Administrator Guide for Respondus LockDown Browser Instructure Canvas (Version 1.0 - October 2012) Table of Contents Getting Started - Introduction - Overview of Browser Application - Overview of System Administrator Responsibilities Administrator Functions - Login to Administrator Area - Institution ID - Control Panel - Server Profiles - Local Settings File - Configuring the Canvas Server for LockDown Browser Distribution and Installation of Respondus LockDown Browser - System Requirements - Student and Lab Editions - Managed Installations and Updates - Distribution of the Setup Program - Installation of Browser - Updating Respondus LockDown Browser Issues with Firewalls, Content Filters and Proxy Servers Connection Diagnostics Instructor Guide - Introduction - Preparing a Quiz for Use with Respondus LockDown Browser - Determining if LockDown Browser Settings are Set Correctly - Additional Tips and Suggestions - Making Online Quizzes Even More Secure - Advanced Features - Calculator - Print - Spreadsheet Viewer - Working with Students 1 Getting Started Introduction Respondus LockDown Browser™ is a customized browser that increases the security of online testing in Instructure Canvas. When students use Respondus LockDown Browser to access a quiz, they are unable to print, copy, go to another URL, or access other applications. Students are locked into a quiz until it is submitted for grading. Overview of Browser Application Respondus LockDown Browser is a client application that is installed to a local computer. It provides a custom interface for the Internet Explorer (Windows) or Safari (Mac) software that is already installed on the computer. It does not modify an existing copy of Internet Explorer or Safari, but rather, installs a separate program that will display the custom interface when it is started. Respondus LockDown Browser uses the same security features and service packs that are currently installed for Internet Explorer or Safari. Installing Respondus LockDown Browser won’t modify the current version of Internet Explorer or Safari in any way. Respondus LockDown Browser creates a “locked” testing environment for Canvas and includes the following features: Quizzes are displayed full-screen and cannot be minimized Quizzes cannot be exited until submitted by users for grading Task switching or access to other applications is prevented Printing functions are disabled Print Screen and capturing functions are disabled Copying and pasting anything to and from a quiz is prohibited Right-click menu options are disabled (Windows); key+click options are disabled (Mac) Browser menu and toolbar options are disabled except Back, Forward, Refresh and Stop Function keys (F1-F12) are disabled Source code for the HTML page cannot be viewed URLs cannot be typed by the user Hundreds of screen capture, messaging, screen-sharing and network monitoring applications are blocked from running The browser automatically starts at the institution’s login page for Canvas Links in questions that point to other servers don’t compromise the “locked” testing environment Pages from the quiz aren’t cached or stored in Internet Explorer’s history listing And many other features... Respondus LockDown Browser is not intended to replace the browser used by faculty or students within Instructure Canvas. Respondus LockDown Browser is only intended for use by students while taking a quiz that are set for use with Respondus LockDown Browser. This browser has not been tested for use in other areas of Canvas. Technical Requirements for Browser Installation Windows Windows 8, Windows 7, Vista, XP Internet Explorer (configured to the requirements for Canvas) 4 MB of permanent space on the hard drive Mac OS X 10.5 or higher Safari browser (configured to the requirements for Canvas) 3 MB of free hard drive space 2 Overview of System Administrator Responsibilities The administrator of the Respondus LockDown Browser license is provided access to the “Administrator Area” of the Respondus web site. This area includes a “Control Panel” and important details for downloading and distributing the Respondus LockDown Browser software to faculty and students. See the section below “Administrator Functions” for further details. The administrator of Instructure Canvas must configure the server to use Respondus LockDown Browser. This step must be completed before Respondus LockDown Browser can be used with Instructure Canvas. The configuration process is described in the section “Configuring the Canvas Server for LockDown Browser”. Finally, the license administrator will want to provide faculty and students information on how to use Respondus LockDown Browser. The “Instructor Guide” and “Student Guide” is provided at the end of this administrator guide, but there are also “Quick Start Guides” and demonstration movies available from the Respondus web site. 3 Administrator Functions Login to Administrator Area The login page for the Administrator Area of the Respondus web site is located at http://www.respondus.com/campus-portal/login.php. The User ID and Password for accessing this area is contained in the welcome email that was sent to the administrator of the license. Once logged in, select the product link “LockDown Browser License.” This page will display account information, server profiles, a