Overview:

Active Directory (AD) is a Microsoft technology used to manage computers and other devices on a network.  Active Directory allows network administrators to create and manage domains, users, and objects within a network.  The SmartLab uses Active Directory to create user logins for Windows computers.  Each user is then assigned a folder of the same name within the Learner Drive where work can be saved without Deep Freeze deleting it. 

Options in Creating Active Directory Accounts:

There are a few options to use when creating Active Directory Accounts.  The decision is up to the facilitator or district on how they would like to manage Active Directory. 

Option One

The recommended option of CLS is that the facilitator creates a user for each individual student.  This will allow the permissions built into Active Directory to function effectively. 

Option Two

The facilitators can decide to create logins based on grade level or class period, where all students in first period are using the same login but second period is using something different. 

Option Three

The facilitator may decide to have one basic username and password for all students.  This is most appropriate for Primary age students. 

Permissions in Active Directory:

The permissions are setup and run by a specific batch file, learner.bat.  It consists of a series of commands to be executed by the command-line interface stored in plain text.  

• Allows the user to have their own login
• Allows facilitator to manage login credentials by having control of user creation and password changes
• Creates a folder of the same name within the Learner Drive
• Gives access to additional drives
  • Students can get to \\CLS-Server\Learners and \\CLS-SERVER\MediaLibrary
  • Facilitators can get to \\CLS-Server\Facilitators, \\CLS-SERVER\Transfer, \\CLS-SERVER\Administrator, and \\CLS-SERVER\MediaLibrary
• Student can see other folders, but do not have the permissions to edit or modify any of the content stored outside their own folder

Creating Accounts in Active Directory:

Creating Student Accounts:

Creating Student Active Directory accounts allows the students to have their own logins. The facilitator will create the username and password combination for the student and manage all credentials. 

• Open Active Directory on the server

• Expand the arrows on the left side of the screen to expose the Users tab under the SmartLab Domain

• Find the !LearnerTemplate listed on the right column 

• Right click on !LearnerTemplate and choose copy to create a new user
  • When creating student accounts, only copy that template as it's set with specific permissions.  Not following that can hinder the performance of Active Directory and folders within

• Fill out the information for the student (first name, last name, and user logon name.  The rest will auto-populate)
  • User logon name will be what the student uses for the username when signing in
  • Some schools use student IDs rather than name
• Click Next

• Create a password for the student
  • Ensure check is next to "user cannot change password"
  • Ensure check is next to "password never expires"
  • No checkmark needed for "user must change password at next login"
  • No checkmark needed for "account is disabled"
• Click Next

• Click Finish
• A student user will show up in Active Directory as the name just created
• The same user will have a new folder within the Learner Drive with the same name

Creating Facilitator Accounts:

Creating a Facilitator Active Directory account is very similar to creating one for the student.  The only step that changes is the template that would be copied.  The !FacilitatorTemplate has built in administrative permissions. 

NOTE: This is not necessary for all labs as the Einstein login also has administrative permissions.  You would use separate facilitator logins when there are multiple facilitators in one lab, therefore each facilitator can have their own desktop and saved documents specific to their own login. 

• Open Active Directory on the server
• Expand the arrows on the left side of the screen to expose the Users tab under the SmartLab Domain
• Find the !FacilitatorTemplate listed on the right column 
• Right click on !FacilitatorTemplate and choose copy to create a new user
  • When creating facilitator accounts, only copy that template as it's set with specific permissions.  Not following that can hinder the performance of Active Directory and folders within
• Fill out the information for the facilitator (first name, last name, and user logon name.  The rest will auto-populate)
  • User logon name will be what the facilitator uses for the username when signing in
• Click Next
• Create a password for the facilitator
  • Ensure check is next to "user cannot change password"
  • Ensure check is next to "password never expires"
  • No checkmark needed for "user must change password at next login"
  • No checkmark needed for "account is disabled"
• Click Next
• Click Finish
• A facilitator user will show up in Active Directory as the name just created
• The same user will have a new folder within the Facilitator Drive with the same name

Resetting Passwords for Active Directory Accounts

Passwords are easily forgotten and there are times they need to be reset.  

• Open Active Directory on the server
• Expand the arrows on the left side of the screen to expose the Users tab under the SmartLab Domain
• Find the student or facilitator that needs a password reset
• Right click on the username
• Choose Reset Password

• Type in a new password
• Confirm the new password by typing it in a second time
  • Ensure there is no checkmark for "user must change password at next logon"
  • Ensure there is a checkmark next to "unlock the user's account"

Permission Issues with Saving to Folders and Drives:

There are times when saving to the specific Learner folder or drive doesn't work properly.  The permissions are setup and run by a specific batch file.  It consists of a series of commands to be executed by the command-line interface stored in plain text.  

• Open Active Directory on the server
• Expand the arrows on the left side of the screen to expose the Users tab under the SmartLab Domain
• Find the student or facilitator experiencing issues
• Right click on the name and choose Properties

• Click on the Profile Tab
  • Ensure there should be a logon script listed as learner.bat
  • The Home Folder should show the specific student or facilitators U drive

• Navigate all the way to the end of the Home Folder path where it lists the user's name
• Change just the user's name to %username%

• Click OK
• This will force the batch file to rerun and map the permissions appropriately

Deleting Active Directory Accounts:

Deleting Active Directory accounts are appropriate for storage purposes, and it is also easier to manage.  Facilitators can delete users as students graduate, move locations, or do not return to the SmartLab. 

NOTE:  The folder that exists in the Learner Drive will also have to be deleted

• Open Active Directory on the server
• Expand the arrows on the left side of the screen to expose the Users tab under the SmartLab Domain
• Find the student or facilitator to be removed
• Right click on the name and choose Delete

If you require assistance with Active Directory, contact support@clsonline.com