IS Decisions logo

New York’s Albany City School District deploys UserLock to manage network access across its schools

  • Albany City School District, New York
  • Education
  • United States
New York’s Albany City School District deploys UserLock to manage network access across its schools

Albany City School District, is the public school district of Albany, New York. The Kindergarten to 12th grade (K12) school district serves more than 9,000 students and 1,800 faculty members across 17 schools including 11 elementary, three middle, a prekindergarten-grade 8, an alternative education school, a comprehensive high school, and a library.

Like many schools, students can access most computers outside administrative areas, such as those in classrooms, libraries and other study places. However, students and faculty members are assigned different levels of access to the network so it is important to ensure that all access is carefully managed and monitored.

"Computer access is essential for students and teachers alike, but this access needs to be managed properly as it can lead to significant misuse. UserLock is the ideal solution that helps us to meet our network access objectives effectively. "

Don Manning - Server Administrator

The Challenge

Stronger security and access controls for student and staff network access

All schools in the district, as well as the library, have their own computer lab. Each classroom has a computer for registration purposes but there are also computers available in classrooms for breakout sessions. In total, there are almost 6,000 computers in the school district.

However, at most 2,500 computers are in use at any given time. For the IT team, this brought up two main concerns. The first is that users were logging on to more than one machine at the same time (concurrently). The second, and more serious concern, is that a student could potentially access a computer that a faculty member did not log off from.

For example, there was an incident where a teacher left one of the computer labs without logging off, leaving access open for a student to send a message to the printer in the principal’s office. In this case, it was a bomb threat. Because of the seriousness of the situation, the police got involved and were able to trace it back to the computer in the lab and to the teacher who was logged in. Naturally, this was a situation the school district wanted to prevent from happening again.

Albany City School District’s IT team needed a solution that would help them limit student and staff logins, particularly as allowing concurrent logins reduced the chance of finding out if someone did something inappropriate.

The school district used Windows Active Directory which offered some login controls and this worked well for several years. Unfortunately, the level of login control offered in native Windows Active Directory became insufficient, and after a while failed to meet the school district’s network access security needs.

The Solution

Simple and non-disruptive solution leverages and extends existing Active Directory investment

To find a solution, the school district's Server Administrator, Don Manning, started with a Google search. That's where he discovered IS Decisions’ network access security and login auditing software, UserLock.

As part of the evaluation process, Manning spoke to other school districts using UserLock to gather feedback. It was important to know that UserLock was being used in other school districts and this influenced the IT team's decision on whether they would move forward with the implementation.

Manning evaluated UserLock extensively, testing it within the tech department before rolling it out to the whole network.

The process to set up UserLock was easy and only took four hours, which was a lot less compared to some of the other systems the school district had set up in the past (such as email, student management, and database systems). UserLock was easy to integrate with existing infrastructure because it works with Active Directory but is non-invasive and does not change the Active Directory structure or schema.

The Result

Reduced risk of security issues

Following UserLock’s deployment, if students shared their details with all their friends, the system just would not work for them. Restricting concurrent logins would help deter students from sharing logins and passwords because that will restrict their own access to the network.

Meanwhile staff logins were also more secure, with automatic logoff procedures and monitoring made possible for administrators to view access in real-time as well as audit and report.

Albany City School has been using UserLock since 2014.