ProfileUnity with FlexApp Technology ADMINISTRATOR TRAINING AND LAB GUIDE version 1.0
Introduction This guide is authored by experts at Liquidware Labs to provide information and guidance concerning ProfileUnity with FlexApp. Information in this document is subject to change without notice. No part of this publication may be reproduced in whole or in part, stored in a retrieval system, or transmitted in any form or any means, electronic or mechanical, including photocopying and recording for any external use by any person or entity without the express prior written consent of Liquidware Labs. Liquidware Labs, Inc. 3600 Mansell Road Suite 200 Alpharetta, Georgia 30022 USA 678-397-0450 www.liquidwarelabs.com 2015 Liquidware Labs Inc. All rights reserved. Stratusphere, ProfileUnity, FlexApp, FlexDisk, and Flex-IO are trademarks of Liquidware Labs. All other marks marks or names mentioned herein may be trademarks of their respective companies.
Contents LAB 1: PROFILEUNITY MANAGEMENT CONSOLE...5 Activity: Logging in to the Management Console for the First Time... 5 LAB 2: DEPLOYING PROFILEUNITY CLIENT TOOLS...6 Activity: Deploying Client Tools... 6 LAB 3: PROFILEUNITY GUIDED CONFIGURATION WIZARD...9 Activity: Creating a module using the guided method... 9 LAB 4: ACTIVE DIRECTORY AND GROUP POLICY CONFIGURATION...16 LAB 5: CONFIGURING THE GROUP POLICY STARTUP SCRIPT...19 Activity: Group Policy Configuration...19 Activity: Configuring the Group Policy Logoff Script... 23 Activity: Adding the ProfileUnity ADM Template... 24 Activity: Configuring and Enabling the Policy...26 LAB 6: PROFILEUNITY CONFIGURATION MANAGEMENT MODULE...29 Activity: Creating a New Configuration Guided Method... 29 LAB 7: PROFILEUNITY MODULE CONFIGURATION EDITOR...32 LAB 8: PORTABILITY SETTINGS MODULE...33 Activity: Configuring and Managing Portability Settings... 33 Exercise 1: Create a Windows Theme ruleset...36 LAB 9: FOLDER REDIRECTION...38 Activity: Creating Folder Redirection Rules...40 Exercise 1: Create a folder redirection rule for the following conditions... 42 Exercise 2: Create a folder redirection rule that moves new files on Download to new location... 42 LAB 10: PROFILEUNITY PROVISIONING MODULES...43 Activity: Creating a rule that maps a network drive during logon... 44 Activity: Modifying Windows desktop environment variables to the current user s environment... 46 Activity: Configuring Internet Explorer features...47 Activity: Printers...48 Activity 1: Registry...49 Activity 2: Registry...51 Closer look: Shortcuts...53 Exercise 1: Create a shell shortcut...54 Exercise 2: Create a Web Link...54 Closer look: Trigger Points...55 Closer look: Windows Options...56 Exercise: Windows Options...57
LAB 11: MESSAGING AND OFFICE APPLICATION PROVISIONING MODULES...58 LAB 12: SPECIALTY PROVISIONING MODULES...59 LAB 13: FLEXAPP TECHNOLOGY...60 Activity: Using FlexApp UIA...61 Activity: Installing and configuring the FlexApp DIA Packaging Console... 62 Exercise 1: Install...70 Exercise 2: Use FlexApp DIA Packaging Console...70 Exercise 3: Add applications to FlexApp DIA Packaging Console... 71 Activity: FlexApp DIA Configuration Module...71 Activity: Privilege Elevation...73 Exercise 1: Create an elevation configuration...75 Exercise 2: Create an elevation denial...75 Activity: Application Restrictions...76 Exercise: Application Restrictions...76 LAB 14: PROFILEUNITY FILTERS...77 Activity: Creating a New Filter...77 Exercise: ProfileUnity Filters...82 LAB 15: PORTABILITY MANAGEMENT...83 Activity: Creating Custom Registry Rules...87 Exercise: Creating New Portability Ruleset...90 LAB 16: INVENTORY MANAGEMENT...91 LAB 17: ADMINISTRATION SETTINGS...93 LAB 18: CONFIGURATION TEMPLATES MANAGEMENT...96 LAB 19: MANAGING CONSOLE USER ACCOUNTS...97
Introduction to ProfileUnity with FlexApp Technology Award-winning ProfileUnity is a feature-rich, affordable user virtualization and virtualized software distribution solution for both virtual desktop deployments and physical PCs. ProfileUnity decouples user profiles, settings and data from the operating system for migration to VMware View, Citrix XenDesktop, or any platform that supports Windows OSes, making it the ideal bridge solution for heterogeneous environments running physical, virtual and Terminal Services sessions. ProfileUnity delivers a flexible universal profile that is compatible across multiple Windows versions. With no software to distribute to individual desktops, this cost-effective solution separately stores and infuses user profiles, configurations, and data into the Windows OS within seconds of login, enabling organizations to be increasingly nimble with their desktops. Currently for use with non-persistent virtual desktops, ProfileUnity s FlexApp technology enables administrators to deploy corporate or department-installed applications (DIAs) or users to install their own applications without affecting the underlying base image of virtual machines. FlexApp allows a potentially limitless number of applications to be stored separately from the Windows operating system, yet they can be snapped-in in only seconds at login. Applications look native to the operating system, enabling compatibility of thousands more applications than with other methods of application virtualization. FlexApp addresses a need in the virtual desktop market to empower virtual desktop users to install the applications they need to be productive. User-installed applications (UIAs) are managed by the user, who is responsible for all updates and the ongoing viability of the application. ProfileUnity offers these key advantages: ProfileUnity retains profiles in native Windows formats, which keeps them backward- and forward- compatible across Windows operating systems, including Windows XP/Vista/7/8.1 and Windows Server 2003/2008/2012 R2. ProfileUnity is the perfect solution to harvest user profiles and user data from Windows XP environments in preparation for migration to Windows 7 or Windows 8.1. Any platform that runs a Windows OS can utilize ProfileUnity for profile management, including VMware Horizon View, Citrix XenDesktop, Terminal Services sessions and physical machines. So one solution can be used for an entire desktop environment. User profiles, userauthored data, and application-data settings (even among mixed versions) are made dynamically available to any desktop Windows OS at every login. ProfileUnity runs as a standalone system; no back-end systems or proprietary databases are required. The lightweight client installs to endpoints without the need for software distribution or user downtime. ProfileUnity is priced an average 40 to 50 percent lower than other user virtualization offerings, for faster ROI and a lower overall budget. ProfileUnity offers sophisticated features, including context-aware filters, integration with Microsoft Active Directory, Drive Mappings, Automated Folder Redirection and more. Innovative FlexApp technology provides key benefits to customers, including: Simplified management of non-persistent Windows environments (fewer master images to be maintained) Greater desktop virtualization ROI and economies of scale because more workers can use the virtual desktop infrastructure ProfileUnity with FlexApp Administrator Training and Lab Manual 1
Reduced desktop administrator time on maintenance and troubleshooting activities Significantly lowered TCO, because organizations realize optimal license use and reduced storage requirements Virtualization of application-installation locations (rather than the application itself), which causes the application to appear native to the OS, thereby making applications instantly usable without any modifications. For the most part, customers choose ProfileUnity to automate many of the processes that manage their user profiles, user data and resources (including printers, drive, applications, etc.) that are assigned to users. Top reasons that customers deploy ProfileUnity include: Speed up user login times Move user-authored data to the network Migrate user profiles to new environments or upgraded OS Configure desktops with assigned shortcuts, drives, printers, etc. Capture and facilitate portability of user-installed applications Course Prerequisites This training program assumes participants have no prior knowledge of Liquidware Labs ProfileUnity + FlexApp. A basic working knowledge of Windows Active Directory and Windows Profile management is preferred but not essential. The main emphasis of this training guide is to teaching you how to navigate and use the tool by example, therefore, a hands-on lab environment would be ideal for this training, but it also is not essential. About the Software ProfileUnity consists of three parts: 1. The Management Console 2. The FlexApp Packaging Console 3. The Client The ProfileUnity Management Console provides one central location where administrators can configure persona management and user and machine policies. The FlexApp Packaging Console allows administrators to configure and prepare all applications needing to be configured for users and made available as a department-installed application (DIA). The Client manages each user s settings and persona during their session. 2 ProfileUnity with FlexApp Administrator Training and Lab Manual
