Message-ID: <11308618.1182532580186.JavaMail.joeescobar@joe-escobars-computer.local>
Date: Sat, 27 Jan 2007 01:31:38 -0800 (PST)
From: moodleadmin
Subject: Important: securing tests in Moodle
Mime-Version: 1.0
Content-Type: multipart/mixed; 
	boundary="----=_Part_91_1597837.1182532580185"
GWItemID: 45BA490A.LCC-Mail.MC_PO3.100.1346735.1.3196.1

------=_Part_91_1597837.1182532580185
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit


Dear faculty,

If you are using secure testing in any of your Moodle courses (tests which you want to be accessed only from designated testing labs), please read this message.  There are a couple of items we need to bring to your attention.

First: by default this term, tests are not secured; the secure workstations field is blank, which means that your tests can be accessed from anywhere until you follow the instructions below to restrict access.  Second: we've changed the list of secure IP addresses that you need to enter in your tests; please use this new list instead of the one from last term.  Finally, we've designed a way to supplement the secure workstation list so that those of you who need to allow students to take proctored exams can do that by means of a combination of the quiz password/secure workstation list.  More details on that below.


Securing your test 

If you want your tests to be secure--that is, if you want to restrict them so that students can only take them from the standard secure testing labs that are maintained by Lane, then you need to do the following--your tests will not be secure until you do:

- Go the test you wish to secure (go to the course, find the quiz and click on it).
- Click "Update this quiz."
- Locate the secure workstation list near the bottom of the Updating Quiz screen.  This is the third item from the end; look for the following prompt message: "IMPORTANT Remove all numbers from this field to make your quiz accessible from ANY computer."
- In the text box to the right of that prompt, copy and paste the following address list, exactly as you see it below.  Don't include any whitespace (the first character in the box should be 0 from "0.0.0.0", the last should be 7 from "/27").  Don't make any changes to this list--no additional commas or whitespace characters.  If you do, your test may not be secured.

	0.0.0.0,10.9.129.33,10.1.0.167,10.22.0.142,172.20.33.161/29,172.20.32.15/27

- At the bottom of the window, click "Save changes."

Your test is now secure, which means it can only be accessed from a machine whose IP address is included in the ranges specified above.  If you've used secure tests in Moodle before, then you're familiar with that means--students must go to one of the sanctioned labs to take your test (for example, the Social Sciences testing lab in Center 456, or the designated machines at remote campuses like Florence and Cottage Grove).

As the prompt indicates, you can open up your quiz again by deleting the contents of the secure workstation list.  If that list is empty, then students can access the quiz from anywhere.



A new feature: password access to secure tests

A number of you asked if we could restrict access by requiring EITHER that a student take the test at a secure workstation OR that a proctor enter a password.  We've customized Moodle to allow this.  This is helpful for those instructors who have remote proctors for distance learning students.  If a student is at a secure facility on an approved workstation, no password is required, but for a student who takes the test from a machine that isn't on the approved workstation list (e.g., a machine in another country), you can set a password that must be entered before the user can access the test.

To use this feature, just do the following:

- Go the quiz you wish to secure (go to the course, find the quiz and click on it).
- Make sure you have the list from the "Securing your test" instructions (above) entered in the secure workstations list.
- Enter the password you want to use in the "Require password" box.

That's it.  When a student opens the test from a secure workstation, the password isn't required.  But when you have a student taking a proctored test from an unsecured station in a remote location, the proctor will have to enter the password to give the student access to the test.  (If no password is set, then access is only allowed from workstations on the approved list.)


Questions?

If you're unsure about whether your tests are secure, or whether your want them to be secure, or how any of this works, please don't hesitate to contact me.

David Walton


===============================================
David Walton
Moodle System Administrator
Lane Community College
For enrollment, course creation, logging in, or general server issues, email moodleadmin@lanecc.edu
For faculty assistance using Moodle, email online@lanecc.edu
Voice: 463-3367
===============================================

------=_Part_91_1597837.1182532580185--
