Administrator Guide for Respondus LockDown Browser Instructure

advertisement
Administrator Guide for Respondus LockDown Browser
Instructure Canvas
(Version 1.0 - October 2012)
Table of Contents
Getting Started
- Introduction
- Overview of Browser Application
- Overview of System Administrator Responsibilities
Administrator Functions
- Login to Administrator Area
- Institution ID
- Control Panel
- Server Profiles
- Local Settings File
- Configuring the Canvas Server for LockDown Browser
Distribution and Installation of Respondus LockDown Browser
- System Requirements
- Student and Lab Editions
- Managed Installations and Updates
- Distribution of the Setup Program
- Installation of Browser
- Updating Respondus LockDown Browser
Issues with Firewalls, Content Filters and Proxy Servers
Connection Diagnostics
Instructor Guide
- Introduction
- Preparing a Quiz for Use with Respondus LockDown Browser
- Determining if LockDown Browser Settings are Set Correctly
- Additional Tips and Suggestions
- Making Online Quizzes Even More Secure
- Advanced Features
- Calculator
- Print
- Spreadsheet Viewer
- Working with Students
1
Getting Started
Introduction
Respondus LockDown Browser™ is a customized browser that increases the security of online
testing in Instructure Canvas. When students use Respondus LockDown Browser to access a
quiz, they are unable to print, copy, go to another URL, or access other applications. Students are
locked into a quiz until it is submitted for grading.
Overview of Browser Application
Respondus LockDown Browser is a client application that is installed to a local computer. It
provides a custom interface for the Internet Explorer (Windows) or Safari (Mac) software that is
already installed on the computer. It does not modify an existing copy of Internet Explorer or
Safari, but rather, installs a separate program that will display the custom interface when it is
started. Respondus LockDown Browser uses the same security features and service packs that
are currently installed for Internet Explorer or Safari. Installing Respondus LockDown Browser
won’t modify the current version of Internet Explorer or Safari in any way.
Respondus LockDown Browser creates a “locked” testing environment for Canvas and includes
the following features:
















Quizzes are displayed full-screen and cannot be minimized
Quizzes cannot be exited until submitted by users for grading
Task switching or access to other applications is prevented
Printing functions are disabled
Print Screen and capturing functions are disabled
Copying and pasting anything to and from a quiz is prohibited
Right-click menu options are disabled (Windows); key+click options are disabled (Mac)
Browser menu and toolbar options are disabled except Back, Forward, Refresh and Stop
Function keys (F1-F12) are disabled
Source code for the HTML page cannot be viewed
URLs cannot be typed by the user
Hundreds of screen capture, messaging, screen-sharing and network monitoring
applications are blocked from running
The browser automatically starts at the institution’s login page for Canvas
Links in questions that point to other servers don’t compromise the “locked” testing
environment
Pages from the quiz aren’t cached or stored in Internet Explorer’s history listing
And many other features...
Respondus LockDown Browser is not intended to replace the browser used by faculty or students
within Instructure Canvas. Respondus LockDown Browser is only intended for use by students
while taking a quiz that are set for use with Respondus LockDown Browser. This browser has not
been tested for use in other areas of Canvas.
Technical Requirements for Browser Installation
Windows
 Windows 8, Windows 7, Vista, XP
 Internet Explorer (configured to the requirements for Canvas)
 4 MB of permanent space on the hard drive
Mac