Installation You will need to download ProfileUnity Installer from www.liquidwarelabs.com/download. Installation of ProfileUnity requires Microsoft.NET Framework 4.5.1. If the required.net Framework is not already installed, you can download the ProfileUnity Installer bundled with Microsoft.NET Framework. Follow the Setup Wizard, which will take you through the following four screens. ProfileUnity with FlexApp Administrator Training and Lab Manual 3
1 2 3 4 4 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 1: PROFILEUNITY MANAGEMENT CONSOLE Overview The ProfileUnity Management Console allows you to create, deploy, and manage rules and configurations with an easy-to-use graphical interface Activity: Logging in to the Management Console for the First Time 1. For the initial log in to ProfileUnity Management Console, use admin as your username and leave the password field blank. The Management Console will ask you to set up a password for the Admin account. 2. Once you have logged in as the admin, the Guided Configuration Wizard will automatically start. The next section walks you through the ProfileUnity configuration process. Note: Passwords must be at least 8 characters long and must include at least one character from three of the following categories: Upper case letters Lower case letters Numbers Non-alphanumeric character ProfileUnity with FlexApp Administrator Training and Lab Manual 5
LAB 2: DEPLOYING PROFILEUNITY CLIENT TOOLS Overview Before you can make ProfileUnity fully functional, you will need to deploy ProfileUnity Client Tools to your organization s Active Directory server. Activity: Deploying Client Tools 1. Log in to ProfileUnity.NET console and locate the Admin menu. 2. Locate the Admin menu 3. Click on Administration then scroll down to the ProfileUnity Tools section, and click on Download Client Tools. 4. Download the tool. 6 ProfileUnity with FlexApp Administrator Training and Lab Manual
5. If you are alerted that this is not a typical download, select Keep from the drop down list. 6. Navigate to your Active Directory Server s NETLOGON share and copy client-tools.zip. 7. Expand client-tools.zip to NETLOGON\ProfileUnity folder. ProfileUnity with FlexApp Administrator Training and Lab Manual 7
8. You should now see all necessary files that enable ProfileUnity to function properly. 8 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 3: PROFILEUNITY GUIDED CONFIGURATION WIZARD OVERVIEW To configure the production environment using the Management Console, ProfileUnity has an easy-to-use Guided Configuration Wizard that walks you through, step by step, the creation and assignment of ProfileUnity groups and group policies. It also allows you to easily create a basic configuration for your environment that includes Profile Portability, Folder Redirection and migration of certain folders (if desired), and optionally turns on and configures FlexApp. The first time you log in to the ProfileUnity Management Console, the Guided Configuration Wizard initializes and automates the setup of your environment for ProfileUnity. There are two ways to configure ProfileUnity modules. We ll start with the guided method. Activity: Creating a module using the guided method 1. Before using the Guided Configuration, you need to create a ProfileUnity licensing group on your Active Directory in order to fully automate the initial setup. Access your domain controller, then create ProfileUnity Global Security Group. ProfileUnity with FlexApp Administrator Training and Lab Manual 9
2. Add Student1 as a member of ProfileUnity security group you just created. 3. Launch Profileunity.NET console the login using the same administrator credential of your domain controller. Username: Training\admin1 Password: Password1 10 ProfileUnity with FlexApp Administrator Training and Lab Manual
4. From Guided Setup enter the following: Valid Active Directory Groups for Login: <LEAVE BLANK> Deployment Path: \\dc01.training.local\netlogon\profileunity 5. Click No on the dialog box ProfileUnity with FlexApp Administrator Training and Lab Manual 11
6. Select Windows 7, New non-persistent VDI Deployment from the Template Library 7. You must configure a default home directory or location where users settings and data will be stored on an existing server in your network. Remember to include %username% in the path so each user will have a unique data folder. For example, enter your network path location where the user s profile will be stored (\\dc01.training.local\share\%username%). Click Next to proceed. 12 ProfileUnity with FlexApp Administrator Training and Lab Manual
Appropriate permissions must be configured on the storage path for ProfileUnity to operate properly. Best-practice guidelines are: NTFS Permissions User Account Recommended Permissions Folder Administrator Full Control This folder, subfolders, and files Authenticated User Modify This folder only Creator/Owner Modify Subfolders and files only Alternately, you can specify Everyone Full Control for testing purpose Share Permissions Recommended share permissions for the storage path are Everyone Full Control. 8. The next step is to allow the Guided Setup to automatically configure the Active Directory so ProfileUnity can be activated without physically installing the Client on each desktop. If you are not logged in as Active Directory User, you can proceed using Manual Setup. If you have already configured Active Directory and Group Policy to work with ProfileUnity, you can select Skip This Process. Note: If you choose Automatic, ProfileUnity will attempt to configure Active Directory for you. However, you must be logged in to the ProfileUnity Management Console as an Active rectory admin for this option to work correctly. ProfileUnity with FlexApp Administrator Training and Lab Manual 13
9. The Automatic option requires a few answers to enable ProfileUnity to automatically configure the Group Policy Object for this particular User Group. For Active Directory OU (Organizational Unit), select Students, and for Active Directory User Group that this configuration will apply to, select ProfileUnity. Click Run. 10. Allow the automated setup process to configure the Active Controller; then close the dialog box when the process is completed. 11. Clicking Finish creates a configuration module that incorporates settings selected in the previous steps and includes basic configuration for all Portability Management rule sets as well. Your browser will download the default (out-of-the-box) 14 ProfileUnity with FlexApp Administrator Training and Lab Manual
configuration module (.ini) that needs to be placed on the Active Directory s NETLOGON share that you defined as the Deployment Path : \\dc01.training.local\netlogon\profileunity. Exercise: Create a module using the guided method Create your own modules using your organization s network share information. ProfileUnity with FlexApp Administrator Training and Lab Manual 15
LAB 4: ACTIVE DIRECTORY AND GROUP POLICY CONFIGURATION OVERVIEW This lab guides you through configuring Active Directory so ProfileUnity can be activated without physically installing the Client on each desktop. ProfileUnity can automatically attempt to configure Active Directory if you are logged in to the ProfileUnity Management Console as an Active Directory admin. Note: This lab pertains only to manual ProfileUnity configuration. Activity: Creating a ProfileUnity Security Group This step is required for license validation. There are many ways to create licensing security groups; however, for this training we will use this basic example. 1. On your domain controller, open Active Directory Users and Computers. 2. Create a new security group. 16 ProfileUnity with FlexApp Administrator Training and Lab Manual
3. Set the Group name to ProfileUnity and the Group type to Security. Then click OK. 4. Open Properties for the group you just created. ProfileUnity with FlexApp Administrator Training and Lab Manual 17
5. On the Members tab, click the Add button 6. Enter names of users who will be licensed to use ProfileUnity. Note: This security group must match the name in your license file, and the number of items in this group should not exceed the number of users licensed. No nested groups are allowed. 18 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 5: CONFIGURING THE GROUP POLICY STARTUP SCRIPT OVERVIEW This section takes you through steps to set up your Group Policy configuration for ProfileUnity. In most cases, this is one-time setup unless the environment changes. This particular exercise is based on Windows 2003 Server Active Directory Setup. Activity: Group Policy Configuration 1. Open the Group Policy Management Console. ProfileUnity with FlexApp Administrator Training and Lab Manual 19
