Deploying LanSchool Using Group Policy

Deploying LanSchool Using Group Policy

Overview

 The LanSchool Group Policy deployment guide is designed to assist with some basic settings and deployment using Active Directory Group Policy settings. 

Please note that our support team can only provide limited assistance with configuring your organization's Group Policy. 

LanSchool provides an option to utilize a PowerShell script at teacher login to change the LanSchool Teacher channel to a unique channel from a CSV file. This is recommended for customers who are not using a LanSchool Connection Server or who wish to specify certain channel numbers to certain computers. For more information about the LanSchool Teacher Channel assignment, please see LanSchool Teacher Channel Assignment Using Group Policy.

If you are using a LanSchool Connection Server, we recommend utilizing the Automatic Assignment of Teacher Channels through the LanSchool Connection Server. Please see Installing the LanSchool Connection Service for enabling the Automatic Channel Assignment.

For script installation, please see Mass Deploying LanSchool Teacher for Windows.
For Chromebook installation please see  Mass Deploying LanSchool Student for Chromebook.
For MacOS installation, please see our MacOS deployment guides.

DISCLAIMER – Every customer environment is different.  Use this guide as a reference and not a requirement of the software.  It is still recommended to consult your local Active Directory administrator(s) or Microsoft support if you have questions about the repercussions of individual settings in your environment.

System Requirements

  1. Group Policy Management rights
  2. Active Directory Users and Computer rights
  3. File Server access and permissions
  4. Access to LanSchool installation media (download from Customer Portal)

Software Share Setup

  1. Choose a shared network folder you will be deploying from (e.g. \\ServerName\Shared). 
  2. Create a new folder called “LanSchool-Software
  3. Right-click on folder and go to Properties
  4. Click on the Sharing tab and select Advanced Sharing
  5. Check Share this folder
  6. Click Permissions
  7. Allow Full Control to Everyone
  8. Click OK
  9. Click OK in Advanced Sharing
  10. Go to Security tab
  11. Click Edit
  12. Remove Authenticated Users in security permissions
  13. Add Domain Computers in security permissions
    1. Read, list, execute permissions (default)
  14. Click OK on Security tab
  15. Close the Properties window
  16. Browse to file share
  17. Create subfolder called “Teacher
  18. Create subfolder called “Student
  19. Create subfolders under Teacher and Student with current version of LanSchool 9.0.1.42
  20. Upload the Teacher.MSI to 9.0.1.42 folder
  21. Upload the Student.MSI to 9.0.1.42 folder

LanSchool Teacher Group Policy Deployment

In this section, we will cover the deployment of LanSchool Teacher Group Policy.

If you wish to use the Lanschool Teacher Channel Assignment please see LanSchool Teacher Channel Assignment Using Group Policy. Follow the steps in conjunction with using the Group Policy Management Editor.

Add Software for Deployment

  1. On one of your Active Directory domain controllers, open Group Policy Management.
  2. Create policy for Teachers (name and location is not critical) e.g. LanSchool-Teacher-GPO
  3. Right-click the newly created policy and select Edit.
  4. Under Computer Configuration, expand the Policies folder and then the Software Settings folder.
  5. Select the Software Installation folder. 
  6. In the right pane, right-click and select New > Package.



  7. Select the Teacher.MSI from the shared network folder (e.g. \\ServerName\Shared)
  8. In the Deploy Software window, select Advanced and then select OK.
  9. For record, add the version to the Name field
  10. Select the Deployment tab and then check the box next to Uninstall this application when it falls out of the scope of management.



  11. Click OK

Configure Teacher Settings

  1. In Group Policy Management Editor, go to Computer Configuration > Policies > Administrative Templates
  2. Right-click and select Add/Remove Templates
  3. Click Add
  4. Browse to the downloaded LanSchool installation media
  5. Browse to Windows folder
  6. Select LanSchoolTeacher.adm and select Open
  7. Click Close



  8. Browse to Classic Administrative Templates (ADM)



  9. Click LanSchool Teacher 32bit Options
  10. Configure settings – see Template Settings section 
  11. Click LanSchool Teacher 64bit Options
  12. Configure settings – see Template Settings section


Remove Registration prompt for teachers

  1. In Group Policy Management Editor, go to Computer Configuration > Preferences > Windows Settings
  2. Locate Registry, right-click and select New > Registry Item
  3. Input the following data for the new registry key:
    1. Action: Update
    2. Hive: HKEY_LOCAL_MACHINE
    3. Key Path (64-bit): SOFTWARE\Wow6432Node\LanSchool
    4. Value Name: IgnoreRegPrompt
    5. Value Type: REG_DWORD 
    6. Value Data: 1 
    7. Base: Decimal
  4. Select OK


