Transferring Personal Settings between Managed Desktop workstations

IS&T have implemented a service that will allow staff and students to transfer personal settings between workstations for certain applications.

This will improve teaching and learning due to the fact that application settings will be retained between sessions so not requiring students and staff to re-configure their settings each time. For some applications such as Visual Studio this has improved the time taken to launch the application and means that users don’t have to configure the application to their own requirements before they can use it.

Personal settings for common Microsoft software such as Microsoft Office and Internet Explorer will be retained as will any shortcut placed on the computer desktop of an Managed Desktop Office workstation, allowing staff users to create shortcuts to their favourite applications and documents. Desktop shortcuts will not copy between Lab workstations.

Common settings that this could be used for include Microsoft Office configuration settings, Outlook signature files and Internet Explorer settings such as setting the home page to something different.

This achieved by using a new technology from Microsoft called ‘User Experience Virtualization’, or UE-V for short.

Staff using an MD7 Office workstation retain their profiles indefinitely, so any additional settings that are set will remain, using UE-V will aid the movement of users between  workstations, transferring settings for the common applications.

How are settings transferred?

Desktop settings, such as desktop shortcuts and Windows Explorer settings are applied during the login process and updated during the logout process.

Applications settings are applied when the application is launched and saved when the application is closed.

This is a very efficient way of transferring settings as only settings required by a specific application are applied.

Where are the application settings saved?

The settings files are stored within the user’s Homespace folder, specifically within folders within the directory ‘F:\SettingsPackages’ with names that relate to the application. These settings files are very small in size and should not affect the users’ usage of Homespace.

Can these settings files be deleted?

If there are space issues for Homespace or the user does not require the settings that are saved then these files can be deleted without any issues. The user will lose all of their settings and so revert to the standard Managed Desktop settings for the application.

The application ‘MD Help’ which can be launched from the Start Menu has an option within the ‘Extra Reports’ tab for users to analyse their Homespace drive to show the amount of space in use by each folder and to also show the largest and the oldest files within their Homespace. A good location to look for files that could be deleted to free up space is the F:\Download folder.

Which settings are currently transferred?

At present, Lab and Office machines will transfer a limited number of application settings between sessions for all users. These applications are:

  • Internet Explorer
  • Google Chrome (bookmarks and history)
  • Microsoft Office 2010
  • Microsoft Visio 2010
  • Microsoft Project 2010
  • Microsoft Publisher 2010
  • Microsoft SharePoint Designer 2010
  • Microsoft SharePoint Workspace 2010
  • Matlab 8
  • NVivo 10
  • Cisco Jabber client
  • Oracle SQL Developer
  • SSH Secure Shell
  • Microsoft Visual Studio 2008
  • Microsoft Visual Studio 2012
  • Microsoft Visual Studio 2013
  • Microsoft SQL Server Management Studio
  • Windows Calculator
  • Windows Notepad
  • Windows Wordpad
  • Windows Desktop shortcuts (LNK and URL files) for Office workstations

We intend to extend the list of applications that will roam user settings.

Desktop shortcuts and Pinned Taskbar items on Office workstations

Desktop shortcuts will roam between Office workstations. This could potentially cause issues because the user might have shortcuts on their desktop that might refer to applications installed locally and so not available on all workstations.

Items pinned to the Taskbar and Start Menu are not roamed at present, though we are investigating this.

Note: Files and documents stored on the desktop will not roam, only shortcuts. As always, files required on other machines should be stored in Homespace or a Shared network folder, not an individual machine.

This is exactly the same configuration as used for the Staff Remote Desktop.

Desktop and OS settings

UE-V can roam Windows Desktop settings and ‘Ease of Access’ settings. These will not be available during the initial rollout, but will be considered for the future.

Outlook signature files do roam, but some Outlook settings not roamed between sessions

UE-V will transfer Outlook signature files, but not the settings to automatically add a signature to an email. This is an know issue with Outlook settings in that they are stored in two locations, one of which is unique to the workstation and created when the Outlook profile is first set up.

