Not sure which group this best fits into:
We have a small number of students who feel it is their right to use school equipment for game play. In some cases, if we attempt to lock their machines, they simply unplug the computer from the network. It's also likely that the student could shut the computer down and move to a different system, or the teacher would intervene and put them on task.
Now, not all of our computers are AMT enabled, but some are and more are becoming so. So what I am looking to do is one of two things:
1) My dream is to lock windows if the connection to the domain has been lost for more than a few seconds. If the computer is not connected to the network, it should be unusable without a local user account.
2) Very quick reporting that an AMT enabled computer is off the network, and not because it was turned off.
Currently Spiceworks is doing a frequent up/down scan on a small number of computers, but seems to report when computers are turned off, even though AMT is configured to reply to ping requests.
I'm open to most suggestions, but most network security packages become overly pricey when you multiply by 1000 computers (which is why we use SW.)