diff --git a/mdop/medv-v1/TOC.md b/mdop/medv-v1/TOC.md new file mode 100644 index 0000000000..9e402cf4f8 --- /dev/null +++ b/mdop/medv-v1/TOC.md @@ -0,0 +1,87 @@ +# [Microsoft Enterprise Desktop Virtualization 1](microsoft-enterprise-desktop-virtualization-planning-deployment-and-operations-guide-medvv2.md) +## [About This Guide[MEDV]](about-this-guidemedv.md) +## [Getting Started with MED-V](getting-started-with-med-v.md) +### [Overview of MED-V](overview-of-med-v.md) +### [High-Level Architecture[MEDV]](high-level-architecturemedv.md) +### [Key Scenarios for Using MED-V](key-scenarios-for-using-med-v.md) +### [About MED-V 1.0](about-med-v-10.md) +#### [MED-V 1.0 Supported Configurations[MEDV 1.0]](med-v-10-supported-configurationsmedv-10.md) +#### [MED-V 1.0 Installation Checklist](med-v-10-installation-checklist.md) +#### [MED-V 1.0 Release Notes[MEDV 1.0]](med-v-10-release-notesmedv-10.md) +### [About MED-V 1.0 SP1](about-med-v-10-sp1.md) +#### [MED-V 1.0 SP1 Supported Configurations[MEDV 1.0 SP1]](med-v-10-sp1-supported-configurationsmedv-10-sp1.md) +#### [MED-V 1.0 SP1 Upgrade Checklist[MEDV 1.0 SP1]](med-v-10-sp1-upgrade-checklistmedv-10-sp1.md) +#### [MED-V 1.0 SP1 and SP2 Release Notes[MEDV 1.0 SP1]](med-v-10-sp1-and-sp2-release-notesmedv-10-sp1.md) +## [MED-V Infrastructure Planning and Design](med-v-infrastructure-planning-and-design.md) +### [Define the Project Scope](define-the-project-scope.md) +### [Identify the Number of MED-V Instances](identify-the-number-of-med-v-instances.md) +### [Design the MED-V Server Infrastructure](design-the-med-v-server-infrastructure.md) +### [Design the MED-V Image Repositories](design-the-med-v-image-repositories.md) +## [MED-V Deployment and Configuration](med-v-deployment-and-configuration.md) +### [MED-V Installation Prerequisites](med-v-installation-prerequisites.md) +### [Supported Configurations[MEDV orientation]](supported-configurationsmedv-orientation.md) +#### [MED-V 1.0 Supported Configurations[MEDV 1.0]](med-v-10-supported-configurationsmedv-10.md) +#### [MED-V 1.0 SP1 Supported Configurations[MEDV 1.0 SP1]](med-v-10-sp1-supported-configurationsmedv-10-sp1.md) +### [Installation and Upgrade Checklists](installation-and-upgrade-checklists.md) +#### [MED-V 1.0 Installation Checklist](med-v-10-installation-checklist.md) +#### [MED-V 1.0 SP1 Upgrade Checklist[MEDV 1.0 SP1]](med-v-10-sp1-upgrade-checklistmedv-10-sp1.md) +### [Installing and Configuring MED-V Components](installing-and-configuring-med-v-components.md) +#### [How to Install and Configure the MED-V Server Component](how-to-install-and-configure-the-med-v-server-component.md) +#### [How to Configure the Image Web Distribution Server](how-to-configure-the-image-web-distribution-server.md) +#### [How to Install MED-V Client and MED-V Management Console](how-to-install-med-v-client-and-med-v-management-console.md) +#### [How to Uninstall MED-V Components[MEDVv2]](how-to-uninstall-med-v-componentsmedvv2.md) +### [Creating a Virtual PC Image for MED-V](creating-a-virtual-pc-image-for-med-v.md) +### [Creating a MED-V Workspace[MEDV 1.0 SP1]](creating-a-med-v-workspacemedv-10-sp1.md) +### [Configuring MED-V Workspace Policies](configuring-med-v-workspace-policies.md) +#### [How to Apply General Settings to a MED-V Workspace](how-to-apply-general-settings-to-a-med-v-workspace.md) +#### [How to Apply Virtual Machine Settings to a MED-V Workspace](how-to-apply-virtual-machine-settings-to-a-med-v-workspace.md) +#### [How to Configure a Domain User or Group[MEDVv2]](how-to-configure-a-domain-user-or-groupmedvv2.md) +#### [How to Configure Published Applications[MEDVv2]](how-to-configure-published-applicationsmedvv2.md) +#### [How to Configure Web Settings for a MED-V Workspace](how-to-configure-web-settings-for-a-med-v-workspace.md) +#### [How to Configure the Virtual Machine Setup for a MED-V Workspace](how-to-configure-the-virtual-machine-setup-for-a-med-v-workspace.md) +##### [How to Configure the Virtual Machine Setup for a MED-V Workspace[MEDVv2]](how-to-configure-the-virtual-machine-setup-for-a-med-v-workspacemedvv2.md) +##### [How to Configure VM Computer Name Pattern Properties[MEDVv2]](how-to-configure-vm-computer-name-pattern-propertiesmedvv2.md) +##### [Examples of Virtual Machine Configurations[v2]](examples-of-virtual-machine-configurationsv2.md) +#### [How to Apply Network Settings to a MED-V Workspace](how-to-apply-network-settings-to-a-med-v-workspace.md) +#### [How to Apply Performance Settings to a MED-V Workspace](how-to-apply-performance-settings-to-a-med-v-workspace.md) +#### [How to Import and Export a Policy](how-to-import-and-export-a-policy.md) +### [Configuring MED-V for Remote Networks](configuring-med-v-for-remote-networks.md) +### [Configuring MED-V Server for Cluster Mode](configuring-med-v-server-for-cluster-mode.md) +## [MED-V Operations](med-v-operations.md) +### [Using the MED-V Management Console User Interface](using-the-med-v-management-console-user-interface.md) +### [Creating a MED-V Image](creating-a-med-v-image.md) +#### [How to Create and Test a MED-V Image](how-to-create-and-test-a-med-v-image.md) +#### [How to Pack a MED-V Image](how-to-pack-a-med-v-image.md) +#### [How to Upload a MED-V Image to the Server](how-to-upload-a-med-v-image-to-the-server.md) +#### [How to Localize a MED-V Image](how-to-localize-a-med-v-image.md) +#### [How