Linewize filtering for Windows devices in Companion Mode requires installation of the Connect for Windows agent and Connect browser extension (in Google Chrome and Microsoft Edge). Using features from both Windows agent and browser extension enhances the filtering and Classroom Management experience for schools that use school-managed Windows devices.
Follow this guide to setup Linewize Companion Mode on your school-managed Windows devices. There are three methods to deploy Companion Mode:
Before you begin
To use Companion Mode, ensure:
- You have managed Windows devices.
- You use devices that meet Linewize Connect Minimum System Requirements.
- You have Companion Mode-specific versions of the Linewize Connect agent (version 4.0.0 or later), Authentication Agent, and Linewize Connect extension (version 3.0.0 or later).
- The Mobile Agent Default Filtering Mode is Companion Mode, or Companion Filtering Groups are used in School Manager.
- You have excluded internal DNS domains.
Info
If Companion Mode is unavailable, contact Linewize Support or your Deployment Engineer to turn on Companion Mode for your school.
Deploy using Automated Browser Policy
In School Manager, Automated Browser Policy Deployment allows the Connect for Windows agent to install browser extension policies. You should use this deployment type if your school:
- Doesn't have an MDM to deploy browser extension policies.
- Has difficulties using MDM to deploy browser extension policies.
1. Turn on Automated Browser Policy Deployment in School Manager
Contact your Linewize Deployment Engineer to turn on Automated Browser Deployment for your Device ID.
2. Set Companion Mode
To install the policies, set the COMPANION filtering mode for the selected student groups on the Mobile Agent page.
Note
Ensure all filtering modes are identical in the On School and Off School Network sections.
Tip
Change the filtering mode from COMPANION to WEB or DNS to remove the policies.
3. Confirm successful policy installation
Check that the policies have been successfully installed:
On Google Chrome
- Go to chrome://policy in your browser.
- Check the Windows Registry settings for the policy at Software\Policies\Google\Chrome
On Microsoft Edge
- Go to edge://policy in your browser.
- Check the Windows Registry for the policy at Software\Policies\Microsoft\Edge
Automated Browser Policy Deployment policies for Google Chrome
| Setting Name | State in MDM | URLs |
|---|---|---|
| Extension management settings | Enabled | |
| Configure the list of force-installed apps and extensions | Enabled | |
| Configure extension, app, and user script install sources | Enabled | |
| Allow merging dictionary policies from different sources | Enabled | |
| Block access to a list of URLs | Enabled | javascript://* chrome://flags/ chrome://gpucrash chrome://gpuhang chrome://memory-exhaust chrome://memory-pressure-critical chrome://memory-pressure-moderate chrome://ppapiflashcrash chrome://ppapiflashhang chrome://quit chrome://restart chrome://badcastcrash chrome://inducebrowsercrashforrealz chrome://crash chrome://crashdump chrome://kill chrome://hang chrome://shorthang chrome://gpuclean |
| Enable ending processes in Task Manager | Disabled | |
| Control where Developer Tools can be used | Enabled. Select Disallow usage of Developer Tools for Enterprise extensions from the dropdown. | |
| Controls the mode of DNS-over-HTTPS | Enabled. Select Disable DNS-over-HTTPS from the dropdown. | |
| Incognito mode availability | Enabled. Select Incognito mode disabled from the dropdown. | |
| Blocks external extensions from being installed | Enabled | |
| Enable guest mode in browser | Disabled | |
| Allow QUIC protocol | Disabled | |
| Use built-in DNS client | Enabled | |
| Disable saving browser history | Disabled. Browsing history is saved. |
Automated Browser Policy Deployment policies for Microsoft Edge
| Setting Name | State in MDM | URLs |
|---|---|---|
| Configure extension management settings | Enabled | |
| Control which extensions are installed silently | Enabled | |
| Configure extension and user script install sources | Enabled | |
| Block access to a list of URLs | Enabled | javascript://* edge://flags/ edge://gpucrash edge://gpuhang edge://memory-exhaust edge://memory-pressure-critical edge://memory-pressure-moderate edge://ppapiflashcrash edge://ppapiflashhang edge://quit edge://restart edge://badcastcrash edge://inducebrowsercrashforrealz edge://crash edge://crashdump edge://kill edge://hang edge://shorthang edge://gpuclean |
| Enable ending processes in the Browser task manager | Disabled | |
| Control where developer tools can be used | Enabled. Select Don’t allow using the developer tools for Enterprise extensions from the dropdown. | |
| Control the mode of DNS-over-HTTPS | Enabled. Select Disable DNS-over-HTTPS from the dropdown. | |
| Configure InPrivate mode availability | Enabled. Select InPrivate mode disabled from the dropdown. | |
| Blocks external extensions from being installed | Enabled | |
| Enable guest mode | Disabled | |
| Allow importing of extensions | Disabled | |
| Allow QUIC protocol | Disabled | |
| Use built-in DNS client | Enabled | |
| Disable saving browser history | Disabled. Browsing history is saved. |
Comments
0 commentsPlease sign in to leave a comment.