The Windows client is a Windows service which runs a number of system and user processes.


Once installed and enrolled it provides students with the freedom to explore the internet while empowering teachers to monitor, guide and assist. The Windows client shares a live stream of the student's device with the teacher and allows them to perform the following actions. 

  • Send Message – Teachers can send a direct one way message to the device 
  • Launch Website – Teachers can open a web site on the device automatically 
  • Lock Screens – Teachers can lock the screen of the device
  • Internet Access – Teachers can disable internet access in browsers where Impero browser extensions are installed
  • Website Lists – Teachers can enforce allow and block website lists in browsers where Impero browser extensions are installed
  • Close Tab – Teachers can view open browser tabs lists and close open tabs in browsers where Impero browser extensions are installed


System Requirements


The minimum system requirements for the client are:

  • 2.0 GHz+ Single Core Processor 
  • 2 GB RAM
  • 5GB free disk space
  • Windows 10 x64, Windows 8 x64 or Windows 7 x64 (see below)
  • Windows Domain Enrolment
  • Google Chrome or Microsoft Edge (v77+ chromium)


Windows 7 Specific Requirements


The following must also be installed for Windows 7.

  • Windows 7 Service pack 1 Windows6.1-KB4019990-x64
  • Windows6.1-KB3063858-x64
  • vc_redistx64 (Microsoft Visual C++ 2015 – 2019 -x64 – 14.28.29325)

.NET requirements

  • .NET Core 3.0
  • .NET Framework 4.5
  • .NET Framework 4.6.2
  • .NET Framework 4.7


for more details on browser extensions click here

Impero class:room - How do I install browser extensions?


Get the Chrome Extension here

 

Download Windows Client


Release Notes - v1201


Features:


· Improved debug logs to contain additional info.


Bug fixes:


· Improved resilience of Windows service.


The Windows client change log can be found here

Impero class:room - Windows Client Change Log/Patch Notes



Installation - Single Device

 

 

1.    Run the MSI from a command prompt with Administrator privileges. Use the following command line to run the setup.


msiexec /i "C:\Users\Test\Desktop\impero-windows.msi" SCHOOLCODE=XXXXX
replace "C:\Users\Test\Desktop\impero-windows.msi" with the location and name of the MSI.
replace SCHOOLCODE=XXXXX where XXXXX is your valid school code.


Command line installation will require the /quiet flag parameter for silent installation. The parameter SCHOOLCODE is optional and is used to register the school code at installation.


Example:


msiexec /i “C:\temp\impero-windows-v1201.msi” SCHOOLCODE=X12Y45 /quiet

 

 

Double click installation

You can double-click the installer and be shown a GUI to install the Windows Client. You will be asked to register a school code after the installation process has completed.

2.    If Microsoft Defender SmartScreen is enabled select Run anyway.
 
 

3. Once installation is complete, if you entered an invalid school code, the school code screen will appear for you to add your school code again. If you entered a valid school code, setup will skip to step 4.

 


4.    When Log in window appears enter a valid username & password and click Log In.

 

Installation - Mass Deployment with Microsoft Group Policy

 

*Before we setup Group Policy you will need to make sure the Installer is in a shared location and accessible by all machines and have Active Directory setup with an “Organisational Unit” set up for devices *



Deploy the client .MSI


Graphical user interface, website

Description automatically generated

Open up Group Policy Management on your server that has the Group Policy Management Role Installed.


 
A picture containing graphical user interface

Description automatically generated

Once the Group Policy Management tool has opened, expand your domain name and click on "Group Policy Objects", then right click on New.


Graphical user interface, text, application, email

Description automatically generated

On the New GPO Window, give this a name e.g. “Impero back:drop” and click OK, this will then appear in the "Group Policy Object" location.


 

Graphical user interface, application

Description automatically generated

Once the Group Policy Object has been created, we now need to setup the actions it will perform, to do this locate the newly created policy and right click on Edit, this will open a new window.
 

 

Graphical user interface, table

Description automatically generated

Within the "Group Policy Management Editor" expand “Computer Configuration” > “Policies” > "Software Settings" > "Software Settings" > "Software Installation" right-click in the empty field, click on "New" > "Package", this will then open a new window to select your MSI Package to deploy from the shared repository.
 

Graphical user interface, text, application, email

Description automatically generated

Within the "Open" window you will now need to select the “Impero back:drop” installer.msi file from your shared location (UNC Path !!) and click Open, then a window may appear that explains that it has to be in a shared network location confirm and click "Yes", this will then open a new for the deployment method.

Graphical user interface, text, application, email

Description automatically generated

On the "Deploy Software" window select the option "Assigned" if not already selected and click "OK". The Installer is now ready.

Expand “Windows Settings” > “Security Settings” > “Local Policies” > “User Rights Assignments”.

Graphical user interface, application

Description automatically generated

Open “Create a token object”, click “Add User or Groups”, Click “Browse”, Add group “Domain Users”, Press “Ok” until you reach the “Create a token object” window, Press “Apply” – Close the window.


Open “Replace a process level token”, click “Add User or Groups”, Click “Browse”, Add group “Domain Users”, Press “Ok” until you reach the “Create a token object” window, Press “Apply” – Close the window.


Expand “Windows Settings” > “Security Settings”. Right click "File System" and select "Add File...".



Navigate to the following directory and click "OK" to add the folder.

"C:\Impero\Deviceidentification"
(If the above directory path does not exist on your server you can manually create it)

 

The file/folder permissions window will appear. Click "Add" and enter "domain users" using "check names" to verify the correct user group. Click "OK".



