Hi @jhostetter
thanks for your detailled information and proposals. To be honest the key file authentication mechanism is not made for such scenarios. Instead it provides basic facilities to manage access for different user groups, e.g. teachers, administrators and support staff.
I suggest to use access control rules instead. There are numerous possibilities thanks to many different rule conditions - see https://docs.veyon.io/en/latest/admin/access-control-rules.html#conditions for details. There's a condition "Accessing computer and local computer are at the same location" which should fulfill your need exactly. To make it function properly you'll have to either maintain the builtin directory (locations and computers) on student computers as well (simply by deploying the same configuration to student and master computer) or preferably make Veyon use these information from your LDAP/AD server. Don't hesitate to ask further questions if you're stuck with access control rules.
Best regards
Tobias