The Windows client is a Windows service that runs a number of system and user processes.


Once installed and enrolled it provides students with the freedom to explore the internet while empowering teachers to monitor, guide and assist. 


System Requirements


The minimum system requirements for the client are:

  • 2.0 GHz+ Single Core Processor 
  • 2 GB RAM
  • 5GB free disk space
  • Windows 10 x64 or Windows 8 x64
  • Windows Domain Enrolment
  • Google Chrome 

 

Installation - Single Device

 

Download Windows Client

 

Get the Chrome Extension here

 

1.    Open local security policies and navigate to Local PoliciesàUser Rights Assignment

 

 

2.    Add domain users to the “Create a token object” and “Replace a process level token” policies

 Graphical user interface, application 
Description automatically generated

3.    Run the MSI from a command prompt with Administrator privileges

 

 

4.    If Microsoft Defender SmartScreen is enabled select Run anyway
 
 

5. Once installation is complete you will be prompted to enter your school code.

 


6.    When Log in window appears enter a valid username & password and click Log In.


 

 

Installation - Mass Deployment with Microsoft Group Policy

 

*Before we setup Group Policy you will need to make sure the Installer is in a shared location and accessible by all machines and have Active Directory set up with an “Organisational Unit” set up for devices *


Graphical user interface, website 
Description automatically generated

Open up Group Policy Management on your server that has the Group Policy Management Role Installed


 
A picture containing graphical user interface 
Description automatically generated

Once the Group Policy Management tool has opened expand your domain name and click "Group Policy Objects", then right-click new


Graphical user interface, text, application, email 
Description automatically generated

On the New GPO Window, give this a name e.g. “Impero back:drop” and click OK, this will then appear in the "Group Policy Object" location


 

Graphical user interface, application 
Description automatically generated

Once the Group Policy Object has been created, we now need to set up the actions it will perform, to do this locate the newly created policy and right-click edit, this will open a new window
 

 

Graphical user interface, table 
Description automatically generated

Within the "Group Policy Management Editor" expand “Computer Configuration” > “Policies” > "Software Settings" > "Software Settings" > "Software Installation" right-click in the empty field, click "New" > "Package", this will then open a new window to select your MSI Package to deploy from the shared repository
 

Graphical user interface, text, application, email 
Description automatically generated

Within the "Open" window you will now need to select the “Impero back:drop” installer.msi file from your shared location (UNC Path !!) and click Open, then a window may appear that explains that it has to be in a shared network location confirm and click "Yes", this will then open a new for the deployment method

Graphical user interface, text, application, email 
Description automatically generated

On the "Deploy Software" window select the option "Assigned" if not already selected and click "OK". The Installer is now ready

Expand “Windows Settings” > “Security Settings” > “Local Policies” > “User Rights Assignments”

Graphical user interface, application 
Description automatically generated

Open “Create a token object”, click “Add User or Groups”, Click “Browse”, Add group “Domain Users”, Press “Ok” until you reach the “Create a token object” window, Press “Apply” – Close the window


Open “Replace a process level token”, click “Add User or Groups”, Click “Browse”, Add group “Domain Users”, Press “Ok” until you reach the “Create a token object” window, Press “Apply” – Close the window

Close the Group Policy Management Editor


In Active Directory, you may already have Organizational Units (OU’s for short) set up, you’ll need one for your machines which you want to install “Impero back:drop” on to


Graphical user interface, application 
Description automatically generated

In Group Policy, right-click on the OU you want to use, click “Link an Existing GPO…”

 

Graphical user interface, application 
Description automatically generated

From the list, choose the GPO you create which has the installer, click “OK”


 

Now when a machine restarts or has the Group Policy checked, they will now get Impero back:drop installed. To verify that this is working, log on to a machine that has had the msi installed and run in a Command Prompt: gpupdate /force /boot. The machine will restart and upon logging in again, you should be presented with the school enrollment form



 

Create a new GPO (Group Policy Object), name it something like: “Impero back:drop School code”

Graphical user interface, application 
Description automatically generated

Right-click on the new GPO, click edit, go to: “Computer Configuration” > “Preferences” > “Windows Settings” > “Registry”
 

Right-click > New > Registry Item

  1. Ensure the window is filled out as followed:
  2. Action: Create
  3. Hive: HKEY_LOCAL_MACHINE
  4. Key Path: SOFTWARE\Impero\School
  5. Value Name: SchoolCode
  6. Value type: Reg_SZ
  7. Value Data: YourSchoolCode

     
    Graphical user interface, application 
Description automatically generated
     

Press “Apply”, then “OK”

Right-click on your OU (Organisational Unit) you want to link it to, click “Link an Existing GPO…”

Choose your GPO

Select your OU, and ensure that the Link Order is as followed: Regkey > Installer


 

 

Download the Google Administrative Templates from here: https://dl.google.com/dl/edgedl/chrome/policy/policy_templates.zip


Open Group Policy Management


Create a new GPO for the policy (or add to an existing policy)


Right-click your GPO, and select “Edit”


 


 


 


You will then see the “Group policy management Editor” window


Expand the Computer/User configuration tree on the left-hand side, depending on how you wish to configure your policy


Right-click on “Administrative templates” and select “Add/Remove Templates”



Click on “Add”


Browse to the templates you downloaded in step 2, and open the “chrome.adm” template that is relevant to your operating system and Language.


 

 

Once uploaded, expand to the following path (may vary depending on your OS) on the left of the Group policy management editor:


“Computer/User configuration > Policies > Administrative templates > Classic administrative templates > Google > Google Chrome > Extensions”



On the right-hand side, select “Configure the list of force-installed extensions”


 


Right-click, and select “Edit”


Mark the “Enabled” button



 


Click the “Show…” button


Under the “Value” column, enter the following:


dbdfkhaojnhgfcbpkhfgpfaoincihmcm;https://clients2.google.com/service/update2/crx


 


(Please make sure you have no blank spaces in the Value Box Below)


 


Create a scheduled task under “Computer Configuration>Preferences>Control Panel Settings>Scheduled Tasks>New>Scheduled Task (At least Windows 7)
 

 

Give the task a name, in the example below “backdrop”. Run as “BUILTIN/Users”, select “Run with highest privileges” and configure for “Windows 7, Windows Server 2008R2” from the drop-down menu.

 

 
 
 Set an at logon trigger for any user.

 

Add an action to “Start a program” and run from the following location “C:\Impero\Install.bat”


 

Click Ok and Save