Security & Management : SoftGrid

Configuration Manager 2007 R2+App-V Compare App-V Only

daniel — Sun, 19 Apr 2009 23:56:00 GMT

Configuration Manager 2007 R2 with App-V VS App-V Only

	R2+App-V	App-V Only	Remarks
Virtual Package Preparation	App-V Sequencer	App-V Sequencer
Virtual Package Upgrade	App-V Sequencer+R2 Console	App-V Sequencer+App-V Console
Virtual Package Management	R2 Console	App-V Console
Virtual Package Storage	R2 Distribution Point and Branch Distribution Point	App-V Streaming Server with Scripting (Content Replication)	R2+AppV is better for Branch Office and Large Deployment Scenarios
Virtual Package Assignment	By Active Directory User or User Group or R2 Managed Computer or R2 Managed Computer Group	By Active Directory User Group	R2+App-V is better for Virtual Package Targeting and Management
Virtual Package Access Control	R2 Console-Access Control for Streamed Applications for both Online and Offine. No Access Control for Pushed Applications, but it supports Workgroup Computers	App-V Console-Access Control for Streamed Applications for both Online and Offline, But It doesn't support Workgroup Computers	R2+App-V is better for Domain Joined and Workgroup joined Computers
Virtual Package Delivery	Network Streaming or Schedule Based Pushing (Local Streaming)	Network Streaming	R2+App-V is better for Laptop Users through Pushing Delivery
Virtual Package Removal	Remove from Computer Group or Specific Computer	Remove from User Group or Specific User	App-V Only is better for Dynamic User Based Virtual Package Removal

Configuration Manager 2007 R2 with App-V Integration Clarification

daniel — Thu, 16 Apr 2009 11:06:00 GMT

- Required Components

o App-V Sequencer for Virtualize the Application and Package Upgrade

o App-V Client

o Configuration Manager 2007 R2 Infrastructure

o No MSI Utility required

- Preparation Tasks

o In Configuration Manager, Create a new package from definition file-<Tools\VirtualApp\AppVirMgmtClient.sms> with the default option.

o Rollout this App-V Client Package.

o Enable Virtual Application Package Advertisement in Advertised Programs Client Agent.

o Enable BITS Option in Distribution Point Properties, uncheck the anonymous option.

o Enable the Virtual Application Streaming Option in Distribution Point Properties.

- Operation Tasks

o In Configuration Manager, Create a new “Virtual Application Package” and Browse to the Virtualized Application Package shared folder.

o Specify the Destination shared folder for store the Virtualized Application Package.

o Add the distribution point.

o Control the User Access by the Access Accounts option. (Streaming Only)

o For Upgrade the existing Virtual Application Package with the Patch or Service Pack, just follow the normal procedure to update the existing Virtual Application Package (and Update the Version for each Application) and Save it by using App-V Sequencer. And then copy all of the updated XML file, SFT file, SPRJ file, OSD files and Icon folder into a new folder under the Virtual Applications Source Shared Folder.

o In Configuration Manager, Right click the existing Virtual Application Package and click “Update Package”, and Browse to the updated Virtual Application Package by UNC Path. The Delta Package Update will start automatically on the Virtual Application Package Destination Folder, Distribution Point.

o Re-run the Advertisement to update the delta to Configuration Manager Client Cache (Pushing) and App-V Client Cache (Pushing and Streaming).

- Scenarios

o Streaming

§ Create a new Advertisement and choose the “Streaming from Distribution Point” Option

§ Target the Advertisement to the Collection

§ When the Advertisement execute, Configuration Manager client will call the App-V Client to register the Virtual Applications (Start Menu, File Association, Icons). And the Configuration Manager Client will use the “OverrideURL” Registry automatically for update the Virtual Application SFT File Location to the Distribution Point.

§ When the User Launch the Virtual Applications, App-V Client will use the Distribution Point for the Streaming Source. After the Feature Block 1 Streamed into the App-V Client Cache, the Application can be used. And the Feature Block 2 will be streamed into App-V Client Cache automatically in the background. Nothing will be stored in the Configuration Manager Client Cache.

§ If the User doesn’t have the “Read” Permission for this Virtualized Application Package, A Logon Window will appear and ask for the user name and password for access to the Virtual Application Package on the Distribution Point.

§ Once the Complete Virtualized Application Package streamed into the App-V Client Cache, the authorized user can use this Application in Offline mode. And the Unauthorized user cannot use this Application in Offline mode and the Application launch will fail.

§ To Remove the Virtual Application Cache, just delete the Advertisement in Configuration Manager.

o Streaming-Conclusion

§ The Virtual Application Package will Stream into every client’s App-V Client cache when the authorized user try to launch the Virtual Application on their desktop.

§ Virtual Applications Usage can be assigned by Package Access Account in Configuration Manager.

