Troubleshooting "Security Locked Out" Message

Troubleshooting "Security Locked Out" Message

Overview

The most common reason that the Security Locked Out icon is displayed on the student thumbnails is because of a mismatch in the Secure Mode option chosen during installation of the teacher, student and/or LanSchool Connection Server software.

For more information on LanSchool Secure Mode, how it works, and how to configure it properly, see Configuring LanSchool Secure Mode.

Password Secure Mode

If you check Enable a Secure Mode and chose Password Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation, and enter the same password during all 3 installations.

NOTE: The students will not see this password. The password only allows the teacher to view the student screen. If the password is incorrect or the student was not installed with Password Secure Mode then Security Locked out will display on the thumbnail.

You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows or in the Status Menu for Mac.

If there is a letter 's' at the end of the version number then that signifies that the student was installed with Password Secure Mode, therefore the Teacher Console, Tech Console or LanSchool Connection Server were not installed with Password Secure Mode or the password is incorrect.

The student, Teacher Console, Tech Console or LCS will need to be re-installed with the correct security mode option in order to correct the security locked out issue. 

NOTE: If the teacher's password is compromised, it will be necessary to re- install both Teacher, Student and LCS computers with a new password. 


Active Directory Secure Mode

Active Directory Secure mode requires a LanSchool Teachers or LanSchool Tech Console Admins to be created on your Domain

If you check Enable a Secure Mode and chose Active Directory Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation 

You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows

If there is a letter 'd' at the end of the version number then that signifies that the student was installed with Active Directory Secure Mode.

There are a few issues that could cause Security Locked Out when using Active Directory Secure Mode.
  1. The student, Teacher Console, Tech Console or LanSchool Connection Server were not installed with Active Directory Mode.
  2. The teacher is not a member of the LanSchool Teachers group
  3. The tech is not a member of the LanSchool Tech Console Admins group
  4. The LCS is not a member of the domain and cannot see the LanSchool Teachers group.
  5. The LanSchool Teachers group may be "Domain Local" so that they can add members to it from two different forests that are linked by a two-way trust. 
    1. Change the Security Group type from "Domain Local" to "Universal" or...
    2. Raise the Domain Functional Level of their tree from "Windows 2000 mixed" or "Windows 2000 native" to something higher, like "Windows Server 2003" or "Windows Server 2008". 

    • Related Articles

    • Configuring LanSchool Secure Mode

      Overview LanSchool has two different, optional, security modes that can be enabled on installation called Password Secure Mode and Active Directory Secure Mode, and one or both may be selected. If the options are not properly installed, however, a ...

    • Troubleshooting Student Thumbnail Status

      Overview LanSchool Classic the teacher will see thumbnail size images of each student's screen. The teacher may see the student actively working on their device or they may appear in an offline state. The thumbnail may also display certain icons ...

    • Using the LanSchool Tech Console

      Overview The use model for Tech Console is quite similar to LanSchool Teacher consoles. The Tech Console can be launched from the LanSchool icon in the system tray for Windows or from the dock icon on Mac. The Tech Console includes a number of ...

    • Troubleshooting Missing Student Thumbnails

      Troubleshooting Missing Student Thumbnails without Class Lists Peer to Peer Check the channel that the teacher and student are configured to communicate on. To find the channel on the Teacher Console, go to the Administer menu > Preferences > Network ...

    • Selecting Chromebook View Modes (Active Tab View vs. Desktop View)

      Overview LanSchool Classic provides two different ways to display student screens of Chromebook students to teachers: Active Tab View and Desktop View. When the LanSchool Student app is deployed to Chromebooks, the administrator can define the ...

    • Popular Articles

    • Limiting Website Use

      Overview To block troublesome or distracting websites or limit students to a select few websites pertinent to the class, use the Limit Web feature in LanSchool Classic. The teacher can choose to restrict all web activity, allow only certain websites, ...

    • LanSchool Classic Teacher Guide

      LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...

    • Installing LanSchool Teacher for Windows

      Overview The following instructions will assist you with manually installing LanSchool Classic Teacher Console on a single Windows device. For information on installing the student client or mass deploying LanSchool throughout your organization, see ...

    • Latest Release Notes

      LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Classic Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.3.0.56 ...

    • Unloading LanSchool from the Student Device Temporarily

      Overview A teacher can temporarily unload the student agent from Windows or Mac device. This function is useful in situations where students must use an application that requires the LanSchool Student be removed or disabled, such as secure browsers ...

    • Recent Articles

    • Troubleshooting WiFi Tampering

      Overview With the latest version of Windows 11, LanSchool Classic is unable to retrieve a list of available SSIDs on the student machine unless Location Services is enabled on the device. Enabling Location Services To enable Location Services ...

    • Disabling Edge Split Screen

      Overview LanSchool Air is unable to limit the web in Microsoft Edge when the student uses the Edge Split Screen feature. The LanSchool Air extension does not register the second screen and will not block the website. It is recommended to disable Edge ...

    • End of Life LanSchool Classic Chromebook Student

      End of Life LanSchool Classic Chromebook Student Google is no longer supporting Chrome OS apps like LanSchool Classic on Chromebooks, as of ChromeOS version 132. However, users now have the option to enable a setting in their Google Workspace Admin ...

    • End of Life LanSchool Classic Android Student

      As of August 15, 2024 LanSchool Classic Android Student has reached End of Life and will no longer be developed.

    • Disabling Teacher Console Registration Prompt

      Overview New installations of LanSchool Classic Teacher Console will receive a prompt to register LanSchool. This prompt may be disabled to prevent disrupting teachers. Disabling Registration Prompt Using Registry Key Navigate to this policy key: ...