to Update a MED-V Image](how-to-update-a-med-v-image.md) +#### [How to Delete a MED-V Image](how-to-delete-a-med-v-image.md) +### [Deploying a MED-V Workspace Using an Enterprise Software Distribution System](deploying-a-med-v-workspace-using-an-enterprise-software-distribution-system.md) +#### [How to Install MED-V Client[ESDS]](how-to-install-med-v-clientesds.md) +#### [How to Deploy a Workspace Image[ESDS]](how-to-deploy-a-workspace-imageesds.md) +### [Deploying a MED-V Workspace Using a Deployment Package](deploying-a-med-v-workspace-using-a-deployment-package.md) +#### [How to Configure a Deployment Package](how-to-configure-a-deployment-package.md) +#### [How to Install MED-V Client[deployment package]](how-to-install-med-v-clientdeployment-package.md) +#### [How to Deploy a Workspace Image[deployment package]](how-to-deploy-a-workspace-imagedeployment-package.md) +### [Updating a MED-V Workspace Image](updating-a-med-v-workspace-image.md) +### [MED-V Client Operations](med-v-client-operations.md) +#### [How to Start and Exit the MED-V Client](how-to-start-and-exit-the-med-v-client.md) +#### [How to Start, Stop, and Restart a MED-V Workspace](how-to-start-stop-and-restart-a-med-v-workspace.md) +#### [How to View MED-V Settings and General Information](how-to-view-med-v-settings-and-general-information.md) +#### [How to Lock and Unlock a Workspace](how-to-lock-and-unlock-a-workspace.md) +#### [MED-V Client Tools[v2]](med-v-client-toolsv2.md) +## [Troubleshooting MED-V](troubleshooting-med-v.md) +## [Technical Reference[MEDV 1.0 SP1]](technical-referencemedv-10-sp1.md) +### [MED-V Reporting](med-v-reporting.md) +#### [How to Generate Reports [MEDVv2]](how-to-generate-reports-medvv2.md) +#### [How to Work with Reports](how-to-work-with-reports.md) +### [MED-V Trim Transfer Technology [MEDVv2]](med-v-trim-transfer-technology-medvv2.md) +### [How to Back Up and Restore a MED-V Server](how-to-back-up-and-restore-a-med-v-server.md) +### [How to Share Folders Between the Host and the MED-V Workspace](how-to-share-folders-between-the-host-and-the-med-v-workspace.md) +### [How to Set MED-V Workspace Deletion Options](how-to-set-med-v-workspace-deletion-options.md) +### [How to Set Advanced File Transfer Options](how-to-set-advanced-file-transfer-options.md) +### [How to Edit a Published Application with Advanced Settings](how-to-edit-a-published-application-with-advanced-settings.md) +### [How to Set Up Script Actions](how-to-set-up-script-actions.md) +### [Client Installation Command Line Reference](client-installation-command-line-reference.md) +### [How to Configure Image Pre-staging](how-to-configure-image-pre-staging.md) + diff --git a/mdop/medv-v1/about-med-v-20.md b/mdop/medv-v1/about-med-v-20.md new file mode 100644 index 0000000000..46d295b60c --- /dev/null +++ b/mdop/medv-v1/about-med-v-20.md @@ -0,0 +1,37 @@ +--- +title: About MED-V 2.0 +description: About MED-V 2.0 +ms.assetid: 7ec53f2c-db6e-4a6b-a069-99d0c25cd101 +author: MaggiePucciEvans +--- + +# About MED-V 2.0 + + +## In This Section + + +This section provides information related specifically to MED-V 2.0 and includes the following topics: + +[What's New in MED-V 2.0](whats-new-in-med-v-20.md) +Describes system requirements and new and changed features in MED-V 2.0. + +[MED-V 2.0 Supported Configurations](med-v-20-supported-configurations.md) +Describes the supported configurations for MED-V 2.0. + +[MED-V 2.0 Release Notes](med-v-20-release-notes.md) +Provides a list of known issues with MED-V 2.0. + +## Related topics + + +[Getting Started with MED-V](getting-started-with-med-vmedv2.md) + + + + + + + + + diff --git a/mdop/medv-v1/authentication-of-med-v-end-users.md b/mdop/medv-v1/authentication-of-med-v-end-users.md new file mode 100644 index 0000000000..ea5f477e8b --- /dev/null +++ b/mdop/medv-v1/authentication-of-med-v-end-users.md @@ -0,0 +1,128 @@ +--- +title: Authentication of MED-V End Users +description: Authentication of MED-V End Users +ms.assetid: aaf96eb6-91d1-4f4d-9854-5fc73c7ae7ab +author: MaggiePucciEvans +--- + +# Authentication of MED-V End Users + + +The authentication of Microsoft Enterprise Desktop Virtualization (MED-V) 2.0 end users is a very important security issue. In this context, authentication refers to verifying the identity of the MED-V end user. + +The following section provides information and guidance about end-user authentication in MED-V. + +## User Authentication in MED-V + + +Authentication in MED-V generally occurs at two levels: when a user first accesses MED-V and every time that they change their password. + +Depending on how you have configured MED-V settings for authentication, the end user is typically prompted at some point to enter their password, either the first time MED-V is started or the first time that they try to open a published application. + +There are several aspects of end-user authentication that you can control, including the following: + +Whether the credentials the end user enters are stored in Credential Manager + +In what manner the end user is presented with the option of entering and saving their password + +Depending on your company’s preferred process for managing end-user authentication, you can specify whether credential caching occurs for a particular MED-V workspace. Caching the credentials of an end user is helpful because they are only prompted one