2. Create an Organizational Unit composed of machines to be managed by ProfileUnity. 3. Create a policy and link it to this OU. 20 ProfileUnity with FlexApp Administrator Training and Lab Manual
6. Click the Add button to add a new startup script. 7. Assign startup.vbs as the startup script. Note: This is a computer policy that should be applied to the OU with the computers that will execute ProfileUnity. Script Name: \\training.local\netlogon\profileunity\lwl.profileunity.client.startup.exe Script Parameters: <LEAVE BLANK> ProfileUnity with FlexApp Administrator Training and Lab Manual 21
Activity: Adding the ProfileUnity ADM Template 1. Load the ProfileUnity group policy template into the group policy editor and configure the ProfileUnity settings. Under the policy, browse to User Configuration\Administrative Template, right click on Administrative Templates and select Add/Remove Templates. 2. Click the Add button to add a new template. 22 ProfileUnity with FlexApp Administrator Training and Lab Manual
Activity: Configuring and Enabling the Policy 1. Browse to the User Configuration, Policy\Administrative Templates\Classic Administrative Templates (ADM)\Liquidware Labs\ProfileUnity path. ProfileUnity with FlexApp Administrator Training and Lab Manual 23
4. Right click on INI File Path and select Edit. 5. Select the Enabled radial button. 6. Edit the UNC file path to match the folder where your INI files will be stored. By default, this will be your NETLOGON\ ProfileUnity folder. Then click the OK button. NOTE: This policy should be applied to the OU that contains the users that will execute ProfileUnity. You ll need to replace <YourDomainHere> (UNC Path in the above example) with the name of your domain. 24 ProfileUnity with FlexApp Administrator Training and Lab Manual
3. Select a template from those listed in Template Library. For this activity, we will use the Windows 7 and 8.1 Persistent Coexistence template. 4. Provide a valid Homeshare network path that ProfileUnity can use for storing individual user settings. 5. If not set up previously, select the Manual or Automatic button to configure the Active Directory server to work with ProfileUnity. If it was set up previously, skip this process. ProfileUnity with FlexApp Administrator Training and Lab Manual 25
LAB 7: PROFILEUNITY MODULE CONFIGURATION EDITOR OVERVIEW A complete configuration is composed of a group of smaller configuration modules that are designed to complete a specific task. When the editor is invoked, all available configuration modules are listed. Customize your settings by choosing the modules that you need to configure for your specific environment. If there are settings within a configuration module, a red box will display next to the name of the modules. The number in the red box indicates how many rules have been set up for this particular configuration module. The configuration editor, found by clicking Main, is where all configuration settings are entered. You can customize your ProfileUnity Configuration Rules (.ini file) using the four functions shown below. You can edit, copy or trash each configuration module and place them on the NETLOGON share. You can have single or multiple.ini sets. Edit - Modifies existing configuration module Delete - Removes a configuration rule from the module Copy Duplicates (clones) an existing rule Disable/Enable Disables or enables a configuration rule 26 ProfileUnity with FlexApp Administrator Training and Lab Manual
2. Click on Add Portability Setting Rule. 3. Select the Windows Appearance ruleset option. ProfileUnity with FlexApp Administrator Training and Lab Manual 27
6. Leave all default options checked. Change UID to WinAppearance_custom; then click SAVE. 7. The new setting will be located at the bottom of the ruleset module. 8. This setting will archive users Windows Appearance settings and restore them to any Windows desktop on the subsequent logon. Exercises: Creating and Managing Portability Rules Exercise 1: Create a Windows Theme ruleset The ruleset should restore the last captured settings on next logon The ruleset should save user s Windows Theme settings on logoff Provide Save Path to your own ProfileUnity network share Change UID from default name to your own 28 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 9: FOLDER REDIRECTION OVERVIEW Windows uses special folders known as shell folders to indicate the default location for many types of settings and data. The Folder Redirection module allows you to redirect shell folders to alternate locations, and optionally move or copy existing data. A common use for this module is redirection of My Documents to a network share. Configuration options are explained below: Filter: Select the name of the filter you want assigned to this configuration element. Shell Folder: Select the Shell Folder you want to redirect. Reset to Default: Enabling this option will reset the selected Shell Folder to its default location. Only Redirect Local Shell Folders: When this option is checked and the shell folder is a UNC path or Mapped Drive, the folder will be skipped and not synced. If the shell folder is on any drive letter it will be supported for sync. Redirect to Folder: Enter the path you want the Shell Folder redirected to. This option is not available if Reset to Default has been selected. ProfileUnity with FlexApp Administrator Training and Lab Manual 29
Activity: Creating Folder Redirection Rules 1. Click on Folder Redirection. 2. Click on Add Folder Redirection Rule 3. From the Shell Folder option box, select My Documents 4. Type in HOME share location. For example, \\server\share\%username%\mydocuments 30 ProfileUnity with FlexApp Administrator Training and Lab Manual
9. Click on for the main configuration module. Exercises: Create and Manage Folder Redirection Rules Exercise 1: Create a folder redirection rule for the following conditions. Rule that redirects Local Application Data to a specific location. Existing files on local application data should be sync to the new network path location. Make sure that no secondary computers with same login name migrates their existing files to new location Migrate both new and old files, and limit the bandwidth to 10Mbps Exclude all temporary files Exercise 2: Create a folder redirection rule that moves new files on Download to new location Once migrated, original Download folder should be hidden from user s desktop ProfileUnity with FlexApp Administrator Training and Lab Manual 31
Style Enables user to select which style of start menu to use: Windows XP Windows XP Two Columns Windows 7 Windows Key Behavior Indicates how the user s Windows key should behave when pressed. This option is used to bring up the Start Menu or Windows 8 Start Screen. Drive Mapping The Drive Mapping module is used to connect and disconnect network drives. Activity: Creating a rule that maps a network drive during logon 1. Start the Configuration Editor by selecting the icon circled in the Configuration Management list. 32 ProfileUnity with FlexApp Administrator Training and Lab Manual
Activity: Modifying Windows desktop environment variables to the current user s environment 1. Enter the name of the environment variable you want to modify. For this practice, enter HOMEDRIVE. 2. Enter the value you want to assign to the environment variable. Leaving this value blank will delete the environment variable. For this example, type H: 3. Click Save, which willl set your HOMEDRIVE to H:\ Internet Explorer This module configures Internet Explorer features such as Start Page, Download Directory, and Favorites. Internet Explorer versions 4.0 or higher are supported. ProfileUnity with FlexApp Administrator Training and Lab Manual 33
Activity: Printers 1. Click on Add Printer Rule, and then select the Browser Server method. 2. Select Browse Server to see a list of printer options. Enter the path to the Printer Server, and click the Retrieve button. Select the printers to add from the list of available printers on that server. The Printer rule example below will connect a HP Color LaserJet 9500 PCL 6 printer on a remote server after the user logs on. RDP Client This module allows you to configure RDP clients from a centralized location. It supports RDP versions 5.1 (Windows XP Client), 5.2 (Windows Server 2003 Client), 6.0 (Windows Vista Client), and 7.0 (Windows 7 Client). 34 ProfileUnity with FlexApp Administrator Training and Lab Manual
