Thanks for the video! Can I ask how you can add the rest of your rooms into Veyon? My AD structure is very similar to how yours is set out, I have an OU named Workstations, then Subjects under that, then finally the room numbers. How can I get Veyon to synchronise the OU's as room groups?
I use wind 10. I have noticed that when on the master machine something is copied, the copied stuff is parked on the clipboard of the slave machine; and vice versa. How can this functionality be configured/restricted?
Useful video thanks. How do you do the Access Control for all ICT Suites for example, but the teacher can only see the computers in the ICT Suite that their teaching computer is in? For example whichever teacher is logged onto TEACH-ABC can only see ABC-01, ABC-02 etc. I can only seem to give them access to all computers in my Active Directory domain (using LDAP object trees) which is a bit of a security risk. I know in your tutorial you covered access control for a specific room and the whole OU which isn't quite what I need.
Sorry for the late replay. It all depends how you made your AD tree. I did only use computers here, but you can also do this with user groups. For example you can create a "veyon" master member group in AD, where you put all the teachers in with access to specific rooms. For more info about this checkout "AGDLP" in youtube. Check the Access Control settings at 4:00 to make the acces rule for the veyon teachers group. Best is to play with it for a while in a classroom and try out the different possibilities.
Thanks. Using Access Control settings I've added domain admins to Authorized user groups and for process access control rules I've created and added the veyon master member group with the following conditions: accessing user is a member of veyon master group (ticked) accessing computer is located in same room as local computer (ticked) Action: allow access (ticked) Under "Master" I have: Automatically switch to current room (ticked) Perform access control at startup (ticked) Only show current room (ticked) Hide local computer (ticked) When I run veyon master as a master user, it only shows the computers in the same room which I what I want. However if I close Veyon master down and open it again, it shows the whole AD structure. If I close and open and third time, Veyon just crashes. Doing it this way will mean i'm going to have two config files too. One for us domain admins which lists the whole AD structure, and one for teachers which just lists the ICT suites.
I see you asked this question also in Veyon GitHub. You get an answer soon from tobybox. He designed the program. As I can see from the pictures there you should divide the suite section in the AD in classrooms with the PC's in it. Now you see all the PC's and Laptops under suites. So when you did divide the 'suites' enter the following line in ldap - Computer tree: OU=Suite-A,OU=Suites,OU=Device-Enterprise,OU=Toplevel. Hit Test afterwards.
Yeah but I'm still waiting for a reply from him. I thought he would of replied already so I don't think he is going to reply at all but we shall see so thank you for helping me since you're not part of the development team. In AD, the ICT suites are already divided. I have IT1, IT2, IT3, IT4 etc all under Suites OU. In Veyon Configurator I set LDAP to OU=Suites,OU=Devices - Enterprise,OU=toplevel and if I hit test I get 409 results returned which is what I would expect. If I use your example and change LDAP to: OU=IT1,OU=Suites,OU=Devices - Enterprise,OU=toplevel and hit test it returns 26 results for the 26 computers in that suite. Are you suggesting I have a config file for each individual ICT suite? Each config file would connect to just one suite using LDAP.
Yes, that’s how we do it. It all depends how you build your LDAP or AD. In our school the LDAP user-section is divided in admins, management, teachers and student classes. These are used for the ACL’s in veyon. Admins get full access, teachers and management restricted access, and students no access. The LDAP computer-section is divided in rooms with there PC’s or laptops. The teacher PC’s or laptops in the computer rooms are the only ones with the master installed and can only see the PC’s from that room. The administrators have their laptop and the only ones with access to everything. We use 2 different config.json files (saved on the server). The master config.json with access to everything, for the admin laptops. In the classrooms we install this one too for the teacher master laptop and fill in the ou=IT1 … in the ldap section of the configurator. The client or student config.json is the same as the master config.json except we hide the pictogram in the service-section. It doesn't matter because the installed software is NO master on the student laptops. The veyon student version is installed with GPO. The master version we do manually. Recently I found another user specific config file (UserConfig.json) in C:\Users\your_name\AppData\Roaming\veyon\Config\ This one is saving the last settings your looked in the master (screen settings, laptops you watched, ...). You can also change the background color. Give in < "BackgroundColor": "#AAAAAA", > under < "UI": { > to get a grey background in the master.
Thanks for the video! Can I ask how you can add the rest of your rooms into Veyon? My AD structure is very similar to how yours is set out, I have an OU named Workstations, then Subjects under that, then finally the room numbers. How can I get Veyon to synchronise the OU's as room groups?