time for their password. If the end user is not allowed to save their password or they decide not to, every time that they start a new MED-V session, they must enter it again. For example, if MED-V is configured to start when the end user logs on to the host but Authentication is disabled, the end user is only prompted one time during logon. In this case, credentials are valid until the end user logs off from the host. + +If it is necessary, you can use Credential Manager to remove any stored end-user credentials. + +By default, credential storing is disabled, but you can change this setting through one of the following methods: + +**While you are creating the MED-V workspace package**. For more information, see [Create a MED-V Workspace Package](create-a-med-v-workspace-package.md). + +**After you have deployed the MED-V workspace**. Edit the MED-V cmdlet parameter UxCredentialCacheEnabled to set the Terminal Services registry key. For more information, see Windows PowerShell Help. + +After MED-V workspace deployment, you can set your preference for end-user authentication by modifying the Terminal Services policy named DisablePasswordSaving. DisablePasswordSaving controls whether the password saving check box appears on the RDP client dialog window and whether the MED-V credential prompt is displayed. + +Following is the policy path for the Terminal Services policy named DisablePasswordSaving. + +**Regedit:** + +HKEY\_LOCAL\_MACHINE\\SOFTWARE\\Microsoft\\Virtual Machine\\Policies\\DisablePasswordSaving + +**Note** +The changes that you make to DisablePasswordSaving only affect the RDP prompt to a virtual machine. + + + +The following table lists the different ways you can configure your settings for credential storing and the effects of the different configurations: + +
Value | +Configuration | +Result | +
---|---|---|
DisablePasswordSaving |
+Disabled |
+The MED-V prompt is presented and a check box to accept is available and cleared. If the end user selects the check box, credentials are cached for subsequent use. The end user also has the benefit of only being prompted when the password expires. + |
+
+ | + | If the end user does not select the check box, the Remote Desktop Connection (RDC) Client prompt is presented instead of the MED-V prompt, and the check box to accept is cleared. If the end user selects the check box, the RDC Client credential is stored for later use. +
+Important
+
+RDC does not validate credentials when the end user enters them. If the end user caches the credentials through the RDC prompt, there is a risk that incorrect credentials might be stored. In this case, the incorrect credentials must be deleted in the Windows Credential Manager. +
+
+ |
+
DisablePasswordSaving |
+Enabled |
+
+Note
+
+This configuration is more secure because it does not allow end user credentials to be cached. +
+
+ |
+
Installation File | +Argument | +Accepted Values | +Type | +Description | +Default | +
---|---|---|---|---|---|
Host Agent |
+MEDVDIR |
+<install path> |
+Installation |
+Change installed directory |
+Installation goes to Program Files\Microsoft Enterprise Desktop Virtualization. |
+
MED-V Workspace Packager |
+MEDVDIR |
+<install path> |
+Installation |
+Change installed directory |
+Installation goes to Program Files\Microsoft Enterprise Desktop Virtualization. |
+
MED-V workspace |
+INSTALLDIR |
+<install path> |
+Installation |
+Change installed directory |
+Installation goes to ProgramData\Microsoft\Medv\Workspace. |
+
MED-V workspace |
+OVERWRITE VHD |
+0 or 1 |
+Installation |
+Fail installation if VHD exists(0) or overwrite existing VHD(1). |
+Overwrite does not occur and installation fails if a virtual hard disk (VHD) already exists. |
+
MED-V workspace |
+SUPPRESSMEDVLAUNCH |
+0 or 1 |
+Installation |
+Start(0) or do not start(1) MED-V after MED-V workspace is installed. |
+If the MED-V workspace was installed with the user interface (UI), a check box on the Finish page controls whether to start MED-V. |
+
MED-V workspace |
+DELETEDIFFDISKS |
+0 or 1 |
+Uninstallation |
+Keep(0) or delete(1) VHDs created by MED-V |
+No VHDs are deleted. |
+
Package Information |
+ Specify a name for the MED-V workspace and select a folder where the MED-V workspace package files are saved. |
+
Select Windows XP Image |
+ Specify your prepared Windows XP Virtual PC image. |
+
First Time Setup |
+ Specify the setup process that MED-V follows during first time setup. |
+
MED-V Messages |
+ Specify the messages and optional URL for Help information that the end user sees during first time setup. |
+
Naming Computers |
+ Specify how the MED-V virtual machine is named. |
+
Copy Settings from Host |
+ Specify how the settings for the MED-V workspace are defined. |
+
Startup and Networking |
+ Specify the settings for starting the MED-V workspace, networking, and user credentials. |
+
Web Redirection |
+ Specify a text file or a list of the URLs you want redirected to Internet Explorer in the MED-V workspace. |
+
Summary |
+ Verify your MED-V workspace settings and start to build your MED-V workspace deployment package. |
+
Copy regional settings |
+ Select this check box to copy the regional settings from the host computer to the MED-V workspace. |
+
+ | If you select this check box, the following settings are set in the Sysprep.inf file: +
|
+
Copy user settings |