link for the Control Panel, a download area for the Respondus LockDown Browser software, user guides, and other information. Institution ID Each institution is provided with a unique “Institution ID” which is displayed throughout the Administrator Area for Respondus LockDown Browser. The Institution ID is used to link a client installation of Respondus LockDown Browser to a particular institution. In situations where the administrator or user is asked to enter the Institution ID, only enter the numeric portion of the Institution ID (not the name of the institution itself). Control Panel The Control Panel allows the administrator to create, modify or delete a “server profile” for an institution. Warning: Changes to the Control Panel are institution-wide and will appear immediately to faculty and students. Use extra caution within the Control Panel area. Server Profiles The functions and appearance of Respondus LockDown Browser are determined by the server profile(s) created by the administrator of the license. For example, one setting in the server profile specifies the login page for the institution’s Canvas server, which is then used by the browser when it is first started. A server profile is created for each distinct course management system that’s in use at an institution. Most institutions will have only one server profile. If more than one server profile is created, students must select from a list of servers each time Respondus LockDown Browser is started. By default, the server profile data for an institution is stored at the Respondus web site. When Respondus LockDown Browser is started, it will automatically go to the Respondus web site to obtain this information. However, an administrator can create a “local settings” file so that the server profile information is obtained from a local network or drive (see Local Settings File). Server profiles are created, modified, and deleted from the Control Panel area. A server profile requires the following information: Institution - The name and ID number assigned to the institution are displayed here. Consortium licenses may have multiple institution names and IDs listed. Make sure the correct institution is selected before making changes to a server profile. Server Profile Name - Enter a name that succinctly describes the course management system server (eg. “Canvas at ABC College”). If two or more server profiles are created for an institution, students will be presented with a list of the server profile names when 4 Respondus LockDown Browser is started. They will need to choose a server before continuing. Check for a newer version of LockDown Browser – This option requires Respondus LockDown Browser to check for a newer version of the application each time it starts. The "Yes" setting will require all copies of LockDown Browser to check for a newer version, even if a "local settings" file is being used to obtain the server settings. The "Yes, except computers using local settings" will force a version check, but not if a "local settings" file is being used. Learning Management System - Select the learning management system being used at the institution: Instructure Canvas Login Page for LMS - Enter the URL for the login page of your institution’s Canvas server. If the login page is only available via a portal page, enter that URL instead. (The URL that is entered will be the start page for Respondus LockDown Browser.) Server subdomain - Enter the subdomain for the Canvas server, such as “canvas.abccollege.edu”. Do not include “http” or “www” in the server domain. The following settings are optional for a server profile: Proctor Options password to exit during quiz - If a password is entered here, it will allow a proctor to assist a student in closing LockDown Browser during an assessment. This function is generally not needed because a key goal of LockDown Browser is to force students to complete the assessment before closing the browser. Administrators should be careful about distributing this password to proctors because if it falls into the hands of students, it will allow them to exit the browser at will during an assessment. During an assessment, the proctor can use this feature by clicking the ( i ) button on the toolbar, selecting Proctor Options, and then entering the password. Require Minimum Version Date – It is possible to force students to use a version of LockDown Browser that has been issued after a specified date. If the version is older than the date specified, then students will be forced to upgrade or exit the browser. Add to Blacklist - Hundreds of “blacklist” applications are prevented from running concurrently with LockDown Browser, including screen-capture, internet messaging, screen-sharing, virtual desktop, remote desktop, VNC, network monitoring and other communication applications. To append to the built-in blacklist, enter the executable file name. If the application uses a different “image name” in the Windows Task Manager, enter that name instead. Applications added to this list should be separated by a comma (eg. ScreenWatcher.exe, VideoGrabber.exe). LockDown Browser will block these applications at startup and offer to close the applications for the user. Remove from Blacklist - Hundreds of applications are blocked (ie. blacklisted) by LockDown Browser, including