ProfileUnit y - JillyDjillyd.com/wp-content/uploads/2016/08/DSPR_ProfileUnity...··Any platform that runs a Windows OS can utilize ProfileUnity for profile management, including VMware®

Prof i leUnitywith FlexApp Technology

ADMINISTRATOR TRAINING AND LAB GUIDEversion 1.0

IntroductionThis guide is authored by experts at Liquidware Labs to provide information and guidance concerning ProfileUnity with FlexApp.

Information in this document is subject to change without notice. No part of this publication may be reproduced in whole or in part, stored in a retrieval system, or transmitted in any form or any means, electronic or mechanical, including photocopying and recording for any external use by any person or entity without the express prior written consent of Liquidware Labs.

Liquidware Labs, Inc. 3600 Mansell Road Suite 200 Alpharetta, Georgia 30022 USA 678-397-0450 www.liquidwarelabs.com

©2015 Liquidware Labs Inc. All rights reserved. Stratusphere, ProfileUnity, FlexApp, FlexDisk, and Flex-IO are trademarks of Liquidware Labs. All other marks marks or names mentioned herein may be trademarks of their respective companies.

ContentsLAB 1: PROFILEUNITY MANAGEMENT CONSOLE ...........................................................................................................................................5

Activity: Logging in to the Management Console for the First Time ........................................................................................................................................... 5

LAB 2: DEPLOYING PROFILEUNITY CLIENT TOOLS .........................................................................................................................................6Activity: Deploying Client Tools .................................................................................................................................................................................................. 6

LAB 3: PROFILEUNITY GUIDED CONFIGURATION WIZARD ............................................................................................................................9Activity: Creating a module using the guided method ................................................................................................................................................................ 9

LAB 4: ACTIVE DIRECTORY AND GROUP POLICY CONFIGURATION .............................................................................................................16

LAB 5: CONFIGURING THE GROUP POLICY STARTUP SCRIPT ......................................................................................................................19Activity: Group Policy Configuration .......................................................................................................................................................................................... 19Activity: Configuring the Group Policy Logoff Script .................................................................................................................................................................. 23Activity: Adding the ProfileUnity ADM Template ....................................................................................................................................................................... 24Activity: Configuring and Enabling the Policy ............................................................................................................................................................................ 26

LAB 6: PROFILEUNITY CONFIGURATION MANAGEMENT MODULE.............................................................................................................29Activity: Creating a New Configuration – Guided Method ........................................................................................................................................................ 29

LAB 7: PROFILEUNITY MODULE CONFIGURATION EDITOR .........................................................................................................................32

LAB 8: PORTABILITY SETTINGS MODULE ......................................................................................................................................................33Activity: Configuring and Managing Portability Settings .......................................................................................................................................................... 33Exercise 1: Create a Windows Theme ruleset ............................................................................................................................................................................ 36

LAB 9: FOLDER REDIRECTION .......................................................................................................................................................................38Activity: Creating Folder Redirection Rules ................................................................................................................................................................................ 40Exercise 1: Create a folder redirection rule for the following conditions. ........................................................................................................................... 42Exercise 2: Create a folder redirection rule that moves new files on Download to new location ....................................................................................... 42

LAB 10: PROFILEUNITY PROVISIONING MODULES ........................................................................................................................................43Activity: Creating a rule that maps a network drive during logon ........................................................................................................................................... 44Activity: Modifying Windows desktop environment variables to the current user’s environment ........................................................................................... 46Activity: Configuring Internet Explorer features ........................................................................................................................................................................ 47Activity: Printers .........................................................................................................................................................................................................................48Activity 1: Registry......................................................................................................................................................................................................................49Activity 2: Registry......................................................................................................................................................................................................................51

Closer look: Shortcuts ............................................................................................................................................................................................................53Exercise 1: Create a shell shortcut ...........................................................................................................................................................................................54Exercise 2: Create a Web Link. .................................................................................................................................................................................................54Closer look: Trigger Points .....................................................................................................................................................................................................55Closer look: Windows Options ...............................................................................................................................................................................................56

Exercise: Windows Options .....................................................................................................................................................................................................57

LAB 11: MESSAGING AND OFFICE APPLICATION PROVISIONING MODULES ................................................................................................58

LAB 12: SPECIALTY PROVISIONING MODULES ...............................................................................................................................................59

LAB 13: FLEXAPP TECHNOLOGY ......................................................................................................................................................................60Activity: Using FlexApp UIA ........................................................................................................................................................................................................ 61Activity: Installing and configuring the FlexApp DIA Packaging Console .................................................................................................................................. 62

Exercise 1: Install .....................................................................................................................................................................................................................70Exercise 2: Use FlexApp DIA Packaging Console ..................................................................................................................................................................... 70Exercise 3: Add applications to FlexApp DIA Packaging Console ............................................................................................................................................ 71

Activity: FlexApp DIA Configuration Module ............................................................................................................................................................................. 71Activity: Privilege Elevation ........................................................................................................................................................................................................ 73

Exercise 1: Create an elevation configuration ......................................................................................................................................................................... 75Exercise 2: Create an elevation denial ..................................................................................................................................................................................... 75

Activity: Application Restrictions ............................................................................................................................................................................................... 76Exercise: Application Restrictions ............................................................................................................................................................................................76

LAB 14: PROFILEUNITY FILTERS ......................................................................................................................................................................77Activity: Creating a New Filter ................................................................................................................................................................................................... 77

Exercise: ProfileUnity Filters ..................................................................................................................................................................................................82

LAB 15: PORTABILITY MANAGEMENT ............................................................................................................................................................83Activity: Creating Custom Registry Rules ................................................................................................................................................................................... 87

Exercise: Creating New Portability Ruleset ............................................................................................................................................................................ 90

LAB 16: INVENTORY MANAGEMENT ..............................................................................................................................................................91

LAB 17: ADMINISTRATION SETTINGS .............................................................................................................................................................93

LAB 18: CONFIGURATION TEMPLATES MANAGEMENT .................................................................................................................................96

LAB 19: MANAGING CONSOLE USER ACCOUNTS ...........................................................................................................................................97

1ProfileUnity with FlexApp Administrator Training and Lab Manual │

Introduction to ProfileUnity with FlexApp TechnologyAward-winning ProfileUnity™ is a feature-rich, affordable user virtualization and virtualized software distribution solution for both virtual desktop deployments and physical PCs. ProfileUnity decouples user profiles, settings and data from the operating system for migration to VMware® View™, Citrix® XenDesktop®, or any platform that supports Windows® OSes, making it the ideal bridge solution for heterogeneous environments running physical, virtual and Terminal Services sessions.

ProfileUnity delivers a flexible universal profile that is compatible across multiple Windows versions. With no software to distribute to individual desktops, this cost-effective solution separately stores and infuses user profiles, configurations, and data into the Windows OS within seconds of login, enabling organizations to be increasingly nimble with their desktops.