OS X 10.5 or higher
Safari browser (configured to the requirements for Canvas)
3 MB of free hard drive space
2
Overview of System Administrator Responsibilities
The administrator of the Respondus LockDown Browser license is provided access to the
“Administrator Area” of the Respondus web site. This area includes a “Control Panel” and
important details for downloading and distributing the Respondus LockDown Browser software to
faculty and students. See the section below “Administrator Functions” for further details.
The administrator of Instructure Canvas must configure the server to use Respondus LockDown
Browser. This step must be completed before Respondus LockDown Browser can be used with
Instructure Canvas. The configuration process is described in the section “Configuring the
Canvas Server for LockDown Browser”.
Finally, the license administrator will want to provide faculty and students information on how to
use Respondus LockDown Browser. The “Instructor Guide” and “Student Guide” is provided at
the end of this administrator guide, but there are also “Quick Start Guides” and demonstration
movies available from the Respondus web site.
3
Administrator Functions
Login to Administrator Area
The login page for the Administrator Area of the Respondus web site is located at
http://www.respondus.com/campus-portal/login.php. The User ID and Password for accessing
this area is contained in the welcome email that was sent to the administrator of the license.
Once logged in, select the product link “LockDown Browser License.” This page will display
account information, server profiles, a link for the Control Panel, a download area for the
Respondus LockDown Browser software, user guides, and other information.
Institution ID
Each institution is provided with a unique “Institution ID” which is displayed throughout the
Administrator Area for Respondus LockDown Browser. The Institution ID is used to link a client
installation of Respondus LockDown Browser to a particular institution.
In situations where the administrator or user is asked to enter the Institution ID, only enter the
numeric portion of the Institution ID (not the name of the institution itself).
Control Panel
The Control Panel allows the administrator to create, modify or delete a “server profile” for an
institution.
Warning: Changes to the Control Panel are institution-wide and will appear
immediately to faculty and students. Use extra caution within the Control Panel
area.
Server Profiles
The functions and appearance of Respondus LockDown Browser are determined by the server
profile(s) created by the administrator of the license. For example, one setting in the server profile
specifies the login page for the institution’s Canvas server, which is then used by the browser
when it is first started.
A server profile is created for each distinct course management system that’s in use at an
institution. Most institutions will have only one server profile. If more than one server profile is
created, students must select from a list of servers each time Respondus LockDown Browser is
started.
By default, the server profile data for an institution is stored at the Respondus web site. When
Respondus LockDown Browser is started, it will automatically go to the Respondus web site to
obtain this information. However, an administrator can create a “local settings” file so that the
server profile information is obtained from a local network or drive (see Local Settings File).
Server profiles are created, modified, and deleted from the Control Panel area. A server profile
requires the following information:


Institution - The name and ID number assigned to the institution are displayed here.
Consortium licenses may have multiple institution names and IDs listed. Make sure the
correct institution is selected before making changes to a server profile.
Server Profile Name - Enter a name that succinctly describes the course management
system server (eg. “Canvas at ABC College”). If two or more server profiles are created
for an institution, students will be presented with a list of the server profile names when
4




Respondus LockDown Browser is started. They will need to choose a server before
continuing.
Check for a newer version of LockDown Browser – This option requires Respondus
LockDown Browser to check for a newer version of the application each time it starts.
The "Yes" setting will require all copies of LockDown Browser to check for a newer
version, even if a "local settings" file is being used to obtain the server settings. The "Yes,
except computers using local settings" will force a version check, but not if a "local
settings" file is being used.
Learning Management System - Select the learning management system being used at
the institution: Instructure Canvas
Login Page for LMS - Enter the URL for the login page of your institution’s Canvas
server. If the login page is only available via a portal page, enter that URL instead. (The
URL that is entered will be the start page for Respondus LockDown Browser.)
Server subdomain - Enter the subdomain for the Canvas server, such as
“canvas.abccollege.edu”. Do not include “http” or “www” in the server domain.
The following settings are optional for a server profile:




