Transcript
D E P LOY I NG WO R K SP OT O N H Y P E R - V
Deploying Workspot VDI 2.0 on Hyper-V Step by Step Configuration Guide
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
Contents 1.
Prerequisites ....................................................................................................................................... 3
2.
Installing the Workspot Enterprise Connector ............................................................................... 3
3.
Add Hyper-V Configuration in Workspot Control ........................................................................... 4
4.
Creating a Windows Desktop Template ......................................................................................... 6 I.
Creating the Workspot AD Security Group ........................................................................... 6
II.
Create OU and GPO for Remote Desktop Users local group............................................ 8
III.
Create Hyper-V VM .................................................................................................................. 9
IV.
Enable Remote Desktop Connection................................................................................... 10
V.
Windows Firewall .................................................................................................................... 12
VI.
Install applications you want to deliver to end users ......................................................... 13
VII.
Workspot Agent installation .............................................................................................. 13
VIII.
Prepping template for Workspot Agent provisioning ..................................................... 14
IX.
Sysprep VM ............................................................................................................................. 14
X.
Hyper-V template conversation and customization ........................................................... 15
5.
Provisioning Desktops ..................................................................................................................... 18
6.
Assigning desktops to users ........................................................................................................... 21
Additional resources ................................................................................................................................ 23
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
1. Prerequisites Before starting, please have the following hardware and software components ready. General Prerequisites: 1. Hyper-V 2012 R2 or later environment 2. System Center Virtual Machine Manager (SCVMM) console on Workspot Enterprise Connector Windows Server machine 3. Hyper-V admin account with appropriate permissions 4. Sufficient resources: CPU, memory, storage and networking 5. DHCP to provide IP addresses to provisioned VDI desktops 6. Template for Windows 7, 8.1 or 10 desktops
2. Installing the Workspot Enterprise Connector The first step is to associate the Hyper-V to the Workspot cloud. This is accomplished by installing the Workspot Enterprise Connector either on a VM on Hyper-V or on a server with access to the LAN IP of the Hyper-V SCVMM. The Workspot Enterprise Connector is a lightweight client service that is installed on a Windows Server machine in the Datacenter that associates the Hyper-V cluster to Workspot Control.
WORKSPOT ENTERPRISE CONNECTOR INSTALLATION Review the following installation guide for the Workspot Enterprise Connector: https://workspot.zendesk.com/hc/en-us/articles/206596913
SCVMM console installation After installing the Enterprise Connector server, install the SCVMM console on the same Windows Server machine. Ensure the build number of SCVMM console installation matches SCVMM server build. Review the following website for build information: https://buildnumbers.wordpress.com/scvmm/
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
3. Add Hyper-V Configuration in Workspot Control Hyper-V integration requirements:
A LAN IP from the SCVMM machine Hyper-V admin account with appropriate permissions
Once Enterprise Connector is installed and connected, click on Configs tab then Add Configuration.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
Configure the Datacenter Configuration for Hyper-V as appropriate along with SCVMM port. Enter the Hyper-V admin credentials in the fields Username (i.e. admin) and Password.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
4. Creating a Windows Desktop Template Creating a Windows Desktop template prepares the template from which each desktop will be cloned. The ten steps to create template/golden image are: I. II.
III. IV. V. VI. VII. VIII. IX. X.
Create AD Security Group for Workspot users, then add Workspot users’ AD user accounts as members of the Group. Create OU in Active Directory for VDI desktops and create a Group Policy (GPO) to add the Workspot AD Security Group to the Remote Desktop Users local group. Create Hyper-V VM in SCVMM. Install appropriate Windows Desktop OS (Windows 7, 8.1 or 10). Apply latest updates. Enable Remote Desktop Connections: Allow connections from computers running Remote Desktop Disable Windows Firewall or allow Remote Desktop Connection (RDP port 3389) on firewall. Install applications you want to deliver to end users (i.e. Microsoft Office 2013, Adobe Acrobat, etc). Workspot Agent Installation and template registration to Workspot Control. Sysprep VM with the following command: C:\Windows\System32\sysprep\sysprep.exe /oobe /shutdown /generalize Create a sysprep unattend.xml answer file (optional) for Windows customization and upload into SCVMM library. Clone template VM, convert to template format and customize template.
