دانلود کتاب Mastering VMware Horizon 8: An Advanced Guide to Delivering Virtual Desktops and Virtual Apps

فهرست مطالب :

Table of Contents About the Author About the Technical Reviewer Acknowledgments Foreword Introduction Chapter 1: Remote Desktop Solutions In This Chapter Why Deliver Desktops from a Data center or Cloud? Cost Savings Security Easy to Manage and Support Disaster Recovery (DR) and Business Continuity (BC) Scalability Bring Your Own Device (BYOD) Virtual Desktop Infrastructure (VDI) The Architecture of VDI Non-persistent Virtual Desktop Machines Persistent Virtual Desktop Machines Server-Based Computing Application Publishing VDI or SBC? Cloud-Based Desktops VMware Horizon Version 2006 (Horizon 8) What Is New? Horizon Licensing and Editions Perpetual Licensing Options Subscription Licensing Options Summary Chapter 2: Getting Started with VMware Horizon Horizon Digital Workspace Horizon VDI Architecture Horizon Connection Server Horizon Replica Server How Does It Work? Horizon Enrollment Server VMware Unified Access Gateway (UAG) Horizon Agent Direct Connection Horizon Client Building Non-persistent Virtual Desktop Machines Instant Clones Instant Clone Smart Provisioning View Composer and Linked Clones The Anatomy of a Linked Clone Linked Clone Disk (Delta Disk) Persistent Disk or User Data Disk Disposable Disk Internal Disk Full Clones The Benefits of Cloning Delivering Applications Delivering End User–Specific Data and Settings Delivering the End-User Experience Display Protocols Blast Extreme Blast Extreme for Internal Connections Blast Extreme for External Connections Blast Extreme for Internal Tunneled Connections PCoIP PCoIP for Internal Connections PCoIP for External Connections PCoIP for Tunneled Connections Web Browser Browser-Based Internal Connections Browser-Based External Connections Browser-Based Tunneled Connections Microsoft Protocols Choosing the Protocol Hardware-Based High-End Graphics Capabilities Virtual Shared Graphics Acceleration (vSGA) Supported Graphics Cards for vSGA vSGA Configuration Virtual Dedicated Graphics Acceleration (vDGA) Supported Graphics Cards for vDGA vDGA Configuration Virtual Shared Pass-Through Graphics Acceleration (vGPU) Supported Graphics Cards for vGPU vGPU Configuration Unified Comms, Video, and Audio Support Real-Time Audio Video (RTAV) Microsoft Teams Printing External USB Device Support Filtering Supported USB Devices Managing Multifunction USB Devices Summary Chapter 3: Architecting Horizon for Deployment The Starting Point Business Drivers and Requirements Assessments Assessing Your End Users Success Criteria Selecting the Solutions The Testing Phase Proof of Concept Proof of Technology Pilot Designing and Deploying the Pilot Environment Reviewing the Pilot Defining the Next Steps Designing the Production Environment Horizon Reference Architecture: Pod and Block Horizon Block Management Block Horizon Pod Cloud Pod Architecture (CPA) Architecting Horizon Infrastructure General Design Guidance Physical Host Servers Networking Storage vSphere Design for the Management Block ESXi Host(s) ESXi Host Server CPU Requirements ESXi Host Server Memory Requirements Storage Configuring for High Availability vCenter Server High Availability for vCenter Server Example Management Block Design vSphere Design for the Virtual Desktop Block ESXi Hosts ESXi Host Server CPU Requirements Light User Medium User Heavy User ESXi Host Server CPU Requirements Overcommitting CPU and Memory Resources Hardware Accelerated Graphics High Availability vCenter Servers Storage Requirements for Virtual Desktop Machines Storage Capacity Minimum Disk Space Requirements Disk Space Requirements for 50% Utilization Disk Space Requirements for 100% Utilization Desktop Block Storage Example Persistent Disks Storage Performance vSAN Networking Virtual Switches Network Bandwidth Considerations Load Balancing NSX for Horizon Horizon Component Sizing Requirements Connection Server Sizing Connection Server Hardware Requirements Connection Server Software Requirements Replica Server Sizing Configuration Maximums Cloud Pod Architecture Maximum Configurations Connection Server Maximum Configurations vSphere Configuration Maximums vCenter Server Configuration Maximums Datastore Configuration Maximums ESXi Host Server Configuration Maximums UAG Sizing Capacity Planning How End Users Connect Protecting Your Horizon Infrastructure DR Backup What Other Infrastructure Is