虚拟桌面个性化和profile management

Citrix|思杰虚拟桌面的个性化与UserProfile薛钢大

纲虚拟桌面个性化要素个性化技术实现方法Windows的Profile管理Personal

vDisk技术什么构成了桌面的“个性化”?Citrix

Confidential

-

Do

Not

Distribute我们的文件和数据我们的工作方式我们的应用Where

do

wekeep

and

findourfilesHow

do

we

findand

launch

ourappsHowdo

weorganise

ourworkspace文件、文件夹、资源管理器使用文件夹重定向保存于虚拟机镜像以外我们的文件和数据基础镜像中安装的应用,Host/Stream

的虚拟应用部门安装的应用用户安装的应用我们的应用及我们如何访问我们的应用我们如何工作桌面偏好设置应用偏好设置快捷方式我们的工作方式Citrix

Confidential

-

Do

Not

Distribute一致性性能和效率可见性和‘控制’用户的接受我们为何关注“个性化“?个性化的重要性Citrix

Confidential

-

Do

Not

DistributeIT

管理和流程用户的接受个性化的四个层次1

偏好设置和书签234用户安装的应用驱动文件和文件夹This

is

me!只关注了用户环境和用户配置（Profile）...今天的虚拟桌面个性化的局限性PolicyPrefer-encesHKCUUserFilesAppFiles用户环境•Enforced

PolicyPreferred

SettingsMapped

Drives

etc用户配置/Documents

and

Settings//Users/C:/BadApp/特殊需求的应用和部门应用特殊的机器配置特殊的驱动，比如某些特殊打印机驱动对XenDesktop的镜像管理来说，是巨大的挑战镜像管理的两难Assigned模式的局限性Pool模式下，带来很多问题，和现有桌面管理软件、防病毒软件的兼容性Citrix

Confidential

-

Do

NotDistribute任何不能满足的要求，都需要“assigned”模式理想的个性化环境PolicyPrefer-encesHKLMDeptAppsLocalAppsHKCUUserFilesAppFiles应用AppsPrintersLocal

Machine

settings用户配置/Documents

and

Settings//Users/C:/BadApp/用户环境Enforced

PolicyPreferred

SettingsMapped

Drives

etc用户配置文件（User

Profile）Citrix

Confidential

-

Do

Not

Distribute什么是Windows

Profile?v1

vs.

v2

Profilesv2

AppDatav1

Application

DataWindows

Profile

“不”包含\Documents

and

Settings\

or

\Users\以外的任何东西HKCU以外的注册表项(NTUSER.DAT)roaming

profile中不包含:AppData\LocalDocuments

and

Settings\Local

SettingsThis

includes

UsrClass.DAT

which

mounts

under

HKCU

per

Microsoftdefinition如果不对Profile进行管理…XenApp

XenDesktop

WindowsDeviceNo

user

profileassignmentLocal

profile

created

Local

profile

created

Local

profile

createdon

that

server

from

on

that

desktop

from

on

that

client

device

local

default

user

local

default

user

from

local

defaultuserSubsequent

logon

tosame

computerAll

is

well

for

the

moment

…

existing

profile

on

that

“device”

usedSubsequent

logon

todifferent

computerSame

as

row

1,

except

now

the

user

has

two

local

profiles

that

willnot

sync糟糕的用户体验Once

the

user

has

more

than

one

profile:--

settings

no

longer

consistent--

risk

being

lostProfile的类型–除了Local以外Mandatory（强制）Roaming（漫游）Mandatorywith

FolderRedirectionRoamingwith

FolderRedirectionOverviewSettings

not

saved

atlogoffStored

on

network

fileshareSome

Folders/

files

areredirected

to

file

shareSome

folders/

files

areredirected

to

file

shareBenefitsSmall

profile

=

fastlogonsReduced

managementeffortMore

user

personalizationImproved

logon

speedFolder

data

ispreservedImproved

logon

speedConsLimited

Personalizationonly

with

FolderRedirectionLast

writer

winsPersonalization

=

largeprofileHKCU

and

certificatesnot

retainedRedirected

folders

maybe

slower

to

accessRedirected

folders

maybe

slower

to

access配置Profile位置的方法使用Active

Directory

(AD)

中的用户帐户属性使用组策略(GP)仅限于Win7/2008使用上述方法分配特定于远程桌面服务（以前称为终端服务）会话的配置文件由于XP无法通过组策略配置Profile位置，所以VDI项目中，往往需要使用Citrix的UPM来管理Profile，从而实现不同类型的桌面，使用不同的Profile类型运行于Windows上的一个服务2Profile数据存放3Citrix

