1. Hapara Support
  2. For Hāpara administrators
  3. Hāpara Filter - Deployment

Menu

Articles in this section

How to deploy Hāpara Filter on Windows devices Follow

In this article

Prerequisites 

Before deploying the filter proxy, please complete the steps in the article: Configuring the Hāpara Filter admin console.

Obtaining the MSI file for proxy installation

Please email implementation@hapara.com to obtain the latest installation file required to activate Hāpara's filters. We will get back to you shortly after confirming your school's registration ID with Hāpara.

 

Device Deployment

There are 2 major steps in the  deployment process:

  • Step 1) Proxy installation
  • Step 2) Proxy settings  

Options: Single or Multiple Device Deployment 

Single Windows Device Deployment 

Step 1 - Proxy installation

Please refer to Obtaining the MSI file for proxy installation to get a proxy installer MSI file. After downloading the MSI file, open the file and follow the provided steps to complete installation.

Step 2 - Configuring proxy settings to single device with PAC file 

  • Log into https://hapara.deledao.com, and go to Deployment on the top. Click Windows and Mac and copy the PAC file URL.
  • In Windows proxy settings, enable Use setup script and paste the above PAC file URL into the text box.
  • Disable Automatically detect settings.
  • Click the Save button.

Multiple Windows device deployment 

Step 1 - Multiple Windows Device proxy installation through GPO

Please refer to Obtaining the MSI file for proxy installation to get a proxy installer MSI file.

Create a Distribution Point

  • Create a shared network folder
  • Set the sharing permission on the folder to be readable by authenticated users
  • Place the installer MSI in the network folder

Create a GPO

  • Open Group Policy Management, under Group Policy Objects, right-click and choose New
  • Type a name and press enter to create the GPO
  • Right-click on the newly created GPO and choose Edit
  • In the Group Policy Management Editor, under Computer Configuration,  
      expand Policies > Software Settings > Software Installation
  • Right-click Software Installation, choose New and then click Package…
  • In the opened box, choose the MSI placed in the network shared folder, and then click Open
  • Click Assign > OK
  • The GPO has been created.  
  • Now switch back to Group Policy Management window to select the OU that needs the proxy.
  • Right-click the OU, then choose Link an Existing GPO.
    In the opened box, select the GPO which is just created.

Step 2 - Configuring proxy setting by deploying the PAC File through GPO

  • Log into https://hapara.deledao.com, and go to the Deployment tab. Click Windows and Mac and copy the PAC file URL.
  • Open Group Policy Management, under Group Policy Objects, right-click and choose New
  • Type a name and press enter to create the GPO
  • Right-click on the newly created GPO and choose Edit
  • Choose User Configuration > Preferences > Windows Settings > Registry, then add two entries:

            AutoConfigURL

  • key path: Software\Microsoft\Windows\CurrentVersion\Internet Settings with HKEY_CURRENT_USER.
  • Hive: HKEY_CURRENT_USER
  • Value Name: AutoConfigURL
  • Value Type: REG_SZ
  • Value Data: paste URL (obtained in step 1) to the PAC file

            ProxyOverride

  • key path: Software\Microsoft\Windows\CurrentVersion\Internet Settings with HKEY_CURRENT_USER.
  • Hive: HKEY_CURRENT_USER
  • Value Name: ProxyOverride
  • Value Type: REG_SZ
  • Value Data: <local>
  • Choose User Configuration > Policies > Administrative Templates > Windows Components > Internet Explorer, enable “Prevent changing proxy settings”
  • Apply the GPO to the target OU.

Verification 

To verify that the proxy is working:

  • Open a browser and try going to any website - you should be asked to sign in with your Office365 or Google Workspace account.
  • After signing in, you can test that the filters are working by searching "pacman" (it will be blocked if the category "games" is blocked in the Policy Manager).

Troubleshooting

Fileshare permission

In order to install the software through GPO, the MSI file needs to be placed in a shared folder.
All authenticated users need to have read permissions to the shared folder.

Error 1274

Indicates a need for processing time for the extending policy. 

You can resolve the issue by going to the Group Policy applied to the associated workstations and navigating to:

  • Computer Configuration > Policies > Administrative Templates > System > Group Policy
  • Enable 'Specify startup policy processing wait time.' 
  • Set the Amount of time to wait (in seconds): 120 

References instructions to resolve this issue can be found here.

Re-install software through GPO

If the local admin has removed the MSI file after the GPO software installation has finished, the software will not be re-installed at the next reboot or GPO sync time.
  
In order to re-install it, please follow these steps:

  • Open Registry Editor regedit.exe
  • Navigate to: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\AppMgmt
  • Delete a key representing the application in question
    (To find out which key to delete, check values inside the keys where you will find Product Name and other details)
  • Run gpupdate /force (with admin privilege)

Related articles