Troubleshooting "Security Locked Out" Message

Troubleshooting "Security Locked Out" Message

The most common reason that the Security Locked Out icon is displayed on the student thumbnails is because of a mismatch in the Secure Mode option chosen during installation of the teacher, student and/or LanSchool Connection Server software.

For more information on LanSchool Secure Mode, how it works, and how to configure it properly, see Configuring LanSchool Secure Mode.

Password Secure Mode

If you check Enable a Secure Mode and chose Password Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation, and enter the same password during all 3 installations.

NOTE: The students will not see this password. The password only allows the teacher to view the student screen. If the password is incorrect or the student was not installed with Password Secure Mode then Security Locked out will display on the thumbnail.

You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows or in the Status Menu for Mac.

If there is a letter 's' at the end of the version number then that signifies that the student was installed with Password Secure Mode, therefore the Teacher Console, Tech Console or LanSchool Connection Server were not installed with Password Secure Mode or the password is incorrect.

The student, Teacher Console, Tech Console or LCS will need to be re-installed with the correct security mode option in order to correct the security locked out issue. 

NOTE: If the teacher's password is compromised, it will be necessary to re- install both Teacher, Student and LCS computers with a new password. 


Active Directory Secure Mode

Active Directory Secure mode requires a LanSchool Teachers or LanSchool Tech Console Admins to be created on your Domain

If you check Enable a Secure Mode and chose Active Directory Secure Mode when installing the LanSchool Connection Server, Teacher Console or Tech Console, you must choose the same option in the Student installation 

You can verify if this is the case by checking the version number on the Students. If the student client was not installed in Stealth Mode, hover the mouse over the icon in the System Tray for Windows

If there is a letter 'd' at the end of the version number then that signifies that the student was installed with Active Directory Secure Mode.

There are a few issues that could cause Security Locked Out when using Active Directory Secure Mode.
  1. The student, Teacher Console, Tech Console or LanSchool Connection Server were not installed with Active Directory Mode.
  2. The teacher is not a member of the LanSchool Teachers group
  3. The tech is not a member of the LanSchool Tech Console Admins group
  4. The LCS is not a member of the domain and cannot see the LanSchool Teachers group.
  5. The LanSchool Teachers group may be "Domain Local" so that they can add members to it from two different forests that are linked by a two-way trust. 
    1. Change the Security Group type from "Domain Local" to "Universal" or...
    2. Raise the Domain Functional Level of their tree from "Windows 2000 mixed" or "Windows 2000 native" to something higher, like "Windows Server 2003" or "Windows Server 2008". 

If your students are Chromebook students that are showing Security Locked out and you do not have any of the LanSchool Secure modes enabled, you will need to edit your configuration file to make sure you have the password secure area blank i.e. "password_secure": { "Value": "" },


    • Related Articles

    • Configuring LanSchool Secure Mode

      What is LanSchool Secure Mode? LanSchool has two different optional security modes that can be enabled on installation called Password Secure Mode and Active Directory Secure Mode, and one or both may be selected. If the options are not properly ...
    • Using the LanSchool Tech Console

      Installing the LanSchool Tech Console Go to the LanSchool product download location, select the TechConsole folder and double-click TechConsole.msi for Windows or lanschool_tech_console.dmg for Mac. Click Next. Read the license agreement that ...
    • Troubleshooting Student Thumbnail Status

      Thumbnail  Status The student's device is communicating with the Teacher Console. When viewing large or medium thumbnails, Student's Name and Computer Name display below the thumbnail. When using Class Lists, this means that the Teacher Console never ...
    • Troubleshooting Web Limiting

      Overview With LanSchool, teachers can help students focus on their work by limiting online access to approved websites and even disabling internet access during tests and quizzes. LanSchool relies on the LanSchool Student client running on the ...
    • Selecting Chromebook View Modes (Active Tab View vs. Desktop View)

      This feature works with student Chromebooks and requires LanSchool 8.0.2.82 or higher. LanSchool provides two ways to display live thumbnail images from student Chromebook screens: Active Tab View Desktop View When the LanSchool Student app is ...
    • Popular Articles

    • Limiting Website Use

      Overview Limit the websites that can be accessed by one or more student computers. The teacher can choose to restrict all web activity, allow only certain websites, or block only certain websites. This is often used to keep students focused or to ...
    • Latest Release Notes

      LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Customer Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.1.0.82 ...
    • Installing LanSchool Teacher for Windows

      Overview The following instructions will assist you with manually installing LanSchool Teacher on a single Windows teacher device. For information on installing the student client or mass deploying LanSchool throughout your organization, see Setting ...
    • Limiting Application Use

      Overview Teachers can control the applications that are allowed to run on the student computers. The application limiting policy can stop ALL applications from running except for those specified in an "allow list" or can allow all application except ...
    • Configuring and Troubleshooting Wake on Lan

      Wake on Lan Configuration Your device manufacturer will be able to assist you with the Wake on Lan configuration.  That information is proprietary to the devices and is not provided by LanSchool. LanSchool utilizes Wake on Lan to power on the student ...
    • Recent Articles

    • Deploying LanSchool Classic Using Intune

      Overview The LanSchool Classic for Windows agent supports a number of different deployment methods and tools using a MSI. See  Mass Deploying LanSchool Student for Windows for more detailed instructions. Please note that our support team can only ...
    • Using the SetChannel.exe Utility

      Overview LanSchool Classic comes packaged with utilities that can help administrators with making changes to already installed clients. The SetChannel.exe utility can be used to update local Teacher or Student Channels, make changes to the LanSchool ...
    • Disabling Speak to Class

      Overview By default, LanSchool Classic instructors are able to speak directly to the class using the Teacher Console. Some organizations need to prevent instructors from speaking to students with LanSchool Classic. Administrators can disable the ...
    • Remotely Configuring Mac Teacher Console after Installation

      Overview If changes need to be made to the LanSchool Teacher Console settings after installation is complete, the lstconfig utility is a tool that can be used to aid in the remote configuration. The lstconfig utility is provided in the installation ...
    • LanSchool and VDI Environments

      Overview LanSchool Classic currently does not support VDI Environments due to the numerous types of environments, however, documentation was provided by a customer who had successfully setup LanSchool Classic in their VDI Environment. Other ...