Currently for use with non-persistent virtual desktops, ProfileUnity’s FlexApp technology enables administrators to deploy corporate or department-installed applications (DIAs) or users to install their own applications without affecting the underlying base image of virtual machines. FlexApp allows a potentially limitless number of applications to be stored separately from the Windows operating system, yet they can be ‘snapped-in’ in only seconds at login. Applications look native to the operating system, enabling compatibility of thousands more applications than with other methods of application virtualization. FlexApp addresses a need in the virtual desktop market to empower virtual desktop users to install the applications they need to be productive. User-installed applications (UIAs) are managed by the user, who is responsible for all updates and the ongoing viability of the application.

ProfileUnity offers these key advantages:

·· ProfileUnity retains profiles in native Windows formats, which keeps them backward- and forward- compatible across Windows operating systems, including Windows XP/Vista/7/8.1 and Windows Server 2003/2008/2012 R2. ProfileUnity is the perfect solution to harvest user profiles and user data from Windows XP environments in preparation for migration to Windows 7 or Windows 8.1.

·· Any platform that runs a Windows OS can utilize ProfileUnity for profile management, including VMware® Horizon View, Citrix XenDesktop, Terminal Services sessions and physical machines. So one solution can be used for an entire desktop environment. User profiles, user-authored data, and application-data settings (even among mixed versions) are made dynamically available to any desktop Windows OS at every login.

·· ProfileUnity runs as a standalone system; no back-end systems or proprietary databases are required. The lightweight client installs to endpoints without the need for software distribution or user downtime. ProfileUnity is priced an average 40 to 50 percent lower than other user virtualization offerings, for faster ROI and a lower overall budget.

·· ProfileUnity offers sophisticated features, including context-aware filters, integration with Microsoft Active Directory, Drive Mappings, Automated Folder Redirection and more.

Innovative FlexApp technology provides key benefits to customers, including:

·· Simplified management of non-persistent Windows environments (fewer master images to be maintained)

·· Greater desktop virtualization ROI and economies of scale because more workers can use the virtual desktop infrastructure

2 │ ProfileUnity with FlexApp Administrator Training and Lab Manual

·· Reduced desktop administrator time on maintenance and troubleshooting activities

·· Significantly lowered TCO, because organizations realize optimal license use and reduced storage requirements

·· Virtualization of application-installation locations (rather than the application itself), which causes the application to appear native to the OS, thereby making applications instantly usable without any modifications.

·· For the most part, customers choose ProfileUnity to automate many of the processes that manage their user profiles, user data and resources (including printers, drive, applications, etc.) that are assigned to users.

Top reasons that customers deploy ProfileUnity include:

·· Speed up user login times

·· Move user-authored data to the network

·· Migrate user profiles to new environments or upgraded OS

·· Configure desktops with assigned shortcuts, drives, printers, etc.

·· Capture and facilitate portability of user-installed applications

Course PrerequisitesThis training program assumes participants have no prior knowledge of Liquidware Labs ProfileUnity + FlexApp. A basic working knowledge of Windows Active Directory and Windows Profile management is preferred but not essential. The main emphasis of this training guide is to teaching you how to navigate and use the tool by example, therefore, a hands-on lab environment would be ideal for this training, but it also is not essential.

About the SoftwareProfileUnity consists of three parts:

1. The Management Console

2. The FlexApp Packaging Console

3. The Client

The ProfileUnity Management Console provides one central location where administrators can configure persona management and user and machine policies. The FlexApp Packaging Console allows administrators to configure and prepare all applications needing to be configured for users and made available as a department-installed application (DIA). The Client manages each user’s settings and persona during their session.


InstallationYou will need to download ProfileUnity Installer from www.liquidwarelabs.com/download.

Installation of ProfileUnity requires Microsoft .NET Framework 4.5.1. If the required .NET Framework is not already installed, you can download the ProfileUnity Installer bundled with Microsoft .NET Framework.

Follow the Setup Wizard, which will take you through the following four screens.

http://www.liquidwarelabs.com/download


① ②

③ ④


LAB 1: PROFILEUNITY MANAGEMENT CONSOLEOverviewThe ProfileUnity Management Console allows you to create, deploy, and manage rules and configurations with an easy-to-use graphical interface

Activity: Logging in to the Management Console for the First Time

1. For the initial log in to ProfileUnity Management Console, use “admin” as your username and leave the password field blank. The Management Console will ask you to set up a password for the Admin account.

2. Once you have logged in as the admin, the Guided Configuration Wizard will automatically start. The next section walks you through the ProfileUnity configuration process.

Note: Passwords must be at least 8 characters long and must include at least one character from three of the following categories:·· Upper case letters·· Lower case letters·· Numbers

·· Non-alphanumeric character


LAB 2: DEPLOYING PROFILEUNITY CLIENT TOOLSOverview Before you can make ProfileUnity fully functional, you will need to deploy ProfileUnity Client Tools to your organization’s Active Directory server.

Activity: Deploying Client Tools

1. Log in to ProfileUnity.NET console and locate the Admin menu.

2. Locate the Admin menu

3. Click on Administration then scroll down to the ProfileUnity Tools section, and click on Download Client Tools.

4. Download the tool.


5. If you are alerted that this is not a typical download, select Keep from the drop down list.

6. Navigate to your Active Directory Server’s NETLOGON share and copy client-tools.zip.

7. Expand client-tools.zip to NETLOGON\ProfileUnity folder.


8. You should now see all necessary files that enable ProfileUnity to function properly.


LAB 3: PROFILEUNITY GUIDED CONFIGURATION WIZARDOVERVIEWTo configure the production environment using the Management Console, ProfileUnity has an easy-to-use Guided Configuration Wizard that walks you through, step by step, the creation and assignment of ProfileUnity groups and group policies. It also allows you to easily create a basic configuration for your environment that includes Profile Portability, Folder Redirection and migration of certain folders (if desired), and optionally turns on and configures FlexApp.

The first time you log in to the ProfileUnity Management Console, the Guided Configuration Wizard initializes and automates the setup of your environment for ProfileUnity. There are two ways to configure ProfileUnity modules. We’ll start with the guided method.

Activity: Creating a module using the guided method

1. Before using the Guided Configuration, you need to create a ProfileUnity licensing group on your Active Directory in order to fully automate the initial setup. Access your domain controller, then create ProfileUnity Global Security Group.

10 │ProfileUnity with FlexApp Administrator Training and Lab Manual

2. Add Student1 as a member of ProfileUnity security group you just created.

3. Launch Profileunity.NET console the login using the same administrator credential of your domain controller.

Username: Training\admin1Password: Password1


4. From Guided Setup enter the following: Valid Active Directory Groups for Login: <LEAVE BLANK> Deployment Path: \\dc01.training.local\NETLOGON\ProfileUnity

5. Click No on the dialog box

\\dc01.training.local\NETLOGON\ProfileUnity


6. Select Windows 7, New non-Persistent VDI Deployment from the Template Library

7. You must configure a default home directory or location where users’ settings and data will be stored on an existing server in your network. Remember to include %username% in the path so each user will have a unique data folder. For example, enter your network path location where the user’s profile will be stored (\\dc01.training.local\SHARE\%username%). Click Next to proceed.


Appropriate permissions must be configured on the storage path for ProfileUnity to operate properly. Best-practice guidelines are:

NTFS Permissions User Account Recommended

PermissionsFolder

Administrator Full Control This folder, subfolders, and filesAuthenticated User Modify This folder onlyCreator/Owner Modify Subfolders and files only

Alternately, you can specify Everyone Full Control for testing purpose

Share PermissionsRecommended share permissions for the storage path are Everyone Full Control.