I. Creating the Workspot AD Security Group To provide Workspot users access to the VDI desktop, they are added to the local Remote Desktop Users group of the VDI desktop. In order to simplify this, create an AD Security Group which will be added to the Remote Desktop Users group. Note: This is an optional step for trial/PoC testing since we can add Domain User group to the VDI desktop. However, this is recommended in a production environment.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
1. Create AD Security Group(s) for Workspot users.
2. Add Workspot users as appropriate to AD Security group.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
II.
Create OU and GPO for Remote Desktop Users local group 1. Create OU in Active Directory for newly provisioned VDI desktops.
2. Create Group Policy for the new OU and configure Remote Desktops Users local group adding the Workspot AD Group as a member. Computer Configuration > Policies > Windows Settings > Security Settings > Restricted Groups > Add Group > Type in Remote Desktop Users.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
In the Members of this group section, add the Workspot AD Security Group.
III. Create Hyper-V VM Please refer to SCVMM VM creation guide.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
IV. Enable Remote Desktop Connection Workspot leverages Remote Desktop Connection to connect to VDI desktops. 1. Go to Control Panel > System > Remote settings
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
2. Select either Allow connections from computers running any version of Remote Desktop or Allow connections only from computers running Remote Desktop with Network Level Authentication radio button.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
V. Windows Firewall Workspot leverages Remote Desktop Connection on port 3389 to connect to VDI desktops. Disable Windows Firewall to prevent issues connecting or allow port 3389 in firewall. Example below disables Windows Firewall. Note: Verify Domain Profile is disabled. 1. Open Control Panel > Windows Firewall > System and Security > Windows Firewall > Advanced settings
2. Verify all profiles are disabled. If not, click on Properties to disable.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
VI. Install applications you want to deliver to end users Install any applications on the virtual machine such as Office, Adobe, etc. VII. Workspot Agent installation Before running the Workspot Agent installation, shut down the template VM. Run the Hyper-V clone functionality on the template VM then boot into the new clone. The Workspot agent will register the template to Workspot Control using the MAC address of the VM so once the template is registered and sysprep, no changes can be made. For changes or updates, use the original template VM and clone again. Download the Workspot Agent install from: http://download.workspot.com/WorkspotAgentSetup64.exe Run the Workspot Agent installer and use your Workspot admin credentials to register the template.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
VIII.
Prepping template for Workspot Agent provisioning 1. Create a service admin account that can join machines to the domain. Workspot recommends creating a service account that only have permissions for specific OUs in Active Directory where provisioned machines will reside. 2. Copy sample Workspot XML config file provided after the install of the Workspot Agent. Sample file is located in the install folder of the Workspot Agent: c:\Program Files\Workspot Agent\ 3. Modify the XML config file with service admin account credentials along with OU info. Note: If password or any other parameters contains special characters, it must be escaped (i.e. OU=Workspot&Co is OU=Workspot&Co). Review table in end of this technote: https://workspot.zendesk.com/hc/en-us/articles/115002951363 Example:
domain.local joinDomainServiceAccount joinDomainServiceAccountPassword domain.local OU=Workspot,OU=VDI,DC=domain,DC=local
4. Copy Workspot XML config file to c:\windows\system32\config\systemprofile\appdata\local\workspot agent\config. Note: The Workspot XML config file will be deleted during provisioning.
IX.
Sysprep VM Hyper-V Template VM format are always sysprep. Sysprep in this step to ensure there are no issues with sysprep.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
Sysprep VM with the following command: C:\Windows\System32\sysprep\sysprep.exe /oobe /shutdown /generalize
This command will sysprep the VM then shut down the VM.
X.
Hyper-V template conversation and customization
Creating a Hyper-V template from the template VM will destroy the original VM replacing it with the VM template. Create a clone of this template VM before converting in case of changes or errors so it does not have to be rebuilt. Under VMs and Services panel > Right click on template VM > Create > Create VM Template.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
After VM template is created, configure the new template with Windows customization. Under Library > Templates > VM Templates > Select the new VM template and click on Properties.