I use wind 10. I have noticed that when on the master machine something is copied, the copied stuff is parked on the clipboard of the slave machine; and vice versa. How can this functionality be configured/restricted?
Also I never saw a finished product with keys installed on clients and a working configuration with the master viewing the clients?
Hello. Can I use several private key? One pryvate key - one classroom?
what settings need to be change in client PC if we are using LDAP
Useful video thanks. How do you do the Access Control for all ICT Suites for example, but the teacher can only see the computers in the ICT Suite that their teaching computer is in? For example whichever teacher is logged onto TEACH-ABC can only see ABC-01, ABC-02 etc. I can only seem to give them access to all computers in my Active Directory domain (using LDAP object trees) which is a bit of a security risk. I know in your tutorial you covered access control for a specific room and the whole OU which isn't quite what I need.
Sorry for the late replay. It all depends how you made your AD tree. I did only use computers here, but you can also do this with user groups. For example you can create a "veyon" master member group in AD, where you put all the teachers in with access to specific rooms. For more info about this checkout "AGDLP" in youtube. Check the Access Control settings at 4:00 to make the acces rule for the veyon teachers group. Best is to play with it for a while in a classroom and try out the different possibilities.
Thanks. Using Access Control settings I've added domain admins to Authorized user groups and for process access control rules I've created and added the veyon master member group with the following conditions:
accessing user is a member of veyon master group (ticked)
accessing computer is located in same room as local computer (ticked)
Action: allow access (ticked)
Under "Master" I have:
Automatically switch to current room (ticked)
Perform access control at startup (ticked)
Only show current room (ticked)
Hide local computer (ticked)
When I run veyon master as a master user, it only shows the computers in the same room which I what I want. However if I close Veyon master down and open it again, it shows the whole AD structure. If I close and open and third time, Veyon just crashes.
Doing it this way will mean i'm going to have two config files too. One for us domain admins which lists the whole AD structure, and one for teachers which just lists the ICT suites.
I see you asked this question also in Veyon GitHub. You get an answer soon from tobybox. He designed the program.
As I can see from the pictures there you should divide the suite section in the AD in classrooms with the PC's in it. Now you see all the PC's and Laptops under suites. So when you did divide the 'suites' enter the following line in ldap - Computer tree: OU=Suite-A,OU=Suites,OU=Device-Enterprise,OU=Toplevel. Hit Test afterwards.
Yeah but I'm still waiting for a reply from him. I thought he would of replied already so I don't think he is going to reply at all but we shall see so thank you for helping me since you're not part of the development team.
In AD, the ICT suites are already divided. I have IT1, IT2, IT3, IT4 etc all under Suites OU. In Veyon Configurator I set LDAP to OU=Suites,OU=Devices - Enterprise,OU=toplevel and if I hit test I get 409 results returned which is what I would expect.
If I use your example and change LDAP to: OU=IT1,OU=Suites,OU=Devices - Enterprise,OU=toplevel and hit test it returns 26 results for the 26 computers in that suite.
Are you suggesting I have a config file for each individual ICT suite? Each config file would connect to just one suite using LDAP.
Yes, that’s how we do it. It all depends how you build your LDAP or AD.
In our school the LDAP user-section is divided in admins, management, teachers and student classes. These are used for the ACL’s in veyon. Admins get full access, teachers and management restricted access, and students no access.
The LDAP computer-section is divided in rooms with there PC’s or laptops. The teacher PC’s or laptops in the computer rooms are the only ones with the master installed and can only see the PC’s from that room. The administrators have their laptop and the only ones with access to everything.
We use 2 different config.json files (saved on the server).
The master config.json with access to everything, for the admin laptops. In the classrooms we install this one too for the teacher master laptop and fill in the ou=IT1 … in the ldap section of the configurator.
The client or student config.json is the same as the master config.json except we hide the pictogram in the service-section. It doesn't matter because the installed software is NO master on the student laptops.
The veyon student version is installed with GPO. The master version we do manually.
Recently I found another user specific config file (UserConfig.json) in C:\Users\your_name\AppData\Roaming\veyon\Config\
This one is saving the last settings your looked in the master (screen settings, laptops you watched, ...). You can also change the background color.
Give in < "BackgroundColor": "#AAAAAA", > under < "UI": { > to get a grey background in the master.
All the UN are in the same scoop ?
still too hard for me to do it in my school. I think more basic and fundamental instructions are needed.
Agreed. I had no intentions of connecting veyin to my AD.
I made a video of Veyon install without Active Directory or LDAP: ruclips.net/video/0YimKRncnuw/видео.html
audio?
Help me, I can not use it LDAP