Required? File Servers Database Servers Database Sizing Requirements Events Database App Volumes Database Requirements Supported Databases for Horizon Active Directory Summary Chapter 4: Installing and Configuring Your Horizon Environment Before You Start Configuring Active Directory AD User Accounts Organizational Units (OUs) for Horizon Desktops Configuring vCenter Accounts Installing the Horizon Environment Installing the Horizon Connection Server Prerequisites and Requirements Performing the Installation Completing the Initial Configuration Tasks Adding the License Key Adding a vCenter Server for Desktop Management Instant Clone Domain Configuration Horizon Events Database Configuration Horizon Administrators General Settings Horizon Replica Server Prerequisites and Requirements Performing the Installation Horizon Enrollment Server Prerequisites and Requirements Performing the Installation Unified Access Gateway Deploying the Unified Access Gateway Initial Unified Access Gateway Configuration Configuring the Unified Access Gateway for Horizon Deploying Cloud Pod Architecture (CPA) Initializing the CPA Feature Joining a Pod Federation Summary Chapter 5: Creating Virtual Desktop Images for Deployment Defining the Build Process Building the Virtual Desktop Gold Image for Windows Creating the Virtual Desktop Machine Configuring the Virtual Desktop BIOS Installing the OS on the Virtual Desktop Machine Installing VMware Tools Customize and Optimize the Virtual Desktop OS Installing Gold Image Applications Install the Horizon Agent Additional Agents Configuring for Hardware-Enabled Graphics Summary Chapter 6: Building and Configuring Desktop Pools What Is a Desktop Pool? Desktop Pool Types Automated Desktop Pools Manual Desktop Pools RDS Desktop Pools Desktop Pool User Assignments Floating Dedicated Virtual Desktop Creation Options Instant Clones Full Clones Creating Automated Desktop Pools Creating Instant Clone Desktop Pools Instant Clone Dedicated Pools Virtual Instant Clone Floating Pools Creating Full Clone Desktop Pools Full Clone Dedicated Pools Full Clone Floating Pools Creating Manual Desktop Pools Using vCenter Virtual Desktop Machines Dedicated Floating Creating Desktop Pools from Other Sources Creating RDS Desktop Pools Desktop Pool End-User Entitlements Global Entitlements with CPA Managing Desktop Pools Adding a Desktop Pool Editing an Existing Desktop Pool Duplicating Desktop Pools Deleting an Existing Desktop Pool Adding and Removing Entitlements Status Access Group View Unentitled Updating the Image Updating the Instant Clone Desktop Pool Image Updating the Full Clone Desktop Pool Image Summary Chapter 7: Managing Horizon with Active Directory GPOs Active Directory Configuration Adding the Horizon ADMX Templates Organizational Unit (OU) Requirements Configuring Horizon Group Policy Objects (GPOs) Configuring the Loopback Policy Configuring Horizon GPOs Summary Chapter 8: Horizon Computer GPO Settings Computer Configuration GPO Settings PCoIP Client Session Variables Not Overridable Administrator Settings Configure PCoIP session encryption algorithms Configure PCoIP virtual channel Configure PCoIP client image cache size policy Configure PCoIP event log verbosity Configure PCoIP event log cleanup by time in days Configure PCoIP event log cleanup by size in MB Configure SSL cipher list Configure SSL connections to satisfy Security Tools Configure SSL protocols Configure the Client PCoIP UDP port Configure the PCoIP session MTU Configure the PCoIP session bandwidth floor Configure the PCoIP transport header Configure the maximum PCoIP session bandwidth Enable/disable audio in the PCoIP session Overridable Administrator Settings PCoIP Session Variables Not Overridable Administrator Settings Configure PCoIP USB allowed and unallowed device rules Configure PCoIP image quality levels Configure frame rate vs image quality preference Configure the PCoIP session audio bandwidth limit Configure the TCP port to which the PCoIP Server binds and listens Configure the UDP port to which the PCoIP Server binds and listens Disable sending CAD when users press Ctrl + Alt + Del Enable access to a PCoIP session from a vSphere console Enable/disable microphone noise an DC offset filter in PCoIP session Turn off Build-to-Lossless feature Turn on PCoIP user default input language synchronization Use alternate key for sending Secure Attention Sequence VMware Blast Audio playback Blast Codec Quality Cookie