2. Select Action: Add Key 3. Select Hive: HKEY_CURRENT_USER 4. Key: type Software\MyCompany\Test 5. Click Save. The example below adds the key Software\MyCompany\Test to the HKEY_CURRENT_USER hive. ProfileUnity with FlexApp Administrator Training and Lab Manual 35
6. Enter Persistent to the Value field. 7. Enter 0 to Data field 8. Enter the description of this Registry Setting rule. 9. Click Save. This example sets Persistent value to 0, instructing Internet Explorer to empty the temporary cache when the browser is closed. 36 ProfileUnity with FlexApp Administrator Training and Lab Manual
Exercises: Shortcuts Pinned Item Location Choose the location where a pinned item should be created or deleted if Pinned Item was selected for the Type: Start Menu Taskbar Target When creating a Shell Short, enter the full path to the shortcut target. When creating a Web Link, enter the URL you want the link to resolve to. Surrounding quotes are automatically added to the target. Target Arguments Enter arguments required by the shortcut target. Target Arguments are not automatically quoted. Start In Enter the working directory the shortcut target should start in. Surrounding quotes are automatically added to the start in directory. Icon File Enter the full path that directs the shortcut to the icon. Index If the shortcut icon file contains more than one icon, enter the targeted icon s specific numerical index. Exercise 1: Create a shell shortcut Name the shortcut Tax Tables. The shortcut will be created in the User Start Menu in a subfolder named Finance. If the shortcut already exists, it will be overwritten. When double clicked, the shortcut will open (Drive Letter):\Finance\Tax Tables.xls in Excel. Exercise 2: Create a Web Link. Name the web link Liquidware Labs Support Site and place it on on the user s desktop. If the shortcut already exists, it is not overwritten. When double clicked, the shortcut will open the website https://liquidwarelabs.zendesk.com/home.zendesk.com/home. ProfileUnity with FlexApp Administrator Training and Lab Manual 37
IP Address Change Computer Shutdown INI Path You can create a dedicated Trigger Point INI then place it in subfolder of NETLOGON share. This method allows you to call specific Trigger INI files without having to include them in your main INI module. Windows Options This module allows you to modify settings that control the Windows user interface. Closer look: Windows Options Rename My Computer Enter your preferred My Computer name. The recommended setting is the macro @WKSTA. The @WKSTA macro expands into the name of the computer during user logon. Rename My Network Places Enter your preferred My Network Places name. Wallpaper File Enter the full path to the bitmap file Windows should use as desktop wallpaper. The wallpaper file must be a bitmap. Command Prompt Here This option enables you to right-click a folder in Windows Explorer to open a Command Prompt window with the selected folder as your active directory. Tab Auto Complete This option controls command prompt auto complete functionality. When enabled, you can start typing the name of a file in a command prompt and then press TAB. The shell will attempt to complete the name of the file. Desktop Cleanup Wizard The Desktop Cleanup Wizard displays a list of desktop icons that have not been used for 60 days or more, enabling you to remove those icons that you don t want on your desktop and to control the Desktop Cleanup Wizard setting used by your users. This option is only available on Windows XP. Remove Shortcut To Prefix This option allows you to remove the Shortcut to text prefix on your shortcuts. Personalized Menus 38 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 11: MESSAGING AND OFFICE APPLICATION PROVISIONING MODULES OVERVIEW MAPI Profiles MAPI Profiles module is used to configure Windows Messaging subsystem profiles for access to Microsoft Exchange Server. The Windows Messaging subsystem is used by Microsoft Outlook to communicate with Microsoft Exchange. This module supports Outlook 2003/2007 Message Boxes This module allows you to display popup messages to your users during login. Office File Locations This module allows you to modify the default file locations for Microsoft Office. Office Options This module allows you to configure Microsoft Office user information and set options that control interaction with the user. Outlook This module allows you to modify settings that control Microsoft Outlook s behavior for message handling, message format, and Auto Archives. ProfileUnity with FlexApp Administrator Training and Lab Manual 39
LAB 13: FLEXAPP TECHNOLOGY OVERVIEW ProfileUnity with FlexApp technology enables both department-installed applications (DIAs) and user installed-applications (UIAs) in virtual desktop environments without affecting the underlying base image of the machines. FlexApp stores applications in designated storage areas separately from the Windows OS. As users login, their chosen applications get snapped-in to the desktop in seconds. This solution offers flexibility and simplicity for organizations that want to provide users with deeper levels of personalization. This dramatically simplifies management of non-persistent Windows environments because fewer master images must be maintained. FlexApp DIA Department-installed applications are those managed by IT staff or desktop administrators but are not part of a master image. FlexApp DIA is enabled by the administrator for select users or groups within the ProfileUnity Management Console. Admins package applications which are provisioned on a virtual hard disk (VHD) to run separately from the OS and local session. When users login, these FlexApp applications appear alongside of their golden image applications. FlexApp UIA User installed applications are those installed and managed by individual users. ProfileUnity with FlexApp UIA is enabled by the administrator for select users or groups within the ProfileUnity Management Console. Users are provisioned a virtual hard disk (VHD) to store their applications separately from the OS and local session. Users install applications just as they typically would. During this process, ProfileUnity with FlexApp UIA hooks the installation of the program, adding specialized links both into the local Windows OS and into the user s managed ProfileUnity with FlexApp settings. 40 ProfileUnity with FlexApp Administrator Training and Lab Manual
Exercise: Create a FlexApp UIA configuration based on the following scenario: VHD image located at each user s profile path VHD mounted as B: Compressed FlexApp storage should not exceed 5 GB VHD should NOT be expandable FlexApp DIA The FlexApp DIA module is used to control the storage and retrieval of department installed applications. Activity: Installing and configuring the FlexApp DIA Packaging Console 1. Log in to the desktop where you will install the FlexApp Packaging Console. Then log in to the ProfileUnity Management Console. ProfileUnity with FlexApp Administrator Training and Lab Manual 41
4. Scroll down to ProfileUnity Tools; click Download FlexAPP Packaging Console. 5. The FlexApp Packaging Console tool (fpcsetup.exe) will start downloading from your web browser. 6. When the download has been completed, double click to install it on the computer that will run FlexApp Packaging Console. 7. If the FlexApp Packaging Console machine does not have Microsoft.NET Framework 4.5 pre-installed, click on Next to install the required prerequisites. 8. After the installation of.net Framework 4.5, you must restart the system. 42 ProfileUnity with FlexApp Administrator Training and Lab Manual
12. Create a DIA Package from an application installer. In the FlexApp Packaging Console, click on the Create button. 13. Enter a descriptive Package Name and press Create. Installation files are located at C:\Users\admin1\Desktop\FlexApp Apps ProfileUnity with FlexApp Administrator Training and Lab Manual 43
16. After installation is complete, click Save. 17. Firefox Browser V.37 now shows in the FlexApp Packaging Console and is activated by default. Click on Edit the Package button to view the package details. 44 ProfileUnity with FlexApp Administrator Training and Lab Manual
20. After the package has been deactivated, click OK. 21. Click on the Activate icon to re-activate the package. Package activation progress is shown again, as in the graphic above. Click on OK when the process is complete. Exercises: FlexApp DIA Packaging Console Exercise 1: Install Install FlexApp DIA Packaging Console Exercise 2: Use FlexApp DIA Packaging Console Package at least two applications using the Packaging Console After completing installation, deactivate, edit, reactivate, and extend packages Reactivate packages Delete installed packages ProfileUnity with FlexApp Administrator Training and Lab Manual 45