Outlook settings that do not roam between sessions on a different computer include:

  • Changes to the location of the viewing pane from the side to another location
  • Adding additional mailboxes to Outlook
  • Outlook signature settings for the signature to apply to new messages and replies
  • Changing the font used within emails

This is a known issue, as documented in this Microsoft KB article:
Migrating MAPI profiles with Microsoft UE-V is not supported

Microsoft are aware that is an issue and are actively working on a solution. The next version of UE-V is supposed to resolve some of the above issues.

To insert a signature into an email on a new workstation the user should select Insert, Signatures and then select the required signature.

Potential issue for staff users when first use UE-V

When UE-V is enabled, the settings first saved will be from the machine where the user first used UE-V, which could mean potentially a staff member could log into another machine, potentially a Lab machine and so get standard settings and then login to their Office machine and have these settings transferred. This isn’t very likely and unless it’s something obvious like the IE Homepage that is set then they might not even notice, but to mitigate this we are doing two things:

  1. Enabling UE-V on Office machines before Lab machines, so hopefully staff members will use their ‘personal’ machine and capture these settings
  2. Backing up the current Office settings so that they can be restored if necessary. To do this, on their ‘own workstation’ within Windows Explorer the user should open the folder:
    1. %userprofile%\AppData\Local\SHU\RegistryBackup, selecting the most recent number available
    2. Run the .reg file for the application(s) they wish to restore and copy the Desktop shortcuts to the user’s Windows Desktop.

Rollout of UE-V

This is currently in the initial phase of the rollout.

  • 30/10/2014 – SLS MD7 Office workstations
  • 04/11/2014 – FDR MD7 Office workstations
  • 11/11/2014 – DS MD7 Office workstations
  • 11/11/2014 – HWB MD7 Office workstations
  • 14/11/2014 – All MD7 Office workstations
  • 14/11/2014 – Owen Lab workstations
  • 16/02/2015 – Norfolk Lab workstations
  • 02/03/2015 – All Lab workstations, but not Lecture workstations

Videos of UE-V being used within SHU (only for SHU users)

See the videos on Confluence

MD2014 Patch 23 being distributed to MD7 Workstations

After successful MD UAT Testing we have released MD2014 workstation Patch 23, which is the first patch for MD2014 workstations.

This update will only be applied to the workstation when it is at the ctrl+alt+del screen, and will be a phased rolled out.

Patch-23 includes the following:

  • Delete the UE-V Customer Experience Improvement Program (CEIP) scheduled tasks
  • Copy an updated IE UE-V XML file to allow to work with Enterprise Mode
  • Update the WorkstationLock tool to version 4
  • New SHU bibligography files for 2014
  • Update “C:\SHU\PowerSettings\MD7-PowerOff.ps1” file with latest version
  • Uninstall FS Clerkenwell font for lab machines, but not lecture PCs or any machine with lec in the name
  • Disabled the UserLock service
  • Start FileOpen64 service by adding to HKLM\…\Run registry

Adobe Flash Player 15.0.0.189 being distributed to MD7 Workstations

After successful testing with the various test groups we have released Adobe Flash Player 15.0.0.189 to MD7 workstations in order to resolve critical flaws with previous versions and to provide new functionality.

The update is being distributed in a phased roll out so it will take a few days to be applied to MD7 workstations and will only install when the workstation is at the ctrl+alt+del screen.

Google Chrome 38.0.2125.104 being distributed to MD7 Workstations

After successful testing with the various test groups we have released Google Chrome 38.0.2125.104 to MD7 workstations in order to resolve critical flaws with previous versions and to provide new functionality.

The update is being distributed in a phased roll out so it will take a few days to be applied to MD7 workstations and will only install when the workstation is at the ctrl+alt+del screen.

Adobe Reader 11.0.9 being distributed to MD7 Workstations

After successful testing with the various test groups we have released Adobe Reader 11.0.9 to MD7 workstations in order to resolve critical flaws with previous versions and to provide new functionality.

The update is being distributed in a phased roll out so it will take a few days to be applied to MD7 workstations and will only install when the workstation is at the ctrl+alt+del screen.

In order to test the version of Adobe Reader that is installed on your workstation, within Adobe Reader check the Help, About information.