UPM

构架和组件Microsoft活动目录1除了微软以外的Profile管理技术Citrix

User

Profile

ManagerAppSenseRES

Workspace

ManagerImmidioFlexProfilesInfrastructureVMWareView5的Persona

Management将文件移到Profile以外…并且和OS无关Citrix

Confidential

-

Do

Not

Distribute文件夹重定向的重要性Profiles以外:Personal

vDiskCitrix

Confidential

-

Do

Not

DistributeXenDesktop

5.5

提供了创新的“personal

vDisk”技术包含于XenDesktop

5.5

所有版本，无额外费用Early

access版本可以从网站下载(not

for

production)支持讨论区-虚拟桌面个性化技术的突破–Personal

vDisk用户的配置和应用都得到保留，包括用户安装的应用以及被分配的应用与现有桌面管理软件、应用虚拟化软件兼容，如SCCM,App-V

andXenApp在适用VDI的Pool模式时候，用户的个性化仍旧能够得到100%保留极少的额外管理工作量完整的个性化解决方案Personal

vDisk工作原理组件：AgentServerTools实质：WorkSpace虚拟化IO拦截IO重定向CatalogandRulesMount，

the

V:DiskEarly-StartDriver提示：这些概念是否很熟悉？RulesvDiskCitrix

personal

vDiskUser

EnvironmentUser

DataUserSettingsUser-basedPoliciesUserInstalledApplicationsCorporateInstalledApplicationsUser

ProfilesCommon

Base

ImageOSCitrix

Personal

vDiskUser

ProfilesCitrix

Personal

vDiskMachine

Settings,

User

Settings,

Everything!Operating

SystemPersonal

vDisk

工作流程User

AccessLogin

through

Xen

DesktopClientProfilestorage

created

first

login•

CLoocamllymadomniniBstearesdedeSpet.

tauppps•InUsstearllinOstSa,llecdomapmpson

apps

and•PSetrrseoanmaeldvaDpipsks

Client

in

baseVMCreate

VM

pool

andentitleImage

UpdateUpdate

base

VM

withoutaffectingany

userpersonalizationCommon

Base

ImageUser’s

Workspace更多用户使用现有VDI构架，大大降低每用户成本降低基础构架成本使用现有工具、构架、资源降低成本Evolvetoward

full

VDIvs.

rip

&

replaceQuickly

increase

scopeof

VDIfootprint更加快速100%

persistent

个性化从任务工作者扩展到知识工作者支持指派的应用Personal

vDisk

的好处总结User

requirements

and

customizationsApplication

requirementsCitrixtechnologiesXenApp

+

XenDesktop,

XenApp

only,

XenDesktop

only,

or

?Help

Desk

andIT

skillsets

andprocessesExisting

infrastructureCurrent

profile

solutionActive

DirectoryGPOs,

including

folder

redirectionOne

Profile

Type

Doesn’t

Fit

AllUPM

Pending

TasksCitrix

Confidential

-

Do

Not

Distribute个性化PersonalvDiskProfile管理(UPM)除了Profile管理外，充分考虑到各种个性化的需求PersonalvDisk，结合了Pool模式集中管理，节省存储的优点，又能满足个性化需求使用能满足要求，但是尽可能简单的Profile管理解决方案别忘了使用文件夹重定向很好的竞争武器最终用户Happy，项目才能成功！Remember!User’sEnvironmentCitrix

Confidential

-

Do

Not

DistributeUser

profiles

storeend

user’ssettings

….DataUser

environment

versus

a

profileEnvironment

settings

–“configurations”Historically

managedvia

logon

scriptsMicrosoft’s

Group

PolicyPreferencesCitrix

Confidential

-

Do

Not

DistributeFolders,

Printers,

Drives

etcAppSense

Policy/ConditionsRES

Policy

ConditionsAppSense

Environment

ManagerMicrosoft

SQLServerPersonalization

ServerEnd

User

Device(with

AppSense

agent)Management

architecture

seamlessly

integrates

withMicrosoft

Systems

CenterReal-timepersonalizationbetween

operatingsystemsAnd

between

different

app

deliverymechanismsGranular

policy

and

management

capabilitiesincluding

instant

per-application,

per-userpersonalization

rollbackTechnical

Benefits

of

AppSense

UserVirtualizationSimpleAdaptiveEfficientRES

Workspace

Manager

ArchitectureComposerFilter

DriversXenDesktopXenClientAgentLocal

CacheWorkspace

ManagerDatastoreConsoleWorkspace

ManagerDatastore

(Replica)ComposerAgentFilter

DriversXenAppCitrix

Confidential

-

Do

Not

DistributeLocal

CacheComposerComposerComposerDesktopSamplerfor

analyzing

currentuserpopulationSingle

engine

for

personalization

and

securitypolicyGranular,context-aware

file

synchronizationDelegated/multi-tenant

administrationPartofanintegrated

ITasaService(ITaaS)

suiteRES

Workspace