Deploying Linewize Connect for Windows using Group Policy

Linewize filtering for Windows devices in Companion Mode requires installation of the Connect for Windows agent and Connect browser extension (in Google Chrome and Microsoft Edge). Using features from both Windows agent and browser extension enhances the filtering and Classroom Management experience for schools that use school-managed Windows devices.

Follow this guide to configure Linewize Companion Mode on your school-managed Windows devices. There are three methods to deploy Companion Mode:

• Automated Browser Policy Deployment
• Microsoft Intune MDM Deployment
• Group Policy (GPO) Deployment
   

Prerequisites

To use Companion Mode, ensure:

1. You have managed Windows devices.
2. You use devices that meet Linewize Connect Minimum System Requirements.
3. You have Companion Mode-specific versions of the Linewize Connect agent (version 4.0.0 or later), Authentication Agent, and Linewize Connect extension (version 3.0.0 or later).
4. The Mobile Agent Default Filtering Mode is Companion Mode, or Companion Filtering Groups are used in School Manager.
5. You must exclude internal DNS domains.

Deploying using Group Policy

1. Open Group Policy Management Editor.
2. Expand Computer Configuration > Policies > Software Settings.
3. Right-click Software Installation and then select New > Package...
4. Locate the Connect for Windows .msi file on your device or shared drive, then select Open and then select Yes.
5. Select Assigned, then select OK.
6. Repeat steps 2 - 5 for the Linewize Authentication Agent.
7. Restart your device to update it with the policy assignment for your Linewize Connect and Authentication Agents.

Install the Connect Extension for Google Chrome

1. Open Group Policy Management.
2. Expand the Forest and Domain the Connect for Chrome Extension you’re adding to.
3. Right-click on the Domain and select Create a new a GPO in this domain, and Link it here…
4. Right-click the GPO and then select Edit.
5. Expand Computer Configuration > Policies > Administrative Templates (ADMX).
6. Expand Google > Google Chrome > Extensions.
7. Select Configure the list of force-installed apps and extensions.
8. Select Enabled, and then select Show…
9. On the Show Contents dialog, enter “ifinpabiejbjobcphhaomiifjibpkjlf;https://download.qoria.com/browser/APPLIANCEID”, then select OK, Apply then OK.
   
   

   Note

   APPLIANCEID is the School Manager Device ID.

10. Select Configure extension, app, and user script install sources.
11. Select Enabled, and then select Show…
12. On the Show Contents dialog, enter “https://download.qoria.com/browser/*”, then select OK, Apply then select OK.
13. Select Extension management settings, then select Enabled.
14. On the Options: Extension management settings dialog enter “{ "ifinpabiejbjobcphhaomiifjibpkjlf":{"override_update_url": true,"toolbar_pin": "force_pinned"}}”.
15. Select Apply, then OK.
16. Select the GPO from the list, then select Add below the Security Filtering section to include groups, users, or computers that should apply to the GPO.

Install the Connect Extension for Microsoft Edge

1. Open Group Policy Management.
2. Expand the Forest and Domain you wish the Connect for Chrome Extension to be added.
3. Right-click on Group Policy Objects and select New.
   
   

   

4. Right-click the GPO and then select Edit.
5. Expand Computer Configuration > Policies > Administrative Templates (ADMX).
6. Expand Microsoft Edge > Extensions.
7. Select Control which extensions are installed silently.
8. Select Enabled, and then select Show…
9. On the Show Contents dialog, enter “ifinpabiejbjobcphhaomiifjibpkjlf;https://download.qoria.com/browser/APPLIANCEID”, then select OK, Apply then OK.
   
   

   Note

   APPLIANCEID is the School Manager Device ID.

10. Select Configure extension, app, and user script install sources.
11. Select Enabled, and then select Show…
12. On the Show Contents dialog, enter “https://download.qoria.com/browser/*”, then select OK, Apply, then select OK.
13. Select Configure extension management settings, and then select Enabled.
14. On the Options: Configure extension management settings dialog enter “{ "ifinpabiejbjobcphhaomiifjibpkjlf":{"override_update_url": true,"toolbar_pin": "force_pinned"}}”.
15. Select Apply then OK.
16. Select the GPO from the list, then select Add below the Security Filtering section to include groups, users, or computers that should apply to the GPO.

Extra Configuration Settings for Schools

Ensure the below is in your Group Policy to prevent students from bypassing the Linewize Connect agent and extension filtering.

Alternative Filtering Mode

If the following Windows deployment methods are unsuitable for your school, please contact your Linewize Deployment Engineer for further help.