Proctor Options password to exit during quiz - If a password is entered here, it will
allow a proctor to assist a student in closing LockDown Browser during an assessment.
This function is generally not needed because a key goal of LockDown Browser is to
force students to complete the assessment before closing the browser. Administrators
should be careful about distributing this password to proctors because if it falls into the
hands of students, it will allow them to exit the browser at will during an assessment.
During an assessment, the proctor can use this feature by clicking the ( i ) button on the
toolbar, selecting Proctor Options, and then entering the password.
Require Minimum Version Date – It is possible to force students to use a version of
LockDown Browser that has been issued after a specified date. If the version is older
than the date specified, then students will be forced to upgrade or exit the browser.
Add to Blacklist - Hundreds of “blacklist” applications are prevented from running
concurrently with LockDown Browser, including screen-capture, internet messaging,
screen-sharing, virtual desktop, remote desktop, VNC, network monitoring and other
communication applications. To append to the built-in blacklist, enter the executable file
name. If the application uses a different “image name” in the Windows Task Manager,
enter that name instead. Applications added to this list should be separated by a comma
(eg. ScreenWatcher.exe, VideoGrabber.exe). LockDown Browser will block these
applications at startup and offer to close the applications for the user.
Remove from Blacklist - Hundreds of applications are blocked (ie. blacklisted) by
LockDown Browser, including screen-capture, internet messaging, screen-sharing, virtual
desktop, remote desktop, VNC, network monitoring and other communication
applications. However, it is possible for an administrator to allow a blacklisted program to
run in the background when Respondus LockDown Browser is started. This option,
essentially, removes an application from the blacklist. It’s important to note that students
will be unable to “switch” to such an application once the browser has started. It simply
allows the other application to continue running. Thus, this feature is only useful for
certain applications, such as screen monitoring software or video capture software,
where it runs in the background. To allow a Windows application to run in the
background, enter the executable file name (eg. XYZ-Monitor.exe). If the Windows
application uses a different “image name” in the Windows Task Manager, enter that
name instead. For Mac applications, enter the application name without the ".app"
extension (eg. MacMonitor). Applications added to this list should be separated by a
comma (eg. XYZ-Monitor.exe, ABC-Chat.exe, MacMonitor).
5
Local Settings File
Each time Respondus LockDown Browser is started on a client computer, it will look for a settings
file (servers.cfg) that contains the Server Profile settings for the institution. By default, Respondus
LockDown Browser will go to the Respondus web site to obtain these settings. However, an
administrator can create a “local settings” file so that the settings are obtained from a local
network or drive, thus bypassing the need to connect with the Respondus web site at startup.
This approach is sometimes preferred in lab settings where the Respondus LockDown Browser
software is installed on a network.
It’s important to understand that if client computers are set up to use a local servers.cfg file, they
will need to be updated each time the administrator makes a change with the Control Panel. The
file will also need to be updated once a year when the license for Respondus LockDown Browser
is renewed at the institution. These are important considerations when deciding whether to use a
local settings file.
To create a local settings file, log into the Administrator Area at the Respondus web site, select
the product Respondus LockDown Browser, log into the Control Panel, and then select the link
“Create a local settings file.” A list of the Server Profiles is shown. If there are multiple server
profiles, select those that should be included in the local settings file. Then click the “Create File”
button. You will be prompted to save the file to a local drive -- name the file “server.cfg”. Once
saved, copy the server.cfg file to the “Respondus LockDown Browser” folder on the client
computer (typically c:\Program Files\Respondus LockDown Browser\ ). For Mac computers,
control-click on the application to bring up the contextual menu and select "Show Package
Contents". Then copy the server.cfg file to this location.
Once the server.cfg file is copied to the local computer, Respondus LockDown Browser will now
obtain it’s settings from the server.cfg file rather than from the Respondus web site. The local
settings file can be removed at any time by deleting “server.cfg” from the client computer.
Configuring the Canvas Server for LockDown Browser
If you are a Canvas Cloud customer, simply request that Instructure enable Respondus
LockDown Browser for your institution and optionally provide them the Respondus LockDown
Browser URL (see below for full details).
If you are a Canvas OnSite (self hosted) customer, follow these steps to enable the Respondus
LockDown Browser on your server.
Steps to configure the Canvas Server for LockDown Browser
1.
2.
3.
4.
5.
Login to Canvas as the administrator and navigate to the Plugin Settings page.
Select the Respondus LockDown Browser Plugin.
Select All Accounts from the Settings pull down.
Select the “Enabled” checkbox.
Optionally you may enter the LockDown Browser Download URL (see below for full
details) and press “Apply”.
6
The LockDown Browser Download URL entered should match the page where instructors
and students can download the setup program for the Respondus LockDown Browser
client software. (The URL for your institution is provided in the Administrator Area of the
Respondus web site.) If a student attempts to use a regular browser to access an
assessment that requires Respondus LockDown Browser, a warning message will be
displayed along with the link for downloading the LockDown Browser software.
This entry may be left blank if students aren't permitted to install the LockDown Browser
themselves (i.e. it is only used on machines set up by IT staff), then this download URL
will not be presented to users.
The URL that is entered depends on whether you want students to download the
Respondus LockDown Browser setup application from the Respondus web site or from a
page on your institution’s own web server. To have students download it from a page on
the Respondus web site, enter the URL shown below (but BE SURE to replace the 9-digit
ID at the end of the URL with the “Institution ID” that has been provided for your
institution):
http://www.respondus.com/lockdown/information.pl?ID=123456789
Again, be sure to replace the 9-digit ID with the “Institution ID” provided for your
institution.
If you prefer to create your own web page, we recommend that you use the page on the
Respondus web site as a starting point. For the installer download link, make sure that it
include the correct 9-digit Institution ID.
7
Distribution and Installation of Respondus LockDown Browser
The extent to which the Respondus LockDown Browser software is distributed and installed is
largely up to the institution itself (assuming it has a campus-wide license for the software). Some
institutions may limit the installation to computer labs where proctored assessments are
delivered. Other institutions may distribute the software widely, making it available to all faculty
and students.
System Requirements
The system requirements for Respondus LockDown Browser are as follows:
Windows
 Windows 8, Windows 7, Vista, XP
 Internet Explorer (configured to the requirements for Canvas)
 4 MB of permanent space on the hard drive
Mac



