You could do this at the IP routing level. Depending on how your network
is set up, this might be easy, or it might be hard. Here I created a
subnet that I then blocked from the internet in our firewall. Then I put
all of the machines in one teacher's lab on a separate ethernet switch,
and gave the teacher two different uplinks he could plug the switch into.
One went to the standard high school VLAN, one to the VLAN with the no
internet subnet. To switch the machines from local only to internet, he'd
have to move the uplink patch cord and cycle power on the switch, which
would cause the workstations to request new IP addresses when the switch
came back on.
Might not be as easy as using classroom management software, but in this
case it was a Mac lab, and we didn't have any such software. Didn't cost
anything but my time. (Which is free, right? Ask anyone!)
Brattleboro Union High School District # 6
School Information Technology Discussion <[log in to unmask]> writes:
>users would be more granular, which would fit better in this case
>users (a group) and machines and time is what I need (for students with
>more than one class)
>thanks to all, and please keep the suggestions coming
>If it is the computers that don't need access, then create the OU and
>place the desired computers in this container.