deploying workspot vdi 2.0 on hyper-v · to provide workspot users access to the vdi desktop, they...

DEPLOYI NG WORKSPOT O N HYPER -V

© 2016 Workspot, Inc. All rights reserved. Workspot, Workspot product and service names, and the Workspot logo are trademarks or registered trademarks of Workspot, Inc. in the United States and/or other countries.

www.workspot.com | 1 888 426 8113 | [email protected] | @workspotinc

Deploying

Workspot VDI 2.0 on

Hyper-V

Step by Step Configuration Guide

http://www.workspot.com/


mailto:[email protected]


https://twitter.com/workspotinc





Contents 1. Prerequisites ....................................................................................................................................... 3

2. Installing the Workspot Enterprise Connector ............................................................................... 3

3. Add Hyper-V Configuration in Workspot Control ........................................................................... 4

4. Creating a Windows Desktop Template ......................................................................................... 6

I. Creating the Workspot AD Security Group ........................................................................... 6

II. Create OU and GPO for Remote Desktop Users local group ............................................ 8

III. Create Hyper-V VM .................................................................................................................. 9

IV. Enable Remote Desktop Connection ................................................................................... 10

V. Windows Firewall .................................................................................................................... 12

VI. Install applications you want to deliver to end users ......................................................... 13

VII. Workspot Agent installation .............................................................................................. 13

VIII. Prepping template for Workspot Agent provisioning ..................................................... 14

IX. Sysprep VM ............................................................................................................................. 14

X. Hyper-V template conversation and customization ........................................................... 15

5. Provisioning Desktops ..................................................................................................................... 18

6. Assigning desktops to users ........................................................................................................... 22

Additional resources ................................................................................................................................ 24










1. Prerequisites

Before starting, please have the following hardware and software components ready.

General Prerequisites:

1. Hyper-V 2012 R2 or later environment 2. System Center Virtual Machine Manager (SCVMM) console on Workspot

Enterprise Connector Windows Server machine 3. Hyper-V admin account with appropriate permissions 4. Sufficient resources: CPU, memory, storage and networking 5. DHCP to provide IP addresses to provisioned VDI desktops 6. Template for Windows 7, 8.1 or 10 desktops

2. Installing the Workspot Enterprise Connector

The first step is to associate the Hyper-V to the Workspot cloud. This is accomplished

by installing the Workspot Enterprise Connector either on a VM on Hyper-V or on a

server with access to the LAN IP of the Hyper-V SCVMM. The Workspot Enterprise

Connector is a lightweight client service that is installed on a Windows Server machine

in the Datacenter that associates the Hyper-V cluster to Workspot Control.

WORKSPOT ENTERPRISE CONNECTOR INSTALLATION

Review the following installation guide for the Workspot Enterprise Connector:

https://workspot.zendesk.com/hc/en-us/articles/206596913

SCVMM console installation

After installing the Enterprise Connector server, install the SCVMM console on the

same Windows Server machine. Ensure the build number of SCVMM console

installation matches SCVMM server build. Review the following website for build

information: https://buildnumbers.wordpress.com/scvmm/








https://buildnumbers.wordpress.com/scvmm/




3. Add Hyper-V Configuration in Workspot Control

Hyper-V integration requirements:

• A LAN IP from the SCVMM machine

• Hyper-V admin account with appropriate permissions

Once Enterprise Connector is installed and connected, click on Configs tab then Add

Configuration.










Configure the Datacenter Configuration for Hyper-V as appropriate along with SCVMM

port. Enter the Hyper-V admin credentials in the fields Username (i.e. admin) and

Password.










4. Creating a Windows Desktop Template

Creating a Windows Desktop template prepares the template from which each desktop

will be cloned.

The ten steps to create template/golden image are:

I. Create AD Security Group for Workspot users, then add Workspot users’ AD user accounts as members of the Group.

II. Create OU in Active Directory for VDI desktops and create a Group Policy (GPO) to add the Workspot AD Security Group to the Remote Desktop Users local group.

III. Create Hyper-V VM in SCVMM. Install appropriate Windows Desktop OS (Windows 7, 8.1 or 10). Apply latest updates.

IV. Enable Remote Desktop Connections: Allow connections from computers running Remote Desktop

V. Disable Windows Firewall or allow Remote Desktop Connection (RDP port 3389) on firewall.

VI. Install applications you want to deliver to end users (i.e. Microsoft Office 2013, Adobe Acrobat, etc).

VII. Workspot Agent Installation and template registration to Workspot Control. VIII. Sysprep VM with the following command:

C:\Windows\System32\sysprep\sysprep.exe /oobe /shutdown /generalize IX. Create a sysprep unattend.xml answer file (optional) for Windows customization

and upload into SCVMM library. X. Clone template VM, convert to template format and customize template.

I. Creating the Workspot AD Security Group

To provide Workspot users access to the VDI desktop, they are added to the local

Remote Desktop Users group of the VDI desktop. In order to simplify this, create an AD

Security Group which will be added to the Remote Desktop Users group.

