Why should I use FSLogix in combination with another UEM tool

Door Vincent van Zeijl
27 November 2020

Recently I had the opportunity to play around with FSLogix. The client I work for has a Citrix Virtual Apps and Desktops (CVAD) environment powered by PVS nonpersistent VDI’s and Ivanti Workspace Control. We had to prepare the environment for the implementation of Office 365. As many of you know, working with O 365 on non-persistent machines has some challenges as Microsoft chose to store Outlook and Teams data in the user profile.

To provide the users with a good user experience based on this cloud based office suite it’s possible to implement FSLogix Containers. Our environment however contains lots of users so the FSLogix containers could consume a lot of diskspace. Let’s take a look at our options.

FSLogix

FSLogix offers 4 different tools. In this blog we will discuss the Profile container and the Office365 container. App masking and Java versioning will not be discussed here, even though these two are very useful tools as well.

With a profile container the FSLogix agent will create a profile disk and redirect different user settings to this user attached profile disk. This way the users profile will act like a local profile in a non-persistent VDI-session. The Office365 container feature will do the same, but it will only redirect office user settings to the container. It is a small subset of the profile container feature.

Redirected Folders

The first decision we had to make was: ‘do we still need redirected folders?’. After all, it is possible to store all documents in the FSLogix profile container. However, you can only use these documents from within the container inside the VDI-session. The same documents will not be available on a physical workstation. Another drawback is losing the ability to work with versioning on the file share. This means that a profile reset could delete all documents of the user and that could make that user very unhappy.

If OneDrive is used as the only file location then it would be perfectly okay to store the OneDrive cloud cache in de profile container. Versioning is done in the cloud and a profile reset will only clear the cache. Nothing will be lost. In our environment both physical workstations and VDI’s are used so we do still need the redirected folders. Not a problem as folder redirection always worked fine for us.

Storage Capacity

As said before we have a lot of users in our environment. If each user would create a profile container we would need a lot of storage. We wanted the FSLogix container to be as small as possible and we would like to use it only for the benefit of a better user experience. So we still use redirected folders to keep the container as small as possible. We ended up by only using the Office365 container feature to improve the O365 user experience. This is done by caching the cloud cache in the container attached to our non-persistent VDI’s. With a GPO it is possible to enable or disable the usage of the Office365 container per Office application. We decided to start with enabling Outlook only, knowing we could enable Onedrive or Teams later if we wanted to. As this could expand the containers and storage needs by quite a lot we chose to be carefull and not enable too much at once.

We also started with only one app as adding more apps to the container is easier then removing them. FSLogix has no auto shrink option built-in yet (however there are scripts available developed by the community).

Logon speed

We found that creating, attaching and filling the FSLogix profile container for a new user takes about 20 seconds of the logon. And even if the profile container already exists, still a 15 second is added to the users logon duration. This was established using Citrix Director. I know that the FSLogix profile container can speed up user logons for users with large roaming profiles, but in our case we use Ivanti Workspace Control with Zero profiling. Nothing seems better than Zero profiling and who is still using roaming profiles these days?

We also found out that the FSLogix Office365 container acts a little bit different compated with the FSLogix Profile container. It is not really part of the logon process, although it is attached at the logon of the user. Using only the Office365 container did not delay our logon process, but it did improve the Office 365 user experience.

FSLogix vs Ivanti Workspace Control

We ended up using best of both worlds. Ivanti Workspace Control makes the user log-on really fast with zero profiling. We keep the ability to manage user settings per application and have a lot of flexibility. On the other hand Ivanti has no tooling available to boost the user experience of Office 365 as FSLogix can do. The combination of using this two tools gives us the best of both worlds. The same could be said of other well-known tools like Citrix WEM, Profile Unity or VMware UEM. We are very happy the FSLogix Office container feature proved to work perfectly together within our existing environment and zero profiling solution.

If you start using FSLogix for your Office 365 applications disable the capturing of Office settings in your other UEM tool. FSLogix will redirect the office settings to the Office container to make them available when a user logs in to his non-persistent VDI-session.

