Restricted Windows (Exam-mode )

[Predator]

Hello,
in our School the upcoming class will get Microsoft Surfaces to work with in classes.I have been asked to search for possible ways to make a exam safe environment, the Surface should have everything unlocked unless you are booting into exam mode. In exam mode it should boot an Image from an USB device and only files from the USB device should be accessible(no access to any files or other partitions).This could be achieved with a VM but the problem is that a VM can easily be minimized to access your data, so i need some kind of a bootable solution. I have thought of UnRaid for this but it seems a bit hard to configure it this way for all the students, but this is the only VM solution that came to my mind that you can´t tap out of. And of course it would be better if it uses freeware. Do you know anything that can achieve this?
It would also be ok if you had a VM in Windows as long as it is obvious that someone tried to cheat (detecting if the VM is minimized).

 

Thank you for your help

[tlink]

would this help you?
https://support.microsoft.com/en-us/help/231289/using-group-policy-objects-to-hide-specified-drives

[Matt_98]

12 minutes ago, Predator said:

Hello,
in our School the upcoming class will get Microsoft Surfaces to work with in classes.I have been asked to search for possible ways to make a exam safe environment, the Surface should have everything unlocked unless you are booting into exam mode. In exam mode it should boot an Image from an USB device and only files from the USB device should be accessible(no access to any files or other partitions).This could be achieved with a VM but the problem is that a VM can easily be minimized to access your data, so i need some kind of a bootable solution. I have thought of UnRaid for this but it seems a bit hard to configure it this way for all the students, but this is the only VM solution that came to my mind that you can´t tap out of. And of course it would be better if it uses freeware. Do you know anything that can achieve this?
It would also be ok if you had a VM in Windows as long as it is obvious that someone tried to cheat (detecting if the VM is minimized).

 

Thank you for your help

6

 

you can boot windows off a usb, then use gpo to hide the internal drive

[Predator]

OK thank you both looks good, i should also be able to disable network drivers and clone multiple USB Sticks and have a User without Admin permissions for the Exam.
Looks like a really straight forward solution.