screen-capture, internet messaging, screen-sharing, virtual desktop, remote desktop, VNC, network monitoring and other communication applications. However, it is possible for an administrator to allow a blacklisted program to run in the background when Respondus LockDown Browser is started. This option, essentially, removes an application from the blacklist. It’s important to note that students will be unable to “switch” to such an application once the browser has started. It simply allows the other application to continue running. Thus, this feature is only useful for certain applications, such as screen monitoring software or video capture software, where it runs in the background. To allow a Windows application to run in the background, enter the executable file name (eg. XYZ-Monitor.exe). If the Windows application uses a different “image name” in the Windows Task Manager, enter that name instead. For Mac applications, enter the application name without the ".app" extension (eg. MacMonitor). Applications added to this list should be separated by a comma (eg. XYZ-Monitor.exe, ABC-Chat.exe, MacMonitor). 5 Local Settings File Each time Respondus LockDown Browser is started on a client computer, it will look for a settings file (servers.cfg) that contains the Server Profile settings for the institution. By default, Respondus LockDown Browser will go to the Respondus web site to obtain these settings. However, an administrator can create a “local settings” file so that the settings are obtained from a local network or drive, thus bypassing the need to connect with the Respondus web site at startup. This approach is sometimes preferred in lab settings where the Respondus LockDown Browser software is installed on a network. It’s important to understand that if client computers are set up to use a local servers.cfg file, they will need to be updated each time the administrator makes a change with the Control Panel. The file will also need to be updated once a year when the license for Respondus LockDown Browser is renewed at the institution. These are important considerations when deciding whether to use a local settings file. To create a local settings file, log into the Administrator Area at the Respondus web site, select the product Respondus LockDown Browser, log into the Control Panel, and then select the link “Create a local settings file.” A list of the Server Profiles is shown. If there are multiple server profiles, select those that should be included in the local settings file. Then click the “Create File” button. You will be prompted to save the file to a local drive -- name the file “server.cfg”. Once saved, copy the server.cfg file to the “Respondus LockDown Browser” folder on the client computer (typically c:\Program Files\Respondus LockDown Browser\ ). For Mac computers, control-click on the application to bring up the contextual menu and select "Show Package Contents". Then copy the server.cfg file to this location. Once the server.cfg file is copied to the local computer, Respondus LockDown Browser will now obtain it’s settings from the server.cfg file rather than from the Respondus web site. The local settings file can be removed at any time by deleting “server.cfg” from the client computer. Configuring the Canvas Server for LockDown Browser If you are a Canvas Cloud customer, simply request that Instructure enable Respondus LockDown Browser for your institution and optionally provide them the Respondus LockDown Browser URL (see below for full details). If you are a Canvas OnSite (self hosted) customer, follow these steps to enable the Respondus LockDown Browser on your server. Steps to configure the Canvas Server for LockDown Browser 1. 2. 3. 4. 5. Login to Canvas as the administrator and navigate to the Plugin Settings page. Select the Respondus LockDown Browser Plugin. Select All Accounts from the Settings pull down. Select the “Enabled” checkbox. Optionally you may enter the LockDown Browser Download URL (see below for full details) and press “Apply”. 6 The LockDown Browser Download URL entered should match the page where instructors and students can download the setup program for the Respondus LockDown Browser client software. (The URL for your institution is provided in the Administrator Area of the Respondus web site.) If a student attempts to use a regular browser to access an assessment that requires Respondus LockDown Browser, a warning message will be displayed along with the link for downloading the LockDown Browser software. This entry may be left blank if students aren't permitted to install the LockDown Browser themselves (i.e. it is only used on machines set up by IT staff), then this download URL will not be presented to users. The URL that is entered depends on whether you want students to download the Respondus LockDown Browser setup application from the Respondus web site or from a page on your institution’s own web server. To have students download it from a page on the Respondus web site, enter the URL shown below (but BE SURE to replace the 9-digit ID at the end of the URL with the “Institution ID” that has been provided for your institution): http://www.respondus.com/lockdown/information.pl?ID=123456789 Again, be sure to replace the 9-digit ID with the “Institution ID” provided for your institution. If you