Installing Securly Classroom on Windows agent

Classroom uses a native Windows agent installable with a single MSI file.

Schools/districts can deploy the Windows agent to student devices using Group Policy Manager (GPO) from Windows Server. Alternatively, you can use an MDM such as Microsoft InTune or Microsoft Endpoint Configuration Manager (MECM).

Installing and Verifying your MSI file

1. To get your Securly Classroom Windows MSI file, log in to Securly Classroom and navigate to the Deployment > Windows.
   
2. To create a new MSI package, click the Generate Installer button. You will then be prompted to choose whether to allow students the option to uninstall the client from their devices.
3. Click the Download button and install the agent.
4. See that the Securly Classroom icon shows up in the Notification Tray.
5. Go to Students ( Users > Students).
6. Update the username field to match the SAMAccountName in use for the student account.
7. Restart the machine.
8. Be sure the username field matches the sAMAccountName you are using for your student login.
9. Be sure all username fields are populated in Rostered Students.
10. If all data is correct, you can start class in the same way as with the Chrome Extension.

Note

If you are creating a student manually or you need to update a username, you will need to restart the student machine before the change will take effect

Intune for education

1. Login to your third-party software as an Administrator (https://intuneeducation.portal.azure.com/).
2. Click Apps.
3. Click Add App under Desktop Apps.
4. Select and upload the .msi file downloaded earlier.
5. Set Securly as Publisher.
6. Select Don't check app version when installing.
7. Save, and wait for upload to complete.
8. Click Groups > Change Group Assignment and select your Groups.
9. Click Save; in the Overview section, you will now see the install status is still 0 due to latency.
10. Navigate to Devices and click on a device.
11. Click Go To Device Details.
12. Click the most recent check in, or sync if you have the option.
13. Note the Apps status (e.g. "Not yet applied", "Pending", "Failed", etc.)
14. Verify that the Securly Classroom icon appears in the system tray of the Windows device after installation.

If the icon does not appear, please reach out to our support team.

Intune (Enterprise)

1. Login to your third-party software as an Administrator.
2. Navigate to Client Apps > Apps.
3. Select Add App.
4. Select Line of Business App in the App Type field.
5. Select and upload the .msi file downloaded earlier.
6. Set Ignore App Version to Yes.
7. Click Add; you should be redirected to the App Overview.
8. Refresh the page.
9. Click Assignments.
10. Click Add Group.
11. Select Required in the Assignment Type field.
12. Click Ok to Add Group.
13. Click Save on the Groups window.

In Device Install Status, you may see No Devices. But if you navigate to Devices > [the device itself] > Managed Apps > Securly Classroom, you should see the Waiting for Install status. If you click on the Waiting for Install status, you should see the following, all with green check boxes:

• Application Attempted to Install
• App Installation Completed
• Device Last Check-In Time

14. Verify that the Securly Classroom icon appears in the system tray of the Windows device after installation.

Attack Surface Reduction (ASR) Rules

If you are using ASR rules with Microsoft Defender, you will need to follow additional instructions from our KB article Why is my Windows agent installation failing?.

Once installed, the Securly Classroom will automatically update, unless the school administrator changes this setting.

Note

Classroom supports Windows without relying on any Chrome extension or Google logins. Students can use their Active Directory credentials (Microsoft Entra or Local AD) and show up in class.