8. The next step is to allow the Guided Setup to automatically configure the Active Directory so ProfileUnity can be activated without physically installing the Client on each desktop. If you are not logged in as Active Directory User, you can proceed using Manual Setup. If you have already configured Active Directory and Group Policy to work with ProfileUnity, you can select Skip This Process.

Note: If you choose Automatic, ProfileUnity will attempt to configure Active Directory for you. However, you must be logged in to the ProfileUnity Management Console as an Active rectory admin for this option to work correctly.


9. The Automatic option requires a few answers to enable ProfileUnity to automatically configure the Group Policy Object for this particular User Group. For Active Directory OU (Organizational Unit), select Students, and for Active Directory User Group that this configuration will apply to, select ProfileUnity. Click Run.

10. Allow the automated setup process to configure the Active Controller; then close the dialog box when the process is

completed.

11. Clicking Finish creates a configuration module that incorporates settings selected in the previous steps and includes basic configuration for all Portability Management rule sets as well. Your browser will download the default (out-of-the-box)


configuration module (.ini) that needs to be placed on the Active Directory’s NETLOGON share that you defined as the Deployment Path : \\dc01.training.local\NETLOGON\ProfileUnity.

Exercise: Create a module using the guided methodCreate your own modules using your organization’s network share information.


LAB 4: ACTIVE DIRECTORY AND GROUP POLICY CONFIGURATIONOVERVIEWThis lab guides you through configuring Active Directory so ProfileUnity can be activated without physically installing the Client on each desktop. ProfileUnity can automatically attempt to configure Active Directory if you are logged in to the ProfileUnity Management Console as an Active Directory admin.

Activity: Creating a ProfileUnity Security Group

This step is required for license validation. There are many ways to create licensing security groups; however, for this training we will use this basic example.

1. On your domain controller, open Active Directory Users and Computers.

2. Create a new security group.

Note: This lab pertains only to manual ProfileUnity configuration.


3. Set the Group name to ProfileUnity and the Group type to Security. Then click OK.

4. Open Properties for the group you just created.


5. On the Members tab, click the Add button

6. Enter names of users who will be licensed to use ProfileUnity.

Note: This security group must match the name in your license file, and the number of items in this group should not exceed the number of users licensed. No nested groups are allowed.


LAB 5: CONFIGURING THE GROUP POLICY STARTUP SCRIPTOVERVIEWThis section takes you through steps to set up your Group Policy configuration for ProfileUnity. In most cases, this is one-time setup unless the environment changes. This particular exercise is based on Windows 2003 Server Active Directory Setup.

Activity: Group Policy Configuration

1. Open the Group Policy Management Console.


2. Create an Organizational Unit composed of machines to be managed by ProfileUnity.

3. Create a policy and link it to this OU.


6. Click the Add button to add a new startup script.

7. Assign startup.vbs as the startup script.

Script Name: \\training.local\netlogon\ProfileUnity\LwL.ProfileUnity.Client.Startup.exe Script Parameters: <LEAVE BLANK>

Note: This is a computer policy that should be applied to the OU with the computers that will execute ProfileUnity.

\\training.local\netlogon\ProfileUnity\LwL.ProfileUnity.Client.Startup.exe


Activity: Adding the ProfileUnity ADM Template

1. Load the ProfileUnity group policy template into the group policy editor and configure the ProfileUnity settings. Under the policy, browse to User Configuration\Administrative Template, right click on Administrative Templates and select Add/Remove Templates.

2. Click the Add button to add a new template.


Activity: Configuring and Enabling the Policy

1. Browse to the User Configuration, Policy\Administrative Templates\Classic Administrative Templates (ADM)\Liquidware Labs\ProfileUnity path.


4. Right click on INI File Path and select Edit.

5. Select the Enabled radial button.

6. Edit the UNC file path to match the folder where your INI files will be stored. By default, this will be your NETLOGON\ProfileUnity folder. Then click the OK button.

NOTE:This policy should be applied to the OU that contains the users that will execute ProfileUnity. You’ll need to replace <YourDomainHere> (UNC Path in the above example) with the name of your domain.


3. Select a template from those listed in Template Library. For this activity, we will use the Windows 7 and 8.1 Persistent Coexistence template.

4. Provide a valid Homeshare network path that ProfileUnity can use for storing individual user settings.

5. If not set up previously, select the Manual or Automatic button to configure the Active Directory server to work with ProfileUnity. If it was set up previously, skip this process.


LAB 7: PROFILEUNITY MODULE CONFIGURATION EDITOROVERVIEWA complete configuration is composed of a group of smaller configuration modules that are designed to complete a specific task. When the editor is invoked, all available configuration modules are listed. Customize your settings by choosing the modules that you need to configure for your specific environment. If there are settings within a configuration module, a red box will display next to the name of the modules. The number in the red box indicates how many rules have been set up for this particular configuration module.

The configuration editor, found by clicking Main, is where all configuration settings are entered. You can customize your ProfileUnity Configuration Rules (.ini file) using the four functions shown below. You can edit, copy or trash each configuration module and place them on the NETLOGON share. You can have single or multiple .ini sets.

Edit - Modifies existing configuration module

Copy – Duplicates (clones) an existing rule

Delete - Removes a configuration rule from the module

Disable/Enable – Disables or enables a configuration rule


2. Click on Add Portability Setting Rule.

3. Select the Windows Appearance ruleset option.


6. Leave all default options checked. Change UID to WinAppearance_custom; then click SAVE.

7. The new setting will be located at the bottom of the ruleset module.

8. This setting will archive users’ Windows Appearance settings and restore them to any Windows desktop on the subsequent logon.

Exercises: Creating and Managing Portability Rules

Exercise 1: Create a Windows Theme rulesetThe ruleset should restore the last captured settings on next logon

The ruleset should save user’s Windows Theme settings on logoff

Provide Save Path to your own ProfileUnity network share

Change UID from default name to your own


LAB 9: FOLDER REDIRECTIONOVERVIEWWindows uses special folders known as shell folders to indicate the default location for many types of settings and data. The Folder Redirection module allows you to redirect shell folders to alternate locations, and optionally move or copy existing data. A common use for this module is redirection of My Documents to a network share.

Configuration options are explained below:

Filter: Select the name of the filter you want assigned to this configuration element.

Shell Folder: Select the Shell Folder you want to redirect.

Reset to Default: Enabling this option will reset the selected Shell Folder to its default location.

Only Redirect Local Shell Folders: When this option is checked and the shell folder is a UNC path or Mapped Drive, the folder will be skipped and not synced. If the shell folder is on any drive letter it will be supported for sync.

Redirect to Folder: Enter the path you want the Shell Folder redirected to. This option is not available if Reset to Default has been selected.


Activity: Creating Folder Redirection Rules

1. Click on Folder Redirection.

2. Click on Add Folder Redirection Rule

3. From the Shell Folder option box, select My Documents

4. Type in HOME share location. For example, \\server\share\%username%\MyDocuments


9. Click on for the main configuration module.

Exercises: Create and Manage Folder Redirection Rules

Exercise 1: Create a folder redirection rule for the following conditions.Rule that redirects Local Application Data to a specific location.