+ Select this check box to copy certain user settings, such as user name and company name, from the host to the MED-V workspace. |
+
+ | If you select this check box, the following settings are set in the Sysprep.inf file: +
+
+ Note
+
+ Personal settings, such as Internet browsing history, are not copied over to the MED-V workspace. +
+
+ |
+
Copy domain name |
+ Select this check box to let the guest join the same domain as the host. |
+
+ |
+ Important
+
+ The MED-V guest must be configured to join a domain that lets users log on by using the credentials that they use to log on to the MED-V host. +
+
+ |
+
Copy domain organizational unit |
+ Select this check box to copy the domain organizational unit from the host computer to the MED-V workspace. This check box is only enabled if you select to copy the domain name from the host computer. |
+
Start MED-V workspace |
+ Choose whether to start the MED-V workspace at user logon, at first use, or to let the end user decide when the MED-V workspace starts. |
+
+ | The MED-V workspace starts in one of two ways: either when the end user logs on or when they first start an action that requires MED-V, such as opening a published application or entering a URL that requires redirection. +You can either define this setting for the end user or let the end user control how MED-V starts. +
+ Note
+
+ If you specify that the end user decides, the default behavior they experience is that the MED-V workspace starts when they log on. They can change the default by right-clicking the MED-V icon in the notification area and selecting MED-V User Settings. If you define this setting for the end user, they cannot change how MED-V starts. +
+
+ |
+
Networking |
+ Select Shared or Bridged for your networking setting. The default is Shared. |
+
+ | Shared - The MED-V workspace uses Network Address Translation (NAT) to share the host's IP for outgoing traffic. +Bridged - The MED-V workspace has its own network address, typically obtained through DHCP. |
+
Store credentials |
+ Choose whether you want to store the end user credentials. |
+
+ | The default behavior is that credential storing is disabled so that the end user must be authenticated every time that they log on. +
+ Important
+
+ Even though caching the end user’s credentials provides the best user experience, you should be aware of the risks involved. +The end user’s domain credential is stored in a reversible format in the Windows Credential Manager. As a result, an attacker could write a program that retrieves the password and could gain access to the user’s credentials. You can only lessen this risk by disabling the storing of end-user credentials. +
+
+ |
+
Step | +Reference | +
---|---|
Review the components of a MED-V deployment. |
+[High-Level Architecture](high-level-architecturemedv2.md) |
+
Ensure that your computing environment meets the supported configurations required for installing MED-V 2.0. |
+[MED-V 2.0 Supported Configurations](med-v-20-supported-configurations.md) |
+
Determine how you want to design your MED-V deployment. |
+[Define and Plan your MED-V Deployment](define-and-plan-your-med-v-deployment.md) |
+
Review the list of best practices for ensuring that your MED-V deployment environment is more secure. |
+[Security and Protection for MED-V](security-and-protection-for-med-v.md) |
+
Step | +Reference | +
---|---|
Create a virtual machine that is running Windows XP SP3 with updates and additions. |
+[Creating a Windows Virtual PC Image for MED-V](creating-a-windows-virtual-pc-image-for-med-v.md) |
+
Install any predeployment software that you want on the MED-V image. |
+[Installing Applications on a Windows Virtual PC Image](installing-applications-on-a-windows-virtual-pc-image.md) |
+
Package the MED-V image by using Sysprep. |
+[Configuring a Windows Virtual PC Image for MED-V](configuring-a-windows-virtual-pc-image-for-med-v.md) |
+
Step | +Reference | +
---|---|
Determine how you can use MED-V to help solve your application compatibility issues. |
+[Planning for Application Operating System Compatibility](planning-for-application-operating-system-compatibility.md) |
+
Plan an end-to-end deployment scenario for your organization. |
+[End-to-End Planning Scenario for MED-V 2.0](end-to-end-planning-scenario-for-med-v-20.md) |
+
Define the project scope by defining the end users and determining the MED-V images to be managed. |
+[Define and Plan your MED-V Deployment](define-and-plan-your-med-v-deployment.md) |
+
Review the list of best practices for ensuring that your MED-V deployment is more secure. |
+[Security and Protection for MED-V](security-and-protection-for-med-v.md) |
+
Step | +Reference | +
---|---|
Ensure that your computing environment meets the supported configurations that are required for installing MED-V 2.0. |
+[MED-V 2.0 Supported Configurations](med-v-20-supported-configurations.md) |
+
Plan and design the MED-V deployment. |
+[Planning for MED-V](planning-for-med-v.md) |
+
Verify that the required installation prerequisites are configured. |
+[Configure Installation Prerequisites](configure-installation-prerequisites.md) |
+
Install the MED-V Host Agent and MED-V Workspace Packager. |
+[Deploy the MED-V Components](deploy-the-med-v-components.md) |
+
Step | +Reference | +
---|---|
Prepare the MED-V image for deployment. |
+[Prepare a MED-V Image](prepare-a-med-v-image.md) |
