Mass Deploying Lenovo NetFilter for Chromebooks

Mass Deploying Lenovo NetFilter for Chromebooks


This guide walks site administrators through the process of deploying the Lenovo NetFilter extension to students using Chromebooks and assigning a filtering policy.

System Requirements 

Administrators  

  • Lenovo NetFilter Site Administrator access 
  • Google Admin Console access to the Google Workspace domain the students are using

Students 

  • Chromebooks running ChromeOS 71 or higher  
  • A managed Google Workspace user account (formerly G Suite)

Procedure 

Log into Lenovo NetFilter

  1. Log into the NetFilter WebAdmin Dashboard as a a site administrator. 
  2. From the left navigation menu, select Policies.
  3. Under Policies, select Groups.
  4. Confirm the Group name that you will use to filter student Chromebooks (e.g. students@lenovoacademy.edu).

Sign in to Google Admin 

Sign in to the Google Admin console for your organization's G Suite domain by going to  https://admin.google.com/ . You must login with an administrator account that has permission to manage User & Browser settings and Apps & Extensions policies for the student accounts in your domain. 
The remaining steps cannot be completed without signing in to the Google Admin console. 
  1. Login to https://admin.google.com/. 
  2. In Google Admin, select the  Devices icon. 
      
      

  3. Under the Devices menu, navigate to  Chrome > Apps & Extensions > Users & Browsers.

     

  4. Select the organizational unit (OU) that contains the student user accounts to which to deploy the Lenovo NetFilter extension for Chromebooks. 

     

Force Install the Lenovo NetFilter Chrome Extension

  1. On the USERS & BROWSERS page, hover over the   Add      icon at the bottom right. 
     
  2. Select the   Add Chrome app or extension by ID       icon.  
     
  3. Enter the unique Extension ID based on your version of NetFilter and your geographic location:

    1. NetFilter
      1. North America:  joiaioaajglikblacdoccnmhmmfiebbp
      2. Europe:  ipfpifojkncienknljodopbagjdjjhaa
    2. NetFilter Plus
      1. PLEASE NOTE:  For NetFilter Plus on Chromebooks, they must be running ChromeOS 64-bit due to memory and processing requirements.
      2. North America:  mgjphhfodaiaedgepinmjnbhhaenengl
      3. Europe:  andkdfohfonkdaibpjipchnidjclinpe

  4. Ensure that From a Custom URL is selected in the list.

  5. Enter the following URL based on your version of NetFilter and your geographic location:

    1. NetFilter
      1. North America:  https://nf-client-public.s3.amazonaws.com/NetFilter/NA/chrome/nsfilter.xml
      2. Europe:  https://nf-client-public.s3.amazonaws.com/NetFilter/EU/chrome/nsfilter.xml
    2. NetFilter Plus
      1. North America:  https://nf-client-public.s3.amazonaws.com/NetFilter_Plus/NA/chrome/nsfilter.xml
      2. Europe:  https://nf-client-public.s3.amazonaws.com/NetFilter_Plus/EU/chrome/nsfilter.xml

  6. Select SAVE.
  7. In the list next to the newly added extension ID, select  Force install as the Installation Policy.  



  8. Select the extension and enter the appropriate JSON configuration in the Policy for extensions field.  NOTE: Replace groupname@orgname with the Group name you verified in the Log into Lenovo NetFilter section (near the top of this article).  Also if you have a specific Client Filter "Brand" replace Lenovo_Default with your brand (brands are created at implementation or with the help of the support team).

    Chromebook JSON Policy for North America:
    
{
    "policyserver": {
        "Value": "https://policy.naea1.netfilter.lenovo.com:3431"
    },
    "makeopts": {
        "Value": "-f 4096 -g groupname@orgname -y Lenovo_Default"
    }
}


    Chromebook JSON Policy for Europe:

    
{
    "policyserver": {
        "Value": "https://policy.euwe1.netfilter.lenovo.com:3431"
    },
    "makeopts": {
        "Value": "-f 4096 -g groupname@orgname -y Lenovo_Default"
    }
}
  9. Set the Update URL to Installation URL

  10. Select SAVE at the top right of the page.

  11. To test the configuration:
    1. Login to a Chromebook as a user that resides in the OU where this policy is applied.
    2. Navigate to chrome://extensions
    3. The "Lenovo NetFilter" or "Lenovo NetFilter Plus" extension should appear as installed
    4. Navigate to chrome://policy
    5. The appropriate JSON configuration policy will be applied


    • Related Articles

    • Deploying Lenovo NetFilter Client Using Intune

      Overview The Lenovo NetFilter for Windows client supports a number of different deployment methods and tools an MSI installer. See Installing Lenovo NetFilter Using Command Line for more detailed instructions. Please note that our support team can ...

    • Why is my extension installing on all Chrome browsers instead of just Chromebooks?

      The default method to deploy an extension via the Google Admin is by assigning that extension to an OU where extensions are deployed to the user account. This means that anytime that account is used to log in to a Chrome instance, whether that be ...

    • Installing Lenovo NetFilter Using Windows Command Line

      Overview This article explains how to install the Lenovo NetFilter client on an individual device via Command Line. For instructions on deploying the Lenovo NetFilter client to a large number of devices, see Deploying Lenovo NetFilter Client Using ...

    • Installing Lenovo NetFilter for Windows devices

      Overview This article explains how to install the Windows client on an individual student device. You must have local administrator rights to install software on the student devices in order to perform the steps below. Run the Lenovo NetFilter ...

    • Installing Lenovo NetFilter for macOS Devices

      Overview This article explains how to install the macOS client on an individual student device (MacBook, iMac, etc.). You must have local administrator rights to install software on the student devices in order to perform the steps below. Run the ...