2. Click on Add FlexApp DIA Rule. 3. Drag Firefox Browser from the right column to the left. 4. Optionally, clicking on Reverse Play Applications will remove installed DIA during logoff. 46 ProfileUnity with FlexApp Administrator Training and Lab Manual
3. Select whether to apply privilege elevation to an install or application. Select Application. TIPS PRIVILEGE ELEVATION 4. Select whether to Allow or Deny. Select Allow. 5. Select the Match condition to test against. Select Signed. 6. Enter the Value to test against. Type Apple then click Save. This configuration will allow non-admin users to install applications signed by Apple. If FlexApp UIA is enabled for a user and the Privilege Elevation rule type equals Installer, ProfileUnity monitors user-installed applications in nonpersistent virtual environments granting rights based on the rule. If FlexApp UIA is disabled for a user and the Privilege Elevation rule type equals Installer, ProfileUnity entire allows or denies users permission to install applications on a physical or persistent virtual desktops based on the rule. If the Privilege Elevation rule type equals Application, ProfileUnity can securely elevate an application that requires administrative rights to run without making the user an administrator for the entire session. ProfileUnity with FlexApp Administrator Training and Lab Manual 47
Activity: Application Restrictions The following setting allows installation of all applications signed by Liquidware Labs, Inc. 1. Action: select Allow. 2. Match: select Signed (Digital Signature signer of application). 3. Value: type Liquidware Labs, Inc. Your new setting should look like the following: Exercise: Application Restrictions Create an Application Restrictions rule that will deny applications path that contains Filezilla TIPS APPLICATION RESTRICTIONS Administrators can add any number of allow and deny rules in the Application Restriction module. Rules are evaluated sequentially, starting with the one at the top of the list. When a filter returns true for an individual user, that rule sets whether the Application Restriction module becomes an all allow or all deny list for that user. If the first true rule has an Allow Action, all true Allow rules in the module list will apply. Conversely, if the first true filter rule has a Deny Action, it will become an all deny list for that user. The application access policy is applied according to whether the rules evaluate to create an Allow List or Deny List. If the rules produce a Deny List for a user, the user can run any applications except for those specified in the deny rules. If the rules create an Allow List for a user, the user can only run applications that are specified by the allowed rules. Access to other applications will be denied. By default the following processes are automatically allowed: ProfileUnity processes All system processes Processes from C:\Windows and subdirectories Processes signed by Citrix or VMware 48 ProfileUnity with FlexApp Administrator Training and Lab Manual
2. Click on Create to create the new Filter. 3. Provide Name and Comments for this Filter. Type Sales Group (Tokyo site) Desktop Filter 4. Select the Filter Aggregation rules. 5. Select Condition, Match, and Value. Be sure to click the Add button. 6. Select Desktop/Laptop Machine Class 7. Select Logon/Logoff System Event. ProfileUnity with FlexApp Administrator Training and Lab Manual 49
Activity: Applying the New Filter Now you will need to Apply the Filter [Sales Group (Tokyo site) Desktop Filter] to Rules in Configuration Modules. We ll apply this filter in a couple places of the configuration modules you created. 1. From the main navigation bar, click on Configuration Management. 2. Locate Folder Redirection. 3. Copy the existing My Document Folder Redirection rule. 50 ProfileUnity with FlexApp Administrator Training and Lab Manual
4. Edit your new policy. 5. Browse to Computer Configuration\Policy\Windows Settings\Scripts (Startup/Shutdown) and edit the properties of the Startup script. ProfileUnity with FlexApp Administrator Training and Lab Manual 51
Activity: Configuring the Group Policy Logoff Script 1. Assign logoff.vbs as the logoff script. Under the policy, browse to User Configuration\Policies\Windows Settings\Scripts (Logon/Logoff), right click on Logoff and select Properties. 2. Click Add to enter a new script. 3. Point the script parameters to your domain s netlogon share (like the example below): Note: This is a computer policy that should be applied to the OUs composed of the user accounts that will execute ProfileUnity. Script Name: \\training.local\netlogon\profileunity\lwl.profileunity.client.logoff.exe Script Parameters: LEAVE BLANK 4. Click OK and then Apply to save your changes. 52 ProfileUnity with FlexApp Administrator Training and Lab Manual
3. Browse to the location where you extracted the ProfileUnity files (by default, the Netlogon\ProfileUnity folder) and select the ProfileUnity.adm template. Click Open. 4. On the next dialog, click Close. 5. The ProfileUnity ADM template User Configuration\Policies\Administrative Templates\Classic Administrative Templates (ADM)\Liquidware Labs\ProfileUnity will be added in. ProfileUnity with FlexApp Administrator Training and Lab Manual 53
2. Right click on Enabled and select Properties. 3. Select the Enabled radial button, and then click OK. 54 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 6: PROFILEUNITY CONFIGURATION MANAGEMENT MODULE OVERVIEW Your user and environment settings (and instructions) are stored in one or more configuration files used to control ProfileUnity s execution. During user logon, the ProfileUnity Client reads your configuration file and applies the setting to your client machines. Creating, modifying, deleting, summarizing, and downloading each configuration file is done through the Configuration Management area of the ProfileUnity Management Console. Activity: Creating a New Configuration Guided Method 1. Start by clicking Create. 2. Then click Guided. ProfileUnity with FlexApp Administrator Training and Lab Manual 55
6. If you would like to bypass Step #5 (above) in the future, select Yes. 7. Click on Finish to complete the process. You will then see the module you just created on the Configuration Management console. 8. Notice the ProfileUnity modules settings file (Windows 7 and 8.1 Persistent Coexistence.ini), which was automatically downloaded, at the bottom of the browser. Since you will need to configure your own module settings file, click on Discard at this point. 56 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 8: PORTABILITY SETTINGS MODULE OVERVIEW The Portability Settings module is the most frequently used module in ProfileUnity. In order to utilize main feature of ProfileUnity, you must learn to configure and manage the Portability Settings Module. This module is used to control the storage and retrieval of personal user preferences at logoff and logon. This module works in conjunction with the rulesets defined through the portability management interface. Activity: Configuring and Managing Portability Settings 1. Click on the Portability Settings icon. ProfileUnity with FlexApp Administrator Training and Lab Manual 57
4. Provide a save path. 5. Click on the Advanced tab. 58 ProfileUnity with FlexApp Administrator Training and Lab Manual
Exercise 2: Create a Portability Rule Rule performs read-only but does not save when the user logs-off Ruleset should not apply to Filesystem Rules or Local Shell Folders Change UID from default name to your own for easier identification Locate the ruleset file (.7z) you just created on the network path ProfileUnity with FlexApp Administrator Training and Lab Manual 59
