Google Credential Provider for Windows (GCPW) - deploying settings to windows devices

[TwistedHelixis]

Just investigating GCPW as a login system and wanted to start a post about deploying some of the main setting we currently deploy from GPO. Just so I can get my head round this aspect.

 

I am also thinking of upgrading to Google Education Standard, but haven't done this yet. If our main GPO policies cant be deployed from Workspace, then I'll probably not bother upgrading to Standard.

 

So, the first few setting I would need to configure would be the Proxy and Smoothwall SSL certificate.

For our Chromebooks I can deploy these directly from Workspace, but I cant seem to find somewhere to deploy these to Windows devices. Do I need to upgrade our Workspace to see these options, or is it just not possible?

 

EDIT, would the certificate be deployed to Windows devices using the Endpoint verification section, under Networks > Certificates page?

Edited January 28, 2025 by TwistedHelixis

[rogerdnixon]

You need Standard or Plus - thats the first thing.

 

Some of my guides from a while back:

https://wpsit.blogspot.com/2022/06/an-updated-look-at-google-advanced.html

https://wpsit.blogspot.com/2020/02/google-mdm-for-windows-10-devices-more.html

https://wpsit.blogspot.com/2022/06/using-managed-browsers-with-google.html

 

My Slides on the matter from a Google event a while back:

https://docs.google.com/presentation/d/1252J-86OI5Goy7uP7N7JY0XWQ7RCYvGuqr-gf9APSb4/edit?usp=sharing

 

Should get you going.

[Joeloman]

I recommend using Smoothwall Unified Client so you avoid all the problems with certificates and the sites that don't like proxies.

[TwistedHelixis]

Quote

I recommend using Smoothwall Unified Client so you avoid all the problems with certificates and the sites that don't like proxies.

 

Would you mind explaining what a Smoothwall Unified Client is?

 

Thanks

[Joeloman]

It is a client for Smoothwall Cloud Filter, it is available for Windows and MacOS.
For Chromebooks, an extension is enough.
For Andriod, there is an Android Filter App and for iPad, there is a separate browser.
Since the web filter is located directly in the device, no certificate is needed and it does not matter which network the client is connected to. 

[TwistedHelixis]

Do you have Smoothwall cloud filtering working on a GCPW Windows device. I was informed it doesn't work.

[tom_newton]

I can't see why it wouldn't - might be interesting picking up the username from windows, but I think it should be doable.

[Joeloman]

If I remember correctly, the only difference is that you get the user as Domainname/username instead of the name as email address.
If you already have Cloud Filter, just test it:
https://kb.smoothwall.com/hc/en-us/articles/360003601160-Install-Cloud-Filter-Extension-on-Windows-for-testing

[TwistedHelixis]

Quote

If you already have Cloud Filter, just test it:

 

I would love to be able to test, but the problem I have is that it is all controlled from the local authority. I can only go on what they are feeding back to me.

 

Think I might create a new post asking if anyone has got it working, just so a few more people might notice. Then I can feed that back to the LA.