Updating MD2013 workstations to MD2014 workstation by update patches

Each year IS&T update the Managed Desktop by producing a new image for installation on new workstations and lab workstations that get re-imaged each summer. For existing workstations that will not be re-imaged, such as Office workstations, we apply a series of update patches that install the new and updated software and settings over a short period of time in order to bring the workstation up to the latest version of Managed Desktop. We do this so that Office machines that have staff personal settings and software installed are not re-imaged with the default image.

Applying these patches is done over a few weeks as we have to apply a series of updates to over 4000 workstations and the updates can be quite large and require the workstation to restart after installation. For this reason for the initial roll out we try to distribute the update to a collection of workstations over night by waking them up remotely and applying the updates. This is not always possible for a variety of reasons, such as the workstation having a user still logged in or being a laptop that requires a password or USB pen drive inserted in order for it to boot. Any machine that is not updated overnight will be updated via a different method.

MD2014

There are six patches required to update MD2013 workstations to MD2014. These are numbered MD Patches 17 to 22 because for MD patches we keep the sequence from the initial roll out of MD7 in 2011. Each patch requires the workstation to restart in order for the update to complete successfully.

The process is scheduled to begin from Wednesday 17th September in a phased rollout, starting with SLS workstations.

Updates applied by each patch

Patch 1 (MD7 Workstation Patch-17)

  • Update the Microsoft User Environment Virtualization (UE-V) agent to version 2.0.1
  • Update the vWorkspace Connector to version 8.0
  • Alter laptop power settings to enable hibernate if not enabled

Patch 2 (MD7 Workstation Patch-18)

  • Install .NET 4.5.1 Framework
  • update the Enterprise Vault client version 10.0.4
  • Update Realplayer Enterprise to version 2.1.11
  • Update QuickTime Player to version 7.7.5

Patch 3 (MD7 Workstation Patch-19)

  • Update Adobe Reader to version 11.0.7
  • Install Asian Language Font Pack for Adobe Reader XI
  • Update the FileOpen client to version B942
  • Update the Keyserver client to version 7.1

Patch 4 (MD7 Workstation Patch-20)

  • Uninstall Java 1.6 Update 45 JRE
  • Uninstall Java 1.6 Update 45 JDK
  • Install Java 1.7 Update 55 JRE

Patch 5 (MD7 Workstation Patch-21)

  • Update Windows Management Framework to version 4 (includes Powershell 4)

Patch 6 (MD7 Workstation Patch-22)

  • Update Internet Explorer to version 11

Checking the version of Managed Desktop for your workstation

In order to check which version of Managed Desktop you are using open the ‘MD Help’ application from the ‘Start Menu\All Programs’ menu. When this has opened, select the ‘Workstation Information’ tab along the top of the application and check the ‘Version’ and ‘Patch’ levels within the main window.
If the patch level is 17 or greater, but not yet 22 then your workstation will be in the process of being updated to MD2014.

Once the workstation is at Patch 22 and Version MD2014 all of the required updates will have run successfully.

Message on login

Users will receive a message during the login process when their machine has been successfully updated to MD2014.

Patching Schedule

Attached is a schedule of when we apply each patch to groups of Office workstations.
Due to the large number of workstations that need doing and the time and resources required to deliver the updates, the updates will be kept to around 300 at a time as a maximum. In order to achieve this, workstations will be grouped according to their name, for instance all workstations called ‘ACES-DA’, ‘ACES-DB’, ‘ACES-DC’ and ‘ACES-DD’ will be in the same patching schedule.

Just because a workstation is scheduled to get a patch doesn’t mean this will have happened successfully. Factors that would prevent this include:

  • A user is currently logged in to the workstation
  • The workstation can not be woken up by Wake-On-LAN (WOL)
  • The workstation is a laptop that requires either a USB pen drive or a PIN in order for the machine to boot
  • The workstation has less than 2Gb of free disk space

The current status can be see here:
\\hallam.shu.ac.uk\aipapps\MD7\PatchesWorkstation\MD2014UpdatePatchingSchedule.xlsx

MD2014 64-bit available to SHU

The 2014/15 64-bit Windows 7 Managed Desktop has been released to the University. This can be installed from Altiris and SCCM.

If using Altiris ITS will need to create the necessary jobs within Altiris, and please update all Altiris jobs to use the 2014 image. As far as we are aware, there should be no need for the 2013 image to be used.