Existing files on local application data should be sync to the new network path location.

Make sure that no secondary computers with same login name migrates their existing files to new location

Migrate both new and old files, and limit the bandwidth to 10Mbps

Exclude all temporary files

Exercise 2: Create a folder redirection rule that moves new files on Download to new locationOnce migrated, original Download folder should be hidden from user’s desktop


StyleEnables user to select which style of start menu to use:

Windows XP Windows XP Two Columns Windows 7

Windows Key BehaviorIndicates how the user’s Windows key should behave when pressed. This option is used to bring up the Start Menu or Windows 8 Start Screen.

Drive MappingThe Drive Mapping module is used to connect and disconnect network drives.

Activity: Creating a rule that maps a network drive during logon

1. Start the Configuration Editor by selecting the icon circled in the Configuration Management list.


Activity: Modifying Windows desktop environment variables to the current user’s environment

1. Enter the name of the environment variable you want to modify. For this practice, enter HOMEDRIVE.

2. Enter the value you want to assign to the environment variable. Leaving this value blank will delete the environment variable. For this example, type H:

3. Click Save, which willl set your HOMEDRIVE to H:\

Internet ExplorerThis module configures Internet Explorer features such as Start Page, Download Directory, and Favorites. Internet Explorer versions 4.0 or higher are supported.


Activity: Printers

1. Click on Add Printer Rule, and then select the Browser Server method.

2. Select Browse Server to see a list of printer options. Enter the path to the Printer Server, and click the Retrieve button. Select the printers to add from the list of available printers on that server. The Printer rule example below will connect a HP Color LaserJet 9500 PCL 6 printer on a remote server after the user logs on.

RDP ClientThis module allows you to configure RDP clients from a centralized location. It supports RDP versions 5.1 (Windows XP Client), 5.2 (Windows Server 2003 Client), 6.0 (Windows Vista Client), and 7.0 (Windows 7 Client).


2. Select Action: Add Key

3. Select Hive: HKEY_CURRENT_USER

4. Key: type “Software\MyCompany\Test”

5. Click Save. The example below adds the key Software\MyCompany\Test to the HKEY_CURRENT_USER hive.


6. Enter Persistent to the Value field.

7. Enter 0 to Data field

8. Enter the description of this Registry Setting rule.

9. Click Save. This example sets Persistent value to 0, instructing Internet Explorer to empty the temporary cache when the browser is closed.


Pinned Item LocationChoose the location where a pinned item should be created or deleted if Pinned Item was selected for the Type:·· Start Menu·· Taskbar

TargetWhen creating a Shell Short, enter the full path to the shortcut target. When creating a Web Link, enter the URL you want the link to resolve to. Surrounding quotes are automatically added to the target.

Target ArgumentsEnter arguments required by the shortcut target. Target Arguments are not automatically quoted.

Start InEnter the working directory the shortcut target should start in. Surrounding quotes are automatically added to the start in directory.

Icon FileEnter the full path that directs the shortcut to the icon.

IndexIf the shortcut icon file contains more than one icon, enter the targeted icon’s specific numerical index.

Exercises: Shortcuts

Exercise 1: Create a shell shortcutName the shortcut Tax Tables. The shortcut will be created in the User Start Menu in a subfolder named

Finance. If the shortcut already exists, it will be overwritten. When double clicked, the shortcut will open (Drive Letter):\Finance\Tax Tables.xls in Excel.

Exercise 2: Create a Web Link.Name the web link Liquidware Labs Support Site and place it on on the user’s desktop. If the shortcut

already exists, it is not overwritten. When double clicked, the shortcut will open the website https://liquidwarelabs.zendesk.com/home.zendesk.com/home.

https://liquidwarelabs.zendesk.com/home


·· IP Address Change·· Computer Shutdown

INI PathYou can create a dedicated Trigger Point INI then place it in subfolder of NETLOGON share. This method allows you to call specific Trigger INI files without having to include them in your main INI module.

Windows OptionsThis module allows you to modify settings that control the Windows user interface.

Closer look: Windows OptionsRename My ComputerEnter your preferred My Computer name. The recommended setting is the macro @WKSTA. The @WKSTA macro expands into the name of the computer during user logon.

Rename My Network PlacesEnter your preferred My Network Places name.

Wallpaper FileEnter the full path to the bitmap file Windows should use as desktop wallpaper. The wallpaper file must be a bitmap.

Command Prompt HereThis option enables you to right-click a folder in Windows Explorer to open a Command Prompt window with the selected folder as your active directory.

Tab Auto CompleteThis option controls command prompt auto complete functionality. When enabled, you can start typing the name of a file in a command prompt and then press TAB. The shell will attempt to complete the name of the file.

Desktop Cleanup WizardThe Desktop Cleanup Wizard displays a list of desktop icons that have not been used for 60 days or more, enabling you to remove those icons that you don’t want on your desktop and to control the Desktop Cleanup Wizard setting used by your users. This option is only available on Windows XP.

Remove Shortcut To PrefixThis option allows you to remove the “Shortcut to” text prefix on your shortcuts.

Personalized Menus


LAB 11: MESSAGING AND OFFICE APPLICATION PROVISIONING MODULESOVERVIEW

MAPI ProfilesMAPI Profiles module is used to configure Windows Messaging subsystem profiles for access to Microsoft Exchange Server. The Windows Messaging subsystem is used by Microsoft Outlook to communicate with Microsoft Exchange. This module supports Outlook 2003/2007

Message BoxesThis module allows you to display popup messages to your users during login.

Office File LocationsThis module allows you to modify the default file locations for Microsoft Office.

Office OptionsThis module allows you to configure Microsoft Office user information and set options that control interaction with the user.

OutlookThis module allows you to modify settings that control Microsoft Outlook’s behavior for message handling, message format, and Auto Archives.


LAB 13: FLEXAPP TECHNOLOGYOVERVIEWProfileUnity with FlexApp technology enables both department-installed applications (DIAs) and user installed-applications (UIAs) in virtual desktop environments without affecting the underlying base image of the machines.

FlexApp stores applications in designated storage areas separately from the Windows OS. As users login, their chosen applications get “snapped-in” to the desktop in seconds. This solution offers flexibility and simplicity for organizations that want to provide users with deeper levels of personalization. This dramatically simplifies management of non-persistent Windows environments because fewer master images must be maintained.

FlexApp DIADepartment-installed applications are those managed by IT staff or desktop administrators but are not part of a master image. FlexApp DIA is enabled by the administrator for select users or groups within the ProfileUnity Management Console. Admins package applications which are provisioned on a virtual hard disk (VHD) to run separately from the OS and local session. When users login, these FlexApp applications appear alongside of their golden image applications.

FlexApp UIAUser installed applications are those installed and managed by individual users. ProfileUnity with FlexApp UIA is enabled by the administrator for select users or groups within the ProfileUnity Management Console. Users are provisioned a virtual hard disk (VHD) to store their applications separately from the OS and local session. Users install applications just as they typically would. During this process, ProfileUnity with FlexApp UIA “hooks” the installation of the program, adding specialized links both into the local Windows OS and into the user’s managed ProfileUnity with FlexApp settings.