prefer to create your own web page, we recommend that you use the page on the Respondus web site as a starting point. For the installer download link, make sure that it include the correct 9-digit Institution ID. 7 Distribution and Installation of Respondus LockDown Browser The extent to which the Respondus LockDown Browser software is distributed and installed is largely up to the institution itself (assuming it has a campus-wide license for the software). Some institutions may limit the installation to computer labs where proctored assessments are delivered. Other institutions may distribute the software widely, making it available to all faculty and students. System Requirements The system requirements for Respondus LockDown Browser are as follows: Windows Windows 8, Windows 7, Vista, XP Internet Explorer (configured to the requirements for Canvas) 4 MB of permanent space on the hard drive Mac OS X 10.5 or higher Safari browser (configured to the requirements for Canvas) 3 MB of free hard drive space Student and Lab Editions There are two types of installers available at the Administrator Area of Respondus LockDown Browser. The “Student Edition” requires the user to have administrator rights in Windows to run the browser (except on Windows XP). This version of LockDown Browser is what’s distributed to students for installation to their own computers. The installer for the “Lab Edition” of LockDown Browser, which is for Windows-based computer labs, doesn’t require users to have administrator rights in Windows to launch LockDown Browser. If installing the Lab Edition of LockDown Browser, a separate Windows account should be used on the lab computers where the Task Manager and Fast User Switching is disabled The Task Manager and Fast User Switching can be disabled with the Windows Group Policy Editor, as detailed here - http://windows.microsoft.com/en-US/windows7/Group-Policy-management-for-ITpros. Important: The “Lab Edition” of LockDown Browser should never be given to students since it would allow them to access the Task Manager and Fast User Switching during an exam. Another difference with the Lab Edition of LockDown Browser is that the Require Minimum Version Date setting (located in the Server Profile for LockDown Browser) is not enforced. This allows administrators to require students to use the latest client application for LockDown Browser, while allowing managers of computer labs to update the browser on their own schedule. Finally, if you want to run the lab edition of Respondus LockDown Browser on a virtual machine, please contact Respondus support www.respondus.com/esupport for guidance on how to accomplish this. Managed Installations and Updates The Respondus LockDown Browser files can be installed to a shared network folder, or installed on each machine to reduce traffic. For Windows computers, desktop management software (Altiris, Microsoft SMS, etc.) can be used to "push" the initial install as long as it supports creating a folder, copying files, registering OCX components creating desktop/start menu shortcuts, and setting a registry key. Here are the details for new installations: 8 1. Program files (LockDown.exe, TaskKeyHook.dll, Rpupdate.exe, Ldbd.exe) must be stored together in a folder. Location is not important, but the install defaults to c:\program files\Respondus LockDown Browser. 2. Shared component files (Fpimage.dll, Fpspr70.ocx) must be copied to the Windows\System32 folder, and Fpspr70.ocx must be registered using REGSVR32.EXE or an equivalent feature in the management software for self-registering DLL files. 3. If used, the optional Local Settings File (server.cfg) must be stored in the same folder as the program files. Use of this file is explained in the “Administrator Functions” section of this guide. 4. If the Local Settings File is not used then a registry key string must be set with the 9-digit “Institution ID” provided to the administrator HKEY_CLASSES_ROOT\Respondus\ldbsk 5. Desktop and/or Start menu shortcuts to the LockDown.exe file. 6. For Windows XP computers a second registry key is needed (it is an empty REG_SZ): HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Aut oplayHandlers\CancelAutoplay\CLSID\1D8B7201-261E-4CC5-A218-420CD49FD3EE Two kinds of updates can be pushed to machines: The Program files (see #1 above) can be updated when a new release of Respondus LockDown Browser is available If used, the Local Settings File (see #2 above) can -- and should -- be updated when the administrator makes changes to the “server profiles” (see the “Administrator Functions” section of this guide”). This file will also need to be updated annually when the license date for the Respondus LockDown Browser is set to expire. For Mac computers, the folder that appears on a desktop following a web-installation of Respondus LockDown Browser ("LockDown Browser Install") can be pushed to other Mac computers for installations purposes. Distribution of the Setup Program The setup program or installer for Respondus LockDown Browser must be downloaded from a unique URL for your institution. The URL that contains the setup application for your institution is available from the Administrator Area of Respondus.com. The URL is the same as the one shown below, however the "123456789" at the end of the URL is replaced by