+
Create the MED-V workspace deployment package. |
+[Create a MED-V Workspace Package](create-a-med-v-workspace-package.md) |
+
Test the MED-V workspace installer package. |
+[Testing the MED-V Workspace Package](testing-the-med-v-workspace-package.md) |
+
Deploy the MED-V workspace installer package. |
+[Deploying the MED-V Workspace Package](deploying-the-med-v-workspace-package.md) |
+
Argument | +Description | +
---|---|
/norestart |
+Prevents the installation of Windows Virtual PC and the Windows Virtual PC update from restarting the host computer. |
+
/quiet |
+Installs the MED-V components in quiet mode without user interaction. |
+
/qn |
+Installs the MED-V components without a user interface. |
+
IGNORE_PREREQUISITES |
+Installs without checking for Windows Virtual PC. +
+Note
+
+Only specify this argument if you are installing Windows Virtual PC as part of this installation. +
+
+ |
+
OVERWRITEVHD |
+Forces the installation of the MED-V workspace and prevents any prompts that it might generate. |
+
Argument | +Description | +
---|---|
/norestart |
+Prevents the installation of Windows Virtual PC and the Windows Virtual PC update from restarting the host computer. |
+
/quiet |
+Installs the MED-V components in quiet mode without user interaction. |
+
/qn |
+Installs the MED-V components without a user interface. |
+
IGNORE_PREREQUISITES |
+Installs without checking for Windows Virtual PC. +
+Note
+
+Only specify this argument if you are installing Windows Virtual PC as part of this installation. +
+
+ |
+
OVERWRITEVHD |
+Forces the installation of the MED-V workspace and prevents any prompts that it might generate. |
+
Type | +Location | +Files | +
---|---|---|
Base VHD |
+%ProgramData%\Microsoft\Medv\Workspace |
+InternalName.vhd - Where InternalName is the name of the virtual hard disk that you selected in the MED-V Workspace Packager. |
+
Differencing Disk |
+%LocalAppData%\Microsoft\MEDV\v2\Virtual Machines |
+WorkspaceName.vhd |
+
Saved State File |
+%LocalAppData%\Microsoft\MEDV\v2\Virtual Machines |
+WorkspaceName.vsv |
+
Name | +Type | +Data/Default | +Description | +
---|---|---|---|
EventLogLevel |
+DWORD |
+Default=3 |
+The type of information that is logged in the event log. Levels include the following: 0 (None), 1 (Error), 2 (Warning), 3 (Information), 4 (Debug). |
+
Name | +Type | +Data/Default | +Description | +
---|---|---|---|
AddUserToAdminGroupEnabled |
+DWORD |
+Default=0 |
+Configures whether first time setup automatically adds the end user to the administrator's group. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: First time setup does not automatically add the end user to the administrator's group. |
+
+ | + | + | 1 = true: First time setup automatically adds the end user to the administrator's group. |
+
ComputerNameMask |
+SZ |
+MEDV* |
+The computer name mask that is used to create the guest virtual machine's computer name. |
+
+ | + | + | The mask can contain a %username% tag to insert the username as part of the computer name. Likewise, the %hostname% tag inserts the name of the host computer. +Every "#" character in the mask is replaced by a random digit. An asterisk (*) character at the end of the mask is replaced by random alphanumeric characters. +A specific number of characters from %hostname% and %username% can be captured by using square brackets. For example, "%username%[3]" would use the first three characters of the username. |
+
DeleteVMStateTimeout |
+DWORD |
+Default=90 |
+The time-out value, in seconds, when first time setup tries to delete the virtual machine. Range = 0 to 2147483647. |
+
DetachVfdTimeout |
+DWORD |
+Default=120 |
+The time-out value, in seconds, when first time setup tries to detach the virtual floppy disk from the virtual machine. Range = 0 to 2147483647. |
+
DialogUrl |
+SZ |
++ | Customizable URL that links to internal webpage and is displayed by first time setup dialog messages. |
+
ExplorerTimeout |
+DWORD |
+Default=900 |
+The time-out value, in seconds, that first time setup waits for Windows Explorer. Range = 0 to 2147483647. |
+
FailureDialogMsg |
+MULTI_SZ |
+Message is found in resource file |
+Customizable message that is displayed to the end user when first time setup cannot be completed. |
+
GiveUserGroupRightsMaxRetryCount |
+DWORD |
+Default=3 |
+The maximum number of times that MED-V tries to give an end user group rights. Exceeding the specified retry value without being able to successfully give an end user group rights most likely causes a virtual machine preparation failure that is then subject to the MaxRetryCount value. Range = 0 to 2147483647. |
+
GiveUserGroupRightsTimeout |
+DWORD |
+Default=300 |
+The time-out value, in seconds, when giving a user group rights. Range = 0 to 2147483647. |
+
LogFilePaths |
+MULTI_SZ |
++ | A list of the log file paths that MED-V collects during first time setup. |
+
MaxPostponeTime |
+DWORD |
+Default=120 |
+The maximum number of hours that first time setup can be postponed by the end user. Range = 0 to 2147483647. |
+
MaxRetryCount |
+DWORD |
+Default=3 |
+The maximum number of times that MED-V tries to prepare a virtual machine if each attempt ends in a failure other than a software error. When virtual machine preparation fails and the number of first time setup retries is exceeded, then MED-V informs the end user about the failure and does not give the option to retry. The count is re-set every time that MED-V is started. Range = 0 to 2147483647. |