OS X 10.5 or higher
Safari browser (configured to the requirements for Canvas)
3 MB of free hard drive space
Student and Lab Editions
There are two types of installers available at the Administrator Area of Respondus LockDown
Browser. The “Student Edition” requires the user to have administrator rights in Windows to run
the browser (except on Windows XP). This version of LockDown Browser is what’s distributed to
students for installation to their own computers.
The installer for the “Lab Edition” of LockDown Browser, which is for Windows-based computer
labs, doesn’t require users to have administrator rights in Windows to launch LockDown Browser.
If installing the Lab Edition of LockDown Browser, a separate Windows account should be used
on the lab computers where the Task Manager and Fast User Switching is disabled The Task
Manager and Fast User Switching can be disabled with the Windows Group Policy Editor, as
detailed here - http://windows.microsoft.com/en-US/windows7/Group-Policy-management-for-ITpros.
Important: The “Lab Edition” of LockDown Browser should never be given to students since it
would allow them to access the Task Manager and Fast User Switching during an exam.
Another difference with the Lab Edition of LockDown Browser is that the Require Minimum
Version Date setting (located in the Server Profile for LockDown Browser) is not enforced. This
allows administrators to require students to use the latest client application for LockDown
Browser, while allowing managers of computer labs to update the browser on their own schedule.
Finally, if you want to run the lab edition of Respondus LockDown Browser on a virtual machine,
please contact Respondus support www.respondus.com/esupport for guidance on how to
accomplish this.
Managed Installations and Updates
The Respondus LockDown Browser files can be installed to a shared network folder, or installed
on each machine to reduce traffic.
For Windows computers, desktop management software (Altiris, Microsoft SMS, etc.) can be
used to "push" the initial install as long as it supports creating a folder, copying files, registering
OCX components creating desktop/start menu shortcuts, and setting a registry key. Here are the
details for new installations:
8
1. Program files (LockDown.exe, TaskKeyHook.dll, Rpupdate.exe, Ldbd.exe) must be
stored together in a folder. Location is not important, but the install defaults to c:\program
files\Respondus LockDown Browser.
2. Shared component files (Fpimage.dll, Fpspr70.ocx) must be copied to the
Windows\System32 folder, and Fpspr70.ocx must be registered using REGSVR32.EXE
or an equivalent feature in the management software for self-registering DLL files.
3. If used, the optional Local Settings File (server.cfg) must be stored in the same folder as
the program files. Use of this file is explained in the “Administrator Functions” section of
this guide.
4. If the Local Settings File is not used then a registry key string must be set with the 9-digit
“Institution ID” provided to the administrator
HKEY_CLASSES_ROOT\Respondus\ldbsk
5. Desktop and/or Start menu shortcuts to the LockDown.exe file.
6. For Windows XP computers a second registry key is needed (it is an empty REG_SZ):
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Aut
oplayHandlers\CancelAutoplay\CLSID\1D8B7201-261E-4CC5-A218-420CD49FD3EE
Two kinds of updates can be pushed to machines:


The Program files (see #1 above) can be updated when a new release of Respondus
LockDown Browser is available
If used, the Local Settings File (see #2 above) can -- and should -- be updated when the
administrator makes changes to the “server profiles” (see the “Administrator Functions”
section of this guide”). This file will also need to be updated annually when the license
date for the Respondus LockDown Browser is set to expire.
For Mac computers, the folder that appears on a desktop following a web-installation of
Respondus LockDown Browser ("LockDown Browser Install") can be pushed to other Mac
computers for installations purposes.
Distribution of the Setup Program
The setup program or installer for Respondus LockDown Browser must be downloaded from a
unique URL for your institution. The URL that contains the setup application for your institution is
available from the Administrator Area of Respondus.com. The URL is the same as the one shown
below, however the "123456789" at the end of the URL is replaced by the 9-digit Institution ID for
your own institution.
http://www.respondus.com/lockdown/information.pl?ID=123456789
Again, the complete URL, including the Institution ID for your institution, can be found at the
Administrator Area for Respondus LockDown Browser.
For Windows users, the Respondus LockDown Browser installer will be downloaded as a file
named “LockDownSetup.exe”.
If an institution wants to distribute the Windows setup application for LockDown Browser from its
own network or web page (or even from a CD-ROM), simply download the “LockDownSetup.exe”
file and distribute it as needed. For the Mac version of LockDown Browser, use the web-install to
download the LockDown Browser setup application to the Mac computer. Those files can be
distributed as needed to Mac users.
Installation of Browser
Follow these steps to install Respondus LockDown Browser (Windows):
9
1. Start your Windows computer
2. Confirm that a supported version of Internet Explorer is installed to your computer. This is
accomplished by doing the following:

Start Internet Explorer (if you are unsure how to do this, click the “Start” menu in
Windows, click “Programs,” select “Internet Explorer”)

Select “Help” from the menu bar in Internet Explorer and then select “About Internet
Explorer” to make sure the version meets the required version supported by Canvas.
3. Install the Respondus LockDown Browser software using a method described in the
previous section “Distribution of the Setup Program.”
4. Start Respondus LockDown Browser using either the shortcut that appears on the
Windows desktop or by going to Start > Respondus > LockDown Browser.
Installation of Browser (Mac)
Follow these steps to install the Mac version of Respondus LockDown Browser:
1.
2.
3.
4.
Start the Mac computer.
Start the Safari browser and go to the web-install URL for LockDown Browser.
Select the web-install option listed for Mac computers.
Following the installation, start Respondus LockDown Browser by clicking “Applications”
and selecting “LockDown Browser”.
Updating Respondus LockDown Browser
To update to the latest version of the Respondus LockDown Browser, start the browser, click the
“information” ( i ) button on the toolbar, then the "Check for Newer Version" button. If an update is
available, information about the update will be displayed. If the current Windows account has
administrator access a "Get Update" button will be displayed. Press the button, wait for the
download to complete, and then exit the browser.
Administrator note: If access to Respondus servers (respondus2.com, respondus4.com) is
blocked by a firewall, the “Check for Newer Version” feature will display an error message.
Issues with Firewalls, Content Filters and Proxy Servers
Firewalls, content filters, proxy servers and software with similar functions such as Norton Internet
Security can interfere with the installation, updating or operation of Respondus LockDown
Browser. Problems can be related to other applications that are running on the client computer or
on the institution gateway servers, or both.
If the client computer allows full internet access to the "LockDown.exe" application and if the
gateway servers allow port 80 HTTP access to www.respondus.com, www.respondus2.com and
www.respondus4.com, then most problems can be avoided.
”Installation” Issues
The standard setup program or installer for Respondus LockDown Browser is delivered from
www.respondus2.com and www.respondus4.com, so HTTP access to these sites is required
unless the installer is hosted on a local server.
”Updating” Issues
10
To use the "Check for Newer Version" feature in Respondus LockDown Browser (available from
the ( i ) button on the toolbar), the computer must be able to connect to www.respondus2.com or
www.respondus4.com using HTTP on port 80.
”Running” Issues