the 9-digit Institution ID for your own institution. http://www.respondus.com/lockdown/information.pl?ID=123456789 Again, the complete URL, including the Institution ID for your institution, can be found at the Administrator Area for Respondus LockDown Browser. For Windows users, the Respondus LockDown Browser installer will be downloaded as a file named “LockDownSetup.exe”. If an institution wants to distribute the Windows setup application for LockDown Browser from its own network or web page (or even from a CD-ROM), simply download the “LockDownSetup.exe” file and distribute it as needed. For the Mac version of LockDown Browser, use the web-install to download the LockDown Browser setup application to the Mac computer. Those files can be distributed as needed to Mac users. Installation of Browser Follow these steps to install Respondus LockDown Browser (Windows): 9 1. Start your Windows computer 2. Confirm that a supported version of Internet Explorer is installed to your computer. This is accomplished by doing the following: Start Internet Explorer (if you are unsure how to do this, click the “Start” menu in Windows, click “Programs,” select “Internet Explorer”) Select “Help” from the menu bar in Internet Explorer and then select “About Internet Explorer” to make sure the version meets the required version supported by Canvas. 3. Install the Respondus LockDown Browser software using a method described in the previous section “Distribution of the Setup Program.” 4. Start Respondus LockDown Browser using either the shortcut that appears on the Windows desktop or by going to Start > Respondus > LockDown Browser. Installation of Browser (Mac) Follow these steps to install the Mac version of Respondus LockDown Browser: 1. 2. 3. 4. Start the Mac computer. Start the Safari browser and go to the web-install URL for LockDown Browser. Select the web-install option listed for Mac computers. Following the installation, start Respondus LockDown Browser by clicking “Applications” and selecting “LockDown Browser”. Updating Respondus LockDown Browser To update to the latest version of the Respondus LockDown Browser, start the browser, click the “information” ( i ) button on the toolbar, then the "Check for Newer Version" button. If an update is available, information about the update will be displayed. If the current Windows account has administrator access a "Get Update" button will be displayed. Press the button, wait for the download to complete, and then exit the browser. Administrator note: If access to Respondus servers (respondus2.com, respondus4.com) is blocked by a firewall, the “Check for Newer Version” feature will display an error message. Issues with Firewalls, Content Filters and Proxy Servers Firewalls, content filters, proxy servers and software with similar functions such as Norton Internet Security can interfere with the installation, updating or operation of Respondus LockDown Browser. Problems can be related to other applications that are running on the client computer or on the institution gateway servers, or both. If the client computer allows full internet access to the "LockDown.exe" application and if the gateway servers allow port 80 HTTP access to www.respondus.com, www.respondus2.com and www.respondus4.com, then most problems can be avoided. ”Installation” Issues The standard setup program or installer for Respondus LockDown Browser is delivered from www.respondus2.com and www.respondus4.com, so HTTP access to these sites is required unless the installer is hosted on a local server. ”Updating” Issues 10 To use the "Check for Newer Version" feature in Respondus LockDown Browser (available from the ( i ) button on the toolbar), the computer must be able to connect to www.respondus2.com or www.respondus4.com using HTTP on port 80. ”Running” Issues The Respondus LockDown Browser application ("LockDown.exe for Windows, "LockDownBrowser.app" for Mac) must be granted network access for any firewall, proxy or filtering applications running on the client computer. Respondus LockDown Browser blocks application switching, so changes must be applied to the computer before Respondus LockDown Browser is started. In fact, any "allow access?" popups that appear while Respondus LockDown Browser is running will be hidden underneath the browser so there is no way to answer yes or OK. Unless a "Local Settings File" is used, the browser must make an HTTP connection on port 80 to either www.respondus.com or www.respondus4.com to obtain the server settings for the institution. It does this using the operating system's library rather than those used by Internet Explorer or Safari, so there may be programs on the computer that block access to the HTTP port 80 connections even though Internet Explorer or Safari is not blocked. The Windows version of Respondus LockDown Browser includes diagnostic tools which will appear if an internet connection fails (see the next section). However, to troubleshoot a problem further, a network monitoring application can be used to see whether the HTTP requests from "LockDown.exe" (Windows) or "LockDown Browser.app" (Mac) are being blocked by software on the client computer or if the requests are reaching the institution’s network and are being blocked by a gateway server. Connection Diagnostics (Windows only) If the Windows