Hide Previous Location After Redirection: Enabling this option causes ProfileUnity to set the hidden attribute on and rename the previous shell folder location after redirection Existing File: Files and folders that exist in the current Shell Folder location can optionally be copied, moved, or synchronized to the new location. Depending on the amount of data that currently exists, enabling copy or move can cause a delay during logon while the files and folders are copied or moved to the new location. Alternatively, the synchronize option will transfer the existing files and folders in the background without impacting the user s logon time. The synchronize option first performs a background synchronization of the user s existing files and folders. At the next logon, after the initial background synchronization has completed, foreground synchronization takes place to synchronize any missing files or folders. Once the foreground synchronization is complete, the folder is redirected. Users must wait for the foreground synchronization to complete during logon; however, foreground synchronization is usually quick because it is only moving a few missing files and folders. The synchronize option is the recommended method for migrating existing files and folders. Only Migrate Existing Files on Primary Client: Enabling this option causes ProfileUnity to only migrate existing files on the user s Primary Client. The user s Primary Client is the first computer a user logs on to after a folder redirection is configured. Remove Extraneous Files: Enabling this option will delete files and folders that exist in the new location and do not exist in the current location during synchronization. This option is only available if Sync to New Location or Sync Only Don t Redirect is chosen for Existing Files. This option can cause data loss if not used with care. It is recommended that this option be left disabled unless you have a specific need to enable it. Only Sync New Files: Enabling this option will allow conflict resolution when syncing from many computers or when trying to start the sync process over again to only send the newer files. Limit Bandwidth to: Enabling this option will limit the amount of bandwidth the background synchronization process consumes. Exclude: Paths entered will be excluded from the background synchronization process. Use commas to separate multiple paths to be excluded. The following matching rules apply: A leading \ anchors the match to the full path only (otherwise partial matches occur) A * matches any path component except a backslash A? matches any character except a backslash A trailing \ limits the match to directories and not files 60 ProfileUnity with FlexApp Administrator Training and Lab Manual
5. From the Existing Files option, select Sync to New Location 6. Click on Advanced for additional configuration 7. From the Advanced option, uncheck Only Sync New Files and Limit Bandwidth to 1 Mbps. 8. Review the rule you just created. ProfileUnity with FlexApp Administrator Training and Lab Manual 61
LAB 10: PROFILEUNITY PROVISIONING MODULES OVERVIEW This section guides you through some of the provisioning tools in ProfileUnity that are used to provision the user s desktop during the initial logon process. The module can provide default desktop settings for all or a portion of users in your organization. The tools circled below are the focus of this lab. Desktop Provisioning Modules Desktop Start Menu The Desktop Start Menu module allows users to add a classic start menu to Windows 8.1 and Windows Server 2012 R2 desktops. Within the Desktop Start Menu you will encounter the following options. State Choose whether to Enable or Disable the start menu on the desktop. 62 ProfileUnity with FlexApp Administrator Training and Lab Manual
2. Click on Add Drive Mapping Rule. 3. From the Action drop down list, click on Map. 4. Assign a new drive letter. For this practice we will use H. 5. Type in your network share s UNC path and provide a Share Name. Press Save. 6. Review the Drive Mapping Rule you just created. Environment Variables The Environment Variables module sets and clears Windows desktop s environment variables. Environment variables are modified in the current user s environment. ProfileUnity with FlexApp Administrator Training and Lab Manual 63
Activity: Configuring Internet Explorer features 1. Enter the URL of your preferred Internet Explorer home page. 2. Enter the full path to the folder where you want downloaded files to be saved. 3. Selecting Disabled enables you to control users personalized favorites menu settings. 4. Selecting this option sorts Internet Explorer favorites alphabetically. 5. Selecting this option disables the Internet Connection Wizard and remove the Internet Connection Wizard desktop shortcut. 6. Click Save. Internet Proxy This module adjusts Internet Explorer s proxy settings to match your network configuration. Internet Explorer versions 8.0 and higher are supported. Printers This module allows you to connect and disconnect network printers. Options include capturing a port, setting the printer as default, and automatically adding the printer. 64 ProfileUnity with FlexApp Administrator Training and Lab Manual
Registry This module allows you to make changes to a default (or existing) registry key or values on your client machines. Action adds or deletes registry values or keys. Hive lets you to select the Registry Hive containing the key or value you re modifying. Key allows you to enter the subkey of the Registry Hive you want to modify. Type allows you to select the type of value you want to modify. Value allows you to enter the value you want to modify. Data allows you to enter the data you want assigned to the value. Description allows you to name the setting. Activity 1: Registry 1. Select the Manual set up option ProfileUnity with FlexApp Administrator Training and Lab Manual 65
Activity 2: Registry 1. Select the Manual set up option 2. Select Add Value from Action drop down box 3. Select HKEY_CURRENT_USER from the Hive drop down box 4. Enter Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache to Key field 5. Select REG_DWORD from Type drop down box. 66 ProfileUnity with FlexApp Administrator Training and Lab Manual
Shortcuts This module allows you to create shell shortcuts and web links. You can provision Shell Shortcuts, Web Links, and Pinned Items using this feature. Closer look: Shortcuts Type This feature allows you to specify the type of shortcut you want to create or delete. Shell shortcuts point to programs and files on your computer. Available options are: Shell Shortcut Web Link Pinned Item Action Select one of the following actions: Create Creates a new shortcut. Delete Deletes an existing shortcut. Delete All Deletes all existing shortcuts Overwrite Existing Shortcut When this option is selected, existing shortcuts will be overwritten. Shortcut Name Enter the name of the shortcut you want to create or delete. Subfolders can be specified by entering the relative path followed by the shortcut name. Surrounding quotes are automatically added to the name. Shortcut Location Select the location where the shortcut should be created or deleted. Available options are: User Desktop User Favorites User Start Menu User Programs Group User Startup Group User Send To User Quick Launch Bar User Links All Users Desktops All Users Start Menu ProfileUnity with FlexApp Administrator Training and Lab Manual 67
TimeSync This module allows you to set the time on your client machines from a centralized source. This feature is designed for use with Microsoft clients lacking a native time service. On clients with a native time service, the preferred method for setting the client machine s time is to use the time services. Trigger Points This module initiates other modules based on various events that occur on the machine. You can use Trigger Points on Windows 7 or higher. Only Windows Server 2008 R2 machines and higher only machines can use this module. Closer look: Trigger Points Type Select the type of event that sets off a Trigger: Interval PCoIP Reconnect PCoIP Connect ICA Connect ICA Disconnect RDP Disconnect Desktop Unlock Desktop Lock IP Address Change Application Open Application Close Computer Shutdown Module Select any of the ProfileUnity Configuration modules you would like to run (except Main module). Application Name This allows you to specify the application name to monitor for on Application Open or Application Close events. Delay in Seconds This allows you to set a delay before triggering the module for IP Address Change and Computer Shutdown. For all other events the delay is set to 0. 68 ProfileUnity with FlexApp Administrator Training and Lab Manual
This option allows you to control your users Personalized Menus settings. On Windows clients, the Start menu is automatically updated to keep most-often used items at the top of the menu for ease of accessibility. Sort Start Menu by Name Selecting this option sorts the Start Menu alphabetically Exercise: Windows Options Some lead-in is needed here. When the user logs on, default name (My Computer) should be replaced to the computer s name. Sets the wallpaper file to H:\wallpapers\liquidware.bmp Enables command Prompt Here Enables Tab Auto Complete Disables the Desktop Cleanup Wizard Disables Personalized Menus, and sorts the Start Menu alphabetically ProfileUnity with FlexApp Administrator Training and Lab Manual 69
LAB 12: SPECIALTY PROVISIONING MODULES Profile Cleanup The Profile Cleanup module is used to clean up a user s profile contents. User Defined Scripts Administrators wanting to use a custom script will add it to their configuration here. ProfileUnity offers the option to create preexecution and post-execution. Application Launcher This module allows you to launch applications on your client machines during or after ProfileUnity execution. 70 ProfileUnity with FlexApp Administrator Training and Lab Manual