The Respondus LockDown Browser application ("LockDown.exe for Windows,
"LockDownBrowser.app" for Mac) must be granted network access for any firewall, proxy or
filtering applications running on the client computer. Respondus LockDown Browser blocks
application switching, so changes must be applied to the computer before Respondus LockDown
Browser is started. In fact, any "allow access?" popups that appear while Respondus LockDown
Browser is running will be hidden underneath the browser so there is no way to answer yes or
OK.
Unless a "Local Settings File" is used, the browser must make an HTTP connection on port 80 to
either www.respondus.com or www.respondus4.com to obtain the server settings for the
institution. It does this using the operating system's library rather than those used by Internet
Explorer or Safari, so there may be programs on the computer that block access to the HTTP port
80 connections even though Internet Explorer or Safari is not blocked.
The Windows version of Respondus LockDown Browser includes diagnostic tools which will
appear if an internet connection fails (see the next section). However, to troubleshoot a problem
further, a network monitoring application can be used to see whether the HTTP requests from
"LockDown.exe" (Windows) or "LockDown Browser.app" (Mac) are being blocked by software on
the client computer or if the requests are reaching the institution’s network and are being blocked
by a gateway server.
Connection Diagnostics (Windows only)
If the Windows version of Respondus LockDown Browser is unable to obtain a network
connection at startup, a diagnostic tool will begin. Two sets of diagnostics are provided, including
a “Network Connection” test and a “Browser Test”.
Click the “Network Connection” button to start the first test, which analyzes the network
connection, whether a proxy server is being used, if access to Respondus web servers is being
blocked, and other checks. A list of all Windows processes is also displayed at the bottom. If an
11
error or warning is displayed, try to resolve it before running the Browser Test. If you are unable
to resolve an issue, copy the error report to the clipboard and submit the message to Respondus
Support.
When the “Browser Test” button is clicked, an Internet Explorer window will open and go to a
browser diagnostic page. The page will display the version number for IE, whether
Java/Javascript/Cookies are enabled, and whether a pop-up blocker is running. Since some
Course Management Systems require Java Virtual Machine to be installed, a test for this can also
be run. Try to resolve any errors that are shown. If you are unable to resolve a problem, copy the
error message and submit it to Respondus Support.
12
Respondus LockDown Browser
Instructor Guide
[Administrator Note: A 2-page “Instructor Quick Start Guide” for Respondus LockDown Browser is
available at http://www.respondus.com/quickstart . We highly recommend that this PDF guide be
made available to faculty.
What appears below is a more comprehensive user guide for instructors. Since this version of the
guide is in MS Word format, it can easily be adapted and distributed as needed.]
Introduction
Respondus LockDown Browser™ is a customized browser that increases the security of test
delivery in Instructure Canvas. When students use Respondus LockDown Browser to access an
exam, they are unable to print, copy, go to another URL, or access other applications. Once a
quiz is started, students are locked into it until it’s submitted for grading. For a complete list of
features, visit the Respondus web site at www.respondus.com. It’s also recommended that you
view the demonstration movie at http://www.respondus.com/products/demos-ldb.shtml.
Respondus LockDown Browser provides a custom interface for the Internet Explorer (Windows)
or Safari (Mac) software that is already installed on the computer. It does not modify an existing
copy of Internet Explorer or Safari, but rather, installs a separate program that displays a custom
browser when it is started. Respondus LockDown Browser uses the same security features and
service packs that are currently installed for Internet Explorer. Installing Respondus LockDown
Browser won’t modify the current version of Internet Explorer in any way.
Respondus LockDown Browser is not intended to replace the browser used by faculty or students
within Canvas. Respondus LockDown Browser is only intended for use by students while taking
quizzes that have been prepared for use with Respondus LockDown Browser.
Preparing a Quiz for use with Respondus LockDown Browser
If you haven’t done so already, it’s recommended that you view the demonstration movie for
Respondus LockDown Browser at http://www.respondus.com/products/demos-ldb.shtml.
To require that students use Respondus LockDown Browser to access a Canvas quiz, two things
must occur:

The instructor must turn on the quiz setting that makes it only accessible with Respondus
LockDown Browser

The student’s computer must have Respondus LockDown Browser installed.
Follow these steps to enable the “Require Respondus LockDown Browser” setting for the quiz:
1.
2.
3.
4.
5.
6.
Using a standard web browser, log into Canvas as an instructor.
Select “Quizzes”.
Identify the quiz and select the link to edit the quiz.
Select the “Restrict this Quiz” checkbox.
Select the “Require Respondus LockDown Browser” checkbox.
You may additionally require that LockDown Browser be used to view quiz feedback and
results.
7. Click “Save Settings”.
13
That’s it. Students will then be required to use Respondus LockDown Browser to access the quiz.
If a student attempts to take the quiz using a browser other than Respondus LockDown Browser,
a warning message will be displayed along with a link to download the locked browser (if
applicable).
Determining if the LockDown Browser Settings are Set Correctly
To confirm that a quiz will require students to use Respondus LockDown Browser, open a
standard web browser, log into Canvas using a student account, and attempt to start the quiz.
You should be unable to start the quiz with a standard web browser if everything is set correctly.
Next, start Respondus LockDown Browser (installation instructions appear below), log into
Canvas using a student account, and then start the quiz. If everything is set correctly, you should
be able to start the quiz with Respondus LockDown Browser.
Note: If you log into Canvas using a student account and access a quiz with Respondus
LockDown Browser you must finish the quiz before the browser will let you exit.
Additional Tips and Suggestions
Make sure students know, well in advance, that they must use Responds LockDown Browser to
take an online quiz. This is particularly important if students are required to install Respondus
LockDown Browser to their own computer. It’s recommended that you create a “practice quiz”
that requires the use of Respondus LockDown Browser.
It's a good practice for instructors to preview the exam using Respondus LockDown Browser. The
best approach is to log in as a student since instructor logins have different access rights.
Once a Canvas quiz is started with Respondus LockDown Browser, the quiz will appear in a fullscreen window and all other applications and links are locked down. The quiz cannot be exited
without clicking the “Submit Answers” button.
If audio/video files are used in a quiz, the media player must be embedded in the question itself.
This is the only way that students will have access to the control buttons, such as play, start,
pause and stop.
14
Respondus LockDown Browser will maintain the “locked” testing environment even if a question
contains a link to another web page (which opens another, secure browser window). However, all
links that may appear on the new web page will be blocked by the browser, so be sure the
content that students must see is available from the initial, linked page.
Making Online Quizzes Even More Secure
Respondus LockDown Browser is an important tool for preventing cheating on online exams, but
it’s not a total solution. For example, students working from remote locations could use two
computers at once (one for taking the exam, the other for accessing other applications). Students
could use digital cameras to capture the screen content, send text messages on mobile phones,
or simply refer to printed notes.
Additional methods can be employed that further reduce the risk of cheating and ensure that
students know the course material. Each approach below provides another “layer of security”.
Even one or two of these items can often provide sufficient security for most assessments.

Proctors - Having students take an exam in a room being monitored by a proctor is a
major deterrent to most forms of cheating. Enhance this method by having the proctor
check the identification of the student prior to the start the exam, placing web cameras
throughout the room, or using an “access code” (see next item). For distance courses,
proctored settings can be established in other cities, even other countries. Because of
the time and expense required for a proctored setting, proctors are sometimes used only
with high-stake assessments (eg. midterms, finals).

Access Codes (Canvas setting) – An Access Code prevents students from accessing the
exam until an access code has been supplied. Access codes can be typed by the
proctors themselves (for added security) or conveyed to the student at the start of the
exam.

Attempts Allowed (Canvas setting) - By only allowing one attempt for a quiz, students
won’t be able to determine the questions in the quiz, look up the answers at a later time,
and then retake the quiz.

Required to View Quiz Feedback and Results with Respondus LockDown Browser
(Canvas Setting) – A quiz that requires the LockDown Browser to be used for viewing
feedback and results will prevent students from printing or copying questions after the
quiz has been delivered (ie. protecting the questions for future terms).

Shuffle Answers (Canvas setting) - Answer choices to multiple choice questions can
easily be randomized. This setting is selected in the quiz settings.

Question Randomization (Canvas setting) - Question randomization ensures that the
question order is different for each student. To create a randomized quiz, you need to
build your questions in a question bank first, then create a question group in your quiz,
and draw the questions from the question bank into the quiz.

IP Restriction (Canvas setting) - If quizzes are being delivered from a central location,
the IP address (or a partial address) for those computers can be specified, thus
preventing access from other locations.

Time Limit (Canvas setting) - By limiting the time a student can spend on an
assessment, students can be discouraged from consulting other sources since they
won’t have time to do so.
15

Availability Dates and Times (Canvas setting) - This setting restricts the availability of the
quiz to a specific date/time range.

Code of Conduct - Have students sign an honesty statement that summarizes the
expectations and requirements for academic honesty.