version of Respondus LockDown Browser is unable to obtain a network connection at startup, a diagnostic tool will begin. Two sets of diagnostics are provided, including a “Network Connection” test and a “Browser Test”. Click the “Network Connection” button to start the first test, which analyzes the network connection, whether a proxy server is being used, if access to Respondus web servers is being blocked, and other checks. A list of all Windows processes is also displayed at the bottom. If an 11 error or warning is displayed, try to resolve it before running the Browser Test. If you are unable to resolve an issue, copy the error report to the clipboard and submit the message to Respondus Support. When the “Browser Test” button is clicked, an Internet Explorer window will open and go to a browser diagnostic page. The page will display the version number for IE, whether Java/Javascript/Cookies are enabled, and whether a pop-up blocker is running. Since some Course Management Systems require Java Virtual Machine to be installed, a test for this can also be run. Try to resolve any errors that are shown. If you are unable to resolve a problem, copy the error message and submit it to Respondus Support. 12 Respondus LockDown Browser Instructor Guide [Administrator Note: A 2-page “Instructor Quick Start Guide” for Respondus LockDown Browser is available at http://www.respondus.com/quickstart . We highly recommend that this PDF guide be made available to faculty. What appears below is a more comprehensive user guide for instructors. Since this version of the guide is in MS Word format, it can easily be adapted and distributed as needed.] Introduction Respondus LockDown Browser™ is a customized browser that increases the security of test delivery in Instructure Canvas. When students use Respondus LockDown Browser to access an exam, they are unable to print, copy, go to another URL, or access other applications. Once a quiz is started, students are locked into it until it’s submitted for grading. For a complete list of features, visit the Respondus web site at www.respondus.com. It’s also recommended that you view the demonstration movie at http://www.respondus.com/products/demos-ldb.shtml. Respondus LockDown Browser provides a custom interface for the Internet Explorer (Windows) or Safari (Mac) software that is already installed on the computer. It does not modify an existing copy of Internet Explorer or Safari, but rather, installs a separate program that displays a custom browser when it is started. Respondus LockDown Browser uses the same security features and service packs that are currently installed for Internet Explorer. Installing Respondus LockDown Browser won’t modify the current version of Internet Explorer in any way. Respondus LockDown Browser is not intended to replace the browser used by faculty or students within Canvas. Respondus LockDown Browser is only intended for use by students while taking quizzes that have been prepared for use with Respondus LockDown Browser. Preparing a Quiz for use with Respondus LockDown Browser If you haven’t done so already, it’s recommended that you view the demonstration movie for Respondus LockDown Browser at http://www.respondus.com/products/demos-ldb.shtml. To require that students use Respondus LockDown Browser to access a Canvas quiz, two things must occur: The instructor must turn on the quiz setting that makes it only accessible with Respondus LockDown Browser The student’s computer must have Respondus LockDown Browser installed. Follow these steps to enable the “Require Respondus LockDown Browser” setting for the quiz: 1. 2. 3. 4. 5. 6. Using a standard web browser, log into Canvas as an instructor. Select “Quizzes”. Identify the quiz and select the link to edit the quiz. Select the “Restrict this Quiz” checkbox. Select the “Require Respondus LockDown Browser” checkbox. You may additionally require that LockDown Browser be used to view quiz feedback and results. 7. Click “Save Settings”. 13 That’s it. Students will then be required to use Respondus LockDown Browser to access the quiz. If a student attempts to take the quiz using a browser other than Respondus LockDown Browser, a warning message will be displayed along with a link to download the locked browser (if applicable). Determining if the LockDown Browser Settings are Set Correctly To confirm that a quiz will require students to use Respondus LockDown Browser, open a standard web browser, log into Canvas using a student account, and attempt to start the quiz. You should be unable to start the quiz with a standard web browser if everything is set correctly. Next, start Respondus LockDown Browser (installation instructions appear below), log into Canvas using a student account, and then start the quiz. If everything is set correctly, you should be able to start the quiz with Respondus LockDown Browser. Note: If you log into Canvas using a student account and access a quiz with Respondus LockDown Browser you must finish the quiz before the browser will let you exit. Additional Tips and Suggestions Make sure students know, well in advance, that they must use Responds LockDown Browser to take an online quiz. This is particularly important if students are required to install Respondus LockDown Browser to their own computer. It’s recommended that