How to deploy Deledao ActiveScan, presented by Hāpara on Windows devices Follow
In this article
- Prerequisites
- Obtaining the MSI file for proxy installation
- Device deployment
- Verification
- Windows Single Sign On (SSO)
- Troubleshooting
Prerequisites
Before deploying the filter proxy, please complete the steps in the article: Configuring the web filter admin console.
Obtaining the MSI file for proxy installation
Please email implementation@hapara.com to obtain the latest installation file required to activate Deledao ActiveScan, presented
Device deployment
There are two major steps in the deployment process:
- Step 1) Proxy installation
- Step 2) Proxy settings
Options: Single or multiple device deployment
Single Windows device deployment
Step 1 - Proxy installation
Please refer to Obtaining the MSI file for proxy installation to get a proxy installer MSI file. After downloading the MSI file, open the file and follow the provided steps to complete the installation.
Step 2 - Configuring proxy settings to a single device with PAC file
- Log into https://admin.deledao.com, and go to Deployment on the top. Click Windows and Mac and copy the PAC file URL.
- In Windows proxy settings, enable Use setup script and paste the above PAC file URL into the text box.
- Disable Automatically detect settings.
- Open the browser and go to a random website, you will be redirected to a Deledao login page. Use a student account to sign in, then start browsing.
- Click the Save button.
All browsing history can be found under Reports on our admin console.
Multiple Windows device deployment
Step 1 - Multiple Windows Device proxy installation through GPO
Please refer to Obtaining the MSI file for proxy installation to get a proxy installer MSI file.
Create a Distribution Point
- Create a shared network folder
- Set the sharing permission on the folder to be readable by authenticated users
- Place the installer MSI in the network folder
Create a GPO - Note: This GPO should be deployed to computer OU's only.
- Open Group Policy Management, under Group Policy Objects, right-click and choose New
- Type a name and press enter to create the GPO
- Right-click on the newly created GPO and choose Edit
- In the Group Policy Management Editor, under Computer Configuration,
expand Policies > Software Settings > Software Installation - Right-click Software Installation, choose New and then click Package…
- In the opened box, choose the MSI placed in the network shared folder, and then click Open
- Click Assign > OK
- The GPO has been created.
- Now switch back to Group Policy Management window to select the OU that needs the proxy.
- Right-click the OU, then choose Link an Existing GPO.
In the opened box, select the GPO which is just created.
Step 2 - Configuring proxy setting by deploying the PAC File through GPO - Note: this PAC file GPO should be deployed to user OU's and not computer OU's.
- Log into https://admin.deledao.com, and go to the Deployment tab. Click Windows and Mac and copy the PAC file URL.
- Open Group Policy Management, under Group Policy Objects, right-click and choose New
- Type a name and press enter to create the GPO
- Right-click on the newly created GPO and choose Edit
- Choose User Configuration > Preferences > Windows Settings > Registry, then add two entries:
AutoConfigURL
- key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- Hive: HKEY_CURRENT_USER
- Value Name: AutoConfigURL
- Value Type: REG_SZ
- Value Data: paste URL (obtained in step 1) to the PAC file
ProxyOverride
- key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- Hive: HKEY_CURRENT_USER
- Value Name: ProxyOverride
- Value Type: REG_SZ
- Value Data: <local>
Prevent users from changing the proxy setting
- Choose User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer, enable "Prevent changing proxy settings"
- Apply the GPO to the target OU.
Verification
To verify that the proxy is working:
- Open a browser and try going to any website - you should be asked to sign in with your Office365 or Google Workspace account.
- After signing in, you can test that the filters are working by searching "pacman" (it will be blocked if the category "games" is blocked in the Policy Manager).
Windows Single Sign On (SSO)
Typically when using the proxy solution, a user is asked to sign into Deledao from the browser.
To avoid the sign-in process, verify that the Windows username matches the email account for the user. For example, the Windows username is "john", and the email account is john@school.org. Once this is verified, turn on the following option in the admin console:
Configuration > Identity Provider > Use Windows or Mac logon names to derive student identities. This will prevent students from being asked to sign into the Chrome browser.
Troubleshooting
Fileshare permission
To install the software through GPO, the MSI file needs to be placed in a shared folder.
All authenticated users need to have read permissions to the shared folder.
Error 1274
Indicates a need for processing time for the extending policy.
You can resolve the issue by going to the Group Policy applied to the associated workstations and navigating to:
- Computer Configuration > Policies > Administrative Templates > System > Group Policy
- Enable 'Specify startup policy processing wait time.'
- Set the Amount of time to wait (in seconds): 120
References instructions to resolve this issue can be found here.
Re-install software through GPO
If the local admin has removed the MSI file after the GPO software installation has finished, the software will not be re-installed at the next reboot or GPO sync time.
In order to re-install it, please follow these steps:
- Open Registry Editor regedit.exe
- Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
- Delete a key representing the application in question
(To find out which key to delete, check values inside the keys where you will find Product Name and other details) - Run gpupdate /force (with admin privilege)