Select "domain users" and ensure a tick is present in both "Read" and "Write" permissions. Click "OK".



In the "Add Object" dialog window select "Replace existing permissions on all subfolders and files with inheritable permissions" and click "OK".



Close the Group Policy Management Editor


In Active Directory, you may already have Organizational Units (OU’s for short) set up, you’ll need one for your machines which you want to install “Impero back:drop” on to.


Graphical user interface, application

Description automatically generated

In Group Policy, right-click on the OU you want to use, click on “Link an Existing GPO…”

 

Graphical user interface, application

Description automatically generated

From the list, choose the GPO you create which has the installer, click “OK”.


 

Now when a machine restarts or has the Group Policy checked, they will now get Impero back:drop installed. To verify that this is working, log on to a machine that has had the msi installed and run in a Command Prompt: gpupdate /force /boot. The machine will restart and upon logging in again, you should be presented with the school enrollment formMSI



Set the school code


Create a new GPO (Group Policy Object), name it something like: “Impero back:drop School code”.

Graphical user interface, application

Description automatically generated

Right-click on the new GPO, click edit, go to: “Computer Configuration” > “Preferences” > “Windows Settings” > “Registry”.
 

Right-click > New > Registry Item

  1. Ensure the window is filled out as followed:
  2. Action: Create
  3. Hive: HKEY_LOCAL_MACHINE
  4. Key Path: SOFTWARE\Impero\School
  5. Value Name: SchoolCode
  6. Value type: Reg_SZ
  7. Value Data: YourSchoolCode

     
    Graphical user interface, application

Description automatically generated
     

Press “Apply”, then “OK”.

Right-click on your OU (Organisational Unit) you want to link it to, click “Link an Existing GPO…”

Choose your GPO

Select your OU, and ensure that the Link Order is as followed: Regkey > Installer > Restart Service.


Install default browser Extensions (Google Chrome or Microsoft Edge)

 

Select the options that match your default browser. only one browser can be monitored at a time.

Download the Google Administrative Templates from here: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip

or

Download the Edge Administrative Templates from here: https://www.microsoft.com/en-us/edge/business/download

You will need to fill out the required fields and click the "GET POLICY FILES" button


Open Group Policy Management


Create a new GPO for the policy (or add to an existing policy)


Right-click your GPO, and select “Edit”.


 


 


 


You will then see the “Group policy management Editor” window.


Expand the Computer/User configuration tree on the left-hand side, depending on how you wish to configure your policy.


Right-click on “Administrative templates” and select “Add/Remove Templates”.



Click on “Add”.


Browse to the templates you downloaded earlier, and open the “chrome.adm” template that is relevant to your operating system and Language.

or

Browse to the templates you downloaded in step 2 and open the “msedge.adm” template that is relevant to your operating system and Language.


 

 

Once uploaded, expand to the following path (may vary depending on your OS) on the left of the Group policy management editor:


“Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Google > Google Chrome > Extensions”

or

“Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Microsoft Edge > Extensions > ”



On the right-hand side, select “Configure the list of force-installed extensions” for Chrome

or
On the right-hand side, select “Control which extensions are installed silently” for Edge


 


Right-click, and select “Edit”


Mark the “Enabled” button



 


Click on the “Show…” button


Under the “Value” column, enter the following:


dbdfkhaojnhgfcbpkhfgpfaoincihmcm;https://clients2.google.com/service/update2/crx


 


(Please make sure you have no blank spaces in the Value Box Below)



Enable Chrome extension for all users


Create a scheduled task under “Computer Configuration>Preferences>Control Panel Settings>Scheduled Tasks>New>Scheduled Task (At least Windows 7)
 

 

Give the task a name, in the example below “backdrop”. Run as “BUILTIN/Users”, select “Run with highest privileges” and configure for “Windows 7, Windows Server 2008R2” from the drop-down menu.


  

 Set an at logon trigger for any user.

 
 

Add an action to “Start a program” and run from the following location “C:\Impero\Install.bat”


  

Click Ok and Save

 





FAQ


I am not being prompted to login, is the application working?


If you are using automatic log in you will not be prompted to log in to back:brop. Check the website to see if you appear in the classroom.


If you are not using automatic login and you are not prompted to appear. Check that the Impero.LoginMonitor and Impero.Server are running in Windows Services.


Finally check your Internet connection. The software requires an Internet connection to work properly. If you have recently fixed a problem with your Internet connection, you can restart the Windows Services or restart your machine to get it working again.


I have followed the install steps but the client is still not deploying, what can I try?


Increasing the start-up policy wait time can help resolve this issue.
Update your GPO with the following policy,
Computer Configuration->Policies->Administative Templates->System->Group Policy->Specify startup policy processing wait time


Set to Enabled and Increasing the timeout to 120 seconds should allow time for the client to be deployed. Click OK.




I am having trouble installing the software over version 1.1.1 / I am having trouble uninstalling version 1.1.1


There were problems with the installer for version 1.1.1. We have fixed the issues on later releases. However, on some machines, we have found that there are uninstallation issues. If this happens to you, follow these steps to remove. (We recommend that an IT administrator perform these steps):


· Delete the folder C:\Impero and all its contents.


· Delete the folder C:\ProgramData\Impero and all its contents.


· Search in the following registry for “Impero”:


HKLM > Software > Windows > Current Version > Uninstall


· Delete the folder and contents of the search result.


· Search in the following registry for “Impero”:


o HKEY_CLASSES_ROOT > Installer > Products


· Delete the folder and contents of the search result.