User manual NOVELL ZENWORKS APPLICATION VIRTUALIZATION 8.0.1 8-20-2010

[. . . ] novdocx (en) 16 April 2010 AUTHORIZED DOCUMENTATION User Guide Novell® 8. 0. 1 August 20, 2010 ZENworks Application Virtualization www. novell. com ZENworks Application Virtualization User Guide novdocx (en) 16 April 2010 Legal Notices Novell, Inc. , makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. , makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. , reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. [. . . ] Many organizations use Active Directory to manage their network services. By combining Active Directory with SpoonReg, administrators can deploy virtual applications easily and reliably to one or more users in their organization. 6. 5. 2 SpoonReg SpoonReg manages the virtual desktop environment for a given user by registering and unregistering virtual applications. A typical SpoonReg command to register an application such as Firefox would be: \\VirtualAppServer\Tools\SpoonReg. exe \\VitualAppServer\Apps\Firefox. exe This represents the basic functionality of SpoonReg which would copy the virtual application executable, create Start Menu items and desktop shortcuts and setup file associations. 6. 5. 3 Using SpoonReg with Active Directory In an organization, it is generally more desirable to manage a group of users rather than one at a time. By combining Active Directory with SpoonReg you can manage the virtual environment for a user, group, or Organizational Unit. Here we will walk through some scenarios on how this can be accomplished. Note: In order to manage virtual applications using Active Directory, the users must have access to a shared network drive where the virtual application executable files exist. This can be specified by a full UNC path, or by using a mapped network drive. 6. 5. 4 Scenario 1: Linking an organizational unit (OU) to a group policy object (GPO) Active Directory offers many ways to manage network services for an organization. Here we are going to look at how we can use an OU in combination with a GPO to manage the virtual application environment for a set of users. 6. 5. 5 Organizational unit (OU) In Active Directory, OUs are containers where you can place users, groups and other OUs. Using these containers the administrator can create a structure that models the hierarchical or logical structures within the organization. By setting up the OUs we can isolate the different groups of users that will receive their own set of virtual applications. Some examples would be Accounting, Sales, Marketing, etc. 6. 5. 6 Group policy object (GPO) 57 Novell ZENworks Application Virtualization GPOs are a way of applying a set of rules and features to a targeted set of users. Typically GPOs handle security, application installation, logon/logoff scripts, Internet Explorer settings and more. Based on their profile, various GPOs will be applied. 6. 5. 7 SpoonReg and the GPO For the purposes of virtual application deployment we can configure the GPO to run the necessary SpoonReg commands to register a given set of virtual applications. The simplest way to deal with the virtual application management is by creating a logon script that registers the virtual applications for a particular group in the organization. You would do this under User Configuration > Windows Settings > Scripts in the Group Policy Object Editor. You might add the following logon script for the accounting group: \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\Excel. exe \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\Firefox. exe \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\AcrobatReader. exe Whereas you might add the following for the graphic design group: \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\AdobeIllustrator. exe \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\Firefox. exe \\VirtualAppServer\Tools\SpoonReg. exe \\VirtualAppServer\AllVirtualApps\AcrobatReader. exe 6. 5. 8 Linking the GPO to the OU Once you have set up the OU and the GPO, you simply have to link them through the Group Policy Object Editor. After they are linked, any users that are put into that OU will have the linked GPOs applied when they logon. All of their virtual applications will appear when they logon to any machine on the domain where the GPO applies. Note: SpoonReg has many other capabilities that can be applied in the GPO logon script, such as unregistering applications or registering applications to a specific sandbox. 6. 5. 9 Scenario 2: Using Startup Scripts with GPO's to deploy virtual applications This section will describe using Startup Scripts to deploy virtual applications to the All Users profile on a host system. 6. 5. 10 Create a GPO with the Startup Script For the purposes of virtual application deployment we can configure the GPO to run the necessary SpoonReg commands to register a given set of virtual applications to the All Users Profile. This will allow any user who logs into a host system to have access to the registered virtual applications. 58 Novell ZENworks Application Virtualization Start by creating a new GPO with the Group Policy Management Console (GPMC): · · · · · · · · Open the GPMC Right-click on the OU that you want to link a GPO to Select Create and Link a GPO Here and give it a name Right-click the GPO and select Edit. This will open the Group Policy Object Editor Navigate to Computer Configuration > Windows Settings > Scripts Open the Startup item Click Show Files In the directory that is displayed by the Show Files button, create a . bat file. This file will serve as the Startup Script that will deploy your virtual applications to all the computers in the specified OU. Use these samples as a guide to create the startup script: Sample 1. [. . . ] IconResource The IconResource sub-element contains an identifier of the icon that is used for the file association. Extension All sub-elements contain settings pertaining to the configuration of the file extensions for the ProgId. The extension attribute indicates the file extension that is associated with the ProgId. The mimeType attribute indicates the MIME type of all files with the extension. [. . . ]