Clever Dynamic Class Lists (optional)

  1. In Group Policy Management Editor, go to Computer Configuration > Preferences > Windows Settings
  2. Locate Registry, right-click and select New > Registry Item
  3. Input the following data for the new registry key:
    1. Action: Update
    2. Hive: HKEY_LOCAL_MACHINE
    3. Key Path (64-bit): SOFTWARE\Wow6432Node\LanSchool
    4. Value Name: DynamicClassListInterface
    5. Value Type: REG_DWORD 
    6. Value Data: 3 
    7. Base: Decimal
  4. Select OK




LanSchool Student Group Policy Deployment

In this section, we will cover the deployment of LanSchool Student Group Policy.

Add Software for Deployment

  1. On one of your Active Directory domain controllers, open Group Policy Management.
  2. Create policy for Students (name and location is not critical) e.g. LanSchool-Student-GPO
  3. Right-click the newly created policy and select Edit.
  4. Under Computer Configuration, expand the Policies folder and then the Software Settings folder.
  5. Select the Software Installation folder. 
  6. In the right pane, right-click and select New > Package.



  7. Select the Student.MSI from the shared network folder (e.g. \\ServerName\Shared)
  8. In the Deploy Software window, select Advanced and then select OK.
  9. For record, add the version to the Name field
  10. Select the Deployment tab and then check the box next to Uninstall this application when it falls out of the scope of management.
  11. Click OK

Configure Student Settings

  1. In Group Policy Management Editor, go to Computer Configuration > Policies > Administrative Templates
  2. Right-click and select Add/Remove Templates
  3. Click Add
  4. Browse to the downloaded LanSchool installation media
  5. Browse to Windows folder
  6. Select LanSchoolStudent.adm and select Open
  7. Click Close



  8. Browse to Classic Administrative Templates (ADM) 



  9. Click LanSchool Student 32bit Options
  10. Configure settings – see Template Settings section 
  11. Click LanSchool Student 64bit Options
  12. Configure settings – see Template Settings section 




Template Settings

In this section, we will cover the template settings and what each setting means.

If you are using Password Secure mode, you will need to encrypt the password using the Encrypt AD Pass tool located in the Customer Portal.

Teacher Template


Setting

Description

LanSchool Teacher Channel

Recommended to have a default GPO channel for troubleshooting to detect it is working.  Set a default channel like 2 or 10. Not recommended to use channel 0 or 1  Channel should not be assigned to any other teacher in the CSV file

Channel Select

Not recommended to enable – allows teachers to manually change channel.

LanSchool Network Protocol

If you are using LCS server, you can leave as Not Configured or Disabled

Install Options

If using additional features, enable this parameter. Some features only apply to Teacher when using “Become a student” mode.

Secure Mode Password

If using Password Secure mode, enable and encrypt the password you wish to use. To encrypt the password log into your Customer Portal and search for Encrypt AD Pass. Then enter the encrypted password into your GPO.

Color Reduction

Color reduction when viewing Student during remote session.  If you would like improved viewing during remote, enabled and turn off.

Hide Teacher Console During Broadcast

LanSchool automatically minimizes the console, but you can turn off feature using this setting.

Disable Data Transmission Editing

Recommended to have enabled and set to On.  It will stop teachers from changing the configured settings.

Connection Server Address

If you are using LCS server, you must put in the IP address and port number.

webRelay Server Address

Legacy setting – safely ignore

Turn Off Teacher’s Limit Task Manager Control

Enable if you would like turn off ability for Teacher to limit Task manager.

SSID Whitelist

If wanting to use Network Tampering Controls, enable this setting.

Dynamic Class List Interface

If using Dynamic Class Lists, enable this parameter.  See KB article for more details about Dynamic Class Lists.

Dynamic Class List CSV Folder

If using Dynamic Class Lists, enable this parameter.  See KB article for more details about Dynamic Class Lists.

Dynamic Class List Default Type

If using Dynamic Class Lists, enable this parameter. See KB article for more details about Dynamic Class Lists.

Suppress Auto Update Notification

Recommended to enable so users are not prompted to download newer versions of LanSchool


Student Template


Setting

Description

LanSchool Student Channel

Recommended to have a default GPO channel for troubleshooting to detect it is working.  Set a default channel like 2 or 10. Not recommended to use channel 0 or 1  Channel should not be assigned to any other teacher in the CSV file

Install Options

If using additional features, enable this parameter.  