The new and updated software for 2014/15 that is included within the standard image includes:

  • Internet Explorer 11 x64 and x86
  • Java 1.7 Update 55 x64 and x86 JRE
  • UE-V 2013 SP1 Agent
  • .NET Framework 4.5.1
  • Windows Powershell 4.0
  • Symantic Enterprise Vault Outlook Add-In 10.0.4
  • Apple QuickTime 7.7.5
  • RealPlayer Enterprise 2.1.1
  • Dell vWorkspace Connector for Windows 8.0 MR1
  • Sassafras Keyserver Client 7.1
  • Adobe Flash Player 14.0.0.125
  • Shockwave Player 12.1.2.152
  • Google Chrome 35.0.1916.153
  • Adobe Acrobat Reader 11.0.7
  • Extended Asian Language font pack for Adobe Reader XI
  • FileOpenx64 plugin for Adobe XI

Software removed from MD2014/15 and not replaced by a newer version

  • Java 1.6 JDK

For a full list of the software within the Managed Desktop image see: https://confluence.hallam.shu.ac.uk/display/ITSEXTRA/Software+Installed+within+the+MD7+image Please Note, this is not a list of all the software available for Managed Desktop. For a list of this see the Software List.

Internet Explorer 11 and Java 1.7

The major updates for MD2014/15 are the inclusion of Internet Explorer 11 and Java 1.7.

Both updates have been extensively tested with corporate applications and a number of issues have been discovered. Many of these issues have been resolved by implementing various workarounds or by a planned update to the service, but not all of these updates have occurred yet.

The issues discovered during testing only affect Office workstations, so for this reason the patches to update MD2013 to MD2014 will not be released until the September.

Most Office workstations can have MD2014 installed, with the exception of users who use Raisers Edge. Please do not image a machine that uses Raisers Edge with 2014 until further notice.

If any issues are discovered with software or services that were not discovered during testing please let the N&I Directories and Desktop Team know as soon as possible for aresolution to be implemented.

If a workstation does have the 2014 image with IE11 that requires IE9 then as a last resort it is possible to uninstall IE11 via Control Panel, Programs, View installed updates then select Internet Explorer 11. This will need to be done by a user with local administrator rights.

Table of known issues with IE11 and resolutions

Please see the attached PDF files for further information.

Device Drivers installed via SCCM

The image has the latest device drivers available for all devices we know about.
Some devices, especially for laptops cannot be installed during the sysprep mini-setup routine due to them being installed via MSI or executable setup files.
For the latest laptops that we have been passed to N&I to investigate we have setup AD groups and SCCM jobs to install these additional drivers. If laptops are not added to these groups then laptops will not have some critical devices installed, including Bluetooth and Intel USB 3.

The Intel USB 3 issue also affects desktops, so desktops will also need adding to the appropriate AD group to get the drivers.
Laptops and Desktops using an image released before December 2013 will not be able to install Intel USB drivers due to a conflict with a previous driver.

We are investigating possibly delivering such drivers as part of the SCCM re-imaging process, but this is not available yet and will only apply to machines being re-imaged, not post-imaging of course.

For information about the AD groups and device drivers please see:
https://confluence.hallam.shu.ac.uk/display/ITSEXTRA/Device+Drivers+installed+with+SCCM

MD2014 Beta 2 available for testing

After testing MD2014 Beta 1, we have now released MD2014 Beta 2.

Beta 1 did not highlight any major issues with MD2014.

The updates applied to MD2014 Beta 2 include:

  • Adobe Flash 13.0.0.206
  • Google Chrome 34.0.1847.131
  • Adobe Shockwave Player 12.1.1.151
  • Adobe Reader 11.0.06
  • Java 7 Update 55 x86 JRE
  • Java 7 Update 55 x64 JRE

The Beta 2 image is available for imaging workstations both within Altiris and now also SCCM. If you would like a physical workstation re-imaging please let me know.

As previously, this should only be a test workstation and the re-image will completely wipe all partitions and re-install the OS.

There are also some MD2014 Beta 2 virtual machines available within vWorkspace  for testing.

If no issues are reported we plan to release the ‘MD2014 Release Candidate’ at the end of May and then the 2014 MD7 image on June 16th.