如果AIR Secure Browser或Take a Test提供的K-12 评估(K-12 assessments)检测到未经授权的应用程序正在后台运行，因此您无法开始评估，或者您已退出正在进行的评估，那么您必须首先使用任务管理器(Task Manager)手动结束应用程序。在今天的帖子中，我们将找出原因并提供解决方案，以解决K-12评估意外报告Microsoft Photos和Microsoft Edge等应用程序在Windows 10的后台运行的问题。
首先，让我们看一下这篇文章中使用的一些关键术语。
1] K-12，在美国(United) 、加拿大以及可能的其他(Canada)国家(States)（如阿富汗(Afghanistan)、澳大利亚(Australia)、厄瓜多尔(Ecuador)、中国(China)、埃及(Egypt)、印度(India)、伊朗(Iran)、菲律宾(Philippines)、韩国(South Korea)、土耳其(Turkey –)）的教育和教育技术中使用的术语大学前公立学校成绩的简写形式。这些年级是幼儿园 (K) 和 1 至 12 年级 (1-12)。（如果使用这个词，“13 年级”将是大学的第一年。）
2] K-12 评估(2] K-12 assessment)是一种问责制的形成性和总结性评估，用于在年末评估学生的学习情况。它提供了学生和学校教育表现的广泛视图，并允许地区和州衡量学习和教学是否符合所需的州标准。
3] American Institutes for Research®的(Research®)AIRSecure 浏览器(AIRSecure browser)应用程序确保为使用Chromebook计算机进行在线评估的学生提供安全的在线测试体验。启动安全浏览器时，用户无法执行某些硬件功能，例如截屏。参加考试并尝试切换到其他应用程序和/或网站的学生将被自动注销。为了保持高水平的测试安全性，AIRSecureTest安全浏览器要求将Chromebook设置为 kiosk 模式。
4]许多(Many)学校使用在线测试进行形成性和总结性评估。学生使用安全的浏览器以防止他们在考试期间使用其他计算机或Internet资源至关重要。
Windows 10中的参加考试(Take a Test) 应用为参加考试创造了合适的环境：
- 参加测试仅显示测试，没有其他内容。
- 参加测试会清除剪贴板。
- 学生无法访问其他网站。
- 学生无法打开或访问其他应用。
- 除非教师或 IT 管理员启用，否则学生无法共享、打印或录制屏幕
- 学生无法更改设置、扩展显示、查看通知、获取更新或使用自动填充功能。
- Cortana 已关闭。
下面(Below)是一个流程图，展示了Take a Test应用程序的工作原理。
K-12评估检测在后台运行的未经授权的应用程序
出现此问题是因为AIR评估有一个在评估期间或之前不允许运行的应用程序列表，并且像前面提到的那些应用程序被阻止。因此，在预加载应用程序时，评估会认为由于应用程序在后台运行而存在安全漏洞，并将用户注销。
Windows 为通用 Windows 平台 (UWP) 商店应用程序（例如Microsoft 照片(Microsoft Photos)应用程序）提供了注册预启动的能力。预启动(Pre-launching)有助于提高Microsoft Edge的性能，并最大限度地减少启动(Microsoft Edge)Microsoft Edge所需的时间。因此，要解决此问题，Microsoft建议使用PowerShell命令禁用应用程序预启动，并使用注册表项禁用Microsoft Edge预启动。(Microsoft Edge)
由于这是一项注册表操作，因此您需要先备份注册表(backup the registry)或创建系统还原点，以防程序出错。
完成建议的任何预防措施后，您可以按照以下步骤进行操作：
以提升模式启动 PowerShell(Launch PowerShell in elevated mode)，然后运行以下PowerShell cmdlet：
1.暂时禁用Window Defender Application Guide服务，因为如果该服务正在运行或未使用，Disable-MMAgent命令会失败。
Stop-Service -Name hvsics -ErrorAction SilentlyContinue
2. 禁用应用程序预启动。
Disable-MMAgent -ApplicationPreLaunch
3. 重新启动Windows Defender 应用程序防护(Windows Defender Application Guard)服务。如果不使用它，该命令会静默失败。
Start-Service -Name hvsics -ErrorAction SilentlyContinue
4.通过设置注册表项禁用Microsoft Edge预启动。(Microsoft Edge)
$registryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\PreLaunch\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"
$Name = "Enabled"
$value = "0"
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD -Force | Out-Null
5. 创建一个计划任务，在指定日期重新启用应用程序预启动。
$A = New-ScheduledTaskAction -Execute "powershell" -Argument "-Command `"Stop-Service -Name hvsics -ErrorAction SilentlyContinue; Enable-MMAgent -ApplicationPreLaunch;Start-Service -Name hvsics -ErrorAction SilentlyContinue;New-ItemProperty -Path `"HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\PreLaunch\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge`" -Name `"Enabled`" -Value `"1`" -PropertyType DWORD -Force | Out-Null`""
$revertDate = <Specify a date>
$T = New-ScheduledTaskTrigger -Once -At $revertDate
$P = New-ScheduledTaskPrincipal -UserID "NT AUTHORITY\SYSTEM" -LogonType ServiceAccount -RunLevel Highest
$timespan = New-TimeSpan -Minutes 1
$S = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -StartWhenAvailable -RestartCount 3 -RestartInterval $timespan
$D = New-ScheduledTask -Action $A -Principal $P -Trigger $T -Settings $S
Register-ScheduledTask DisableAppPrelaunch -InputObject $D
注意：(Note:) 将$revertDate设置为重新启用应用程序预启动的日期。例如， $revertDate = [datetime]”6/28/2020 5:35 PM”.