Within the newest release of Ivanti Workspace Control you can manage all FSLogix settings from the Ivanti console. You do not need to configure the FSLogix settings with a GPO. This means it is very easy to manage your environment from just one console.

If you need more information about implementing Office 365, FSLogix or more, please contact us via sales.support@loginconsultants.nl

More info about the FSLogix Office Container

https://docs.microsoft.com/en-gb/fslogix/configure-office-container-tutorial

The Corona Workplace: from surviving to structuring

In the lockdown, organizations switched quickly – letting employees work online at home was the number one priority. Although the emergency solutions will function to run, I see a great need for optimization. The big question I keep hearing: how to make the virtual (emergency) workstations in your organization more effective, efficient maintenance and above all future-proof, ready for any subsequent Covid-19 golf?

Now that the world and our economy has entered ‘the new normal’ – better term: ‘new reality’ – it is time to replace the sandbags with real dikes. To upgrade the fast, durable ‘Ducttape solutions’. Now that you know that Corona-like scenarios can reoccur, an organization must ask itself: if we had prepared and devised this solution when we had time, what choices would we have made?

In the first weeks of the lockdown, I also saw how many organizations have set up their ‘home working mode’ with a lot of creativity and flexibility. The great thing about the urgency of this situation was that decisions were made at a rapid pace about matters for which a lot of time was normally taken. The success of that operation has enabled many companies to survive the lockdown. And although the new online workplace usually functions adequately under circumstances, it still has the character of an emergency Duct tape solution in many organizations.

In times of acute crisis – as you can call the first weeks of the lockdown – the solutions had something like placing sandbags in front of an approaching storm surge. On that moment it was a successful solution, in the emergency efficiency was not always the biggest concern at that time.

The main reason for this check and for possible investments is that virtual and online work will largely be the norm and will continue. Nothing is as permanent as temporary things. We have in four months forced learned to support programs to work together with colleagues and clients and advising behind a screen. In this position in my speech I would like to make a big compliment to our employees. I am proud of how they have played a crucial role in the development of home workplaces for our customers. The customer situation and questions put a lot of pressure on them, while they also had to work at home. Employees with children also fulfilled a part-time educational role.

Traditional managers had to face it all during the lockdown. Their belief that their employees are more productive and work harder as they monitor was very tempted. For them, the lockdown was a ‘Crash course in Letting go for Managers’, because now they had to manage the output of employees instead of being in the office. Some have taken this up a notch by asking their employees a simple question, “How can I help you do your job well?” If you ask me, this period has shown that employees can also work productively at home. When people in the office without a supervisor do not contribute, they won’t do it at home.
I must make a note that it for any sales – and relationship manager is challenging to remotely, without the handshake and face-to-face contact, the confidence to win potential customers. If you are close to your customer want to create solutions, it is more difficult at a distance. This question that is not answered in just four months, there is more time needed. Furthermore, I do not want to idealize working online, because there are also disadvantages. Many office workers now like to go back to business because they have noticed that the working day at home never ends. In your head, closing your laptop is something different than driving home and enjoying the break from work in a traffic jam.

The key question: are the emergency measures for working company-wide online adequate even after the lockdown? This answer is clear in many organizations: certainly not. The challenges lie in many areas such as speed, manageability and availability of all applications. In the rush of the lockdown, performance wasn’t the most important thing – we were able to keep working, that was the priority.

The layout of the virtual workplaces also made clear at many companies that by no means all processes were fully digitized. This meant that employees had to return to the office regularly during the lockdown.

Then there is also the maintenance. If a company realized five types of virtual workspaces at the start of the lockdown, each with different application sets, then all five will require their own maintenance, including monthly updates from Microsoft, among others. All of these manually crafted types will eventually grow apart without automation, with all the support challenges and user frustrations that come with it. Automatically rebuilding the different types of workplaces with the latest updates based on recipes by means of tooling every month is important to give users a quality workplace in the future.