Cleanup Interval Cursor Warping Image Quality DSCP Marking DSCP from Agent, TCP/IPv4 H.264 High Color Accuracy H.264 H.264 Quality HEVC High Color Accuracy HEVC HTTP Service Max Session Bandwidth kbit/s Megapixel Slope Max Frame Rate Max Session Bandwidth Min Session Bandwidth PNG Screen Blanking UDP Protocol Keyboard locale synchronization VMware Horizon Client Configuration Allow Blast connections to use operating system proxy settings Allow data sharing Allow display scaling Allow HEVC Decoding Save resolution and DPI to server Automatically check for updates Automatically synchronize the keypad, scroll and caps lock keys Allow user to skip Horizon Client update Enable Horizon Client online update Update message pop-up URL for Horizon Client online update Automatic input focus in a virtual desktop window Automatically install shortcuts when configured on the Horizon server Block multiple Horizon Client instances per Windows sessions Disable desktop disconnect messages Disable time zone forwarding Disable toast notifications Disallow passing through client information in a nested session Enable relative mouse Custom error screen footer Always hide the remote floating language bar for hosted apps URL for Horizon Client online help Hide items in application context menu Default value of the ‘Hide the selector after launching an item’ checkbox Hide items in desktop context menu Hide items in desktop toolbar Hide items in system tray menu Hide items in the client toolbar menu Hotkey combination to grab input focus Hotkey combination to release input focus Display modifier function key Display only smart card certificates during login Configure maximum latency for mouse coalescing Delay the start of replications when starting the Horizon Client with Local Mode Tunnel proxy bypass address list Scripting Definitions Disconnected application session resumption behavior setting Desktop Layout DesktopName to select Logon DomainName Use existing client instance when connect to same server Locked Guest Size Suppress error messages (when fully scripted only) Logon Password Server URL Automatically connect if only one launch item is entitled Account to use for Unauthenticated Access Enable Unauthenticated Access to the server Logon UserName Connect USB devices to the desktop or remote application when they are plugged in Connect all USB devices to the desktop or remote application on launch Disable 3rd-party Terminal Services plugins Security Settings Allow command line credentials Configures the SSL Proxy certificate checking behavior of the Horizon Client Servers Trusted for Delegation Certificate verification mode Enable jump list integration Unlock remote sessions when the client machine is unlocked Enable Single-Sign-On for smart card authentication Enable SSL encrypted framework channel Ignore certificate revocation problems Default value of the ‘Log in as current user’ checkbox Display option to log in as current user Configures SSL protocols and cryptographic algorithms NTLM Settings View USB Configuration Allow Audio Input Devices Allow Audio Output Devices Allow Auto Device Splitting Allow other input devices Allow HID-Bootable Allow keyboard and Mouse Devices Allow Smart Cards Allow Video Devices Exclude Automatically Connection Device Family Exclude Automatically Connection Vid/Pid Device Exclude All Devices Exclude Device Family Exclude Vid/Pid Device Include Device Family Include Vid/Pid Device Exclude Vid/Pid Device from Split Split Vid/Pid Device Allow Device Descriptor Failsafe behavior Disable Remote Configuration Exclude Path Include Path VMware Browser Redirection Enable WebRTC camera and microphone access for browser redirection Ignore certificate errors for browser redirection Enable cache for browser redirection VMware Integrated Printing Do not redirect client printer(s) Allow to redirect L1 local printers to inner session VMware Horizon URL Redirection IE policy: Automatically enable URL Redirection plugin IE policy: Prevent users from changing URL Redirection plugin loading behavior Url Redirection Enabled Url Redirection IP Rules Enabled Url Redirection Protocol ‘…’ Url Redirection whitelist configuration Url Redirection Protocol ‘http’ Url Redirection Protocol ‘https’ VMware View Agent Configuration Agent Configuration AllowDirectRDP AllowSingleSignon CommandsToRunOnConnect CommandsToRunOnDisconnect CommandsToRunOnReconnect ConnectionTicketTimeout CredentialFilterExceptions