TABLE OF CONTENTS

Prerequisites 

Please complete the steps in the article: "Configuring the Deledao Admin Console".

Obtaining the MSI File for Proxy Installation 

Please email [email protected] to obtain the latest installation file required to activate Deledao's filters. We will get back to you shortly after confirming your school's registration ID with Deledao.


Device Deployment


There are 2 major steps in the  deployment process:

  • Step 1) Proxy installation
  • Step 2) Proxy settings
      

Options: Single or Multiple Device Deployment 

Single Windows Device Deployment 

Step 1 - Proxy Installation (Step 1)


Please refer to Obtaining the MSI File for Proxy Installation to get a proxy installer MSI file. After downloading the MSI file, open the file and follow the provided steps to complete installation.


Step 2 - Configuring Proxy Settings to Single Device with PAC File (Step 2)

  • Log into https://admin.deledao.com, and go to “Deployment” on the top. Click “Windows and Mac” and copy the PAC file URL.
  • In Windows proxy settings, enable “Use setup script” and paste the above PAC file URL into the text box.
  • Disable “Automatically detect settings”.
  • Click the "Save" button.

Multiple Windows Device Deployment 

 

Step 1 - Multiple Windows Device Proxy Installation through GPO


Please refer to Obtaining the MSI File for Proxy Installation to get a proxy installer MSI file.
  

Create a Distribution Point

  • Create a shared network folder
  • Set the sharing permission on the folder to be readable by authenticated users
  • Place the installer MSI in the network folder

Create a GPO

Please note this GPO should be deployed to computer OUs only 

  • Open Group Policy Management, under Group Policy Objects right-click and choose “New”
  • Type a name and press enter to create the GPO
  • Right-click on the newly created GPO and choose “Edit”
  • In Group Policy Management Editor, under Computer Configuration,  
      expand Policies -> Software Settings -> Software Installation
  • Right-click “Software Installation”, choose “New”, and then click “Package…”
  • In the opened box, choose the MSI placed in the network shared folder, and then click “Open”
  • Click “Assign” -> “OK”
  • The GPO has been created.  
  • Now switch back to Group Policy Management window to select the OU that needs the proxy.
  • Right-click the OU, then choose “Link an Existing GPO”.
    In the opened box, select the GPO which is just created.


Step 2 - Configuring Proxy Setting by Deploying the PAC File through GPO

Please note this PAC file GPO should be deployed to user OUs, not computer OUs

  • Log into https://admin.deledao.com, and go to “Deployment” on the top. Click “Windows and Mac” and copy the PAC file URL.
  • Open Group Policy Management, under Group Policy Objects right-click and choose “New”
  • Type a name and press enter to create the GPO
  • Right-click on the newly created GPO and choose “Edit”
  • Choose User Configuration -> Preferences -> Windows Settings -> Registry, then add two entries:


            AutoConfigURL

  • key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  • Hive: HKEY_CURRENT_USER
  • Value Name: AutoConfigURL
  • Value Type: REG_SZ
  • Value Data: paste URL (obtained in step 1) to the PAC file

            ProxyOverride

  • key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
  • Hive: HKEY_CURRENT_USER
  • Value Name: ProxyOverride
  • Value Type: REG_SZ
  • Value Data: <local>

           Prevent Users from Changing the proxy setting

  • Choose User Configuration -> Policies -> Administrative Templates -> Windows Components -> Internet Explorer, enable “Prevent changing proxy settings”
  • Apply the GPO to the target OU.

Verification 

To verify that the proxy is working:

  • Open a browser and try going to any website - one should be asked to sign in with one's Office365 or GSuite account.
  • After signing in, one can test that the filters are working by searching "pacman" (it will be blocked if the category "games" is blocked in the Policy Manager").


Windows SSO


Usually when a user is on proxy solution, it will be asked to sign in Deledao in a browser. We have an option on admin console to avoid this sign-in process given a prerequisite:


    If the Windows username matches the email account for the user, for example, Windows username is "john", and the email account is [email protected], after turning on the option on admin console -> Configuration -> Identity Provider -> Use Windows or Mac logon names to derive student identities, students won't be asked to sign in within the browser. 

Troubleshooting

Fileshare Permission

In order to install the software through GPO, the MSI file needs to be placed in a shared folder.
It needs permission from all “authenticated users” that they have the read permissions regarding the shared folder.


Error 1274

Indicates a need for processing time for the extending policy. 

One can resolve the issue going to the Group Policy applied to the associated workstations and navigating to:

  • Computer Configuration > Policies > Administrative Templates > System > Group Policy
  • Enable 'Specify startup policy processing wait time.' 
  • Set the Amount of time to wait (in seconds): 120 

References instructions to resolve this issue can be found here.

Re-install software through GPO

If the local admin has removed the MSI file after the GPO software installation has finished, the software will not be re-installed at the next reboot or GPO sync time.
  
In order to re-install it, please follow these steps:

  • Open Registry Editor regedit.exe    
  • Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
  • Delete a key representing the application in question
    (To find out which key to delete, check values inside the keys where you will find Product Name and other details)
  • Run gpupdate /force (with admin privilege)
     

© Deledao Education