Troubleshooting Web Limiting

Troubleshooting Web Limiting

Overview

With LanSchool, teachers can help students focus on their work by limiting online access to approved websites and even disabling internet access during tests and quizzes. LanSchool relies on the LanSchool Student client running on the student devices to enforce these policies. To support web limiting in most browser, a companion browser extension is also required.

Who Should Use This Guide?

This article is designed to help IT Administrators troubleshoot instances where LanSchool Web Limiting is not being enforced. The LanSchool Web Helper browser extension must be installed in each web browser in order to enforce the teacher's desired limiting policy.  The steps to troubleshoot this are different for each web browser.

Teachers should refer to this overview of how to setup and use web limiting for use in their classroom.

If the student devices are macOS 11.0 (Big Sur) please see Granting macOS Privacy Approvals for LanSchool Using an MDM on how to apply browser extension profiles for Google Chrome and Microsoft Edge (Chromium-based, Version 85+).

Troubleshooting Web Limiting

Google Chrome

Web limiting for the Google Chrome browser utilizes the LanSchool Web Helper browser extension. By default, this browser extension is installed as part of the student install on Windows and Mac devices below 11.0 (Big Sur), and deployed via Google Admin for Chromebooks.  

Step 1: Confirm Extension Is Installed

  1. On a student device, open the Chrome browser and navigate to Settings > Extensions or enter chrome://extensions in the address bar. 
  2. Confirm that the LanSchool Web Helper extension is installed and enabled
  3. If the extension is not installed, contact your LanSchool IT Admin or proceed to Step 2.

Step 2: Re-deploy the Extension If Required

By default, the LanSchool Student installer will attempt to automatically install the Web Helper extension into Chrome. In some environments, this will fail if Chrome has not yet been installed or local policies require extensions be deployed another way.

Deploying Chrome Extension Using Google Admin
Students will need to authenticate to the Chrome browser on their device in order for assigned extensions to be force-installed. To assign the LanSchool Web Helper to students so it is force-installed with they sign in, follow these steps.
  1. Login to Google Admin
  2. Navigate to Devices > Chrome > Apps & Extensions > User and Browser Settings
  3. Select the OU containing student user accounts
  4. Add an extension from the Chrome Web Store
  5. Search for LanSchool Web Helper and select it
  6. Set the Installation Policy to Force Install
  7. Click Save
Deploying Chrome Extension Using Active Directory Group Policy (GPO)
If the LanSchool student client fails to install the LanSchool Web Helper extension, or if you have an existing list of force installed extensions in the Chrome browser, you may need to create/modify the following Group Policy to deploy the extension to student Windows devices:
  1. Open the Group Policy Management Console
  2. Navigate to User Configuration\Administrative Templates\Google\Google Chrome\Extensions
  3. Go to "Configure the list of forced-installed apps and extension" and enable it
  4. Click the Show button
  5. Enter the following in an available line: honjcnefekfnompampcpmcdadibmjhlk;http://clients2.google.com/service/update2/crx
  6. Deploy the policy, then refresh the Group Polices on the student machine

Step 3: Confirm Windows Proxy Settings

If your organization is utilizing a proxy server to manage internet traffic, you will need to modify the following setting in Windows either locally or through Group Policy.
  1. Open the control panel on the student computer and navigate to Internet Options
  2. Click on the Connections Tab
  3. Click on the LAN Settings button
  4. Select the option for "Bypass proxy server for local addresses" and click OK
Once you have performed these steps, open the Chrome browser and enter localhost:56797 in the address bar.  If a window opens asking for authorization, please reboot the student computer and try these steps again. LanSchool requires that the student device be able to access this port locally without being interrupted by the proxy.


Mozilla Firefox

Web limiting for Firefox utilizes the LanSchool Web Helper browser extension. By default, this browser extension is installed as part of the student install on Windows and Mac devices. In some environments, this will fail if Firefox has not yet been installed or local policies require extensions be deployed another way.

Step 1: Confirm Extension Is Installed

  1. On a student device, open the Firefox browser and navigate to Settings > Add-Ons > Extensions or enter about:addons in the address bar. 
  2. Confirm that the LanSchool Web Helper extension is installed and enabled
  3. If the extension is not installed, contact your LanSchool IT Admin or proceed to Step 2.

Step 2: Deploy the Extension via Policy If Required

If the LanSchool student client fails to install the LanSchool Web Helper extension, or if you have an existing list of force installed extensions in the Firefox browser, you may need to create/modify the following Group Policy to deploy the extension to student Windows devices:
  1. Open the Group Policy Management Console
  2. Navigate to \Software\Policies\Mozilla\Firefox\Extensions\ (Firefox ADMX Templates Required)
  3. Add the following Group Policy values:
    “Install” : “https://www.stonewarefiles.com/lanschool/firefox/ffwebhelper.xpi%22
    “Locked” : “webhelperEd@lanschool.com"
  4. Deploy the new policy and perform a Group Policy update on the student devices
  5. Confirm that the LanSchool Web Helper extension was successfully installed
See Mozilla's documentation for other methods of deploying extensions using Intune, policies.JSON and other tools. If using policies.JSON, refer to this example file for the LanSchool Web Helper.