Disable Time Zone Synchronization DPI Synchronization DPI Synchronization Per Monitor Enable Battery State Redirection Enable multi-media acceleration Force MMR to use software overlay Prewarm Session Time Limit Single sign-on retry timeout ShowDiskActivityIcon Toggle Display Settings Control Enable Unauthenticated Access Disconnected Session Time Limit (VDI) Idle Time Until Disconnect (VDI) Agent Securi Clipboard Redirection Configure clipboard redirection formats Configure clipboard audit Whether block clipboard redirection to client side when client doesn’t support audit Clipboard memory size on server Configure clipboard redirection Configure file transfer Collaboration Allow control passing to collaborators Allow inviting collaborators by e-mail Allow inviting collaborators by IM Include Outlook-formatted URL in clipboard text Separator used for multiple e-mail addresses in mailto: links Server URLs to include in invitation message Turn off collaboration Maximum number of invited collaborators Drag and Drop Configure drag and drop formats Configure drag and drop size threshold Configure drag and drop direction Performance Tracker Enable Performance Tracker auto start in remote desktop connection Performance Tracker basic setting Enable Performance Tracker auto start in remote application session Scanner Redirection Default Color Mode Default Duplex Default Scanner Disable functionality Hide Webcam Lock Config Serial COM Bandwidth limit Disable functionality Local settings priority Lock configuration COM Port Isolation Mode Connect all ports automatically Smartcard Redirection Allow applications access to Local Smart Card readers Local Reader Name Require an inserted Smart Card True SSO Configuration All key sizes Minimum validity period required for a certificate Certificate wait timeout Disable True SSO Number of keys to pre-create Minimum key size Unity Touch and Hosted Apps Send updates for empty or offscreen windows Enable UWP support on RDSH platforms Enable Unity Touch Enable system tray redirection for Hosted Apps Enable user profile customization for Hosted Apps Only launch new instances of Hosted Apps if arguments are different Limit usage of Windows hooks Unity Filter rule list View Agent Direct-Connection Configuration Application Enabled Client Config Name Value Pairs Client Session Timeout Client setting: AlwaysConnect Client setting: AutoConnect Client setting: ScreenSize Multimedia redirection (MMR) Enabled Reset Enabled Session Timeout USB AutoConnect USB Enabled User Idle Timeout Client Credential Cache Timeout Disclaimer Enabled Disclaimer Text X509 Certificate Authentication X509 SSL Certificate Authentication Enabled Allow Legacy Clients Allow NTLM fallback Require Channel Binding Default Protocol External Blast Port External Framework Channel Port External IP Address External PCoIP Port External RDP Port HTTPS Port Number View RTAV Configuration Resolution – Default image resolution height in pixels Resolution – Default image resolution width in pixels Max frames per second Resolution – Max image height in pixels Resolution – Max image width in pixels View USB Configuration Exclude Vid/Pid Device Exclude All Devices Exclude Device Family Include HID Optimization Vid/Pid Device Include Vid/Pid Device Include Device Family Allow Audio Input Devices Allow Audio Output Devices Allow Auto Device Splitting Allow HID-Bootable Allow Smart Cards Allow Video Devices Allow keyboard and Mouse Devices Allow other input devices Exclude Automatically Connection Vid/Pid Device Exclude Vid/Pid Device from split Exclude Automatically Connection Device Family Split Vid/Pid Device VMware App Tap Configuration VMware Horizon Client Drive Redirection Configure drive letter mapping mode Define drive letter mapping table Timeout for drive letter initialization Display redirected device with drive letter Exclude Vid/Pid Device Include Vid/Pid Device VMware HTML5 Features Enable VMware HTML5 Features Disable Automatically Detect Intranet Enable automatic fallback after a whitelist violation Enable Navigation URL list for VMware Browser Redirection Show a page with error information before automatic fallback Enable URL list for VMware Browser Redirection Enable VMware Browser Redirection Enable VMware Geolocation Redirection Set the minimum distance for which to report location updates Enable URL list for VMware Geolocation Redirection Enable VMware HTML5 Multimedia Redirection Enable URL list