+
Mode |
+SZ |
+Default=Unattended |
+Configures how first time setup interacts with the user. Possible values are as follows: |
+
+ | + | + | Attended. The end user must enter information during first time setup. +
+Note
+
+If you created the Sysprep.inf file so that Mini-Setup requires user input to complete, then you must select Attended mode or problems might occur during first time setup. +
+
+ |
+
+ | + | + | Unattended. The virtual machine is not shown to the end user during first time setup, but the end user is prompted before first time setup starts. |
+
+ | + | + | Silent. The virtual machine is not shown to the end user at all during first time setup. |
+
NonInteractiveRetryTimeoutInc |
+DWORD |
+Default=15 |
+The time-out value, in minutes, that first time setup must be completed in first time setup interactive mode when re-attempting setup. Range = 0 to 2147483647. |
+
NonInteractiveTimeout |
+DWORD |
+Default=45 |
+The time-out value, in minutes, that first time setup must be completed in first time setup interactive mode. Range = 0 to 2147483647. |
+
PostponeUtcDateTimeLimit |
+SZ |
++ | The date and time, in UTC DateTime format, that first time setup can be postponed. Enter in the format "yyyy-MM-dd hh:mm" with hours specified by using the 24-hour clock standard. |
+
RetryDialogMsg |
+MULTI_SZ |
+Message is found in resource file |
+Customizable message that is displayed to the end user when first time setup must re-attempt setup. |
+
SetComputerNameEnabled |
+DWORD |
+Default=0 |
+Configures whether the ComputerName entry under the [UserData] section of the Sysprep.inf file in the guest should be updated according to the specified ComputerNameMask. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The ComputerName entry in the Sysprep.inf file is not updated according to the ComputerNameMask. |
+
+ | + | + | 1 = true: The ComputerName entry in the Sysprep.inf file is updated according to the ComputerNameMask. |
+
SetJoinDomainEnabled |
+DWORD |
+Default=0 |
+Configures whether the JoinDomain setting under the [Identification] section of the Sysprep.inf file in the guest should be updated to match the settings on the host. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The JoinDomain setting in the Sysprep.inf file is not updated to match the settings on the host. |
+
+ | + | + | 1 = true: The JoinDomain setting in the Sysprep.inf file is updated to match the settings on the host. |
+
SetMachineObjectOUEnabled |
+DWORD |
+Default=0 |
+Configures whether the MachineObjectOU setting under the [Identification] section of the Sysprep.inf file in the guest is updated to match the host. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The MachineObjectOU setting in the Sysprep.inf file is not updated to match the settings on the host. |
+
+ | + | + | 1 = true: The MachineObjectOU setting in the Sysprep.inf file is updated to match the settings on the host. |
+
SetRegionalSettingsEnabled |
+DWORD |
+Default=0 |
+Configures whether the settings under the [RegionalSettings] section of the Sysprep.inf file in the guest are updated to match the host. 0 = false; 1 = true. +
+Note
+
+By default, the setting for TimeZone in the guest is always synchronized with the TimeZone setting in the host. +
+
+ |
+
+ | + | + | 0 = false: The settings under the [RegionalSettings] section of the Sysprep.inf file in the guest are not updated to match the host. |
+
+ | + | + | 1 = true: The settings under the [RegionalSettings] section of the Sysprep.inf file in the guest are updated to match the host. |
+
SetUserDataEnabled |
+DWORD |
+Default=0 |
+Configures whether the FullName and the OrgName settings under the [UserData] section of the Sysprep.inf file in the guest are updated to match the settings on the host. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The FullName and OrgName settings in the Sysprep.inf file are not updated to match the settings on the host. |
+
+ | + | + | 1 = true: The FullName and OrgName settings in the Sysprep.inf file are updated to match the settings on the host. |
+
StartDialogMsg |
+MULTI_SZ |
+Message is found in resource file |
+Customizable message that is displayed to the end user when first time setup is ready to start. |
+
TaskCancelTimeout |
+DWORD |
+Default=30 |
+The time-out value, in seconds, that first time setup waits for a response from the virtual machine for a Cancel operation. Range = 0 to 2147483647. |
+
TaskVMTurnOffTimeout |
+DWORD |
+Default=60 |
+The time-out value, in seconds, that first time setup waits for the virtual machine to shut down. Range = 0 to 2147483647. |
+
UpgradeTimeout |
+DWORD |
+Default=600 |
+The time, in seconds, before an attempted upgrade of the MED-V Guest Agent software times out. Range = 0 to 2147483647. |
+
Name | +Type | +Data/Default | +Description | +
---|---|---|---|
AppPublishingEnabled |
+DWORD |
+Default=1 |
+Configures whether application publication from the guest to the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables application publishing from the guest to the host. |
+
+ | + | + | 1 = true: Enables application publishing from the guest to the host. |
+
AudioSharingEnabled |
+DWORD |
+Default=1 |