§ Virtual Applications Usage control are enforced even offline (disconnected).

o Pushing

§ Create a new Advertisement and choose the “Download from Distribution Point” Option

§ Target the Advertisement to the Collection

§ When the Advertisement execute, Configuration Manager client will download the Virtual Application Package and Store into the Configuration Manager Client Cache, and call the App-V Client to register the Virtual Applications (Start Menu, File Association, Icons). And the Configuration Manager Client will use the “OverrideURL” Registry automatically for update the Virtual Application SFT File Location to the Local Configuration Manager Client Cache.

§ When the User Launch the Virtual Applications, App-V Client will use the Local Configuration Manager Client Cache for the Streaming Source. After the Feature Block 1 Streamed into the App-V Client Cache, the Application can be used. And the Feature Block 2 will be streamed into App-V Client Cache automatically in the background.

§ Any users can use this Virtual Application on that computer online or offline.

§ To Remove the Virtual Application Cache, just delete the Advertisement in Configuration Manager.

o Pushing-Conclusion

§ The Virtual Application Package will Push into every client’s Configuration Manager Client cache when the advertisement execute and Stream into App-V Client cache locally when the user try to launch the Virtual Application on their desktop.

§ Virtual Applications Usage cannot be assigned by Package Access Account in Configuration Manager.

§ Virtual Applications Usage control cannot be enforced.

App-V 4.5 Active Upgrade for Office 2007 SP1

daniel — Mon, 06 Apr 2009 17:11:00 GMT

Finally, I spent about 2 weeks to finalize the "Real Steps" for Active Upgrade Office 2007 RTM Virtualized Package to Office 2007 SP1. Here are the Steps that I used.

You can download the Step by Step Instruction from this Blog.

My Integrate SMS 2003 with SoftGrid Step by Step Guide Released!

daniel — Tue, 22 May 2007 01:29:00 GMT

I wrote this guide in the last year, and finally, i can publish it on the web and share with everyone.

You can download it from here and it will be published on Microsoft WebSite Later

Enjoy it!

SoftGird Client on Windows Vista

daniel — Sun, 10 Dec 2006 23:51:00 GMT

If you are using SoftGrid in your company environment, You may consider the compatibility of SoftGrid Client on Windows Vista.

There are many new features and security enhancements in Windows Vista. But it may conflict with SoftGrid Client.

If the management board confirmed to Upgrade the Existing Windows to Windows Vista, And they also want to continue to use SoftGrid. Don't worry. SoftGrid Client 4.1.0.56 Supports It!

To configure the SoftGrid Client on Windows Vista, You have to Disable the UAC Feature in Windows Vista first. You can disable it in "Control Panel", "User Accounts"

And then Install and Configure SoftGrid Client 4.1.0.56 on Windows Vista.

Note| You need to add a new environment variable "SFT_SOFTGRIDSERVER" on Windows Vista OR Change the %SFT_SOFTGRIDSERVER% to the IP or FQDN of the SoftGrid Virtual Applications Server in the SoftGrid OSD File.

SoftGrid with SMS Scenarios

daniel — Tue, 28 Nov 2006 02:19:00 GMT

Finally, I completed 4 SoftGrid with SMS scenarios.

SMS+SoftGrid+Domain

This is the most easiest one, And SoftGrid supports this scenario.

SMS Pri+SoftGrid+WorkGroup.

In this scenario, you need to use SoftGrid WebService for the Anonymous Authentication. And the WorkGroup Workstation Local User Account need to standardize. Also. create the same Domain User Account in Active Directory.

SoftGrid+WorkGroup

Same as the previrous one.

SMS Pri, Sec+SoftGrid+WorkGroup

This is the most diffcult and complex scenario. Other than the settings of "SMS Pri+SoftGrid+WorkGroup." Scenario, you also need to create the standardize local user account in the Sec Site Server, And make sure this account is able to access the SMS Distribution Share on the SMS Sec Site DP. (Add the Domain User Account to the DP's Local Users/Admins Group.)

In fact, the most difficult tasks are the permission consideration and testing. Because we have not enough info on the web to talk about it.

Maybe i missed some tips in this post. But i noted them on my memo already, if you want to get more information about it. Please feel free to contact me

SMS 2003 + Microsoft SoftGrid

daniel — Fri, 03 Nov 2006 03:51:00 GMT

I tested the Integration of SMS 2003 and Microsoft SoftGrid.

And i followed the Instructions of the Softricity SoftGrid Integrate SMS guide, and it didn't work.

I found out that there are many mistakes and steps missed in this guide.

Finally, I wrote a new guide for it. (I'm Sorry, I can't Publish it to Public in this moment. Please wait until June 2007)

However, If you have any questions about SoftGrid and SMS integration, I will try my best to answer your questions.

PS. I'm currently testing SMS+SoftGrid+WorkGroup machines, and I can let SoftGrid works with WorkGroup machines perfectly by Web Services. I hope that i can integrate SMS into them soon.

The 1st KB for Microsoft SoftGrid

daniel — Wed, 25 Oct 2006 13:52:00 GMT

Support policy for Microsoft programs that are running in a third-party application or software redirection program or in a third-party application or software virtualization environment

http://support.microsoft.com/kb/924287/en-us