Note: This is an optional step for trial/PoC testing since we can add Domain User group

to the VDI desktop. However, this is recommended in a production environment.










1. Create AD Security Group(s) for Workspot users.

2. Add Workspot users as appropriate to AD Security group.










II. Create OU and GPO for Remote Desktop Users local group 1. Create OU in Active Directory for newly provisioned VDI desktops.

2. Create Group Policy for the new OU and configure Remote Desktops Users local group adding

the Workspot AD Group as a member.

Computer Configuration > Policies > Windows Settings > Security Settings > Restricted Groups >

Add Group > Type in Remote Desktop Users.










In the Members of this group section, add the Workspot AD Security Group.

III. Create Hyper-V VM

Please refer to SCVMM VM creation guide.







https://technet.microsoft.com/en-us/library/gg610679(v=sc.12).aspx




IV. Enable Remote Desktop Connection

Workspot leverages Remote Desktop Connection to connect to VDI desktops.

1. Go to Control Panel > System > Remote settings










2. Select either Allow connections from computers running any version of

Remote Desktop or Allow connections only from computers running

Remote Desktop with Network Level Authentication radio button.










V. Windows Firewall

Workspot leverages Remote Desktop Connection on port 3389 to connect to VDI

desktops. Disable Windows Firewall to prevent issues connecting or allow port 3389 in

firewall. Example below disables Windows Firewall. Note: Verify Domain Profile is

disabled.

1. Open Control Panel > Windows Firewall > System and Security > Windows

Firewall > Advanced settings

2. Verify all profiles are disabled. If not, click on Properties to disable.










VI. Install applications you want to deliver to end users

Install any applications on the virtual machine such as Office, Adobe, etc.

VII. Workspot Agent installation

Before running the Workspot Agent installation, shut down the template VM. Run the

Hyper-V clone functionality on the template VM then boot into the new clone. The

Workspot agent will register the template to Workspot Control using the MAC address of

the VM so once the template is registered and sysprep, no changes can be made. For

changes or updates, use the original template VM and clone again.

Download the Workspot Agent install from:

http://download.workspot.com/WorkspotAgentSetup64.exe

Run the Workspot Agent installer and use your Workspot admin credentials to

register the template.







http://download.workspot.com/WorkspotAgentSetup64.exe




VIII. Prepping template for Workspot Agent provisioning

1. Create a service admin account that can join machines to the domain. Workspot recommends creating a service account that only have permissions for specific OUs in Active Directory where provisioned machines will reside.

2. Copy sample Workspot XML config file provided after the install of the Workspot Agent. Sample file is located in the install folder of the Workspot Agent: c:\Program Files\Workspot Agent\

3. Modify the XML config file with service admin account credentials along with OU info.

Note: If password or any other parameters contains special characters, it must be escaped (i.e. OU=Workspot&Co is OU=Workspot&Co). Review table in end of this technote: https://workspot.zendesk.com/hc/en-us/articles/115002951363

Example:

<?xml version="1.0" encoding="utf-8"?> <WorkspotConfig> <component name="Workspot-DomainJoin" language="neutral"> <Identification> <Credentials> <AdminDomain>domain.local</AdminDomain> <AdminUserName>joinDomainServiceAccount</AdminUserName> <Password>joinDomainServiceAccountPassword</Password> </Credentials> <JoinDomain>domain.local</JoinDomain> <MachineObjectOU>OU=Workspot,OU=VDI,DC=domain,DC=local</MachineObjectOU> </Identification> </component> </WorkspotConfig>

4. Copy Workspot XML config file to c:\windows\system32\config\systemprofile\appdata\local\workspot agent\config.

Note: The Workspot XML config file will be deleted during provisioning.

IX. Sysprep VM Hyper-V Template VM format are always sysprep. Sysprep in this step to ensure there

are no issues with sysprep.











Sysprep VM with the following command:

C:\Windows\System32\sysprep\sysprep.exe /oobe /shutdown /generalize

This command will sysprep the VM then shut down the VM.

X. Hyper-V template conversation and customization Creating a Hyper-V template from the template VM will destroy the original VM replacing it with the VM

template. Create a clone of this template VM before converting in case of changes or errors so it does

not have to be rebuilt.

Under VMs and Services panel > Right click on template VM > Create > Create VM Template.










After VM template is created, configure the new template with a Workspot tag and customize Windows

as required.

Under Library > Templates > VM Templates > Select the new VM template and click on Properties.

Under General > Tag > Insert 'WorkspotTemplate' in text field.

Under Hardware Configuration > Verify Network Adapter config has correct network attached otherwise

configure it.










Under OS Configuration, required fields are: Admin Password, Product Key (If KMS use the following:

https://technet.microsoft.com/en-us/library/jj612867(v=ws.11).aspx). Do not fill in AD domain

information. Workspot Agent will join VDI desktops to the domain via workspotconfig.xml.