+Configures whether the sharing of the audio I/O device between the guest and the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables the sharing of the audio I/O device between the guest and the host. |
+
+ | + | + | 1 = true: Enables the sharing of the audio I/O device between the guest and the host. |
+
ClipboardSharingEnabled |
+DWORD |
+Default=1 |
+Configures whether the sharing of the Clipboard between the guest and the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables the sharing of the Clipboard between the guest and the host. |
+
+ | + | + | 1 = true: Enables the sharing of the Clipboard between the guest and the host. |
+
DialogTimeout |
+DWORD |
+Default=300 |
+The time, in seconds, before the first time setup Start Dialog times out. Range = 0 to 2147483647. |
+
HideVmTimeout |
+DWORD |
+Default=30 |
+The time-out value, in minutes, that the full-screen virtual machine window is hidden from the end user during a long logon attempt. |
+
LogonStartEnabled |
+DWORD |
+Default=1 |
+Configures whether the guest should be started when the end user logs on to the desktop or when the first guest application is started. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The guest is started when the first guest application is started. |
+
+ | + | + | 1 = true: The guest is started when the end user logs on to the desktop. |
+
PrinterSharingEnabled |
+DWORD |
+Default=1 |
+Configures whether the sharing of printers between the guest and the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables the sharing of printers between the guest and the host. |
+
+ | + | + | 1 = true: Enables the sharing of printers between the guest and the host. |
+
RebootAbsoluteDelayTimeout |
+DWORD |
+Default=1440 |
+The time-out value, in minutes, that first time setup waits for a restart. Range = 0 to 2147483647. |
+
RedirectUrls |
+MULTI_SZ |
+Specified URL list |
+Specifies a list of URLs to be redirected from the host to the guest. |
+
SmartCardLogonEnabled |
+DWORD |
+Default=0 |
+Configures whether smart cards can be used to authenticate users to MED-V. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Does not let Smart Cards authenticate end users to MED-V. |
+
+ | + | + | 1 = true: Lets Smart Cards authenticate end users to MED-V. +
+Important
+
+If SmartCardLogonEnabled and CredentialCacheEnabled are both enabled, SmartCardLogonEnabled overrides CredentialCacheEnabled. +
+
+ |
+
SmartCardSharingEnabled |
+DWORD |
+Default=1 |
+Configures whether the sharing of Smart Cards between the guest and the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables the sharing of Smart Cards between the guest and the host. |
+
+ | + | + | 1 = true: Enables the sharing of Smart Cards between the guest and the host. |
+
USBDeviceSharingEnabled |
+DWORD |
+Default=1 |
+Configures whether the sharing of USB devices between the guest and the host is enabled. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Disables the sharing of USB devices between the guest and the host. |
+
+ | + | + | 1 = true: Enables the sharing of USB devices between the guest and the host. |
+
Name | +Type | +Data/Default | +Description | +
---|---|---|---|
CloseAction |
+SZ |
+Default=HIBERNATE |
+The action that the virtual machine performs after the last application that is running is closed. This setting is ignored if the LogonStartEnabled value is enabled. Possible options are as follows: |
+
+ | + | + | HIBERNATE . This option releases all physical resources that the virtual machine is using, such as memory and CPU, and saves the state of all running applications and operations. |
+
+ | + | + | SHUTDOWN . This option shuts down the guest operating system safely and then releases all physical resources that the virtual machine is using, such as memory and CPU. |
+
+ | + | + | TURN-OFF. This option can cause data loss because it is the same as turning off the power button or pulling out the power cord on a physical computer. Use this option only if you cannot use one of the other two options. |
+
GuestMemFromHostMem |
+MULTI_SZ |
+378, 512, 1024, 1536, 2048 |
+A list of memory (MB) values for the guest. This value is used to determine how much RAM is available to the guest. Combined with HostMemToGuestMem, a lookup table is created to determine how much RAM to allocate on the guest virtual machine. Possible values can be from 128 to 3712. |
+
GuestUpdateDuration |
+DWORD |
+Default=240 |
+The number of minutes that MED-V should keep the guest awake for automatic updating, starting at the time specified in the GuestUpdateTime value. Range = 0 to 1440. Setting this value to zero (0) disables the guest patching functionality. +For more information about guest patching for automatic updating, see [Managing Automatic Updates for MED-V Workspaces](managing-automatic-updates-for-med-v-workspaces.md). |
+
GuestUpdateTime |
+SZ |
+Default=00:00 |
+The hour and minute each day when MED-V should wake up the guest for automatic updating, by using the 24-hour clock standard. Specify the time in the format HH:MM +For more information about guest patching for automatic updating, see [Managing Automatic Updates for MED-V Workspaces](managing-automatic-updates-for-med-v-workspaces.md). |
+
HostMemToGuestMem |
+MULTI_SZ |
+1024, 2048, 4096, 8192, 16384 |
+A list of memory (MB) values for the guest, determined by the RAM available on the host. Combined with GuestMemFromHostMem, a lookup table is created to determine how much RAM to allocate on the guest virtual machine. Possible values can be from 1024 to 16384. |