Other methods of assessment - Combine objective tests with other methods of
assessment, such as group projects and writing assignments. Essay questions also
make it difficult for students to cheat on a traditional assessment, knowing that the
instructor may recognize an answer that has been copied from another student.
Advanced Features
A couple of advanced features are available including a calculator, print capability, and
spreadsheet viewer (Windows only).
Calculator
Respondus LockDown Browser prevents other applications from being accessed by the student
during an assessment, including the “Calculator” tool. However, there are times when an
instructor wants to allow students to use an online calculator during an assessment. A calculator
option will appear on the toolbar for Respondus LockDown Browser if the following text is placed
in the online exam: {calc}
The {calc} text can appear anywhere in the assessment. If questions are being delivered “one at
a time,” the {calculator} text will need to appear in the first question so that it will be available for
the remainder of the assessment.
To give students access to a more powerful scientific calculator, enter the text {scalc} instead of
{calc}.
Print
Respondus LockDown Browser prevents exam questions from being printed. However, there may
be situations where an instructor wants to allow students to print their exam in a lab setting before
submitting their answers. This functionality can be enabled in Respondus LockDown Browser,
including a print icon on the toolbar, by placing the following text within the online exam: {prtx}
The {prtx} text can appear anywhere in the assessment. If questions are being delivered “one at
a time,” the {prtx} text must appear in the first question so that it will be available at any time
during the assessment. Note if you want the entire exam printed questions will need to be
delivered “all at once” and not “one at a time”.
If the student name and ID is required on the printout, add a 0-point essay or short answer/fill-inthe-blank question where this information is requested of the student.
Note that {prtx} should only be used in a lab setting since it allows printing a copy of the exam
questions. Also note that the Windows OS allows printing to a file, so it is best if the lab PCs
prevents students from copying files to an external source.
Spreadsheet Viewer (Windows only)
Respondus LockDown Browser uses the Internet Explorer plug-ins that are installed on the
computer. However, some plug-ins can introduce a security hole because a student may be able
to access the Internet using the plug-in. For example, the Excel Viewer plug-in for Internet
Explorer allows a user to create a web link and then go to it by clicking on it -- even when
Respondus LockDown Browser is running. But there are times when instructors want students to
view an .xls spreadsheet or to have access to a spreadsheet application.
16
Respondus LockDown Browser offers a secure solution to this issue for Windows users. After a
link to an .xls file is added to an exam question, the instructor will need to additionally add the
following text one of the questions in the exam (the first question is best) to turn on the
spreadsheet viewer in Respondus LockDown Browser: {sheet}
When the {sheet} text is contained in the assessment, a spreadsheet button will display on the
toolbar in LockDown Browser. In addition, when a student clicks on an HTML link that points to an
.xls file, it will open the spreadsheet viewer in LockDown Browser instead of the Excel Viewer.
(Note: students aren’t able to save documents using the LockDown Browser spreadsheet viewer,
just access it during the assessment.)
Working with Students
Since instructors are generally the first line of support for students who encounter problems, it’s
important to understand how Respondus LockDown Browser will work for students.
Student Quick Start Guide
A Student Quick Start Guide for Respondus LockDown Browser is available from
http://www.respondus.com/quickstart . This 1-page guide, which can be printed or distributed
electronically, is the easiest way to get students running with LockDown Browser.
Installation of Respondus LockDown Browser
To avoid last-minute problems, it’s strongly recommended that Respondus LockDown Browser be
installed and tested well before students are expected to use it for an exam. If students are
installing Respondus LockDown Browser to their own computers, we suggest that you create a
sample quiz where the sole purpose is to confirm whether students have successfully installed
the Respondus LockDown Browser and understand how to use it for taking a quiz.
[ Administrator Note: Insert the desired installation instructions here for Respondus
LockDown Browser. These instructions will differ depending on the distribution policy and
the options chosen from the Administrator Guide.]
Taking a Quiz with Respondus LockDown Browser
Once Respondus LockDown Browser has been installed, students should follow these steps to
take a Canvas quiz that has been set for use with Respondus LockDown Browser:
1) Close all programs, unless one is used to connect you to the Internet.
2) Locate the “Respondus LockDown Browser” shortcut on the Windows desktop and doubleclick it. (Alternatively, click “Start” in Windows, select “Programs,” select “Respondus,” and
then click “Respondus LockDown Browser.”)
(For Windows users, locate the “LockDown Browser” shortcut on the desktop and
double-click it. Alternatively, click “Start” in Windows, select “Programs,” select
“Respondus,” and then click “Respondus LockDown Browser.”)
(For Mac users, launch “LockDown Browser” from the Applications folder.)
3) Upon starting, the browser will go to the login page for Canvas
(A warning message may appear indicating that one or more applications must
first be exited, such as an instant messaging application. The browser will offer to
close the applications for the user. Alternatively, the browser can be exited and
the blocked application can be closed manually before restarting the browser.)
17
4) Log into Canvas by entering the user ID and Password. Select the appropriate course and
then select the quiz.
5) Click the “Take the Quiz” link to continue.
Once a quiz has been started using Respondus LockDown Browser, it will prevent the user
from exiting the quiz until the “Submit Answers” button is clicked.
18
Download