Managing LanSchool Settings on macOS Using an MDM

Managing LanSchool Settings on macOS Using an MDM

These instructions assume that the Mac devices in your organization are enrolled in and managed by an MDM system.  

A Mobile Device Management (MDM) system can be used to manage LanSchool Student and LanSchool Teacher Console settings. Most MDM systems allow importing .mobileconfig files in order to deploy profiles to devices. LanSchool provides two files that contain default settings for both LanSchool Student and LanSchool Teacher Console: 
These two files contain the default settings for LanSchool Student and the LanSchool Teacher Console, respectively. They can be customized for your organization's settings. 
  1. Download the two .mobileconfig files. 
  2. Customize the settings in each file for your organization. For example, to customize the “channel” setting for the LanSchool Student, edit the LanSchoolStudent.mobileconfig file, changing the “channel” value to the desired channel number.  
  3. Do not change anything except values. The .mobiconfig files are Apple XML plist files and must conform to a specific syntax. Check the syntax of the .mobileconfig files in Terminal like this: /usr/bin/plutil -lint ./LanSchoolStudent.mobileconfig. 

    If the file syntax is correct, the following displays: 
    /LanSchoolStudent.mobileconfig: OK

    Otherwise, an error displays. 
  4. Import the .mobileconfig files into your MDM system. 

  5. Deploy the LanSchoolStudent.mobileconfig profile file to your Mac LanSchool Student computers. 

  6. Deploy the LanSchoolTeacher.mobileconfig profile file to your Mac LanSchool Teacher Console computers. 

LanSchool Student 

The following is an explanation of the settings that can be customized in each .mobileconfig file: 

Setting 
Description 
Options 
Type 
Default 
AllowDumpUploads 
Controls whether or not crash log files are uploaded to our servers. Crash logs allow us to fix crashes in our software, and no private information is conveyed. 
0=do not allow 

1=allow  
integer 


AllowInternetMonitoring 
Controls whether the LanSchool Student software records website visits. 
0=do not allow 

1=allow 
integer 

AllowKeyboardMonitoring 
Allows the LanSchool Student software to record keystrokes. 
0=do not allow 

1=allow 
Integer 

Authorization 
Contains a one-way secure hash of the password for use in verification. Passwords are never stored. 

This value can be copied from 

/Library/Preferences/com.lanschool.student.settings.plist

for a student that has already been properly configured in Secure Mode.
N/A 
integer 

Channel 
As with a TV station, every LanSchool student who is “tuned in” to the same teacher channel is visible by teachers on that same channel. The channel number must be a number between 1 and 16,000.  See the Channel Strategies section below for more information. 
N/A 
number 

ClassroomServerAddress 
Contains the name or IP address of your LanSchool Connection Service (LCS).  Examples of this value would be “192.168.2.200” or “LANSCHOOL-LCS”.  A static IP address for the LCS is preferred above a hostname or dynamic IP address. 
N/A 
string 
“” (empty string) 
DetectTampering 
Controls whether the LanSchool Student software detects Ethernet and wireless tampering. If activated, when a student unplugs the ethernet cable or turns off Airport, the screen will be locked periodically until connectivity is restored. 
0=do not detect 

1=detect 
integer 

 InstallChromeExtension 
Controls whether the Web Helper Chrome extension is installed. This extension allows our software to collect web history and perform web limiting in Google Chrome. 
0=do not install 

1=install 
integer 

 LogLevel 
Controls whether or not logs are created by the LanSchool Student software. These logs are helpful if you are having issues and seeking                    help from our Support team. 
0=logging disabled 

1=logging enabled 
integer 

NotifyClassListLoad 
Controls whether a student is notified when loaded into a class by a teacher. 
0=not notified 

1=notified 
integer 

SecureMode 
Controls whether the LanSchool Student software communicates with teachers who have entered the correct password in the LanSchool Teacher Console. See also Authorization. 
0=off 

1=on 
number 

StealthMode 
Controls whether the Student software hides the system menu bar item. 
0=off 

1=on 
integer 

ssidWhitelist 
Contains a list of wireless SSID (i.e. wireless network names) that the student computer should be connected to. If the student connects to a SSID that is not on this list and items on this list are available, the computer is locked periodically until a connection is made to one of the SSIDs on the list.  
N/A 
array of strings 
empty array 
ssidWhitelistEnabled 
Controls whether the SSID whitelist above is used. 
0=not used  

1=used 
integer 


LanSchool Teacher Console Settings 

The LanSchool Teacher Console supports most LanSchool Student settings. These settings are used when a Teacher Console updates student software or when the teacher selects the Become A Student menu in order to temporarily run the LanSchool Student software on the teacher device. The LanSchool Teacher Console supports the following LanSchool Student settings: 
  1. AllowDumpUploads 
  2. AllowInternetMonitoring 
  3. AllowKeyboardMonitoring 
  4. Channel 
  5. ClassroomServerAddressAuthorization 
  6. LogLevel 
  7. SecureMode 
  8. StealthMode 
  9. ssidWhitelist 
  10. ssidWhitelistEnabled 
See the table above for more information on these settings. The LanSchool Teacher Console also supports the following settings: 

Setting 
Description 
Options 
Type 
Default 
AlertOnUpdate 
Controls whether the teacher is alerted when there is an update to LanSchool.  
false=don’t alert 

true=alert 
Boolean 
True 
AllowAudio 
Controls whether the teacher can listen and talk to students via the console. 
0=don’t allow 

