SchoolProtect Steps

1.Sign into the SchoolProtect admin console: https://schoolprotect.lgfl.org.uk/.

2.Browse to Policies > Policy Configuration.

3.Create a new policy, choose what to base it on (system default or copy existing policy) and give it a name. The new policy will show under the Inactive Policies section at the bottom of the page.

4.Click Edit to enter the Policy Group page (this is where you can configure time schedules and edit the policy allowed/blocked URLs, categories and Bundles).

5.You should not enter anything into the Priority box.

6.Under Target Group click Windows (InTune/GPO) (if this button is not showing, check the policy is not targeted to any other user type, i.e. IP addresses, AD groups or USO groups).

 

 

Repeat this process for each different filtering policy you need to set up.

 

Intune Steps

Please note: in testing, this works best when the device has Shared PC Mode enabled as per-user Intune polices apply quicker upon login.

1.Download and extract the LGfL Netsweeper Workstation Agent ADMX file from the SchoolProtect portal. This contains 4 files:

a. Netsweeper Workstation Agent MSI

b. Netsweeper Workstation Agent INTUNEWIN

c. Wagent.admx

d. Wagent.adml

2.   Create the App Installation. This needs to be completed once:

a. In Intune, open Apps > Windows.

b. Select Windows app (Win32) and click Select.

c. Click Select app package file and upload the Netsweeper Workstation Agent INTUNEWIN file from step 1.

d. Enter ‘LGfL’ as the Publisher name and click Next.

e. Click Next on the Program page.

f. On the Requirements page, select both 32 bit and 64 bit in the Operating system architecture box and Windows 10 1607 in Minimum operating system box and click Next.

g. On the Detection rules page, select Manually configure detection rules in the Rules format box. Click Add, select MSI in the Rule type box and click OK. Click Next

h. Click Next on both the Dependencies and Supersedence pages

i. On the Assignments page, click Add to all devices under the Required heading to install onto all the managed Windows devices and click Next

j. Click Create.

k. The Workstation Agent should start to be installed on the Windows devices as they check in to Intune.

3.   Import the ADMX definition. This needs to be completed once:

a. In Intune, open Devices > Configuration.

b. On the ‘Import ADMX’ tab click + Import.

c. Select the ADMX and ADML files extracted from step 1.

d. Click Next then Create.

4.   Create the per-policy configuration. This needs to be completed for each filtering policy you wish to define:

a. On the Devices > Configuration page, open the Policies tab and click + Create then + New Policy.

b. Choose Windows 10 and later in platform and Templates in Profile type. Select Imported Administrative templates (preview) and click Create.

c. Give your profile a name and description (e.g. LGfL SchoolProtect Students). And click Next.

d. In the Configuration settings page, click User Configuration, open the ‘LGfL’ folder and select SchoolProtect Netsweeper Workstation Agent Config.

e. Click Enabled and paste in the configuration that is displayed in the SchoolProtect Policy Group Configuration page (ensure that you have clicked on Windows (InTune/GPO) to show it).

f. Click OK then Next and Next again on the Scope tags page.

g. On the Assignments page, add the user groups you wish this policy to apply to.

h. Click Next then Create

 

Testing

Once these steps are completed, wait 60 minutes then test with a user in the group added in step 4.g:

1. Sign into a PC and ensure Workstation Agent is installed:

a. This can be done by looking for ‘Wagent’ in Task Manager

2. Visit http://wsblock.co.uk and check the username listed is the currently logged in user