FlexApp UIA The FlexApp UIA module is used to control the storage and retrieval of user installed applications in non-persistent desktop environments. Activity: Using FlexApp UIA 1. Select the FlexApp UIA configuration module. 2. Type in settings as follows and click Save. ProfileUnity with FlexApp Administrator Training and Lab Manual 71
2. From the ProfileUnity Management Console, move your mouse over to Admin on top right section of the UI. 3. Select Administration 72 ProfileUnity with FlexApp Administrator Training and Lab Manual
9. Continue with the Packaging Console installation by clicking Next. 10. Launch FlexApp Packaging Console on the computer s desktop. 11. Log in to the FlexApp Packaging Console. ProfileUnity with FlexApp Administrator Training and Lab Manual 73
14. You will see this screen as the package process executes. 15. Follow the application installation steps. 74 ProfileUnity with FlexApp Administrator Training and Lab Manual
18. Review the Package details, then click OK to go back to the packaging console. 19. To reverse the process, click on the Deactivate button in the lower right corner. ProfileUnity with FlexApp Administrator Training and Lab Manual 75
Exercise 3: Add applications to FlexApp DIA Packaging Console Install additional applications to FlexApp DIA Packaging Console like the example shown below. Activity: FlexApp DIA Configuration Module You can now distribute and manage Department Installed Applications through ProfileUnity Management Console. 1. Log in to the ProfileUnity management console and then go to the Configuration Management window. Click the FlexApp DIA module icon. 76 ProfileUnity with FlexApp Administrator Training and Lab Manual
5. Click on Save. Click on Update. Virtual Disks The Virtual Disks module is used to mount storage. ACTIVITY: Virtual Disks Privilege Elevation The Privilege Elevation module allows standard users to securely install and run applications needing elevated rights withoutassigning them an administrator role. The Allow and Deny policy rules defined by the administrator determine how privileges are applied to users. Use this module along with the Application Restrictions and FlexApp UIA modules to provide application rights management (ARM) that enables administrators to securely grant specific users detailed application rights without making them a Windows Administrator. Activity: Privilege Elevation 1. Select the Privilege Elevation icon from the configuration console. 2. Click on Add Privilege Elevation Rule. ProfileUnity with FlexApp Administrator Training and Lab Manual 77
Exercises: Privilege Elevation Exercise 1: Create an elevation configuration Create a configuration that will elevate to administrator s privilege when any installers signed by the following Signer has been detected. Exercise 2: Create an elevation denial Create a configuration that will deny elevating the user to administrator if itunes from Apple, Inc. has been detected. Application Restrictions The Application Restrictions module allows or denies users access to applications providing allow/deny options for installed applications per user. Use the module along with the Privilege Elevation & FlexApp UIA modules to provide application rights management (ARM) that enables administrators to securely grant specific users detailed application rights without making them a Windows Administrator. 78 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 14: PROFILEUNITY FILTERS OVERVIEW Filters in ProfileUnity are used to limit the scope of configuration rules. By using filters, you can further refine how settings are applied based on real segmentations that already exist in your environment such as different department groups or physical machine uses versus virtual machine users. In addition, roaming users benefit from ProfileUnity s context aware filters which can be setup to dynamically configure their settings based on their location as they move throughout the building. As configuration rules are processed during ProfileUnity s execution, the filter assigned to each configuration rule is evaluated. If the filter evaluation returns true, the configuration rule is applied. If the filter evaluation returns false, the configuration rule is skipped. Thus, filters allow a single ProfileUnity configuration to be applied differently to multiple client machines and users. Creating, modifying, deleting, and summarizing filters is done through the Filter Management area of the ProfileUnity Management Console. Activity: Creating a New Filter 1. Select Filter Management from ProfileUnity s navigation bar. ProfileUnity with FlexApp Administrator Training and Lab Manual 79
8. Select the following Operating Systems. Windows 7, 8, and 8.1. 9. Select Connection type. 10. Click Save. This new Filter will be applied to Tokyo site Sales group members using Desktops or Laptops provisioned with Windows 7, 8, 8.1 only, and logging in from LAN or VPN. 80 ProfileUnity with FlexApp Administrator Training and Lab Manual
4. Locate the copy at the bottom of the page then click Edit icon to modify the rule. 5. Select Sales Group (Tokyo site) Desktop Filter 6. Provide new Redirect to Folder Location owned by Tokyo Sales Group members. ProfileUnity with FlexApp Administrator Training and Lab Manual 81
7. Click Save. Now this Folder Redirection rule will detect the filter conditions specified and redirect My Document files to different Folder location specified. 8. Click on Update if you are finished with the entire configuration module. Exercise: ProfileUnity Filters Create a Filter that will activate when the following conditions are met: Terminal Server Session name that contains XenApp And IP address contains 10.0.90.x Supports only RDS connections from Windows 8, 8.1, and 2008 All available machine classes Members connecting only via VPN connections The Filter should apply to Logon and Logoff Apply this filter to three of your existing rules from Portability Settings Explain how combined rules should work 82 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 15: PORTABILITY MANAGEMENT OVERVIEW ProfileUnity takes profile portability one step further by allowing you to manage what parts of the profiles are made portable. By default, a large amount of data is stored in a user s profile. However, not all of the data is necessary for a robust and complete user experience. ProfileUnity is granular by design, allowing you to set rules and choose what profile data is to be made portable. This makes for speedy logon times, reduces profile corruption instances, and eliminates the needless transfer of large amounts of data over the network. With ProfileUnity, making user profile data portable is a two-step process. First, you define rulesets through the Portability Management interface. Rulesets control the portions of the user profile that will follow the user around the network. Second, once your rulesets are defined, the Portability Settings configuration module is used to control how user profile data is stored and retrieved from the network. ProfileUnity includes predefined rulesets that are designed to manage popular settings. These predefined rulesets can be used to quickly setup portability with minimal configuration. Using the Portability Management module, you can modify these predefined rulesets as well as create your own custom rulesets. ProfileUnity with FlexApp Administrator Training and Lab Manual 83
Portability Management Editing Rulesets The Ruleset Editor is where all profile portability ruleset configuration takes place. This section describes options available. User profiles are composed of two types of data: registry settings and files and folders. Rulesets handle these data types with registry and file system rules respectively. Rulesets consist of the following elements: a ruleset name, registry rules, and file system rules. As you will see from the predefined rulesets, some rulesets contain only registry rules, some contain only file system rules, and others contain both types of rules. Managing Registry Rules Registry rules are composed of an Operation, Scope, Hive, and Path. Choose the Operation the ruleset performs from a drop down list. When saving and restoring registry settings, ProfileUnity can Merge, Replace or Exclude data: Registry Rule Operation Merge Replace Exclude Description Saved data is merged with existing data during restore. Existing data is replaced with saved data during restore. Data is excluded from save and restore. Select the appropriate Scope of the operation from a drop down list. The Scope can be limited to a registry Tree, Key or Value. These are the Scope options to choose from: Registry Rule Scope Tree Key Value Description Path specifies a tree. Specified key and values, subkeys, and subkey values. Path specifies a key. Specified key and values only, no subkeys or subkey values. Path specifies a value. Specified value only. 84 ProfileUnity with FlexApp Administrator Training and Lab Manual
