Editing: GPO Settings That Could Potentially Cause Issues with MED-V Features

Title
<html> <body> MED-V V2 leverages underlying VPC and RDP\RemoteApp technologies to facilitate support for URL, Print, and document redirection. In addition, a special BHO is used by the host browser to redirect URL’s configured for legacy guest browsing to the guest browser. There are certain group policies that could impact MED-V’s functionality and/or performance if they are configured. If you are encountering issues with MED-V, verify your applied GPO’s to determine the following. [toc] <h2><a name="Terminal_Services_RDP_Logon_User_Rights"></a>Terminal Services/RDP Logon User Rights</h2> Policy Location: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignments\ Policy: Allow log on through Terminal Services Policy: Deny log on through Terminal Services Impact: If applied to the XP guest, this could prevent MED-V SSO (single sign-on) with the guest. <h2><a name="Legal_Notice_Caption_Texts_and_Single_Sign-on_SSO"></a>Legal Notice Caption/Texts and Single Sign-on (SSO)</h2> Policy Location: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security options Policy: Interactive logon: Message text for users attempting to log on Policy: Interactive logon: Message title for users attempting to log on Impact: If applied to the XP guest, this could affect MED-V SSO (single sign-on) with the guest where users will always see an additional prompt. <h2><a name="Internet_Explorer_Policies"></a>Internet Explorer Policies</h2> Policy Location: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Advanced Page\ Or User Configuration\Administrative Templates\Windows Components\Internet Explorer\Advanced Page\ Policy: Allow third-party browser extensions Impact: This could prevent URL redirection if applied to the host. Policy Location: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management or User Configuration\Administrative Templates\Windows Components\Internet Explorer\Security Features\Add-on Management Policy: Deny all add-ons unless specifically allowed in the Add-on List Impact:  This could also prevent URL redirection if applied to the host. <h2><a name="TS_Client-Server_Redirection_Policy"></a>TS Client-Server Redirection Policy</h2> Policy Location: Computer Configuration\Administrative Templates\Windows Components\Terminal Services\Client-server data redirection Policy: Do not allow clipboard redirection Policy: Do not allow drive redirection Impact: This could prevent access to redirected host folders if these policies are applied to the guest Windows XP OS. <h2><a name="Group_Policy_Slow_Link_Detection"></a>Group Policy Slow Link Detection</h2> Policy Location: Computer Configuration\Administrative Templates\System\Group Policy Or User Configuration\Administrative Templates\System\Group Policy Policy: Group Policy Slow Link Detection Impact: MED-V Workspaces configured for NAT mode may notice significant delays in startup and possibly even logon delays. This can appear to the end user in the form of an application taking a tremendous amount of time to start up or shut down. <h2><a name="Requiring_NLA_for_RDP"></a>Requiring NLA for RDP</h2> Policy Location: Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services Policy: Remote Desktop Connection Client Impact: For Windows 7 hosts, if "Configure server authentication for client" is Enabled and set to "Do not connect if authentication fails" then the MED-V applications will fail to start. If this policy must be set, then set it to   "Always connect, even if authentication fails."   </body> </html>
Comment
Tags
Please add 7 and 6 and type the answer here:

Products

Resources

Solutions

Updates

Trials

Related Sites

Training

Certifications

Other resources

Support options

More support

Not an IT pro?