Transcript Profile management_MGx

Profile management v5.0
Excalibur - XenDesktop 7
Mick Glover Worldwide Support Readiness
June 2013
What’s New in 5.0?
Highlights
• Integrated Install
• Citrix HDX Policy Engine integration
• Studio/Director Integration
• New Policies
• Updated filter driver (No longer leverages NTFS
change journal)
© 2013 Citrix | Confidential – Do Not Distribute
XenDesktop 7 - Integration
• Citrix Policy Engine integration
ᵒ Additional choice for configuration: HDX Policies
• Integrated Install with VDA (Desktop and Server OS)
ᵒ UPM component installed by default with VDA installer
• Director Integration
ᵒ Reset feature for Microsoft Roaming and Citrix profiles
ᵒ Non-destructive - renames existing profile, creates new and copies some data back
ᵒ Data Kept: Documents, Favorites, Cookies, Desktop, Pictures, Music, Video
• PoSH module for UPM: v7
ᵒ New functionality…
© 2013 Citrix | Confidential – Do Not Distribute
XenDesktop 7 - Capabilities
• New Policies
ᵒ Define excluded AD groups
ᵒ Profile Not Available Policy (deny or temp profile logon)
• Auto-Config - detect env and configure automatically
• Delete caches profiles immediately (delayed delete)
• Read only profiles (mandatory) - use the template profile as a mandatory
© 2013 Citrix | Confidential – Do Not Distribute
XenDesktop 7 - Architecture Changes
• No Longer leverages NTFS change journal - UPM uses the filter driver (upmjit.sys) now
ᵒ MFT file no longer used (NTFS activity cache file)
• UserProfileManager_<DriveLetter>.cache
• Benefit?
ᵒ Reduce Support Calls
ᵒ Should improve logon times
ᵒ In particular, first logons with provisioned desktops where cache file had to be created
© 2013 Citrix | Confidential – Do Not Distribute
Integrated Install
Profile management v5.0
• Part of VDA Installation
• Windows Service
ᵒ UserProfileManager.exe
ᵒ Start-up Automatically
ᵒ Runs under local system a/c
• Service remains Idle until enabled
ᵒ Configured through Policies\.ini file
• VDA switch to disable install?
ᵒ None available
ᵒ Required for Director (data and profile resets)
© 2013 Citrix | Confidential – Do Not Distribute
Legacy Configuration Options
Still relevant with v5.0
• ADM\ADMX Templates
• Local .INI file
© 2013 Citrix | Confidential – Do Not Distribute
Legacy Configuration Options
UPMPolicyDefaults_all.ini
• Located in installation directory
• Used for POC\Workgroups
© 2013 Citrix | Confidential – Do Not Distribute
Group Policy Template files
ADM\ADMX
• Available on Installation
media
ᵒ \x64\ProfileManagement\
ADM_Templates\en
ᵒ \x86\ProfileManagement\
ADM_Templates\en
© 2013 Citrix | Confidential – Do Not Distribute
Citrix HDX Policy Engine integration
Profile management v5.0
• All Pm settings can be configured
through Citrix HDX Policies (Citrix
Studio or AD)
ᵒ Complete mirror of ADM template
settings…
© 2013 Citrix | Confidential – Do Not Distribute
© 2013 Citrix | Confidential – Do Not Distribute
Studio Integration\Basic Configuration
Profile management v5.0
• Profile management node
ᵒ Create Profile Definitions
• Basic Configuration/Simply deployments ONLY
• Basic settings exposed through UI
ᵒ Profile Type\Storage
ᵒ Profile Redirection
Hidden in Excalibur, being revised for Merlin….
© 2013 Citrix | Confidential – Do Not Distribute
Profile Definitions
Hidden in Excalibur, being revised for Merlin…
Profile management v5.0
• Multiple definitions can be created and linked to Delivery Groups…
© 2013 Citrix | Confidential – Do Not Distribute
Linking profile Definitions to Delivery Groups
Profile management v5.0
• Edit Delivery Group
ᵒ Select existing or create new profile
definition…
Hidden in Excalibur, being revised
for Merlin….
© 2013 Citrix | Confidential – Do Not Distribute
Advanced Configuration
Profile management v5.0
• Choose One of either:
ᵒ Citrix HDX Policies through Citrix Studio or AD
ᵒ Group Policy ADM/ADMX Template
• Mixing and Matching can lead to unexpected results…
© 2013 Citrix | Confidential – Do Not Distribute
Workgroup or POC configuration
Profile management v5.0
• Local.INI file
• UPMPolicyDefaults_all.ini
ᵒ Settings revert to corresponding group policy setting if set to
"not configured“ in .ini file
• Found under C:\Program Files\Citrix\User Profile Manager
© 2013 Citrix | Confidential – Do Not Distribute
Director Integration
Profile management v5.0
• Reset Functionality
ᵒ Microsoft Roaming and Citrix profiles
• Recreates corrupt profile
ᵒ Rename existing
ᵒ Create new
ᵒ Copy important data (Documents, Favorites,
Cookies, Desktop, Pictures, Music, Video)
© 2013 Citrix | Confidential – Do Not Distribute
New HDX Policy
Excluded AD Groups
• Disabled by default
• If enabled, Pm 5.x will exclude
members of the defined user groups…
© 2013 Citrix | Confidential – Do Not Distribute
New HDX Policy
Log off user if a problem is encountered
• Disabled by default
ᵒ Problems encountered at logon then
Temporary profile is provided
• If enabled, Pm 5.x displays and error
and logs the user off..