Optional: Use Answer File here to customize your Windows VDI desktops.







https://technet.microsoft.com/en-us/library/jj612867(v=ws.11).aspx)




5. Provisioning Desktops VDI desktops can be provisioned automatically within Workspot Control.

1. Navigate to Workspot Control > Resources > VDI > Add Pool.










2. Enter data into the following fields.

Desktop Pool Type: Select VDI deployment type, Persistent and Non-persistent.

Desktop Pool Name: Name of desktop pool

Desktop Display Name: Name of desktop shown in Workspot client.

Description: Provide description for the VDI pool.

Select Datacenter: Select the datacenter where VDI desktops should be hosted in.

Select a Config: Select the Hyper-V cluster you want to provision VDI desktops on.

Select Template: This will search for VM Templates on the Hyper-V cluster selected above.

Select the VDI template created in previous steps.

Note: Use a search string with a prefix of the template name. (i.e. Finance for Finance-

Template, Marketing for Marketing-Template, Sales for Sales-Template, etc.)

Host or Cluster: Where VDI desktops are provisioned on.

Shared Storage: Insert your storage where VDI desktops are provisioned on.

Number of Desktops: Enter the number of desktops Workspot Control will provision.

Naming Prefix: Enter the naming prefix that will uniquely identify the VM in Hyper-V.

Suffix Length: Workspot Control will automatically add a dash (-) and numerals to VDI names.

Select 1 digit for small VDI pools of 1-10 desktops, 2 digits for medium size pools of 11-100 and

3 digits for large size pools of 101-1000 desktops.

Auto Create on Delete Desktop: Workspot Control will auto-provision VDI desktops to replace

any deleted VDI desktops to match the configured pool size if this checkbox is checked.

Pause on First Failure: If provisioning fails, Workspot will pause VDI provisioning if checked.

Otherwise VDI provisioning continues.

Route through VPN: For Call Center or internal network use cases (such as thin clients), select

No. For all others, if there is a scenario where a user is outside the internal network, select Yes.

RD Gateway (if Route through VPN is No): Select RD Gateway config for remote access.

Pool Icon: Select a predefined icon or upload PNG/JPG for VDI desktop icon.

Login Type: If VDI desktop is configured to join the AD domain, select Single Sign On using

domain\username and password, otherwise select Single Sign On using username and

password.










3. Click on Create and start VDI provisioning.

Clicking Create will kick off the VDI provisioning on the Scale Computing HC3 cluster which will

clone the template VM and power it on. Once the VMs are powered on, Workspot Control will

show them being Online. It will take a few minutes for the sysprep to complete and for the

Workspot agent to report back the Desktop Address.

At this point, the VDI desktops are now ready to be assigned.










6. Assigning desktops to users

This section outlines how to test the assignment of a single user before assigning the

whole VDI pool of desktops to all users.

1. Test the assignment to a single user.

To test VDI desktop connection, navigate to User Details page for the test user by

searching in the upper right search box or from the Users page.

Scroll down and click on Assign Desktops button.










2. Search for VDI pool name in textbox and click Save.

3. Successful assignment

4. Test user access.

With a PC, Mac, iOS, or Android device, go to http://www.workspot.com/download and

follow in the instructions to download the Workspot Client and connect to the first

desktop. Once Workspot client is on-boarded, click on VDI desktop to connect.







http://www.workspot.com/download




5. Assign the remaining desktops in the VDI pool.

Once you have successfully connected the first user to the desktop, use AD integration

to configure VDI pool for a User Group.

Additional resources

• Workspot Help Center: https://workspot.zendesk.com

o Workspot Enterprise Connector Configuration Guide

o Workspot Active Director Integration Guide

o Workspot Control Training

• Contact Workspot at [email protected]







https://workspot.zendesk.com/

https://workspot.zendesk.com/hc/en-us/articles/206596913-Enterprise-Connector-Configuration-Guide

https://workspot.zendesk.com/hc/en-us/articles/206717426-Active-Directory-Integration

https://workspot.zendesk.com/hc/en-us/categories/200174209-References





About Workspot

Workspot is the leading 100% cloud-based Workspace as a Service platform. Built for the

mobile, cloud and hyper-converged infrastructure era, Workspot is the fastest and simplest

solution for solving IT’s end user BYOx and mobility challenges. Workspot also solves the

corporate challenge of securely delivering apps, desktops and data to any device with a single

frictionless user experience across mobile, Mac and PC platforms. Workspot’s 100% cloud-

based platform simplifies IT’s workload, requires zero maintenance, scales instantly, provides

deep end user experience analytics and monitoring, and is always up to date with the latest

features.

Based in Cupertino, California, Workspot is recognized by Gartner as “Cool Vendor” in endpoint

computing and bestowed Skyhigh Enterprise-ReadyTM for fully satisfying the most stringent

requirements for data protection, identity verification, service security, business practices, and

legal protection. For more information, visit www.workspot.com.








deploying workspot vdi 2.0 on hyper-v · to provide workspot users access to the vdi desktop, they...

Documents