Microsoft Edge

LanSchool Classic 9.0.1.154 and above now supports  web limiting for the Microsoft Edge browser (Chromium-based, Version 85+). By default, this browser extension is installed as part of the student install on Windows devices and Mac devices below 11.0 (Big Sur). 

Step 1: Confirm Extension Is Installed

  1. On a student device, open the Edge browser and navigate to Settings > Extensions.
  2. Confirm that the LanSchool Web Helper extension is installed and enabled
  3. If the extension is not installed, contact your LanSchool IT Admin or proceed to Step 2.

Step 2: Deploy the Extension via Group Policy If Required

If the LanSchool student client fails to install the LanSchool Web Helper extension, or if you have an existing list of force installed extensions in the Edge browser, you may need to create/modify the following Group Policy to deploy the extension to student Windows devices:
  1. Open the Group Policy Management Console.
  2. Navigate to User Configuration\Administrative Templates\Microsoft Edge\Extensions (Edge ADMX Templates Required)
  3. Go to "Control which extensions are installed silently" and enable it
  4. Click the Show button
  5. Enter the following extension ID: honjcnefekfnompampcpmcdadibmjhlk
  6. Deploy the new policy and perform a Group Policy update on the student devices.
  7. Confirm that the LanSchool Web Helper extension was successfully installed.
Teachers can disable and allow Microsoft Edge browser (without web limiting restrictions) from the Teacher Console by navigating to the Administer Menu > Preferences > Web Limiting and deselecting the option for "Restrict IP Address / Incognito / Microsoft Edge browsing".
    • Related Articles

    • Limiting Website Use

      Overview Limit the websites that can be accessed by one or more student computers. The teacher can choose to restrict all web activity, allow only certain websites, or block only certain websites. This is often used to keep students focused or to ...
    • Deploying LanSchool Using Group Policy

      INTRODUCTION In this document, we will cover all aspects of LanSchool GPO deployment.       The LanSchool GPO deployment guide is designed to assist with some basic settings and deployment using Active Directory GPO settings.  It will utilize a ...
    • Granting macOS Privacy Approvals for LanSchool Using an MDM

      Introduction For student devices running macOS Mojave (10.14) and later Apple introduced new privacy protection systems that must be configured correctly for LanSchool to work. It can be challenging to configure settings correctly so that all ...
    • Mass Deploying LanSchool Student for macOS

      Overview LanSchool provides the ability to mass deploy the LanSchool student client for Mac OS through the creation of a custom installation package. Once this package has been created, you will be able to use your software distribution system to ...
    • Limiting Application Use

      Overview Teachers can control the applications that are allowed to run on the student computers. The application limiting policy can stop ALL applications from running except for those specified in an "allow list" or can allow all application except ...
    • Popular Articles

    • Installing LanSchool Teacher for Windows

      Overview The following instructions will assist you with manually installing LanSchool Teacher on a single Windows teacher device. For information on installing the student client or mass deploying LanSchool throughout your organization, see Setting ...
    • Latest Release Notes

      LanSchool Classic Release Notes Customers with an active LanSchool subscription will have access to download the latest version from the LanSchool Customer Portal. For instructions, see Downloading LanSchool Installers. LanSchool Classic 9.0.1.154 ...
    • Limiting Application Use

      Overview Teachers can control the applications that are allowed to run on the student computers. The application limiting policy can stop ALL applications from running except for those specified in an "allow list" or can allow all application except ...
    • Limiting Website Use

      Overview Limit the websites that can be accessed by one or more student computers. The teacher can choose to restrict all web activity, allow only certain websites, or block only certain websites. This is often used to keep students focused or to ...
    • Configuring and Troubleshooting Wake on Lan

      Wake on Lan Configuration Your device manufacturer will be able to assist you with the Wake on Lan configuration.  That information is proprietary to the devices and is not provided by LanSchool. LanSchool utilizes Wake on Lan to power on the student ...
    • Recent Articles

    • Logging On or Off Students Remotely

      Overview The LanSchool Teacher console has the ability to only log on wired and wireless Windows devices using Log On Students. The LanSchool Teacher console has the ability to log off wired and wireless Windows and Mac devices using Log Off Students ...
    • LanSchool Classic Video Tutorials

      For detailed information on how to use each feature of LanSchool Classic, visit the Using LanSchool Classic in the Classroom section of our Help Center. For quick, video demonstrations of each feature in action, visit our "LanSchool Classic Features" ...
    • Deploying LanSchool Using Group Policy

      INTRODUCTION In this document, we will cover all aspects of LanSchool GPO deployment.       The LanSchool GPO deployment guide is designed to assist with some basic settings and deployment using Active Directory GPO settings.  It will utilize a ...
    • Adding the LanSchool Teacher Console Shortcut to Desktop

      By default, the LanSchool Teacher Console will always be running the Windows system tray. To make it easier for teachers to launch, consider creating a shortcut for the LanSchool Teacher Console to place on the Desktop or pin to the Taskbar. Open the ...
    • Configuring LanSchool Secure Mode

      What is LanSchool Secure Mode? LanSchool has two different optional security modes that can be enabled on installation called Password Secure Mode and Active Directory Secure Mode, and one or both may be selected. If the options are not properly ...