Troubleshooting "Security Locked Out" Message
Overview
The most common reason that the Security Locked Out icon is displayed on the student thumbnails is because of a mismatch in the Secure Mode option chosen during installation of the teacher, student and/or LanSchool Connection Server software.
For more information on LanSchool Secure Mode, how it works, and how to configure it properly, see Configuring LanSchool Secure Mode.
Password Secure Mode
If you check Enable a Secure Mode and chose Password Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation, and enter the same password during all 3 installations.
NOTE: The students will not see this password. The password only allows the teacher to view the student screen. If the password is incorrect or the student was not installed with Password Secure Mode then Security Locked out will display on the thumbnail.
You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows or in the Status Menu for Mac.
If there is a letter 's' at the end of the version number then that signifies that the student was installed with Password Secure Mode, therefore the Teacher Console, Tech Console or LanSchool Connection Server were not installed with Password Secure Mode or the password is incorrect.
The student, Teacher Console, Tech Console or LCS will need to be re-installed with the correct security mode option in order to correct the security locked out issue.
NOTE: If the teacher's password is compromised, it will be necessary to re- install both Teacher, Student and LCS computers with a new password.
Active Directory Secure Mode
Active Directory Secure mode requires a LanSchool Teachers or LanSchool Tech Console Admins to be created on your Domain
If you check Enable a Secure Mode and chose Active Directory Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation
You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows
If there is a letter 'd' at the end of the version number then that signifies that the student was installed with Active Directory Secure Mode.
There are a few issues that could cause Security Locked Out when using Active Directory Secure Mode.
- The student, Teacher Console, Tech Console or LanSchool Connection Server were not installed with Active Directory Mode.
- The teacher is not a member of the LanSchool Teachers group
- The tech is not a member of the LanSchool Tech Console Admins group
- The LCS is not a member of the domain and cannot see the LanSchool Teachers group.
- The LanSchool Teachers group may be "Domain Local" so that they can add members to it from two different forests that are linked by a two-way trust.
- Change the Security Group type from "Domain Local" to "Universal" or...
- Raise the Domain Functional Level of their tree from "Windows 2000 mixed" or "Windows 2000 native" to something higher, like "Windows Server 2003" or "Windows Server 2008".
If your students are Chromebook students that are showing Security Locked out and you do not have any of the LanSchool Secure modes enabled, you will need to edit your configuration file to make sure you have the password secure area blank i.e. "password_secure": { "Value": "" },
Related Articles
Configuring LanSchool Secure Mode
Overview LanSchool has two different, optional, security modes that can be enabled on installation called Password Secure Mode and Active Directory Secure Mode, and one or both may be selected. If the options are not properly installed, however, a ...Using the LanSchool Tech Console
Overview The use model for Tech Console is quite similar to LanSchool Teacher consoles. The Tech Console can be launched from the LanSchool icon in the system tray for Windows or from the dock icon on Mac. The Tech Console includes a number of ...Troubleshooting Student Thumbnail Status
Overview LanSchool Classic the teacher will see thumbnail size images of each student's screen. The teacher may see the student actively working on their device or they may appear in an offline state. The thumbnail may also display certain icons ...Troubleshooting Web Limiting
Overview With LanSchool, teachers can help students focus on their work by limiting online access to approved websites and even disabling internet access during tests and quizzes. LanSchool relies on the LanSchool Student client running on the ...Selecting Chromebook View Modes (Active Tab View vs. Desktop View)
Overview LanSchool Classic provides two different ways to display student screens of Chromebook students to teachers: Active Tab View and Desktop View. When the LanSchool Student app is deployed to Chromebooks, the administrator can define the ...
Popular Articles
Limiting Website Use
Overview To block troublesome or distracting websites or limit students to a select few websites pertinent to the class, use the Limit Web feature in LanSchool Classic. The teacher can choose to restrict all web activity, allow only certain websites, ...LanSchool Classic Teacher Guide
LanSchool Classic Teacher Console The LanSchool Teacher Console is the interface teachers will use to manage their classroom and students. It contains all the tools necessary for a teacher to effectively interact with students and create a ...Installing LanSchool Teacher for Windows
Overview The following instructions will assist you with manually installing LanSchool Classic Teacher Console on a single Windows device. For information on installing the student client or mass deploying LanSchool throughout your organization, see ...Latest Release Notes
LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Classic Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.3.0.12 ...Blanking Student Screens
Overview Blank student screens on your channel and disable student keyboards and mice. This feature is useful when you want to lecture without the distraction of students playing with their computers, or you need to quickly gather their attention. ...
Recent Articles
Using Assessment Mode
Overview Assessment Mode allows an Administrator or Teacher to put student devices into a secure, locked mode in order to take a test or exam. When applied, the students devices enter Assessment Mode. During this mode the Teacher can't interact with ...Downloading LanSchool Classic Installers
Overview LanSchool Classic Downloads are accessed in LanSchool Air. Classic customers will see all their information, expiration and licensing keys in LanSchool Air. Admins who use both LanSchool Classic and LanSchool Air only need to manage one ...Configuring LCS Redirection
Overview In multiple LanSchool Connection Service scenarios, LCS Redirection allows administrators to set a default student LCS configuration where a MASTER LCS will send students to their correct LCS. The choice of LCS is configured based on the IP ...Deploying LanSchool Classic Using Jamf Pro
Update March 26, 2024: Release of macOS 14.4 has broken the ability to use SSID Whitelisting. Anyone currently using SSID Whitelisting, it is recommended to delay updating to macOS 14.4 until this issue has been fixed. Overview The LanSchool Classic ...Disabling Fast User Switching
Overview LanSchool Classic does not support Windows Fast User Switching feature. The student client will not function properly when the computer is switched to a second user account. It is recommended to disable Fast User Switching in order for the ...