Secure Mode Password

If using Password Secure mode, enable and encrypt the password you wish to use. To encrypt the password log into your Customer Portal and search for Encrypt AD Pass. Then enter the encrypted password into your GPO.

Connection Server Address

If you are using LCS server, you must put in the IP address and port number.

webRelay Server Address

Legacy setting – safely ignore

SSID Whitelist

If wanting to use Network Tampering Controls, enable this setting.



Group Policy Tips

  1. LanSchool-Teacher-GPO needs to be applied to OU with both teacher machines and teacher user accounts to take effect.
  2. LanSchool-Student-GPO needs to be applied to OU containing only student machines
  3. Make sure GPO is assigned and enforced
  4. If you have multiple LCS servers, use copy existing GPO feature and modify the appropriate Connection Server Address setting.

Troubleshooting

  1. If the software is not installed, check that Group Policy is assigned and enforced
  2. If GPO was recently created/modified, run the command “gpupdate /force” on client


    • Related Articles

    • LanSchool Teacher Channel Assignment Using Group Policy

      Overview LanSchool provides an option to utilize a PowerShell script at teacher login to change the LanSchool Teacher channel to a unique channel from a CSV file. This is recommended for customers who are not using a LanSchool Connection Server or ...
    • Troubleshooting Web Limiting

      Overview With LanSchool, teachers can help students focus on their work by limiting online access to approved websites and even disabling internet access during tests and quizzes. LanSchool relies on the LanSchool Student client running on the ...
    • Mass Deploying LanSchool Student for Windows

      The student.msi can be deployed using a software distribution tool like Group Policy, SCCM, or PDQDeploy  (Intune not currently supported).  Below are command-line options to install LanSchool. Run msiexec.exe and each value should be set to a ...
    • Configuring LanSchool Secure Mode

      What is LanSchool Secure Mode? LanSchool has two different optional security modes that can be enabled on installation called Password Secure Mode and Active Directory Secure Mode, and one or both may be selected. If the options are not properly ...
    • Using the LanSchool Tech Console

      Installing the LanSchool Tech Console Go to the LanSchool product download location, select the TechConsole folder and double-click TechConsole.msi for Windows or lanschool_tech_console.dmg for Mac. Click Next. Read the license agreement that ...
    • Popular Articles

    • Installing LanSchool Teacher for Windows

      Overview The following instructions will assist you with manually installing LanSchool Teacher on a single Windows teacher device. For information on installing the student client or mass deploying LanSchool throughout your organization, see Setting ...
    • Latest Release Notes

      LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Customer Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.1.0.42 ...
    • Limiting Application Use

      Overview Teachers can control the applications that are allowed to run on the student computers. The application limiting policy can stop ALL applications from running except for those specified in an "allow list" or can allow all application except ...
    • Limiting Website Use

      Overview Limit the websites that can be accessed by one or more student computers. The teacher can choose to restrict all web activity, allow only certain websites, or block only certain websites. This is often used to keep students focused or to ...
    • Configuring and Troubleshooting Wake on Lan

      Wake on Lan Configuration Your device manufacturer will be able to assist you with the Wake on Lan configuration.  That information is proprietary to the devices and is not provided by LanSchool. LanSchool utilizes Wake on Lan to power on the student ...
    • Recent Articles

    • LanSchool Teacher Channel Assignment Using Group Policy

      Overview LanSchool provides an option to utilize a PowerShell script at teacher login to change the LanSchool Teacher channel to a unique channel from a CSV file. This is recommended for customers who are not using a LanSchool Connection Server or ...
    • Logging On or Off Students Remotely

      Overview The LanSchool Teacher console has the ability to only log on wired and wireless Windows devices using Log On Students. The LanSchool Teacher console has the ability to log off wired and wireless Windows and Mac devices using Log Off Students ...
    • LanSchool Classic Video Tutorials

      For detailed information on how to use each feature of LanSchool Classic, visit the Using LanSchool Classic in the Classroom section of our Help Center. For quick, video demonstrations of each feature in action, visit our "LanSchool Classic Features" ...
    • Deploying LanSchool Using Group Policy

      Overview  The LanSchool Group Policy deployment guide is designed to assist with some basic settings and deployment using Active Directory Group Policy settings.  Please note that our support team can only provide limited assistance with configuring ...
    • Adding the LanSchool Teacher Console Shortcut to Desktop

      By default, the LanSchool Teacher Console will always be running the Windows system tray. To make it easier for teachers to launch, consider creating a shortcut for the LanSchool Teacher Console to place on the Desktop or pin to the Taskbar. Open the ...