Introduction

In preparation for your migration to, and adoption of, the DaaS platform, we have compiled this document for you. Within, you will find information on how to setup a DHCP scope for DaaS, recommended Group Policies to implement, and information on how to setup Redirected Folders.

                There is also additional documentation on the DaaS platform available here:


Increasing  Desktop  Resources

 

End User Devices and Limitations

 

 

 

Known Non-Supported Applications

 

 

DHCP


DHCP Scope Recommendation


Redirected Folders


Setting up the Redirected Folder share & permissions

 

Setting up the Redirected Folder Group Policy

 


Recommended Group Policies


Setting up Group Policies

 

  1. Agent Desktop Timeout
    1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Agent Desktop Timeout
    2. Right-click the GPO that you created for the group policy settings and select Edit.
      1. Computer Configuration -> Polices -> Administrative Templates -> Classic Administrative Templates -> VMWare View Agent Configuration -> View Agent Direct-Connection Configuration
        1. Session Timeout: Enabled -> 999999
        2. User Idle Timeout: Enabled -> -1
        3. Client Session Timeout: Enabled -> 99999999
      2. Disable Shutdown Event Tracker
        1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Disable Shutdown Event Tracker
        2. Right-click the GPO that you created for the group policy settings and select Edit
          1. Computer Configuration -> Policies- > Administrative Template -> System
            1. Display Shutdown Event Tracker: Disabled
          2. PCoIP - Clipboard Redirection & vSphere Console Access
            1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - PCoIP
            2. Right-click the GPO that you created for the group policy settings and select Edit.
              1. Computer Configuration -> PCoIP Session Variables -> Overridable Administrator Defaults
                1. Configure clipboard redirection: Enabled in both directions
                2. Enable access to a PCoIP session from a Sphere console: Enabled
    3. Turn off Display
      1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Turn Off Display
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        1. Computer Configuration -> Administrative Templates -> System -> Power Management -> Video and Display Settings
          1. Turn Off the Display (Plugged In): Enabled
          2. Turn Off the Display (seconds): 0
        2. User Group Policy Loop-back (Ensure that this GPO is always applied last)
          1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - User Group Policy Loopback
          2. Right-click the GPO that you created for the group policy settings and select Edit.
            1. Computer Configuration -> Policies -> Administrative Templates -> System -> Group Policy
              1. User Group Policy loopback processing mode: Enabled
              2. Mode: Merge
            2. Ensure this GPO is processed last.
  1. Chrome Graphics Optimization
  1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Chrome Graphics Optimization
  2. Right-click the GPO that you created for the group policy settings and select Edit.
    1. Computer Configuration -> Polices -> Administrative Templates -> Classic Administrative Templates -> Google -> Google Chrome
      1. Use hardware acceleration when available: Disabled
  1. IE Graphics Optimization
  1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - IE Graphics Optimization
  2. Right-click the GPO that you created for the group policy settings and select Edit.
    1. User Configuration -> Preferences -> Windows Settings -> Registry
      1. Action: Create
      2. Hive: HKEY_CURRENT_USER
      3. Key Path: Software\Microsoft\Internet Explorer\Main
      4. Value Name: UseSWRender
      5. Value Type: REG_DWORD
      6. Value Data: 00000001
      7. Base: Hexadecimal
    2. Office 2016 Graphics Optimization
      1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Office 2016 Graphics Optimization
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        1. User Configuration -> Policies -> Administrative Templates -> Microsoft 2016 -> Miscellaneous
          1. Do not use hardware graphics acceleration: Enabled
        2. Disable Server Manager
          1. Create new GPO Under the OU with the desktops in it with the name: XTIUM - DaaS - Disable Server Manager
          2. Right-click the GPO that you created for the group policy settings and select Edit.
            1. Computer Configuration -> Policies -> Administrative Templates -> System -> Server Manager
              1. Do Not display Server Manager automatically at logon: Enabled


Images

What is an Image?


Things to Know about your Image

  1. To create desktop pools, you first create an image and then deploy the image into the pool. Images help define different desktop configurations.  Two images are included with every account and one image will be preloaded for you during installation.  If you need additional images beyond the two that are included and the one that is initially deployed for you, please contact your CTA.
  2.  When a change is made to a Image, it will not affect your existing desktops.
  3. Changes to the Image only affect new desktops that are provisioned from that image after it has been completed.
  4. A image must be sealed before it can be used or before any existing pool that is associated with it can be modified.
  5. When a Image is sealed, the process runs sysprep on the Image and then shuts it down.
  6. This allows sysprep to automatically run on all new desktops that are created from it.
  7. When you power on a Image to make changes to it, it takes some time to become available as it is running through that sysprep process.
  8. XTIUM recommends taking a backup of a Image before making any changes to it.
  9. To do this select the Image open ellipses and select backup now.
  11. Do not join the image to your domain.
    1. If this is required to install an application you may join it to the domain, but it must be removed from the domain before sealing it.
  12. You always want to ensure that the network category on the NIC is set to private (Not public).
  13. Any customizations that you make to the start menu or toolbar will not stick to new desktops, these customizations are user specific and must be done per user.
  14. If you need to create a shortcut on the desktop for all users, you can create a shortcut under C:\Users\Public\Public Desktop (Which is a hidden folder).




