Management Console (EMC) and committed to the schools, the settings specified on the EMC then take effect for users on the child servers. The school admin now sees these new groups, can add them to the school and add the appropriate users. Global Administrator Tools 59

66 Edit Databases This utility allows a Global Administrator to modify the SchoolConnect databases. Edit Global Configuration This utility contains the defaults for the SchoolConnect server. GROUPS SECURITY GROUP TYPE: Choose the type of security (Global, Universal, or Domain Local) that you want to use when SchoolConnect creates Global groups through the Manage User Groups and Manage User Types. OPERATING SYSTEM: Specifies Operating System. MOODLE GROUPS OU: Distinguished Name of the container where Moodle groups will be created. GLOBAL GROUPS OU: Distinguished Name of the container where Global groups will be created. GLOBAL SUPPORT GROUP: Distinguished Name of the container for global support group. This is a 2nd level of global administrator has almost all the functions of the domain admin group except for editing the global configuration, language, or grade templates by default. GLOBAL ADMIN GROUP: Distinguished Name of the container for Global Administrators group. This is the group that has full access to SchoolConnect. Typically this is a domain admin group. IIS DRIVE: Drive letter on which IIS root is installed. ENHANCED WORKSTATION SUPPORT: Flag enabling Administrative Workstation support. 60 SchoolConnect Administrator Guide

67 TRACE LOG PATH: File path for the Global Trace Log where all of the logs in SchoolConnect are placed. ERROR LOG PATH: This is where all the error logs are stored. ICON PATH: This is the path which holds desktop icon files on the client machines. SCHOOL TEMPLATE PATH: This is the template folder which is used to create a new school. FILE DSN PATH: Path to the File DNS Default Directory. This is where the database link files are located. LEGACY GROUP CN: If set to True when a school is created, the CN of a group will not contain the school code. DOMAIN NAME: The name of the domain in which SchoolConnect is installed. SERVER NAME: The name of the server on which SchoolConnect is installed. STUDENT UPN DOMAIN: This is the default User Principal Name domain for all student users created by SchoolConnect. NONSTUDENT UPN DOMAIN: This is the default User Principal Name domain for all nonstudent users created by SchoolConnect. MULTI DOMAINE: Flag indicating whether SchoolConnect should be aware of multiple domains. STUDENT DOMAIN: Enter the domain to be used for student AD records. NONSTUDENT DOMAIN: This is the domain that will be automatically added to nonstudent accounts (Teachers, Administrators and Office Users) when they are created. DOMAIN CONTROLLER: The name of the Domain Controller that the SchoolConnect server will use for AD lookups. HIDE PROFILE FOLDER: Select this if a user's profile folder is to be hidden when it is created. USERNAME GEN ALGORITHM: The algorithm used to create SchoolConnect user names if none is supplied. CLOUD DATA FIELD: Active Directory field where cloud information is stored. TRACING ON: If this value is set to TRUE, SchoolConnect will output trace logs of everything that happens in the SchoolConnect web interface. AD TIMEOUT: The time (in milliseconds) to wait for AD before timing out. FORMAT STUDENT: Algorithm for generating student names. Global Administrator Tools 61

68 FORMAT NONSTUDENT: Algorithm for generating non-student names. GRADE TEMPLATE SET: The set of grade templates to be used when creating new schools. DEFAULT WORKSTATIONS GPO: This is the GUID pointing to the GPO that applies to Default Workstations. STUDENTS GPO: This is the GUID pointing to the GPO that applies to Students. TEACHERS GPO: The GUID pointing to the GPO that applies to Teachers. OFFICE USERS GPO: This is the GUID pointing to the GPO that applies to Office Users. SC ADMINISTRATORS GPO: This is the GUID pointing to the GPO that applies to SCAdministrators. ADMINISTRATORS GPO: The GUID pointing to the GPO that applies to Administrators. Edit School Configuration This utility allows the administrator to set defaults for the school configuration. (see detail under Administrator Edit Databases) Edit Language Database This utility allows the Global Administrator to edit the National Language Support (NLS) configuration database, which will change the text within the SchoolConnect web interface to any language. In addition, this database can be used to change any wording in the SchoolConnect web interface to any unique wording required. Manage Grade Templates This utility allows the Global Administrator to create/edit/remove default grade templates. Default grade templates are used when creating schools. 62 SchoolConnect Administrator Guide