Select the appropriate Hive that the registry rule applies to from a drop down list. These are the Hive options to choose from: Registry Rule Hive HKCU HKLM Description HKEY_CURRENT_USER registry root key HKEY_LOCAL_MACHINE registry root key Once you enter the Path of the registry item, click the Add button to create the new registry rule and add it to the Registry Rules list. Please note the Path is relative to the Hive or registry root key you select. Your entries should not begin with HKEY_ CURRENT_USER or HKEY_LOCAL_MACHINE since ProfileUnity adds this portion of the path by design. A ruleset can have multiple registry rules. ProfileUnity registry rules allow granular storage and retrieval of registry values. To delete a registry rule, select Remove to the right of the particular rule. Managing File System Rules File system rules are composed of an Operation, Folder, and Path triplet. When saving and restoring file system settings, ProfileUnity can Merge, Replace or Exclude data: File System Rule Operation Merge Replace Exclude Description Saved data is merged with existing data during restore. Existing data is replaced with saved data during restore. Data is excluded from save and restore. ProfileUnity with FlexApp Administrator Training and Lab Manual 85
You will also need to select the appropriate shell Folder from the list below: File System Rule Folder Application Data Cookies Desktop Favorites History My Documents Program Group Recent Send To Start Menu Startup Group User Profile Local Application Data Program Files System Drive System Root My Music My Pictures My Video Temporary Internet Files NetHood PrintHood Templates Links Contacts Searches Roaming Tiles Libraries Description Specified path is relative to the Application Data shell folder. Specified path is relative to the Cookies shell folder. Specified path is relative to the Desktop shell folder. Specified path is relative to the Favorites shell folder. Specified path is relative to the History shell folder. Specified path is relative to the My Documents shell folder. Specified path is relative to the Programs shell folder. Specified path is relative to the Recent shell folder. Specified path is relative to the SendTo shell folder. Specified path is relative to the Start Menu shell folder. Specified path is relative to the Startup shell folder. Specified path is relative to the user profile root folder. Specified path is relative to the Local AppData shell folder. Specified path is relative to the %programfiles% environment variable. Specified path is relative to the %systemdrive% environment variable. Specified path is relative to the %systemroot% environment variable. Specified path is relative to the My Music shell folder. Specified path is relative to the My Pictures shell folder. Specified path is relative to the My Video shell folder. Specified path is relative to the Temporary Internet Files shell folder. Specified path is relative to the NetHood shell folder. Specified path is relative to the PrintHood shell folder. Specified path is relative to the Templates shell folder. Specified path is relative to the Links shell folder. Specified path is relative to the Contacts shell folder. Specified path is relative to the Searches shell folder. Specified path is relative to the Roaming Tiles shell folder Specified path is relative to the Libraries shell folder. 86 ProfileUnity with FlexApp Administrator Training and Lab Manual
Activity: Creating Custom Registry Rules The objective of this activity is to capture and restore individual s Google Chrome browser settings. 1. Click on the Create button. 2. Enter the name of the Portability Ruleset. 3. Find Google Chrome s Windows registry location using regedit.exe or utilities like Regshot. The Google Chrome registry location is in Computer\HKEY_CURRENT_USER\Software\Google. ProfileUnity with FlexApp Administrator Training and Lab Manual 87
4. Define the registry location from step #3 then click on Add. 5. Locate Google Chrome s File System locations. They are usually in the Local Appdata location. 6. Define all of the known File System locations of Google Chrome in the Portability Ruleset Editor, then click the Save button to create the custom Portability Ruleset. 88 ProfileUnity with FlexApp Administrator Training and Lab Manual
7. Verify the ruleset you just created in Portability Management module. ProfileUnity with FlexApp Administrator Training and Lab Manual 89
8. Go to Configuration Management Module. The Google Chrome portability ruleset should now appear in Portability Setting s ruleset drop down box. Exercise: Creating New Portability Ruleset Create the new ruleset that captures Mozilla FireFox browser settings. 90 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 16: INVENTORY MANAGEMENT OVERVIEW ProfileUnity s Inventory Management provides administrators with an overall view of FlexApp Packaging, System Inventory, ThinApp Packages, and Redirection in the environment. FlexApp DIA Inventory The FlexApp DIA inventory displays all FlexApp DIA packages. From this list, admins can view specific package information, delete packages, or disable/enable packages. FlexApp UIA Inventory The FlexApp UIA inventory provides an administrator with the ability to identify applications that were installed as well as which users installed them. ProfileUnity with FlexApp Administrator Training and Lab Manual 91
System Inventory The System Inventory displays an in-depth hardware and software inventory report for the chosen record. Redirections The Folder redirection inventory tells you the status of a user s shell folder during migration. Using this feature, an administrator will be able to know when a user s shell folders have finishing synchronizing to the target path. 92 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 17: ADMINISTRATION SETTINGS OVERVIEW Administration Settings enable you to control various settings and operations for ProfileUnity in your environment. Web Services Web Services allows you to define the management console access port and session time-out length in addition to specificing security requirements. Port - The port on which the web service runs. Session Timeout in Minutes How long before an idle user has before they will be required to log in again. Force SSL Forces use of SSL HTTPS protocol over standard HTTP protocol. SSL Certificate Displays current SSL certificate. Import New Certificate Allows you to import a.pfx certificate. ProfileUnity with FlexApp Administrator Training and Lab Manual 93
Database The database module allows you to provide UI data source for backup and restore the entire ProfileUnity management console contents and settings. Authentication ProfileUnity Tools 94 ProfileUnity with FlexApp Administrator Training and Lab Manual
Inventory Logging ProfileUnity with FlexApp Administrator Training and Lab Manual 95
LAB 18: CONFIGURATION TEMPLATES MANAGEMENT OVERVIEW The Guided Configuration Wizard makes use of configuration templates to jump start the configuration process. The standard templates provided by Liquidware Labs covers most of the Windows settings a user would need right out of the box. While ProfileUnity comes with several different useful templates, the Template Administration area allows console administrators the ability to create additional configuration templates or manage the existing templates they have. Configuration Templates can help administrators build configurations for their environment faster than creating each configuration module rule individually, saving valuable time. Instead of creating a new configuration from scratch, the administrator can choose a template as a basis for a new configuration while running the Guided Configuration Wizard. If the template has the majority of the required settings already configured, then the administrator only has to make minimal changes to create the new configuration which is specific to the enterprise environment. The Template list displays all of your existing configuration templates as well as the standard templates that ProfileUnity provides. 96 ProfileUnity with FlexApp Administrator Training and Lab Manual
LAB 19: MANAGING CONSOLE USER ACCOUNTS The ProfileUnity Management Console provides one central utility that administrators can use to configure and manage how users interact with the different types of desktops in their environment. Upon installation, ProfileUnity creates a default admin user account. The username is admin, and you are asked to supply a password. Please make note of this information to refer to it later as needed. You can edit these settings and create additional console user accounts if you wish. Creating, modifying, and deleting user accounts is done through the User Administration area of the ProfileUnity Management Console. ProfileUnity with FlexApp Administrator Training and Lab Manual 97