Exercise: Create a FlexApp UIA configuration based on the following scenario:VHD image located at each user’s profile path

VHD mounted as B:

Compressed FlexApp storage should not exceed 5 GB

VHD should NOT be expandable

FlexApp DIA

The FlexApp DIA module is used to control the storage and retrieval of department installed applications.

Activity: Installing and configuring the FlexApp DIA Packaging Console

1. Log in to the desktop where you will install the FlexApp Packaging Console. Then log in to the ProfileUnity Management Console.


4. Scroll down to ProfileUnity Tools; click Download FlexAPP Packaging Console.

5. The FlexApp Packaging Console tool (fpcsetup.exe) will start downloading from your web browser.

6. When the download has been completed, double click to install it on the computer that will run FlexApp Packaging Console.

7. If the FlexApp Packaging Console machine does not have Microsoft .NET Framework 4.5 pre-installed, click on Next to install the required prerequisites.

8. After the installation of .NET Framework 4.5, you must restart the system.


12. Create a DIA Package from an application installer. In the FlexApp Packaging Console, click on the Create button.

13. Enter a descriptive Package Name and press Create. Installation files are located at C:\Users\admin1\Desktop\FlexApp – Apps


16. After installation is complete, click Save.

17. Firefox Browser V.37 now shows in the FlexApp Packaging Console and is activated by default. Click on Edit the Package button to view the package details.


20. After the package has been deactivated, click OK.

21. Click on the Activate icon to re-activate the package. Package activation progress is shown again, as in the graphic above. Click on OK when the process is complete.

Exercises: FlexApp DIA Packaging Console

Exercise 1: InstallInstall FlexApp DIA Packaging Console

Exercise 2: Use FlexApp DIA Packaging ConsolePackage at least two applications using the Packaging Console

After completing installation, deactivate, edit, reactivate, and extend packages

Reactivate packages

Delete installed packages


2. Click on Add FlexApp DIA Rule.

3. Drag Firefox Browser from the right column to the left.

4. Optionally, clicking on Reverse Play Applications will remove installed DIA during logoff.


3. Select whether to apply privilege elevation to an install or application. Select Application.

4. Select whether to Allow or Deny. Select Allow.

5. Select the Match condition to test against. Select Signed.

6. Enter the Value to test against. Type Apple then click Save. This configuration will allow non-admin users to install applications signed by Apple.

PRIVILEGE ELEVATION

·· If FlexApp UIA is enabled for a user and the Privilege Elevation rule type equals Installer, ProfileUnity monitors user-installed applications in non-persistent virtual environments granting rights based on the rule.

·· If FlexApp UIA is disabled for a user and the Privilege Elevation rule type equals Installer, ProfileUnity entire allows or denies users permission to install applications on a physical or persistent virtual desktops based on the rule.

·· If the Privilege Elevation rule type equals Application, ProfileUnity can securely elevate an application that requires administrative rights to run without making the user an administrator for the entire session.

TIPS


Activity: Application Restrictions

The following setting allows installation of all applications signed by Liquidware Labs, Inc.

1. Action: select Allow.

2. Match: select Signed (Digital Signature signer of application).

3. Value: type Liquidware Labs, Inc. Your new setting should look like the following:

Exercise: Application Restrictions

Create an Application Restrictions rule that will deny applications path that contains Filezilla

APPLICATION RESTRICTIONSAdministrators can add any number of allow and deny rules in the Application Restriction module. Rules are evaluated sequentially, starting with the one at the top of the list. When a filter returns true for an individual user, that rule sets whether the Application Restriction module becomes an “all allow” or “all deny” list for that user. If the first true rule has an Allow Action, all true Allow rules in the module list will apply. Conversely, if the first true filter rule has a Deny Action, it will become an “all deny” list for that user.

The application access policy is applied according to whether the rules evaluate to create an Allow List or Deny List. If the rules produce a Deny List for a user, the user can run any applications except for those specified in the deny rules. If the rules create an Allow List for a user, the user can only run applications that are specified by the allowed rules. Access to other applications will be denied. By default the following processes are automatically allowed:

• ProfileUnity processes

• All system processes

• Processes from C:\Windows and subdirectories

• Processes signed by Citrix or VMware

TIPS


2. Click on Create to create the new Filter.

3. Provide Name and Comments for this Filter. Type “Sales Group (Tokyo site) Desktop Filter”

4. Select the Filter Aggregation rules.

5. Select Condition, Match, and Value. Be sure to click the Add button.

6. Select Desktop/Laptop Machine Class

7. Select Logon/Logoff System Event.


Activity: Applying the New Filter

Now you will need to Apply the Filter [Sales Group (Tokyo site) Desktop Filter] to Rules in Configuration Modules. We’ll apply this filter in a couple places of the configuration modules you created.

1. From the main navigation bar, click on Configuration Management.

2. Locate Folder Redirection.

3. Copy the existing My Document Folder Redirection rule.


4. Edit your new policy.

5. Browse to Computer Configuration\Policy\Windows Settings\Scripts (Startup/Shutdown) and edit the properties of the Startup script.


Activity: Configuring the Group Policy Logoff Script

1. Assign logoff.vbs as the logoff script. Under the policy, browse to User Configuration\Policies\Windows Settings\Scripts (Logon/Logoff), right click on Logoff and select Properties.

2. Click Add to enter a new script.

3. Point the script parameters to your domain’s netlogon share (like the example below):

Script Name: \\training.local\netlogon\ProfileUnity\LwL.ProfileUnity.Client.Logoff.exe Script Parameters: LEAVE BLANK

4. Click OK and then Apply to save your changes.

Note: This is a computer policy that should be applied to the OUs composed of the user accounts that will execute ProfileUnity.

\\training.local\netlogon\ProfileUnity\LwL.ProfileUnity.Client.Logoff.exe


3. Browse to the location where you extracted the ProfileUnity files (by default, the Netlogon\ProfileUnity folder) and select the ProfileUnity.adm template. Click Open.

4. On the next dialog, click Close.

5. The ProfileUnity ADM template User Configuration\Policies\Administrative Templates\Classic Administrative Templates (ADM)\Liquidware Labs\ProfileUnity will be added in.


2. Right click on Enabled and select Properties.

3. Select the Enabled radial button, and then click OK.


LAB 6: PROFILEUNITY CONFIGURATION MANAGEMENT MODULEOVERVIEW Your user and environment settings (and instructions) are stored in one or more configuration files used to control ProfileUnity’s execution. During user logon, the ProfileUnity Client reads your configuration file and applies the setting to your client machines. Creating, modifying, deleting, summarizing, and downloading each configuration file is done through the Configuration Management area of the ProfileUnity Management Console.

Activity: Creating a New Configuration – Guided Method

1. Start by clicking Create.

2. Then click Guided.


6. If you would like to bypass Step #5 (above) in the future, select Yes.

7. Click on Finish to complete the process. You will then see the module you just created on the Configuration Management console.

8. Notice the ProfileUnity modules settings file (Windows 7 and 8.1 Persistent Coexistence.ini), which was automatically downloaded, at the bottom of the browser. Since you will need to configure your own module settings file, click on Discard at this point.