69 Appendix A: Software Installation Installing an Application on the Server 1. Log on to a workstation using an Administrator ID. 2. Refer to the application installation instructions provided by the vendor. 3. Install the Windows program in a sub-folder of Courseware (i.e. install to K:\ DRIVE MAPPING). Make the application available to a test student ID. 4. Logon to the workstation using a test student ID and test the application. Additional user rights may be required for the application directory. For details on how to assign additional rights, refer to the Assigning Additional User Rights to Applications section. 5. Make the application accessible to all users, accessible to teachers to add to their classes or to teachers only. For details, refer to the respective section later in this guide. Making an Application Available to All Users The Desk Tools folder is a shared folder that contains applications that are commonly used by all users such as a word processor or image editor. This folder is available on all Student, Teacher, and Administrator Desktops. All users have access to run applications in this folder, but only administrators can change the contents of the folder. 1. Log on to a workstation using an administrator ID. 2. Explore the K:\ drive (Courseware folder). 3. Open the desired application directory and copy the executable file (right click the icon). 4. Paste a shortcut of the executable in the DESK TOOLS folder on the Administrator Desktop. 5. Change the name of the shortcut in the DESK TOOLS folder to the desired name. Making an Application Available for Teachers to Add to Their Classes The Drop Icons Here for Teacher Distribution folder on the Administrator Desktop is used to make courseware applications available to teachers, who can then add the applications to their classes. When a teacher runs the Teacher Tools web interface to assign courseware to classes, only shortcuts existing in this folder will be available to teachers. Shortcuts created in this folder must be created from a client workstation to ensure the target path contains the correct drive mapping. 1. Log on to a workstation using an Administrator ID. 2. Explore the Courseware folder, in this case, K:\ drive 3. Open the desired application directory and copy the executable file (right click). 4. Paste a shortcut of the executable in the Drop Icons Here for Teacher Distribution folder on the Administrator Desktop. 5. Change the name of the shortcut to the desired name. 6. Open ADMINISTRATOR TOOLS, ADVANCED and select MANAGE COURSEWARE. 7. Select from the available Installed Courseware and highlight the new software you wish to provide for teachers. Click the RIGHT ARROW to assign the courseware to Available Courseware. See Managing Courseware for step by step instructions Appendix A: Software Installation 63

70 NOTE: Shortcuts placed in the Drop Icons Here for Teacher Distribution folder must be shortcuts to the original executable and not to another shortcut. Making an Application Available to Teachers Only The Teacher s Community folder on a Teacher or Administrator Desktop is a shared folder that is available only to teachers and administrators. Since this folder does not appear on the Student Desktop, applications may be placed in this folder in order to make them available to all teachers and administrators only. 1. Log on to a workstation using an ADMINISTRATOR ID. 2. Explore the Courseware folder, in this case, K:\ DRIVE. 3. Open the desired application directory and copy the executable file (right click). 4. Paste a shortcut of the executable in the TEACHER S COMMUNITY folder on the Administrator Desktop. 5. Change the name of the shortcut to the desired name. Assigning Additional User Rights to Applications (from the Server) When an application is installed in a sub-folder of <SCDRIVE>\SCHOOLCONNECT\<SCHOOLNAME> COURSEWARE, all users obtain READ and EXECUTE rights. However, some applications require additional user rights to function correctly. Perform the following procedure to provide additional rights for application folders. 1. Log on at the server using an ADMINISTRATOR ID. 2. Explore THE <SCDRIVE>:\SCHOOLCONNECT\<SCHOOLNAME> COURSEWARE. 3. Open the application directory and highlight the desired files and/or sub-directories to which you wish to assign additional rights. This information may be provided by the application installation instructions or determined by trial-and-error during the application testing. Alternatively, the application directory in K:\ may be selected to assign rights to all files and sub-directories in the application directory. 4. Right-click the selected files and sub-directories and click PROPERTIES. 5. Click the SECURITY tab. 6. Assign additional rights using the following groups only: Students, Teachers, Office Users, and SCAdmins. 7. Select the option Assign Rights to Sub-Directories and Files, as required, to assign rights to sub-directories and files of the selected directory. 8. Click OK. 64 SchoolConnect Administrator Guide