+
HostMemToGuestMemCalcEnabled |
+DWORD |
+Default=1 |
+Configures whether the memory allocated for the guest is calculated from the memory present on the host. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: The memory allocated for the guest is not calculated from the memory present on the host. |
+
+ | + | + | 1 = true: The memory allocated for the guest is calculated from the memory present on the host. |
+
Memory |
+DWORD |
+Default=512 |
+The RAM (MB) that should be allocated for the guest virtual machine. This setting is ignored if the HostMemToGuestMemEnabled setting is enabled. Range=128 to 2048. |
+
MultiUserEnabled |
+DWORD |
+Default=0 |
+Configures whether multiple users share the same MED-V workspace. 0 = false; 1 = true. |
+
+ | + | + | 0 = false: Multiple users do not share the same MED-V workspace. |
+
+ | + | + | 1 = true: Multiple users share the same MED-V workspace. |
+
NetworkingMode |
+SZ |
+Default=NAT |
+The kind of network connection used on the guest. Possible values are as follows: |
+
+ | + | + | Bridged. MED-V has its own network address, typically obtained through DHCP. |
+
+ | + | + | NAT. MED-V uses Network Address Translation (NAT) to share the host's IP for outgoing traffic. |
+
TaskTimeout |
+DWORD |
+Default=600 |
+A general time-out value, in seconds, that MED-V waits for a task to be completed, such as restarting and shutting down. Range = 0 to 2147483647. |
+
Name | +Type | +Data/Default | +Description | +
---|---|---|---|
EnableGPWorkarounds |
+DWORD |
+Default=1 |
+Configures how MED-V handles the keys BufferPolicyReads and GroupPolicyMinTransferRate. |
+
+ | + | + | By default, MED-V sets these keys as follows: +BufferPolicyReads=1 and GroupPolicyMinTransferRate=0. +Create the EnableGPWorkarounds key, if it is necessary, and set the key to zero if you do not want MED-V to change the default settings of BufferPolicyReads and GroupPolicyMinTransferRate. +
+Note
+
+If your MED-V workspace is running in NAT mode, EnableGPWorkarounds affects the registry keys BufferPolicyReads and GroupPolicyMinTransferRate. If your MED-V workspace is running in BRIDGED mode, EnableGPWorkarounds only affects the registry key BufferPolicyReads. +
+
+
+1=true: MED-V sets the keys BufferPolicyReads=1 and GroupPolicyMinTransferRate=0 (if running in NAT mode) or just BufferPolicyReads=1 (if running in BRIDGED mode). +0=false: MED-V does not make any changes to the keys BufferPolicyReads and GroupPolicyMinTransferRate. |
+
Start MED-V workspace |
+ Choose whether to start the MED-V workspace at user logon, at first use, or to let the end user decide when the MED-V workspace starts. |
+
+ | The MED-V workspace starts in one of two ways: either when the end user logs on or when they first perform an action that requires MED-V, such as opening a published application or entering a URL that requires redirection. +You can either define this setting for the end user or let the end user control how MED-V starts. +
+ Note
+
+ If you specify that the end user decides, the default behavior they experience is that the MED-V workspace starts when they log on. They can change the default by right-clicking the MED-V icon in the notification area and selecting MED-V User Settings. If you define this setting for the end user, they cannot change the way in which MED-V starts. +
+
+ |
+
Networking |
+ Select Shared or Bridged for your networking setting. The default is Shared. |
+
+ | Shared - The MED-V workspace uses Network Address Translation (NAT) to share the host's IP for outgoing traffic. +Bridged - The MED-V workspace has its own network address, typically obtained through DHCP. |
+
Store credentials |
+ Choose whether you want to store the end user credentials. |
+
+ | The default behavior is that credential storing is disabled so that the end user must be authenticated every time that they log on. +
+ Important
+
+ Even though caching the end user’s credentials provides the best user experience, you should be aware of the risks involved. +The end user’s domain credential is stored in a reversible format in the Windows Credential Manager. An attacker could write a program that retrieves the password and thus gain access to the user’s credentials. You can only lessen this risk by disabling the storing of end user credentials. +
+
+ |
+
Operating System | +Edition | +Service Pack | +System Architecture | +
---|---|---|---|
Windows 7 |
+Professional, Enterprise, or Ultimate |
+None or SP1 |
+x86 or x64 |
+
Operating System | +Minimum Required RAM | +
---|---|
Windows 7 x86 |
+2GB |
+
Windows 7 x64 |
+2GB |
+
Operating System | +Edition | +Service Pack | +System Architecture | +
---|---|---|---|
Windows XP |
+Professional Edition |
+SP3 |
+x86 |
+
Property | +Description | +
---|---|
Machine |
+Read Only property that contains the name of the guest virtual machine provisioned by first time setup. This key contains the name that the guest would have had on first time setup failure. |
+
StatusCode |
+Read Only property that contains zero if first time setup succeeded. Any other value returned equals the event ID for the error that is logged. |
+
Time |
+The UTC time that first time setup completed. |
+
User |
+The user for which first time setup was run. |
+