Where to start organizing a network of computers at school?

Question

System administration

Hello.
At school, in the computer science class, I want to unite all computers in a network.
To:
1. It was possible to install programs from one source (server, repository) so as not to constantly download the same information for all computers from an external network.
2. To keep all installation programs on one computer.
3. To be able to manage all computers from the main computer (laptop). Tune. See what the student is doing, restrict access or actions.
4. Set up a security system so that they do not climb onto unnecessary sites (this is a whole problem in schools now)
5. So that each student has his own desktop or folder, which only the owner can view.
6. So that you can connect from home to the desired (or main) computer and download or add the desired file.
7. So that teachers do not install the left software. And it was possible to solve their problems remotely. It seems that you can somehow bring it into one domain so that the accounts are stored on the same computer.
8. To be able to contact the right teacher through the computer, if he is not at home and not at school.
At the moment, I want to figure out how to set it all up so that it works in at least one class. What you need to know for this, what software and what you recommend to read.
Most Windows computers. There is Mac Os and very little Linux. Therefore, to install it on all Linux computers will not work. Most teachers barely mastered Windows at a basic level.
It would be great to see some kind of step-by-step plan of what needs to be done and what should end up. Accordingly, what you need to read at each stage in order to implement everything yourself.

Answer 1

The optimum is one computer under *NIX for the Internet gateway and two computers under WinServer with Active Directory controllers (primary and backup). On one of them is WSUS for Windows Automatic Updates.
1, 2. Shared directory on one of the Windows servers or Samba on *NIX.
3, 6. Remote control programs - TeamViewer, Remote Admin, free - TightVNC.
4. Firewall on the gateway and a proxy server with a list of white addresses, such as Squid.
5. Either shared folders or a portable Active Directory profile with a file size limit.
7. Setting the rights, the normal user should not work with the rights above "User". It is possible through Active Directory.
8. SMS or call by cell.
It is better to start by looking for funds, since the pleasure is not cheap, two Windows Servers and at least Windows Pro per computer for each user (do not include Windows Home in the domain). Then raise the domain, enter all Windows computers into it, create accounts and distribute rights. Raise WSUS. Set a gateway, a proxy with a link to AD, define a list of allowed addresses. Raise a file server on one of the Windows Servers or *NIX (Samba), bind to a domain, create folders and assign rights.

Answer 2

First, write the requirements and formalize them.
they say it is necessary:
​​1. central authorization (ms active directory)
2. ban on launching / installing p / about anyone (group policies to prohibit the launch of everything except c:\windows + program files) on teachers + students accounts)
3. ..
Well, look further .
the squid proxy server, by the way, is perfectly fastened to AD and can set up ACLs for AD user groups both in terms of speed and allowed sites.

Answer 3

0. Since the school does not allocate funds, I do not have the opportunity to purchase expensive programs. The idea to make a network arose out of curiosity and a desire to develop further.
I was assigned a class to conduct a circle.
1. On a PC in the classroom, I can install additionally Linux as a second OS.
2. Install/uninstall/manage programs on the class PC through my laptop. To be able to manage remotely from home. So that programs are installed from one place (dedicated PC in the classroom or my laptop).
3. Access policy. So that students can run only those programs that are allowed in the lesson. So that you can turn off access or restrict access to certain sites. So that students do not change the design style of the workspace (This is a whole problem, students change everything, delete other people's folders, put pictures of erotic content on the desktop, change settings in programs).
4. Manage accounts and download from one machine. If it is difficult and costs money, then you can refuse.
In general, the main problems that I encountered.
1. Installed Ubuntu. I am asked to edit a Word file or a Presentation, but it looks completely different to me. Therefore, I thought that it would be possible to remotely connect to one of the computers at school and edit the necessary files.
2. Schoolchildren ruin computers, I would like to limit their mischief and that after them it was always clean. Important files, the results of the lesson, save to some place.
3. You often have to install and fix something on computers. I want to replace the sea of ​​disks with a network drive.