71 Appendix B: Printer Installation There are several considerations when installing printers in a SchoolConnect environment such as: - What operating system is running on the server hosting the print queues? - What operating system is running on the client PCs? - Will additional rights be needed on the print queues once they are added? - Use model specific drivers when possible, only use universal drivers if there are no other options. - Ensure that all drivers are digitally signed. - Where will the printer queues be hosted, locally at the school or centrally? DRIVERS and PRINT QUEUES If the server and client operating systems are different architectures (eg: x86 and x64) then drivers for both must be downloaded. In an ideal scenario if x86 clients are being used (such as Windows 7 x86), then the print queues should be hosted on a Windows x86 server (such as Windows 2008 R1 x86) so that only one version of each driver needs to be downloaded and installed. Using model specific drivers is the best practice as this will ensure that all tray and printing options for a particular model are available within the driver. Universal drivers often do not have all of these options. Drivers which are digitally signed by Microsoft are highly recommended, as they have been tested to ensure that they will not cause any operating system instabilities. Drivers which are not digitally signed may also cause pop-ups to appear on client machines asking them to approve the installation of the driver each time that printer is added. When printers are installed, it is the best practice to add the Teachers group to the Manage Documents permission. For office printers, add the Office Users group with the same permission. For some printers, such as colour printers which you may not want students printing directly to, you may want to remove the everyone group and add in only specific groups such as teachers to allow them to print. Hosting the print queues locally is usually the best practice as it will save considerably traffic going over the network, however in some cases where bandwidth is not an issue, centralizing printer management is easier for long term management and ensuring that all printers are using only digitally signed drivers. The following printer installation instructions assume a complex environment where printer queues are hosted on a Windows 2008 R2 x64 server, but supporting clients running Windows 7 x86. The Print Server role has been installed on the server and using it is the recommended best practice. Appendix B: Printers 65

72 Printer Installation 1. Launch the Printer Management console, click on PRINT SERVERS and expand it to open all levels 2. Check to see if there is a driver currently loaded on the server for the printer you are about to install. If not, go to the printer manufacturer's website and download the appropriate drivers I. II. III. IV. As the print servers are 64 bit, you will need to find a Windows Server 2008 R2 driver first in order to install it on the server. Next you will need to download a 32 bit driver with the EXACT SAME DRIVER VERSION as the 64 bit driver that you downloaded previously. If the drivers are not exactly the same, the x86 driver will not install properly. Always try to find drivers that are Digitally Signed by Microsoft. If you do not use Digitally Signed drivers, the workstations will receive a pop-up message to install the drivers when you go to deploy them. The drivers will be installed when the printer is installed, however they may be compressed, so they should first be extracted to the C:\PRINTER DRIVER REPOSITORY FOLDER and have a subfolder created with the model name and 2 sub folders called x86 and x64 3. Next browse to the Ports and check to see if the IP address for the new printer is already in use. 66 SchoolConnect Administrator Guide

73 4. If the port is not already in use, then create it. I. Right click PORTS and select ADD PORT. I.i.1.a.i. II. Select STANDARD TCP/IP PORT and click NEW PORT. a.i.1. Appendix B: Printers 67

74 III. Click NEXT. a.ii. IV. Type the IP ADDRESS of the printer and click NEXT. V. The wizard will browse the network for the printer. 68 SchoolConnect Administrator Guide

75 a.iii. VI. If the printer cannot be found on the network (as in the case of the IP address used in this example) then a window will appear allowing you to specify a device type. Accept the Generic Network Card by clicking NEXT. a.iv. VII. A final window will appear with a summary of the settings selected. Appendix B: Printers 69

76 5. Add the printer I. Next click on PRINTERS, right click and select ADD PRINTER. II. Select ADD A NEW PRINTER USING AN EXISTING PORT (assuming that you created the port in step 4 above). Select the port from the list 70 SchoolConnect Administrator Guide

77 III. Ensure that the correct port is selected and click NEXT. IV. If the driver already exists, select it from the list. Appendix B: Printers 71

78 V. If the driver doesn't exist click on INSTALL NEW DRIVER and click NEXT. VI. Click on HAVE DISK, then BROWSE. 72 SchoolConnect Administrator Guide