LAB 8: PORTABILITY SETTINGS MODULEOVERVIEWThe Portability Settings module is the most frequently used module in ProfileUnity. In order to utilize main feature of ProfileUnity, you must learn to configure and manage the Portability Settings Module. This module is used to control the storage and retrieval of personal user preferences at logoff and logon. This module works in conjunction with the rulesets defined through the portability management interface.

Activity: Configuring and Managing Portability Settings

1. Click on the Portability Settings icon.


4. Provide a save path.

5. Click on the Advanced tab.


Exercise 2: Create a Portability Rule

Rule performs read-only but does not save when the user logs-off

Ruleset should not apply to Filesystem Rules or Local Shell Folders

Change UID from default name to your own for easier identification

Locate the ruleset file (.7z) you just created on the network path


Hide Previous Location After Redirection: Enabling this option causes ProfileUnity to set the hidden attribute on and rename the previous shell folder location after redirection

Existing File: Files and folders that exist in the current Shell Folder location can optionally be copied, moved, or synchronized to the new location. Depending on the amount of data that currently exists, enabling copy or move can cause a delay during logon while the files and folders are copied or moved to the new location.

Alternatively, the synchronize option will transfer the existing files and folders in the background without impacting the user’s logon time. The synchronize option first performs a background synchronization of the user’s existing files and folders. At the next logon, after the initial background synchronization has completed, foreground synchronization takes place to synchronize any missing files or folders. Once the foreground synchronization is complete, the folder is redirected. Users must wait for the foreground synchronization to complete during logon; however, foreground synchronization is usually quick because it is only moving a few missing files and folders. The synchronize option is the recommended method for migrating existing files and folders.

Only Migrate Existing Files on Primary Client: Enabling this option causes ProfileUnity to only migrate existing files on the user’s Primary Client. The user’s Primary Client is the first computer a user logs on to after a folder redirection is configured.

Remove Extraneous Files: Enabling this option will delete files and folders that exist in the new location and do not exist in the current location during synchronization. This option is only available if Sync to New Location or Sync Only – Don’t Redirect is chosen for Existing Files. This option can cause data loss if not used with care. It is recommended that this option be left disabled unless you have a specific need to enable it.

Only Sync New Files: Enabling this option will allow conflict resolution when syncing from many computers or when trying to start the sync process over again to only send the newer files.

Limit Bandwidth to: Enabling this option will limit the amount of bandwidth the background synchronization process consumes.

Exclude: Paths entered will be excluded from the background synchronization process. Use commas to separate multiple paths to be excluded. The following matching rules apply:

·· A leading ‘\’ anchors the match to the full path only (otherwise partial matches occur)

·· A ‘*’ matches any path component except a backslash

·· A ‘?’ matches any character except a backslash

·· A trailing ‘\’ limits the match to directories and not files


5. From the Existing Files option, select Sync to New Location

6. Click on Advanced for additional configuration

7. From the Advanced option, uncheck Only Sync New Files and Limit Bandwidth to 1 Mbps.

8. Review the rule you just created.


LAB 10: PROFILEUNITY PROVISIONING MODULESOVERVIEW This section guides you through some of the provisioning tools in ProfileUnity that are used to provision the user’s desktop during the initial logon process. The module can provide default desktop settings for all or a portion of users in your organization. The tools circled below are the focus of this lab.

Desktop Provisioning Modules

Desktop Start Menu

The Desktop Start Menu module allows users to add a classic start menu to Windows 8.1 and Windows Server 2012 R2 desktops. Within the Desktop Start Menu you will encounter the following options.

StateChoose whether to Enable or Disable the start menu on the desktop.


2. Click on Add Drive Mapping Rule.

3. From the Action drop down list, click on Map.

4. Assign a new drive letter. For this practice we will use H.

5. Type in your network share’s UNC path and provide a Share Name. Press Save.

6. Review the Drive Mapping Rule you just created.

Environment VariablesThe Environment Variables module sets and clears Windows desktop’s environment variables. Environment variables are modified in the current user’s environment.


Activity: Configuring Internet Explorer features

1. Enter the URL of your preferred Internet Explorer home page.

2. Enter the full path to the folder where you want downloaded files to be saved.

3. Selecting Disabled enables you to control users’ personalized favorites menu settings.

4. Selecting this option sorts Internet Explorer favorites alphabetically.

5. Selecting this option disables the Internet Connection Wizard and remove the Internet Connection Wizard desktop shortcut.

6. Click Save.

Internet ProxyThis module adjusts Internet Explorer’s proxy settings to match your network configuration. Internet Explorer versions 8.0 and higher are supported.

PrintersThis module allows you to connect and disconnect network printers. Options include capturing a port, setting the printer as default, and automatically adding the printer.


RegistryThis module allows you to make changes to a default (or existing) registry key or values on your client machines.

Action adds or deletes registry values or keys.

Hive lets you to select the Registry Hive containing the key or value you’re modifying.

Key allows you to enter the subkey of the Registry Hive you want to modify.

Type allows you to select the type of value you want to modify.

Value allows you to enter the value you want to modify.

Data allows you to enter the data you want assigned to the value.

Description allows you to name the setting.

Activity 1: Registry

1. Select the Manual set up option


Activity 2: Registry

1. Select the Manual set up option

2. Select Add Value from Action drop down box

3. Select HKEY_CURRENT_USER from the Hive drop down box

4. Enter Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache to Key field

5. Select REG_DWORD from Type drop down box.


ShortcutsThis module allows you to create shell shortcuts and web links. You can provision Shell Shortcuts, Web Links, and Pinned Items using this feature.

Closer look: ShortcutsTypeThis feature allows you to specify the type of shortcut you want to create or delete. Shell shortcuts point to programs and files on your computer. Available options are:·· Shell Shortcut·· Web Link·· Pinned Item

ActionSelect one of the following actions:·· Create – Creates a new shortcut.·· Delete – Deletes an existing shortcut.·· Delete All – Deletes all existing shortcuts

Overwrite Existing ShortcutWhen this option is selected, existing shortcuts will be overwritten.Shortcut NameEnter the name of the shortcut you want to create or delete. Subfolders can be specified by entering the relative path followed by the shortcut name. Surrounding quotes are automatically added to the name.Shortcut LocationSelect the location where the shortcut should be created or deleted. Available options are:·· User Desktop·· User Favorites·· User Start Menu·· User Programs Group·· User Startup Group·· User Send To·· User Quick Launch Bar·· User Links·· All Users Desktops·· All Users Start Menu


TimeSyncThis module allows you to set the time on your client machines from a centralized source. This feature is designed for use with Microsoft clients lacking a native time service. On clients with a native time service, the preferred method for setting the client machine’s time is to use the time services.

Trigger PointsThis module initiates other modules based on various events that occur on the machine. You can use Trigger Points on Windows 7 or higher. Only Windows Server 2008 R2 machines and higher only machines can use this module.