for VMware HTML5 Multimedia Redirection Enable Chrome Browser for VMware HTML5 Multimedia Redirection Enable Edge Browser for VMware HTML5 Multimedia Redirection Enable software acoustic echo cancellation for Media Optimization for MS Teams Enable sharing the client desktop screen while remoting the MS Teams app in app sharing mode Enable Media Optimization for Microsoft Teams VMware Integrated Printing Do not change default printer Disable LBP Do not redirect client printer(s) Disable printer redirection for non-desktop client Disable Printer Property Persistence Print Preview Setting Printer Driver Selection Printer Name Schema Specify a filter in redirecting client printers VMware Virtualization Pack for Skype for Business Disable extended filter for acoustic echo cancellation in Virtualization Pack for Skype for Business Enable Detect Proxy Settings Force Skype for Business in non-optimized mode Show Icon Show Messages Suppress Minor Version Mismatch Warning VMware View Common Configuration Enable extended logging Configure dump creation on program error Disk threshold for log and events in Megabytes Override the default View Windows event generation Log Configuration Log directory Maximum number of debug logs Maximum debug log size in Megabytes Number of days to keep production logs Send logs to a Syslog server Performance Alarms CPU and Memory Sampling Interval in Seconds Overall CPU usage percentage to issue log info Overall memory usage percentage to issue log info Process CPU usage percentage to issue log info Process memory usage percentage to issue log info Processes to check comma separated name list allowing wild card and exclusions Security Configuration Only use cached revocation URLs Revocation URL check timeout in milliseconds Type of certificate revocation check VMware View Server Configuration Enumerate Forest Trust Child Domains Recursive Enumeration of Trusted Domains Windows Password Authentication Mode Summary Chapter 9: Horizon User GPO Settings User Configuration GPO Settings VMware Blast VMware Horizon Client Configuration Allow display scaling Always on top Automatic input focus in a virtual desktop window Automatically install shortcuts when configured on the Horizon Server Disable desktop disconnect messages Disable opening local files in hosted applications Disable sharing files and folders Don't check monitor alignment on spanning Disable toast notifications Enable multi-media acceleration Enable relative mouse Enable the shade Always hide the remote floating language (IME) bar for Hosted Apps Hide items in application context menu Default value of 'Hide selector after launching an item' checkbox Hide items in desktop context menu Hide items in desktop toolbar Hide items in system tray menu Hide items in the client toolbar menu Hotkey combination to grab input focus Hotkey combination to release input focus Pin the shade Display modifier function key Default Exit Behavior for Local Mode Desktops RDP Settings Audio redirection Bitmap cache file size in MB for 16bpp, 24bpp, 32bpp, and 8bpp bitmaps Bitmap caching/cache persistence active Color depth Desktop composition Cursor shadow Show contents of window while dragging Menu and windows animation Themes Desktop background Enable RDP Auto-Reconnect Enable compression Enable Credential Security Service Provider Font smoothing Windows key combination redirection Enable audio capture redirection Redirect clipboard Redirect drives Redirect supported plug-and-play devices Redirect serial ports Redirect printers Redirect smart cards Shadow bitmaps Scripting Definitions Security Settings VMware Integrated Printing Do not redirect client printer(s) Allow to redirect L1 local printers to inner session VMware Horizon URL Redirection VMware View Agent Configuration Agent Configuration Disable Time Zone Synchronization DPI Synchronization Per Monitor DPI Synchronization Agent Security Accept SSL encrypted framework channel Enable user profile customization for Hosted Apps Only launch new instances of Hosted Apps if arguments are different Clipboard Redirection Scanner Redirection Bandwidth Limit Compression Force the TWAIN Scanning Properties dialog TWAIN Scanner Properties dialog location Serial COM VMware Integrated Printing Watermark Watermark Configuration Summary Chapter 10: Managing the End-User Environment What Is a User Profile? How Are End-User Profiles Created? User Profile Types Profile Management for Horizon