© 2013 Citrix | Confidential – Do Not Distribute
New HDX Policy
Delay before deleting cached profiles
• Disabled by default
• Dependent on “Delete locally cached
profiles on logoff” policy setting
ᵒ Must be enabled
© 2013 Citrix | Confidential – Do Not Distribute
New HDX Policy
Template profile used as mandatory profile
• Disabled by default
ᵒ Template profile is not used
• Enable to use Citrix mandatory profiles
• Dependency on the Path to the
template profile policy setting…
© 2013 Citrix | Confidential – Do Not Distribute
New HDX Policy
Disable Automatic Configuration
• Disabled by default
ᵒ Pm 5.x examines its environment and
configures itself accordingly with some
best practice settings
• Disable for troubleshooting purposes…
© 2013 Citrix | Confidential – Do Not Distribute
Profile management v5.0
Auto Configuration Behavior
E = Enabled; D = Disabled
© 2013 Citrix | Confidential – Do Not Distribute
New PowerShell cmdlets
Profile management v5.0
• Excalibur Usage
ᵒ Test-UserProfileShare
ᵒ Repair-UserProfileShare
ᵒ Get-UserProfilePath
• Merlin Usage
ᵒ
ᵒ
ᵒ
ᵒ
ᵒ
ᵒ
Get-UserProfileManagerServiceAddedCapability
New-UserProfileConfiguration
Set-UserProfileDefinition
Get-UserProfileDefinition
New-UserProfileShare
Remove-UserProfileShare
© 2013 Citrix | Confidential – Do Not Distribute
Technical Notes
UPM v5
• Available for SA customers on XA 6.x and XD 5.x
platforms
ᵒ www.MyCitrix\downloads
• Support for Win7 and later OS only
ᵒ 2003 and XP platforms must continue on 4.x (currently 4.1.2)
• Profile Management node to be hidden in Citrix Studio for
the Excalibur RTW release
ᵒ Being revised for Merlin (2014)
© 2013 Citrix | Confidential – Do Not Distribute
Known Issues\Gotchas
Profile management v5.0
• 34 Post Shipped Bugs at present…
• OneBug
ᵒ http://onebug.citrite.net/tmtrack/tmtrack.dll?ReportPage&Templa
te=reports%2Flist&reportid=18946
© 2013 Citrix | Confidential – Do Not Distribute
Resources & Q/A
Approved and Post Shipped
OneBug
• http://onebug.citrite.net/tmtrack/tmtrack.dll?ReportPage&Template=reports%2F
list&reportid=18946
© 2013 Citrix | Confidential – Do Not Distribute
Resources
Citrix
• Documentation
ᵒ http://support.citrix.com/proddocs/topic/technologies/upm-wrapper-all-versions.html
• Support Forums/White papers
ᵒ http://www.citrix.com/upm
© 2013 Citrix | Confidential – Do Not Distribute
Resources
Microsoft
• Managing Group Policy ADMX Files Step-by-Step Guide
ᵒ http://msdn.microsoft.com/en-us/library/bb530196.aspx
• Security Recommendations for Roaming User Profiles Shared Folders
ᵒ http://technet.microsoft.com/en-us/library/cc757013%28v=ws.10%29.aspx
© 2013 Citrix | Confidential – Do Not Distribute
Engineering Documents
Mindtouch
• User profile management
ᵒ http://mindtouch.eng.citrite.net/Releases/Jasper/Features/User_profile_management
• UPM driver change notification
ᵒ HTTP://MINDTOUCH.ENG.CITRITE.NET/@API/DEKI/FILES/1392/=CITRIX_UPM_DR
IVER_FILE_CHANGE_NOTIFICATION.DOCX
• UPM Jasper Concept Specification
ᵒ HTTP://MINDTOUCH.ENG.CITRITE.NET/@API/DEKI/FILES/1383/=UPM_JASPER_C
ONCEPT_SPECIFICATION.DOCX
• UPM Mandatory profiles
ᵒ http://mindtouch.eng.citrite.net/@api/deki/files/1388/=UPM_MandatoryProfile_Validatio
n.docx
© 2013 Citrix | Confidential – Do Not Distribute