 

RACI

 

R = Responsible

A = Accountable

C = Consulted

I = Informed

 

DaaS 3.0






XTIUM

Client

DaaS Infrastructure

Datacenter Infrastructure

R, A

I

Build, Operate, and Maintain Server Infrastructure to support DaaS Solution

R,A

I

Provide One license of Microsoft RDS per desktop

R,A


End points (Windows and MAC, Thin/Zero Clients, Tablets, Smart Phones) intended to run the DaaS client must support the Horizon View client or the HTML5/ Blast client

C,I

R,A

Support the PCoIP protocol

C,I

R,A

Maintain image(s)

C,I

R,A





Implementation and Administration

DaaS Image Creation

A,R

I

DaaS OS Licensing

C,I

R,A

DaaS Application Licensing

I

A,R

DaaS Application Installation

C,I

A,R

Administration of Active Directory (AD)

I

R,A

Group Policy Administration (GPO)

I

R,A

Assign One Group Administrator for each location.

I

R,A

User profile

I

R,A

Group Administrator- learn the features of the Services and provide assistance to internal users of the Services.

I

R,A

Direct support only to specified Group Administrators

R

A, C

Creation of Rules and Policies

I

R,A

File Permissions

I

R,A

Configuration of new IP address assignments on any hardware and/or software not managed by EIP

I

R,A

Provide knowledgebase (support.xtium.com) access to training materials, user guides, quick tip videos, and best practices

R,A

C, I

Provide access to appropriate web portals for administration of XTIUM Services



Seeding of data to the XTIUM Cloud

I

R,A

Local Device Support

I

R,A

Printer Issues

I

R,A

Print Server performance

I

R,A

Zero/Thin client/Client Devices

C,I

R





Customer Network infrastructure

Provide local network connectivity for client devices

C,I

R,A

Provide local internet connectivity for client devices

C,I

R,A

Appropriate available bandwidth per concurrent use ((150 kbps for a one-display session plus 50-100 kbps per each additional display per-session)

C,I

R,A

Provide or ensure sufficient bandwidth, so that total traffic does not regularly exceed 75% of the total available bandwidth

C,I

R,A

LAN switches must have individual VLANS for voice and data according to XTIUM provided instructions.

C,I

R,A

lnternal cabling is CAT 5, CAT 5E, CAT 6, or is otherwise capable of delivering at least 100mbps to the end device

C,I

R,A

 engaging the service provider for support in the event of a service outage and/or quality degradation

C,I

R,A





Security

Dual Factor Authentication

I

R, A

Maintain non-parsed log records in raw log formats

R,A

I

Install security patches, updates, and service packs for the DaaS desktops

I

R,A

Virus and Malware Protection

I

R,A

Education of its employees related to responsible use of Internet-based
resources and the security of its data

I

R,A

Maintain backups of data

R,A

I

Maintain Encryption keys for optional software based encryption of data

I

R,A

 

 

Anti Virus Exclusions

DaaS clients using Trend Worry Free from XTIUM will already have these VMware and Microsoft exclusions configured by our Implementation team:

pcoip_server_win32.exe
splwow64.exe
vmtoolsd.exe
DaaSAgent.exe
wssm.exe
VMBlastS.exe
wsnm_jms.exe
vmwareviewclipboard.exe*
C:\Windows\system32\taskmgr.exe
${WinDir}\SoftwareDistribution\Datastore\DataStore.edb
${WinDir}\SoftwareDistribution\Datastore\Logs\Edb*.jrs
${WinDir}\SoftwareDistribution\Datastore\Logs\Edb.chk
${WinDir}\SoftwareDistribution\Datastore\Logs\Tmp.edb
${windir}\Security\Database\*.edb
${windir}\Security\Database\*.sdb
${windir}\Security\Database\*.log
${windir}\Security\Database\*.chk
${windir}\Security\Database\*.jrs
${windir}\Security\Database\*.xml
${windir}\Security\Database\*.csv
${windir}\Security\Database\*.cmtx
outlook.exe*
excel.exe
word.exe