In addition, you must not forget that the home-working employee starts to set requirements for availability and performance. In survival mode, everything was okay, if working from home is increasingly becoming the norm, then it has to work, he says. In March, a less smooth login may have been acceptable, but now the slowness is starting to cause dissatisfaction.

And also consider the costs. Organizations have put in the last period everything to their processes going on and their turnover levels to hold. In the meantime, they have often incurred a lot of costs in organizing their virtual workplaces. Costs that – if they do not intervene – will continue considerably. If you keep doing what you did now, you will keep what you already had.

In short: after the temporary solutions – the sandbags – it is now time for structural quality and efficiency, to better and cheaper manageability. And above all: making it structurally better. In practice, this means, for example, that the updates for different application sets can be rolled out automatically, at the push of a button. Organizations can also do more to proactively monitor the virtual workplaces and pay more attention to a good user experience.

My advice: step out of the survival phase and work on structural solutions for management, with a longer shelf life and lower total cost of ownership.

Many directors and entrepreneurs are share my thoughts: it is not going to be the way it was. Virtual working has received a boost, that spirit does not go back into the bottle. A new short-term lockdown can still not be ruled out. In a while this virus may reappear, we may even have to deal with another virus. It is wise to prepare your organization for this and to have additional resistance built up. No organization can be made fully Corona-proof, but Corona-ready should still be the new standard.

Chris van Werkhoven, CTO Login Consultants

De voordelen van Windows Virtual Desktop in een VMware-omgeving

The benefits of Windows Virtual Desktop on a VMware Horizon environment

In previous blogs, we discussed the benefits of Windows Virtual Desktop for the business and for the IT department. We also showed that – in addition to the Windows Virtual Desktop solution as offered by Microsoft – you can also opt for Windows Virtual Desktop with the enriching Citrix shell. In this blog, Dennis Sigmond explains more about the possibilities of VMware Horizon Cloud combined with Windows Virtual Desktop.

DIFFERENT CLOUD PLATFORMS

VMware Horizon Cloud is a service you can use to offer virtual desktops or applications via the cloud. This involves a control plane – a management layer – which is administered by VMware. The workspaces themselves are usually administered by the clients themselves. These workspaces can be hosted on a number of cloud platforms – such as IBM Cloud, AWS, or Azure – but on-premise hosting is naturally also an option. In the case of Microsoft Azure, you can – as of this year – also offer Windows 7 and Windows Virtual Desktop, which essentially means offering Windows 10 Enterprise multi-sessions.

EXTENSIVE PRODUCT PORTFOLIO

VMware Horizon Cloud provides, as it were, an enriching layer on top of Windows Virtual Desktop. This enrichment is mainly seen in advanced management tooling and in the extensive portfolio of other products which make administering the environment easier. The entire end-user profile management, for example, is significantly easier with VMware Dynamic Environment Manager. Among other benefits, VMware Horizon Cloud offers personalization and dynamic policy configuration in every virtual, physical, and cloud-based Windows desktop environment. Additionally, VMware Horizon Cloud offers a cloud-based monitoring service which gives you a great deal of insight into how the environment is used, which applications are used most, which times of the day are the busiest, and more.

HELP DESK FEATURES

VMware Horizon Cloud also offers advanced help desk features so that first and second-line support staff can easily help users who work with Windows Virtual Desktop and have a problem. Help desk employees can take over functions, stop processes, close applications, log out an employee, or reset a session. What’s more, VMware Horizon Cloud offers all sorts of insights into how the desktop is running, such as the CPU and memory use.

POWER MANAGEMENT

Many clients use a Pay-As-You-Go subscription for the use of Azure VMs; if this is the case, it’s important to promptly disable (de-allocate) resources which are not being used. By disabling resources at times when there is less demand for the Windows Virtual Desktop environment, significant cost savings can be had. VMware Horizon Cloud offers extensive functions for dealing with this in a smart and automated manner.

