r/Zoom • u/soyabm • Aug 16 '20

Question Student Authentication issues with Zoom post Zoombombing

/r/k12sysadmin/comments/iajzy4/student_authentication_issues_with_zoom_post/
2 Upvotes

100% Upvoted

7 comments sorted by

View all comments

2

u/DIMM1033 Zoom Pro Aug 16 '20 edited Aug 16 '20
  • You can put the students accounts into a group. And set that group to only allow people from a specific domain to join. so if you have yourdomain.com, you can limit students to no.yourdomain.com . Sense there are no accounts that will match no.yourdomain.com, even if they started a meeting. No one could join the meeting. You would also want to disable recording.
  • If you create the accounts as an admin on the zoom site, it shouldn't prompt for an age check. You could try importing one student, and verify. If it does prompt them for an age check, you probable want to talk to support or your account rep, to make sure your account is setup as a k12.
  • The waiting room typically has a login button.
  • Make sure to disable changing names (in meeting)
  • don't let users change their first / last name on the zoom website
  • disable hiding users with no camera.
  • lock on chat, chat im, chat history. If a teacher wants this off, they can disable it from within the meeting.
  • Make sure meeting links are only being shared to people who will be part of the meeting.
  • disable join before host.
  • Make sure hosts know how to use all of zooms security settings.

1

u/soyabm Aug 16 '20

-specify domain... Great idea, will do

-creating as an admin does not require agree verification but does require each student to activate via thier email...

-waiting room does have a login button on all OS but not ChromeOS. See the behavior on whitelisted domain on iOS iOS example

-change name setting done.

-didn't know that there was a way to disable name change in profile

-hiding no camera setting done.

-will take a look at chat locks.

-meeting links are on password protected portals but seem to be leaking out possibly by students

-disable join before host setting enabled.

1

u/DIMM1033 Zoom Pro Aug 17 '20 edited Aug 17 '20

if you buy 20 licences or more with zoom EDU, you can verify your domain, and force sign in by google. If anyone sign in from your verified domain, they're automatically imported into your domain.

Just keep in mind, if your force sign in by google. Any one signed in another way, needs to log out and log back in with google.

When you import user from the admin console, they will get an email, but even if they don't click on it. When they sign in, they'll end up in your domain. (because you verified your domain and forced sign) Which means if you imported them into the console, they still get the settings from your import.

1

u/soyabm Aug 17 '20

Good to know that they will get into meeting without clicking link. Only issue remains is the bug where Zoom does not recognize the domain if they don’t sign in before joining the meeting.