you create a “practice quiz” that requires the use of Respondus LockDown Browser. It's a good practice for instructors to preview the exam using Respondus LockDown Browser. The best approach is to log in as a student since instructor logins have different access rights. Once a Canvas quiz is started with Respondus LockDown Browser, the quiz will appear in a fullscreen window and all other applications and links are locked down. The quiz cannot be exited without clicking the “Submit Answers” button. If audio/video files are used in a quiz, the media player must be embedded in the question itself. This is the only way that students will have access to the control buttons, such as play, start, pause and stop. 14 Respondus LockDown Browser will maintain the “locked” testing environment even if a question contains a link to another web page (which opens another, secure browser window). However, all links that may appear on the new web page will be blocked by the browser, so be sure the content that students must see is available from the initial, linked page. Making Online Quizzes Even More Secure Respondus LockDown Browser is an important tool for preventing cheating on online exams, but it’s not a total solution. For example, students working from remote locations could use two computers at once (one for taking the exam, the other for accessing other applications). Students could use digital cameras to capture the screen content, send text messages on mobile phones, or simply refer to printed notes. Additional methods can be employed that further reduce the risk of cheating and ensure that students know the course material. Each approach below provides another “layer of security”. Even one or two of these items can often provide sufficient security for most assessments. Proctors - Having students take an exam in a room being monitored by a proctor is a major deterrent to most forms of cheating. Enhance this method by having the proctor check the identification of the student prior to the start the exam, placing web cameras throughout the room, or using an “access code” (see next item). For distance courses, proctored settings can be established in other cities, even other countries. Because of the time and expense required for a proctored setting, proctors are sometimes used only with high-stake assessments (eg. midterms, finals). Access Codes (Canvas setting) – An Access Code prevents students from accessing the exam until an access code has been supplied. Access codes can be typed by the proctors themselves (for added security) or conveyed to the student at the start of the exam. Attempts Allowed (Canvas setting) - By only allowing one attempt for a quiz, students won’t be able to determine the questions in the quiz, look up the answers at a later time, and then retake the quiz. Required to View Quiz Feedback and Results with Respondus LockDown Browser (Canvas Setting) – A quiz that requires the LockDown Browser to be used for viewing feedback and results will prevent students from printing or copying questions after the quiz has been delivered (ie. protecting the questions for future terms). Shuffle Answers (Canvas setting) - Answer choices to multiple choice questions can easily be randomized. This setting is selected in the quiz settings. Question Randomization (Canvas setting) - Question randomization ensures that the question order is different for each student. To create a randomized quiz, you need to build your questions in a question bank first, then create a question group in your quiz, and draw the questions from the question bank into the quiz. IP Restriction (Canvas setting) - If quizzes are being delivered from a central location, the IP address (or a partial address) for those computers can be specified, thus preventing access from other locations. Time Limit (Canvas setting) - By limiting the time a student can spend on an assessment, students can be discouraged from consulting other sources since they won’t have time to do so. 15 Availability Dates and Times (Canvas setting) - This setting restricts the availability of the quiz to a specific date/time range. Code of Conduct - Have students sign an honesty statement that summarizes the expectations and requirements for academic honesty. Other methods of assessment - Combine objective tests with other methods of assessment, such as group projects and writing assignments. Essay questions also make it difficult for students to cheat on a traditional assessment, knowing that the instructor may recognize an answer that has been copied from another student. Advanced Features A couple of advanced features are available including a calculator, print capability, and spreadsheet viewer (Windows only). Calculator Respondus LockDown Browser prevents other applications from being accessed by the student during an assessment, including the “Calculator” tool. However, there are times when an instructor wants to allow students to use an online calculator during an assessment. A calculator option will appear on the toolbar for Respondus LockDown Browser if the following text is placed in the online exam: {calc} The {calc} text can appear anywhere in the assessment. If questions are being delivered “one at a time,” the {calculator} text will need to appear in the first question so that it will be