我希望你觉得这篇文章有用。
(I hope you find the post useful.)
K-12 assessment reports apps running in Windows 10 background
If the K-12 assessments that are provided by AIR Secure Browser or Take a Test detect that unauthorized apps are running in the background, due to which you can’t start an assessment, or you are logged out of an ongoing assessment, then you have to first manually end the apps using the Task Manager. In today’s post, we will identify the cause and then provide the resolution to the issue of K-12 assessment unexpectedly reports apps like Microsoft Photos and Microsoft Edge are running in the background in Windows 10.
First, let’s take a look at some of the key terms that are used in this post.
1] K-12, a term used in education and educational technology in the United States, Canada, and possibly other countries such as Afghanistan, Australia, Ecuador, China, Egypt, India, Iran, Philippines, South Korea, Turkey – is a short form for the publicly-supported school grades prior to college. These grades are kindergarten (K) and the 1st through the 12th grade (1-12). (If the term were used, “13th grade” would be the first year of college.)
2] K-12 assessment is an accountability formative and summative assessment that evaluates student learning at the end of the year. It provides a broad view of student and school educational performance and allows districts and states to measure how well learning and teaching is meeting required state standards.
3] The AIRSecure browser app from the American Institutes for Research® ensures a secure online testing experience for students taking online assessments with a Chromebook computer. When the secure browser is launched, users cannot perform certain hardware functions, such as taking screenshots. Students who take a test and try to switch to other applications and/or web sites will be logged out automatically. To maintain a high level of test security, the AIRSecureTest secure browser requires the Chromebook to be set to kiosk mode.
4] Many schools use online testing for formative and summative assessments. It’s critical that students use a secure browser that prevents them from using other computer or Internet resources during the test.
The Take a Test app in Windows 10 creates the right environment for taking a test:
- Take a Test shows just the test and nothing else.
- Take a Test clears the clipboard.
- Students aren’t able to go to other websites.
- Students can’t open or access other apps.
- Students can’t share, print, or record their screens unless enabled by the teacher or IT administrator
- Students can’t change settings, extend their display, see notifications, get updates, or use autofill features.
- Cortana is turned off.
Below is a flowchart showing how the Take a Test app works.
K-12 assessment detects unauthorized apps running in the background
This issue occurs because AIR assessments have a list of apps that aren’t allowed to run during or before the assessment, and apps like those cited previously are blocked. Therefore, when the apps are preloaded, the assessment will think there is a breach of security because the apps are running in the background, and log the user out.
Windows gives Universal Windows Platform (UWP) store apps, such as Microsoft Photos app, the ability to register to prelaunch. Pre-launching helps the performance of Microsoft Edge and minimizes the amount of time that is needed to start Microsoft Edge. So, to work around this issue, Microsoft recommends disabling the application prelaunch by using a PowerShell command, and Microsoft Edge prelaunch by using a registry key.
Since this is a registry operation, you’ll need to first backup the registry or create a system restore point in the event that the procedure goes wrong.
Once you have done either of the suggested precautionary measures, you can proceed as follows:
Launch PowerShell in elevated mode, then run the following PowerShell cmdlets:
1. Temporarily disable the Window Defender Application Guide service, because the Disable-MMAgent command fails if this service is running or not used.
Stop-Service -Name hvsics -ErrorAction SilentlyContinue
2. Disable application prelaunch.
Disable-MMAgent -ApplicationPreLaunch
3. Restart the Windows Defender Application Guard service. If this is not used, the command silently fails.
Start-Service -Name hvsics -ErrorAction SilentlyContinue
4. Disable Microsoft Edge prelaunch by setting a registry key.
$registryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\PreLaunch\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge"
$Name = "Enabled"
$value = "0"
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value -PropertyType DWORD -Force | Out-Null
5. Create a scheduled task that re-enables application prelaunch on a specified date.
$A = New-ScheduledTaskAction -Execute "powershell" -Argument "-Command `"Stop-Service -Name hvsics -ErrorAction SilentlyContinue; Enable-MMAgent -ApplicationPreLaunch;Start-Service -Name hvsics -ErrorAction SilentlyContinue;New-ItemProperty -Path `"HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\PreLaunch\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge`" -Name `"Enabled`" -Value `"1`" -PropertyType DWORD -Force | Out-Null`""
$revertDate = <Specify a date>
$T = New-ScheduledTaskTrigger -Once -At $revertDate
$P = New-ScheduledTaskPrincipal -UserID "NT AUTHORITY\SYSTEM" -LogonType ServiceAccount -RunLevel Highest
$timespan = New-TimeSpan -Minutes 1
$S = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -DontStopOnIdleEnd -StartWhenAvailable -RestartCount 3 -RestartInterval $timespan
$D = New-ScheduledTask -Action $A -Principal $P -Trigger $T -Settings $S
Register-ScheduledTask DisableAppPrelaunch -InputObject $D
Note: Set $revertDate to a date when to re-enable application prelaunch. For example, $revertDate = [datetime]”6/28/2020 5:35 PM”.
I hope you find the post useful.