Closer look: Trigger PointsTypeSelect the type of event that sets off a Trigger:·· Interval·· PCoIP Reconnect·· PCoIP Connect·· ICA Connect·· ICA Disconnect·· RDP Disconnect·· Desktop Unlock·· Desktop Lock·· IP Address Change·· Application Open·· Application Close·· Computer Shutdown

ModuleSelect any of the ProfileUnity Configuration modules you would like to run (except Main module).Application NameThis allows you to specify the application name to monitor for on Application Open or Application Close events.Delay in SecondsThis allows you to set a delay before triggering the module for IP Address Change and Computer Shutdown. For all other events the delay is set to 0.


This option allows you to control your users’ Personalized Menus settings. On Windows clients, the Start menu is automatically updated to keep most-often used items at the top of the menu for ease of accessibility.

Sort Start Menu by NameSelecting this option sorts the Start Menu alphabetically

Exercise: Windows OptionsSome lead-in is needed here.When the user logs on, default name (My Computer) should be replaced to the computer’s name.

Sets the wallpaper file to H:\wallpapers\liquidware.bmp

Enables command Prompt Here

Enables Tab Auto Complete

Disables the Desktop Cleanup Wizard

Disables Personalized Menus, and sorts the Start Menu alphabetically


LAB 12: SPECIALTY PROVISIONING MODULES

Profile CleanupThe Profile Cleanup module is used to clean up a user’s profile contents.

User Defined ScriptsAdministrators wanting to use a custom script will add it to their configuration here. ProfileUnity offers the option to create pre-execution and post-execution.

Application LauncherThis module allows you to launch applications on your client machines during or after ProfileUnity execution.


FlexApp UIA

The FlexApp UIA module is used to control the storage and retrieval of user installed applications in non-persistent desktop environments.

Activity: Using FlexApp UIA

1. Select the FlexApp UIA configuration module.

2. Type in settings as follows and click Save.


2. From the ProfileUnity Management Console, move your mouse over to Admin on top right section of the UI.

3. Select Administration


9. Continue with the Packaging Console installation by clicking Next.

10. Launch FlexApp Packaging Console on the computer’s desktop.

11. Log in to the FlexApp Packaging Console.


14. You will see this screen as the package process executes.

15. Follow the application installation steps.


18. Review the Package details, then click OK to go back to the packaging console.

19. To reverse the process, click on the Deactivate button in the lower right corner.


Exercise 3: Add applications to FlexApp DIA Packaging ConsoleInstall additional applications to FlexApp DIA Packaging Console like the example shown below.

Activity: FlexApp DIA Configuration Module

You can now distribute and manage Department Installed Applications through ProfileUnity Management Console.

1. Log in to the ProfileUnity management console and then go to the Configuration Management window. Click the FlexApp DIA module icon.


5. Click on Save. Click on Update.

Virtual Disks

The Virtual Disks module is used to mount storage.

ACTIVITY: Virtual Disks

Privilege Elevation

The Privilege Elevation module allows standard users to securely install and run applications needing elevated rights withoutassigning them an administrator role. The Allow and Deny policy rules defined by the administrator determine how privileges are applied to users.

Use this module along with the Application Restrictions and FlexApp UIA modules to provide application rights management (ARM) that enables administrators to securely grant specific users detailed application rights without making them a Windows Administrator.

Activity: Privilege Elevation

1. Select the Privilege Elevation icon from the configuration console.

2. Click on Add Privilege Elevation Rule.


Exercises: Privilege Elevation

Exercise 1: Create an elevation configurationCreate a configuration that will elevate to administrator’s privilege when any installers signed by the following

Signer has been detected.

Exercise 2: Create an elevation denialCreate a configuration that will deny elevating the user to administrator if iTunes from Apple, Inc. has been

detected.

Application Restrictions

The Application Restrictions module allows or denies users access to applications providing allow/deny options for installed applications per user.

Use the module along with the Privilege Elevation & FlexApp UIA modules to provide application rights management (ARM) that enables administrators to securely grant specific users detailed application rights without making them a Windows Administrator.


LAB 14: PROFILEUNITY FILTERSOVERVIEW Filters in ProfileUnity are used to limit the scope of configuration rules. By using filters, you can further refine how settings are applied based on real segmentations that already exist in your environment such as different department groups or physical machine uses versus virtual machine users. In addition, roaming users benefit from ProfileUnity’s context aware filters which can be setup to dynamically configure their settings based on their location as they move throughout the building.

As configuration rules are processed during ProfileUnity’s execution, the filter assigned to each configuration rule is evaluated. If the filter evaluation returns true, the configuration rule is applied. If the filter evaluation returns false, the configuration rule is skipped. Thus, filters allow a single ProfileUnity configuration to be applied differently to multiple client machines and users.

Creating, modifying, deleting, and summarizing filters is done through the Filter Management area of the ProfileUnity Management Console.

Activity: Creating a New Filter

1. Select Filter Management from ProfileUnity’s navigation bar.


8. Select the following Operating Systems. Windows 7, 8, and 8.1.

9. Select Connection type.

10. Click Save. This new Filter will be applied to Tokyo site Sales group members using Desktops or Laptops provisioned with Windows 7, 8, 8.1 only, and logging in from LAN or VPN.


4. Locate the copy at the bottom of the page then click Edit icon to modify the rule.

5. Select Sales Group (Tokyo site) Desktop Filter

6. Provide new Redirect to Folder Location owned by Tokyo Sales Group members.


7. Click Save. Now this Folder Redirection rule will detect the filter conditions specified and redirect My Document files to different Folder location specified.

8. Click on Update if you are finished with the entire configuration module.

Exercise: ProfileUnity Filters

Create a Filter that will activate when the following conditions are met:

Terminal Server Session name that contains ‘XenApp’And IP address contains 10.0.90.xSupports only RDS connections from Windows 8, 8.1, and 2008All available machine classesMembers connecting only via VPN connectionsThe Filter should apply to Logon and LogoffApply this filter to three of your existing rules from Portability SettingsExplain how combined rules should work


LAB 15: PORTABILITY MANAGEMENTOVERVIEWProfileUnity takes profile portability one step further by allowing you to manage what parts of the profiles are made portable. By default, a large amount of data is stored in a user’s profile. However, not all of the data is necessary for a robust and complete user experience. ProfileUnity is granular by design, allowing you to set rules and choose what profile data is to be made portable. This makes for speedy logon times, reduces profile corruption instances, and eliminates the needless transfer of large amounts of data over the network.

With ProfileUnity, making user profile data portable is a two-step process. First, you define rulesets through the Portability Management interface. Rulesets control the portions of the user profile that will follow the user around the network. Second, once your rulesets are defined, the Portability Settings configuration module is used to control how user profile data is stored and retrieved from the network.

ProfileUnity includes predefined rulesets that are designed to manage popular settings. These predefined rulesets can be used to quickly setup portability with minimal configuration. Using the Portability Management module, you can modify these predefined rulesets as well as create your own custom rulesets.


Portability Management Editing RulesetsThe Ruleset Editor is where all profile portability ruleset configuration takes place. This section describes options available.

User profiles are composed of two types of data: registry settings and files and folders. Rulesets handle these data types with registry and file system rules respectively. Rulesets consist of the following elements: a ruleset name, registry rules, and file system rules. As you will see from the predefined rulesets, some rulesets contain only registry rules, some contain only file system rules, and others contain both types of rules.