Desktops User Environment Management (UEM) What Is UEM? Why UEM? How Does UEM Work? The Composite Desktop Model The Operating System Delivering Applications App Volumes Delivered Applications App Volumes Writable Volumes VMware Dynamic Environment Manager (DEM) How Does DEM Work? Horizon Smart Policies Summary Chapter 11: Horizon Apps Horizon Apps High-Level Architecture Design Considerations Installing and Configuring Horizon Apps Building and Configuring an RDSH Environment Testing RemoteApp Functionality Installing Applications for Horizon Apps Delivery Installing Apps Natively on RDSH App Volumes Delivered Apps Installing the Horizon Agent for RDSH Configuring the Connection Server for Horizon Apps Creating a Manual Farm Creating an Application Pool Creating an Application Pool from Installed Applications End-User Entitlements Creating an Application Pool Manually Load Balancing with Custom Scripts Enable Script Host Service Configure the Script to Run Building Stateless Published App Delivery Managing Farms and Application Pools Managing Existing Farms Application Pool Management Summary Chapter 12: Horizon Published Desktops Horizon Architecture for Desktop Sessions Design Considerations Configuring Horizon Desktop Sessions Building and Configuring an RDSH Environment Installing the Horizon Agent for RDSH Configuring the Connection Server for Horizon Apps Creating a Manual Farm Creating a Desktop Pool End-User Entitlements Load Balancing with Custom Scripts Enable Script Host Service Configure the Script to Run Building Automated Farms Managing Farms and Application Pools Managing Existing Farms RDS Desktop Pool Management Adding a Desktop Pool Editing an Existing Desktop Pool Deleting an Existing Desktop Pool Adding and Removing Entitlements Status Access Group View Unentitled Additional Management Tasks Summary Chapter 13: Connecting End Users Horizon Clients Horizon Client for Windows Installing the Horizon Client for Windows Connecting to Horizon Delivered Resources Using the Horizon Client Horizon Client Configuration Options Configuration Options Once Connected Settings Menu Options Configuration Options During an Active Session Horizon Client for Linux Horizon Client for macOS Horizon Client for Chrome OS Horizon Client for Android Horizon Client for iOS Hardware Clients Thin Client Devices Zero Client Devices Repurposing Existing Hardware Devices Next-Gen Edge OS for Digital Workspaces with IGEL Universal Management Suite (UMS) Browser-Based HTML Access Customizing the Horizon Web Access Page Summary Chapter 14: Horizon Enterprise Edition App Volumes App Volumes Use Cases Application Management Enhanced End-User Experience How Does Application Layering Work? VMware App Volumes How Does App Volumes Work? Application Package Program Creating Application Layers Delivering Application Layers Managing a Single Application Managing a Group of Applications Writable Volumes Why Deploy App Volumes? ThinApp Workspace ONE Unified Workspace Summary Chapter 15: Upgrading Horizon Before You Start the Upgrade Backing Up Your Environment Before Upgrading Compatibility The Upgrade Sequence Upgrading Horizon Clients Upgrading the Connection Servers Upgrading the Replica Server Upgrading the UAG Appliance Upgrading the Horizon Agent Scenario #1: Virtual Desktop Only Scenario #2: Virtual Desktop and Other Agents Scenario #3: Virtual Desktop, Other Agents, and VMware Tools Pushing Out the Upgraded Instant Clone Desktop Pool Image Upgrading AD Components What About Upgrading the Display Protocol? Summary Chapter 16: Running Horizon in the Cloud Deployment Options Horizon Subscription-Based Licensing Horizon Cloud Control Plane Horizon JMP JMP Orchestration Components VMware Workspace ONE VMware Dynamic Environment Manager (DEM) VMware Instant Clones VMware App Volumes Horizon Image Management Service Horizon Cloud Brokering Horizon Universal Broker How Does It Work? Horizon Single-Pod Broker Horizon Cloud Connector Horizon Cloud on Microsoft Azure Summary Chapter 17: Horizon Troubleshooting General Troubleshooting How Many Users Are Experiencing Issues? Troubleshooting Performance-Related Issues User Performance Issues Non-virtualized Performance Issues Bandwidth, Connectivity, and Networking Issues Compute Resource Issues with CPU and Memory Disk Performance Issues Troubleshooting Horizon-Specific Issues Horizon Infrastructure Issues Horizon Help Desk Feature Additional Help and Support Summary Index