Table of Contents


Audience: IT Administrators


This article explains how to deploy Deledao filtering on Windows devices. The deployment process consists of installing the Deledao proxy and configuring devices to use the Deledao PAC file. Deployment can be performed on a single device or at scale using Group Policy Objects (GPOs).


Prerequisites

Before deploying Deledao on Windows devices, complete the configuration steps outlined in the Pre-Deployment Tasks article.

Obtaining the Installation Files

To deploy the Deledao proxy, you must first obtain the latest MSI installer.

  1. Email support@deledao.com.
  2. Request the latest Windows proxy installer.
  3. Provide your district or school name.
  4. Deledao Support will provide the appropriate installation package after verification.


Deployment Overview

Windows deployment consists of two main steps:


Step 1: Install the Deledao Proxy

Install the Deledao proxy software on Windows devices.


Step 2: Configure Proxy Settings

Configure devices to use the PAC URL generated in the Deledao Admin Console.


Deployment can be completed for:

  • A single Windows device
  • Multiple Windows devices using Group Policy (GPO)

Single Windows Device Deployment

Step 1: Install the Proxy

  1. Obtain the MSI installer from Deledao Support.
  2. Launch the MSI file.
  3. Follow the installation prompts to complete the installation.


Step 2: Configure the PAC File

  1. Log in to the Deledao Admin Console.
  2. Navigate to Deployment > Windows and Mac.
  3. Copy the PAC file URL.


On the Windows device:

  1. Open Windows Proxy Settings.
  2. Enable Use setup script.
  3. Paste the PAC file URL into the Script Address field.
  4. Disable Automatically detect settings.
  5. Click Save.


Multiple Windows Device Deployment (GPO)

Step 1: Deploy the Proxy Installer via GPO

Create a Network Distribution Point

  1. Create a shared network folder
  2. Grant Read permissions to Authenticated Users.
  3. Copy the MSI installer into the shared folder.


Create the Software Installation GPO

  • Important: This GPO should be linked to Computer OUs, not User OUs.
  1. Open Group Policy Management.
  2. Right-click Group Policy Objects right-click and select New.
  3. Enter a name for the policy.
  4. Right-click on the new GPO and select Edit.
  5. Navigate to Computer Configuration > Policies > Software Settings > Software Installation.
  6. Right-click Software Installation and select New > Package.
  7. Browse to the MSI file in the network share.
  8. Select Assign.
  9. Click OK. 


Link the GPO

  1. Return to Group Policy Management.
  2. Select the computer OU that will receive the software.
  3. Choose Link an Existing GPO.
  4. Select the newly created GPO.


Step 2: Deploy the PAC File via GPO

  • Important: This GPO should be linked to User OUs, not Computer OUs.

Obtain the PAC File URL

  1. Log in to the Deledao Admin Console.
  2. Navigate to Deployment > Windows and Mac.
  3. Copy the PAC file URL.

Create the PAC File GPO

  1. Open Group Policy Management.
  2. Right-click Group Policy Objects right-click and select New.
  3. Enter a name for the policy.
  4. Right-click on the new GPO and select Edit.
  5. Navigate to User Configuration > Preferences > Windows Settings > Registry.
  6. Create the following 2 registry entries:


AutoConfigURL

  • key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  • Hive: HKEY_CURRENT_USER
  • Value Name: AutoConfigURL
  • Value Type: REG_SZ
  • Value Data: paste PAC URL


ProxyOverride

  • key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  • Hive: HKEY_CURRENT_USER
  • Value Name: ProxyOverride
  • Value Type: REG_SZ
  • Value Data: <local>

           

Prevent Users from Modifying Proxy Settings

To prevent users from chagning deployed proxy settings:

  1. Navigate to User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer
  2. Enable Prevent changing proxy settings
  3. Apply the GPO to the desired OU.


Configure Group Policy Processing Time

To ensure software deployment has sufficient time to process:

  1. Navigate to Computer Configuration > Policies > Administrative Templates > System > Group Policy
  2. Enable Specify startup policy processing wait time
  3. 120 seconds

This setting is recommended for reliable software deployment.


Verify the Deployment

After deployment is complete:

  1. Open a web browser.
  2. Browse to any website.
  3. Confirm the user is prompted to sign in using their Microsoft 365 or Google account.


Verify Filtering

To confirm filtering is working:

  1. Search for Pacman.
  2. If the Games category is blocked in your policy, access should be blocked. 


Windows Single Sign-On (SSO)

By default, users may be prompted to sign in through the browser when using the Deledao proxy.


Enable Windows Username Mapping

If Windows usernames match user email addresses, Deledao can automatically identify users.


Example:

Windows Username: john

Email Address: john@school.org


To enable this feature:

  1. Navigate to the Deledao Admin Console
  2. Select Configuration
  3. Click Identity Provider
  4. Enable Use Windows or Mac logon names to derive student identities


When enabled, users will no longer be prompted to sign in through the browser.


Troubleshooting

File Share Permissions

When deploying software through GPO:

  • The MSI installer must be stored in a shared folder.
  • Authenticated Users must have Read access to that folder.


Error 1274

Error 1274 typically indicates that Windows requires additional time to process startup policies.

  1. Navigate to Computer Configuration > Policies > Administrative Templates > System > Group Policy
  2. Enable Specify startup policy processing wait time
  3. Set the wait time to: 120 seconds


See THIS reference for instructions to resolve this issue.


Reinstalling the Software Through GPO

If the MSI file is removed after installation, Windows may not automatically reinstall the application during future GPO refreshes.


To force reinstallation:

  1. Open Registry Editor (regedit.exe)
  2. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
  3. Locate the registry key associated with the Deledao application.
  4. Delete the appropriate application key.
  5. Open an elevated command prompt.
  6. Run gpupdate /force.


Best Practices

  • Use GPO deployment for large Windows environments.
  • Deploy the MSI installer to Computer OUs only.
  • Deploy PAC file settings to User OUs only.
  • Grant Read permissions to Authenticated Users on deployment shares.
  • Enable startup policy processing for 120 seconds to improve deployment reliability.
  • Configure Windows SSO when usernames align with email accounts to simplify the user experience.


© Deledao Education