Managing Registry RulesRegistry rules are composed of an Operation, Scope, Hive, and Path. Choose the Operation the ruleset performs from a drop down list. When saving and restoring registry settings, ProfileUnity can Merge, Replace or Exclude data:

Registry Rule Operation DescriptionMerge Saved data is merged with existing data during restore.Replace Existing data is replaced with saved data during restore.Exclude Data is excluded from save and restore.

Select the appropriate Scope of the operation from a drop down list. The Scope can be limited to a registry Tree, Key or Value. These are the Scope options to choose from:

Registry Rule Scope DescriptionTree Path specifies a tree. Specified key and values, subkeys, and subkey values.Key Path specifies a key. Specified key and values only, no subkeys or subkey values.Value Path specifies a value. Specified value only.


Select the appropriate Hive that the registry rule applies to from a drop down list. These are the Hive options to choose from:

Registry Rule Hive DescriptionHKCU HKEY_CURRENT_USER registry root keyHKLM HKEY_LOCAL_MACHINE registry root key

Once you enter the Path of the registry item, click the Add button to create the new registry rule and add it to the Registry Rules list. Please note the Path is relative to the Hive or registry root key you select. Your entries should not begin with “HKEY_CURRENT_USER” or “HKEY_LOCAL_MACHINE” since ProfileUnity adds this portion of the path by design.

A ruleset can have multiple registry rules. ProfileUnity registry rules allow granular storage and retrieval of registry values. To delete a registry rule, select Remove to the right of the particular rule.

Managing File System RulesFile system rules are composed of an Operation, Folder, and Path triplet. When saving and restoring file system settings, ProfileUnity can Merge, Replace or Exclude data:

File System Rule Operation DescriptionMerge Saved data is merged with existing data during restore.Replace Existing data is replaced with saved data during restore.Exclude Data is excluded from save and restore.


You will also need to select the appropriate shell Folder from the list below:

File System Rule Folder Description

Application Data Specified path is relative to the Application Data shell folder.Cookies Specified path is relative to the Cookies shell folder.Desktop Specified path is relative to the Desktop shell folder.Favorites Specified path is relative to the Favorites shell folder.History Specified path is relative to the History shell folder.My Documents Specified path is relative to the My Documents shell folder.Program Group Specified path is relative to the Programs shell folder.Recent Specified path is relative to the Recent shell folder.Send To Specified path is relative to the SendTo shell folder.Start Menu Specified path is relative to the Start Menu shell folder.Startup Group Specified path is relative to the Startup shell folder.User Profile Specified path is relative to the user profile root folder.Local Application Data Specified path is relative to the Local AppData shell folder.Program Files Specified path is relative to the %programfiles% environment variable.System Drive Specified path is relative to the %systemdrive% environment variable.System Root Specified path is relative to the %systemroot% environment variable.My Music Specified path is relative to the My Music shell folder.My Pictures Specified path is relative to the My Pictures shell folder.My Video Specified path is relative to the My Video shell folder.Temporary Internet Files Specified path is relative to the Temporary Internet Files shell folder.NetHood Specified path is relative to the NetHood shell folder.PrintHood Specified path is relative to the PrintHood shell folder.Templates Specified path is relative to the Templates shell folder.Links Specified path is relative to the Links shell folder.Contacts Specified path is relative to the Contacts shell folder.Searches Specified path is relative to the Searches shell folder.Roaming Tiles Specified path is relative to the Roaming Tiles shell folderLibraries Specified path is relative to the Libraries shell folder.


Activity: Creating Custom Registry Rules

The objective of this activity is to capture and restore individual’s Google Chrome browser settings.

1. Click on the Create button.

2. Enter the name of the Portability Ruleset.

3. Find Google Chrome’s Windows registry location using regedit.exe or utilities like Regshot. The Google Chrome registry location is in Computer\HKEY_CURRENT_USER\Software\Google.


4. Define the registry location from step #3 then click on Add.

5. Locate Google Chrome’s File System locations. They are usually in the Local Appdata location.

6. Define all of the known File System locations of Google Chrome in the Portability Ruleset Editor, then click the Save button to create the custom Portability Ruleset.


7. Verify the ruleset you just created in Portability Management module.


8. Go to Configuration Management Module. The Google Chrome portability ruleset should now appear in Portability Setting’s ruleset drop down box.

Exercise: Creating New Portability Ruleset

Create the new ruleset that captures Mozilla FireFox browser settings.


LAB 16: INVENTORY MANAGEMENTOVERVIEWProfileUnity’s Inventory Management provides administrators with an overall view of FlexApp Packaging, System Inventory, ThinApp Packages, and Redirection in the environment.

FlexApp DIA InventoryThe FlexApp DIA inventory displays all FlexApp DIA packages. From this list, admins can view specific package information, delete packages, or disable/enable packages.

FlexApp UIA InventoryThe FlexApp UIA inventory provides an administrator with the ability to identify applications that were installed as well as which users installed them.


System InventoryThe System Inventory displays an in-depth hardware and software inventory report for the chosen record.

RedirectionsThe Folder redirection inventory tells you the status of a user’s shell folder during migration. Using this feature, an administrator will be able to know when a user’s shell folders have finishing synchronizing to the target path.


LAB 17: ADMINISTRATION SETTINGSOVERVIEWAdministration Settings enable you to control various settings and operations for ProfileUnity in your environment.

Web ServicesWeb Services allows you to define the management console access port and session time-out length in addition to specificing security requirements.

Port - The port on which the web service runs.

Session Timeout in Minutes – How long before an idle user has before they will be required to log in again.

Force SSL – Forces use of SSL HTTPS protocol over standard HTTP protocol.

SSL Certificate – Displays current SSL certificate.

Import New Certificate – Allows you to import a .PFX certificate.


DatabaseThe database module allows you to provide UI data source for backup and restore the entire ProfileUnity management console contents and settings.

Authentication

ProfileUnity Tools


Inventory

Logging


LAB 18: CONFIGURATION TEMPLATES MANAGEMENTOVERVIEW The Guided Configuration Wizard makes use of configuration templates to jump start the configuration process. The standard templates provided by Liquidware Labs covers most of the Windows settings a user would need right out of the box. While ProfileUnity comes with several different useful templates, the Template Administration area allows console administrators the ability to create additional configuration templates or manage the existing templates they have. Configuration Templates can help administrators build configurations for their environment faster than creating each configuration module rule individually, saving valuable time. Instead of creating a new configuration from scratch, the administrator can choose a template as a basis for a new configuration while running the Guided Configuration Wizard. If the template has the majority of the required settings already configured, then the administrator only has to make minimal changes to create the new configuration which is specific to the enterprise environment.

The Template list displays all of your existing configuration templates as well as the standard templates that ProfileUnity provides.


LAB 19: MANAGING CONSOLE USER ACCOUNTSThe ProfileUnity Management Console provides one central utility that administrators can use to configure and manage how users interact with the different types of desktops in their environment. Upon installation, ProfileUnity creates a default admin user account. The username is “admin,” and you are asked to supply a password. Please make note of this information to refer to it later as needed.

You can edit these settings and create additional console user accounts if you wish. Creating, modifying, and deleting user accounts is done through the User Administration area of the ProfileUnity Management Console.