This article is intended for IT Support.
If you have problems deploying Linewize Connect in Companion Mode, you can try the following:
MDM Troubleshooting
App Deployment
- On a Windows device, go to the search box on the taskbar, enter Settings, and select it from the results.
- Select Accounts > Access work or school.
- Select the Intune connected account.
- Select Info to view the organization's information.
- Go to Device sync status, then select Sync to sync policies with Intune.
- Restart the Windows device if the sync fails or policies do not load. Alternatively, run the following command in PowerShell to get the Group Policy updates:
gpupdate /force
Browser Deployment
Checking Policies
- On a Windows device, open Google Chrome or Microsoft Edge.
- Enter the Policies URL for your browser.
Google Chrome: chrome://policy
Microsoft Edge: edge://policy - Select Reload policies to reload the page, displaying policies set by the MDM's configuration profile.
Profile Restrictions
Ensure that the current logged-in profile on Google Chrome or Microsoft Edge does not restrict you from force-installing extensions.
To verify, sign out and sign in to a different Google Chrome or Microsoft Edge account, and check if the extension is force-installed.
Filter Troubleshooting
Check Connect for Windows and Authentication Agent are installed
- On a Windows device, go to the search box on the taskbar, enter Control Panel and select it from the results.
- Select Programs > Programs and Features.
- Check the following applications are installed:
- Connect
- School Manager - Authentication Agent
Check Connect for Windows is enrolled
- On a Windows device, go to the system tray and select the Connect for Windows icon.
- Check that the correct user is enrolled below This device belongs to.
Check Connect for Chrome extension is installed and authenticated to the correct user
- On a Windows device, open Google Chrome or Microsoft Edge.
- Select the Connect for Chrome - Education extension in the Extensions Toolbar.
- Check that the correct user is enrolled after Hello,
Check that you have set the Filter Mode to Companion
- In School Manager, go to Configuration > Mobile Agent.
- Check that you have set the Default Filter Mode to COMPANION. Alternatively, ensure the user is part of a group added to COMPANION Filtering Groups.
Check Companion Mode is enabled on the Windows device
Note
Please check first that the Connect for Windows and Authentication Agent are installed and authenticated correctly.
- On a Windows device, open Google Chrome or Microsoft Edge.
- Enter the Connect Diagnostics URL: http://127.0.0.1:5770
- Go to the Filtering section and ensure companion and dns_filter are Enabled Features.
Check DNS backup filtering is functioning properly
DNS Filter
- On a Windows device, open Google Chrome or Microsoft Edge.
- Go to a website blocked by a School Manager filtering policy.
- Check that you can see the School Manager DNS Filtering Block page.
Important
Note the different Block pages for DNS Filtering and WEB Filtering.
Note
You will only see the DNS backup filtering Block page if the Connect browser extension is not installed on the browser.
Image 1: Block page for DNS backup filtering
Check Registry settings have been configured correctly
You must apply the following Policies on your devices for Companion Mode:
Intune Setting Name | State |
---|---|
Control which extensions are installed silently | Enabled |
Configure extension, app, and user script install sources | Enabled |
Configure extension and user script install sources | Enabled |
Allow merging dictionary policies from different sources | Enabled |
Block access to a list of URLs | Enabled |
Enable ending processes in Task Manager | Disabled |
Enable ending processes in the Browser task manager | Disabled |
Control where Developer Tools can be used | Enabled |
Controls the mode of DNS-over-HTTPS | Enabled |
Control the mode of DNS-over-HTTPS | Enabled |
Incognito mode availability | Enabled |
Configure InPrivate mode availability | Enabled |
Blocks external extensions from being installed | Enabled |
Enable guest mode in browser | Disabled |
Enable guest mode | Disabled |
Allow importing of extensions | Disabled |
Allow QUIC protocol | Disabled |
Use built-in DNS client | Enabled |
Disable saving browser history | Disabled |
Extension management settings | Enabled |
Configure extension management settings | Enabled |
Configure the list of force-installed apps and extensions | Enabled |
Send Diagnostic Logs from Connect for Windows
Important
When you send Diagnostic Logs in Companion Mode, Connect for Windows will also collect the Extension console logs.
See Sending Connect for Laptops Diagnostics Logs to Linewize Support.
Comments
0 commentsPlease sign in to leave a comment.