79 VII. Browse to the location of the x64 driver, select the.inf FILE and click OPEN, then click OK. Appendix B: Printers 73

80 VIII. The drivers that are available will be listed. Note that the drivers pictured here are Digitally Signed. Click NEXT. IX. Name the printer according to the standard naming convention (Schoolcode Room PRN or CPR). Copy the printer name and paste it in the SHARE NAME field. These must be identical in order to work in SchoolConnect. 74 SchoolConnect Administrator Guide

81 X. Confirm the settings. Note that the printer will not be Published by default XI. The driver and printer will be installed. Click FINISH to complete the installation. Appendix B: Printers 75

82 XII. Select the PRINTER from the list, right click and select PROPERTIES. XIII. Click on the SHARING TAB. Place a checkmark in the LIST in the Directory Box. 76 SchoolConnect Administrator Guide

83 XIV. Click on Additional Drivers. If the x86 box has a checkmark then you don't need to do anything further. If it does not, then place a CHECKMARK in the x86 box and browse for the matching x86 driver to the x64 driver that you installed and click OPEN, then OK. The printer has now been installed successfully. Next it must be added into SchoolConnect in order to be assigned to a room for use. Appendix B: Printers 77

84 SchoolConnect Printer Management 1. OPEN a web browser and CONNECT to the SchoolConnect webpage. LOGIN, select the SCHOOL you wish to assign the printer to and click on ADMINISTER. 2. Click on ROOMS AND RESOURCES. 3. Click ADD/REMOVE PRINTERS 78 SchoolConnect Administrator Guide

85 4. The newly created printer should appear in the AVAILABLE PRINTERS WINDOW (left). Click the PRINTER to select it, then click the ARROW BUTTON to move it to the ASSIGNED PRINTERS window (right) 5. Confirm that the printer is now in the ASSIGNED PRINTERS LIST. Appendix B: Printers 79

86 6. Click on ASSIGN RESOURCES under the ROOMS AND RESOURCES menu. Find the printer in the AVAILABLE PRINTERS list and click it. Use CTRL or SHIFT to select the rooms you would like the printer to be assigned to. Once ready, click the ARROW to add the printer to the selected rooms. 7. Go to a workstation and login as a student or teacher to confirm that the printer has been installed properly. 80 SchoolConnect Administrator Guide

87 Appendix C: Disable Internet Access Step 1: 1. Click START, 2. Choose ADMINISTRATIVE TOOLS, then GROUP POLICY MANAGEMENT Step 2: 1. Open DOMAINE, GROUP POLICY OBJECTS. 2. Select NOINTERENT, then the DELEGATION tab. 3. Click ADVANCED. Appendix C: Disable Internet Access 81

88 Step 3: Step 4: Scroll To Authenticated Users. Uncheck ALLOW for APPLY GROUP POLICY. Click APPLY. Click ADD. Type in NOINTERNET. Click OK. Verify that ALLOW for APPLY GROUP POLICY is checked. 6. Click OK Open DOMAIN, then GROUP POLICY OBJECTS. Select INTERNET, then DELEGATION tab. Click on ADVANCED. Then click ADD and type NOINTERNET Group. Check that DENY for APPLY GROUP POLICY is checked. 6. Click OK. 82 SchoolConnect Administrator Guide

89 Step 5: 1. Select the highest level school OU available. 2. Link the two GPOs by right clicking, and selecting Link an Existing GPO... for both Internet and NoInternet policies. 3. Click OK. Appendix C: Disable Internet Access 83

90 Appendix D: AD SYNC The SchoolConnect Active Directory Synchronization Tool (SCADSyncTool) ensures that the SchoolConnect configuration of users, classes, grades, workstation, rooms and itinerant users reflects the configuration of the Active Directory. In some situations, an administrator would like to scan a single school for changes. Another common use for the SCADSync Tool is when there is integration between the SIS and HR systems to import information into the Active Directory. Once the information is in Active Directory, the SCADSyncTool can add new users to schools, remove users that don't exist anymore, and move users from school to school with their data automatically. If a user is removed from a school, and their ID also exists in another school but not in a user OU, then the ID will be deleted only from the current school's database. ADSync has had itinerant repair features added so that if users lose itinerant status, the repair can be run to fix the issues. 84 SchoolConnect Administrator Guide