Under Hardware Configuration > Verify Network Adapter config has correct network attached otherwise configure it.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
Under OS Configuration, required fields are: Admin Password, Product Key (If KMS use the following: https://technet.microsoft.com/en-us/library/jj612867(v=ws.11).aspx). Do not fill in AD domain information. Workspot Agent will join VDI desktops to the domain via workspotconfig.xml. Optional: Use Answer File here to customize your Windows VDI desktops.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
5. Provisioning Desktops VDI desktops can be provisioned automatically within Workspot Control. 1. Navigate to Workspot Control > Resources > VDI > Add Pool.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
2. Enter data into the following fields. Desktop Pool Type: Select VDI deployment type, Persistent and Non-persistent. Desktop Pool Name: Name of desktop pool Desktop Display Name: Name of desktop shown in Workspot client. Description: Provide description for the VDI pool. Select Datacenter: Select the datacenter where VDI desktops should be hosted in. Select a Config: Select the Hyper-V cluster you want to provision VDI desktops on. Select Template: This will search for VM Templates on the Hyper-V cluster selected above. Select the VDI template created in previous steps. Host or Cluster: Where VDI desktops are provisioned on. Shared Storage: Insert your storage where VDI desktops are provisioned on. Number of Desktops: Enter the number of desktops Workspot Control will provision. Naming Prefix: Enter the naming prefix that will uniquely identify the VM in Hyper-V. Suffix Length: Workspot Control will automatically add a dash (-) and numerals to VDI names. Select 1 digit for small VDI pools of 1-10 desktops, 2 digits for medium size pools of 11-100 and 3 digits for large size pools of 101-1000 desktops. Auto Create on Delete Desktop: Workspot Control will auto-provision VDI desktops to replace any deleted VDI desktops to match the configured pool size if this checkbox is checked. Pause on First Failure: If provisioning fails, Workspot will pause VDI provisioning if checked. Otherwise VDI provisioning continues. Route through VPN: For Call Center or internal network use cases (such as thin clients), select No. For all others, if there is a scenario where a user is outside the internal network, select Yes. RD Gateway (if Route through VPN is No): Select RD Gateway config for remote access. Pool Icon: Select a predefined icon or upload PNG/JPG for VDI desktop icon. Login Type: If VDI desktop is configured to join the AD domain, select Single Sign On using domain\username and password, otherwise select Single Sign On using username and password.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
3. Click on Create and start VDI provisioning. Clicking Create will kick off the VDI provisioning on the Scale Computing HC3 cluster which will clone the template VM and power it on. Once the VMs are powered on, Workspot Control will show them being Online. It will take a few minutes for the sysprep to complete and for the Workspot agent to report back the Desktop Address.
At this point, the VDI desktops are now ready to be assigned.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
6. Assigning desktops to users This section outlines how to test the assignment of a single user before assigning the whole VDI pool of desktops to all users. 1. Test the assignment to a single user. To test VDI desktop connection, navigate to User Details page for the test user by searching in the upper right search box or from the Users page. Scroll down and click on Assign Desktops button.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
2. Search for VDI pool name in textbox and click Save.
3. Successful assignment
4. Test user access. With a PC, Mac, iOS, or Android device, go to http://www.workspot.com/download and follow in the instructions to download the Workspot Client and connect to the first desktop. Once Workspot client is on-boarded, click on VDI desktop to connect.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
5. Assign the remaining desktops in the VDI pool. Once you have successfully connected the first user to the desktop, use AD integration to configure VDI pool for a User Group.
Additional resources
Workspot Help Center: https://workspot.zendesk.com o Workspot Enterprise Connector Configuration Guide o Workspot Active Director Integration Guide o Workspot Control Training Contact Workspot at
[email protected]
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
D E P LOY I NG WO R K SP OT O N H Y P E R - V
About Workspot Workspot is the leading 100% cloud-based Workspace as a Service platform. Built for the mobile, cloud and hyper-converged infrastructure era, Workspot is the fastest and simplest solution for solving IT’s end user BYOx and mobility challenges. Workspot also solves the corporate challenge of securely delivering apps, desktops and data to any device with a single frictionless user experience across mobile, Mac and PC platforms. Workspot’s 100% cloudbased platform simplifies IT’s workload, requires zero maintenance, scales instantly, provides deep end user experience analytics and monitoring, and is always up to date with the latest features. Based in Cupertino, California, Workspot is recognized by Gartner as “Cool Vendor” in endpoint computing and bestowed Skyhigh Enterprise-ReadyTM for fully satisfying the most stringent requirements for data protection, identity verification, service security, business practices, and legal protection. For more information, visit www.workspot.com.
www.workspot.com | 1 888 426 8113 |
[email protected] | @workspotinc
© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.