1=allow 
integer 

AllowTaskmanLimiting 
Controls whether the teacher can prevent Task Manager/Activity Monitor from running  on student computers. Note that this does not activate the feature but merely enables it.  
0=don’t allow 

1=allow 
integer 

AutoApproveRemoteControl 
Controls whether the teacher is asked for permission to be remote controlled by a LanSchool Tech Console.  
false=don’t allow 

true=allow 
Boolean 
false 
DisableClassLists 
Controls whether the teacher can use class lists. 
false=don’t allow 

true=allow 
Boolean 
false 
DisableBrowseForStudents 
Controls whether the teacher can browse for students in order to create a class list. 
false=don’t allow 

true=allow 
Boolean 
false 
DisableDataTransmission 
Controls whether the teacher can change the network transport settings. 
true=cannot change 

false=can change 
Boolean 
false 
EnableChannelSelect 
Controls whether or not the teacher can change her channel. 
false=cannot change channel 

true=can change channel 
Boolean 
false 
NoRegistration 
Controls whether or not the LanSchool Teacher Console prompts to register the product. 
false=prompts 

true=does not prompt 
Boolean 
false 


Channel Strategy Recommendations 

The following are strategies for settings channels, depending on your environment.  
  1. Lab environment. In this simple type of environment, you can set all student computers to a specific channel, perhaps the lab room number. Configure the Teacher Consoles for the lab with that same channel. 
  2. Teachers using class lists. In this type of environment, we recommend installing students to a “home” channel of your choosing (1-16,000).  If many teachers are in the environment, it may not be practical to use managed profiles to configure a specific channel for each teacher. Instead, configure the Teacher Consoles so that each teacher is allowed to change her own channel. Use the EnableChannelSelect = true setting and do not specify a channel. These settings allow each teacher to change the channel manually to her unique channel (perhaps the room number).    
When a LanSchool Teacher Console loads a class list, students loaded into the class temporarily change their channels to match the teacher’s channel. Students should not be visible in the LanSchool Teacher Console before a class is loaded. If students are visible, it indicates a possible channel conflict with two or more teachers. 


    • Related Articles

    • Granting macOS Privacy Approvals for LanSchool Using an MDM

      Introduction For student devices running macOS Mojave (10.14) and later Apple introduced new privacy protection systems that must be configured correctly for LanSchool to work. It can be challenging to configure settings correctly so that all ...
    • Mass Deploying LanSchool Student for macOS

      Overview LanSchool provides the ability to mass deploy the LanSchool student client for Mac OS through the creation of a custom installation package. Once this package has been created, you will be able to use your software distribution system to ...
    • Mass Deploying LanSchool Teacher for macOS

      Overview LanSchool provides the ability to mass deploy the LanSchool teacher client for macOS through the creation of a custom installation package. Once this package has been created, you will be able to use your software distribution system to push ...
    • Installing LanSchool Student for macOS

      The following instructions will assist you in installing LanSchool on a student's Mac: Copy the student.dmg from the customer download to the student's machine. Double click the student.dmg to mount it. Double click on lanschool_student.pkg Read the ...
    • Installing LanSchool Teacher for macOS

      To install the software on a teacher computer follow these steps: 1. After downloading the LanSchool installers from the Customer portal, open the installation file folder. You can navigate to Mac and then click on the lanschool_teacher.dmg 2. Click ...
    • Popular Articles

    • Installing LanSchool Teacher for Windows

      Overview The following instructions will assist you with manually installing LanSchool Teacher on a single Windows teacher device. For information on installing the student client or mass deploying LanSchool throughout your organization, see Setting ...
    • Latest Release Notes

      LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Customer Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.1.0.42 ...
    • Limiting Application Use

      Overview Teachers can control the applications that are allowed to run on the student computers. The application limiting policy can stop ALL applications from running except for those specified in an "allow list" or can allow all application except ...
    • Limiting Website Use

      Overview Limit the websites that can be accessed by one or more student computers. The teacher can choose to restrict all web activity, allow only certain websites, or block only certain websites. This is often used to keep students focused or to ...
    • Configuring and Troubleshooting Wake on Lan

      Wake on Lan Configuration Your device manufacturer will be able to assist you with the Wake on Lan configuration.  That information is proprietary to the devices and is not provided by LanSchool. LanSchool utilizes Wake on Lan to power on the student ...
    • Recent Articles

    • LanSchool Teacher Channel Assignment Using Group Policy

      Overview LanSchool provides an option to utilize a PowerShell script at teacher login to change the LanSchool Teacher channel to a unique channel from a CSV file. This is recommended for customers who are not using a LanSchool Connection Server or ...
    • Logging On or Off Students Remotely

      Overview The LanSchool Teacher console has the ability to only log on wired and wireless Windows devices using Log On Students. The LanSchool Teacher console has the ability to log off wired and wireless Windows and Mac devices using Log Off Students ...
    • LanSchool Classic Video Tutorials

      For detailed information on how to use each feature of LanSchool Classic, visit the Using LanSchool Classic in the Classroom section of our Help Center. For quick, video demonstrations of each feature in action, visit our "LanSchool Classic Features" ...
    • Deploying LanSchool Using Group Policy

      Overview  The LanSchool Group Policy deployment guide is designed to assist with some basic settings and deployment using Active Directory Group Policy settings.  Please note that our support team can only provide limited assistance with configuring ...
    • Adding the LanSchool Teacher Console Shortcut to Desktop

      By default, the LanSchool Teacher Console will always be running the Windows system tray. To make it easier for teachers to launch, consider creating a shortcut for the LanSchool Teacher Console to place on the Desktop or pin to the Taskbar. Open the ...