available for the remainder of the assessment. To give students access to a more powerful scientific calculator, enter the text {scalc} instead of {calc}. Print Respondus LockDown Browser prevents exam questions from being printed. However, there may be situations where an instructor wants to allow students to print their exam in a lab setting before submitting their answers. This functionality can be enabled in Respondus LockDown Browser, including a print icon on the toolbar, by placing the following text within the online exam: {prtx} The {prtx} text can appear anywhere in the assessment. If questions are being delivered “one at a time,” the {prtx} text must appear in the first question so that it will be available at any time during the assessment. Note if you want the entire exam printed questions will need to be delivered “all at once” and not “one at a time”. If the student name and ID is required on the printout, add a 0-point essay or short answer/fill-inthe-blank question where this information is requested of the student. Note that {prtx} should only be used in a lab setting since it allows printing a copy of the exam questions. Also note that the Windows OS allows printing to a file, so it is best if the lab PCs prevents students from copying files to an external source. Spreadsheet Viewer (Windows only) Respondus LockDown Browser uses the Internet Explorer plug-ins that are installed on the computer. However, some plug-ins can introduce a security hole because a student may be able to access the Internet using the plug-in. For example, the Excel Viewer plug-in for Internet Explorer allows a user to create a web link and then go to it by clicking on it -- even when Respondus LockDown Browser is running. But there are times when instructors want students to view an .xls spreadsheet or to have access to a spreadsheet application. 16 Respondus LockDown Browser offers a secure solution to this issue for Windows users. After a link to an .xls file is added to an exam question, the instructor will need to additionally add the following text one of the questions in the exam (the first question is best) to turn on the spreadsheet viewer in Respondus LockDown Browser: {sheet} When the {sheet} text is contained in the assessment, a spreadsheet button will display on the toolbar in LockDown Browser. In addition, when a student clicks on an HTML link that points to an .xls file, it will open the spreadsheet viewer in LockDown Browser instead of the Excel Viewer. (Note: students aren’t able to save documents using the LockDown Browser spreadsheet viewer, just access it during the assessment.) Working with Students Since instructors are generally the first line of support for students who encounter problems, it’s important to understand how Respondus LockDown Browser will work for students. Student Quick Start Guide A Student Quick Start Guide for Respondus LockDown Browser is available from http://www.respondus.com/quickstart . This 1-page guide, which can be printed or distributed electronically, is the easiest way to get students running with LockDown Browser. Installation of Respondus LockDown Browser To avoid last-minute problems, it’s strongly recommended that Respondus LockDown Browser be installed and tested well before students are expected to use it for an exam. If students are installing Respondus LockDown Browser to their own computers, we suggest that you create a sample quiz where the sole purpose is to confirm whether students have successfully installed the Respondus LockDown Browser and understand how to use it for taking a quiz. [ Administrator Note: Insert the desired installation instructions here for Respondus LockDown Browser. These instructions will differ depending on the distribution policy and the options chosen from the Administrator Guide.] Taking a Quiz with Respondus LockDown Browser Once Respondus LockDown Browser has been installed, students should follow these steps to take a Canvas quiz that has been set for use with Respondus LockDown Browser: 1) Close all programs, unless one is used to connect you to the Internet. 2) Locate the “Respondus LockDown Browser” shortcut on the Windows desktop and doubleclick it. (Alternatively, click “Start” in Windows, select “Programs,” select “Respondus,” and then click “Respondus LockDown Browser.”) (For Windows users, locate the “LockDown Browser” shortcut on the desktop and double-click it. Alternatively, click “Start” in Windows, select “Programs,” select “Respondus,” and then click “Respondus LockDown Browser.”) (For Mac users, launch “LockDown Browser” from the Applications folder.) 3) Upon starting, the browser will go to the login page for Canvas (A warning message may appear indicating that one or more applications must first be exited, such as an instant messaging application. The browser will offer to close the applications for the user. Alternatively, the browser can be exited and the blocked application can be closed manually before restarting the browser.) 17 4) Log into Canvas by entering the user ID and Password. Select the appropriate course and then select the quiz. 5) Click the “Take the Quiz” link to continue. Once a quiz has been started using Respondus LockDown Browser, it will prevent the user from exiting the quiz until the “Submit Answers” button is clicked. 18