ROLLING MAINTENANCE

When multiple employees are using the same Windows Virtual Desktop VM at the same time, it is important for these employees to have an equivalent user experience over a longer period of time. To do this, you need to regularly restart or rebuild the Windows Virtual Desktop. This action can also take place entirely automatically on the basis of a schedule of a number of days, fixed days during the week, or after a certain number of sessions. On the basis of your image, you can set the VM to be rolled out again after, for example, every hundred sessions; this means that there is almost no chance of contamination on your Windows Virtual Desktop VM. Automatically restarting the VM on the basis of the same options can also be selected. In both of these situations, the employees naturally experience no inconvenience.

ACCESS PORTAL

Last but not least, with VMware Horizon Cloud, the Workspace ONE Access portal is also provided. This is a portal where you can have all sorts of applications converge. These include SaaS applications, internet and intranet pages, on-premises Citrix and/or VMware Horizon environments, but also a Windows Virtual Desktop. It forms a type of collection point for all applications. This Access portal offers advanced options for security. For instance, you can turn on two-factor authentication and apply conditional access policies, such as when someone may or may not initiate a resource and, if so, under which conditions.

INTERESTED?

Curious about the entire set which VMware Horizon Cloud offers on top of the Windows Virtual Desktop? Curious whether the VMware solution is right for your organization? If you’re looking for someone who can help you configure Windows Virtual Desktop so it fits your organization perfectly, please get in touch – we’d be delighted to help you.

Dennis Sigmond 

 

De voordelen van Windows Virtual Desktop in een Citrix-omgeving

The benefits of Windows Virtual Desktop on a Citrix environment

Microsoft has given its Windows Virtual Desktop a somewhat strange name. Located on Microsoft Azure, Windows Virtual Desktop is actually a set of services which you can use to offer sessions. That may be a Windows 10 Enterprise multi-session, but it doesn’t necessarily have to be. For example, Citrix has built a shell around the Windows Virtual Desktop as offered by Microsoft to roll out a Citrix variation of Windows Virtual Desktop. And that has its advantages, explains Vincent van Zeijl in this blog.

OPTIMIZATION OF THE MICROSOFT ENVIRONMENT

If you opt for Windows Virtual Desktop in a Citrix environment, what’s under the bonnet looks totally different to when you use the services delivered by Microsoft. After all, you are using the Citrix services in their existing form in the Citrix cloud environment. Citrix originally built its environment as a layer on top of Microsoft Remote Desktop, a somewhat older Microsoft product which is not so easy to manage. The layer that Citrix built optimizes the entire Microsoft environment – previously with Microsoft Remote Desktop and now also with Windows Virtual Desktop. This optimization enables faster connections and easier management, and you can also view sessions and analyse problems via a website.

NO WORRIES

When you choose Citrix Managed Desktop, Citrix takes care of all your worries, makes doing the maintenance easier, and offers you more options. For example, they install the entire back-end infrastructure and workstations for you, and you also pay the Microsoft Azure fees to Citrix. This gives you just one invoicing address, which eliminates a lot of hassle. After all, you want to set about your work and not spend your time maintaining infrastructure.

NOT FOR THE BUILDERS

To work with the management of Windows Virtual Desktop, you must really understand what is going on. Citrix Director, on the other hand, can be used by anyone. It is a tool meant for the help desk, so they can easily perform actions such as viewing and resetting sessions or killing an application. You don’t have to be a software builder to use it.

BENEFITS FOR THE BUSINESS REMAIN

The benefits of Windows Virtual Desktop for the business, as Christiaan wrote about them in his blog, are still there, of course. And those benefits have become even better. You may pay a bit more for them, but you don’t need to already have – or obtain – as much knowledge in house for construction and maintenance, and that’s where you save. This is how you enjoy the benefits of Windows Virtual Desktop but leave all the hassle and the worries to someone else.

INTERESTED?

Curious whether the Citrix solution is right for your organization? If you’re looking for someone who can help you configure the Citrix variant of Windows Virtual Desktop, please get in touch – we’d be delighted to help you.

Vincent van Zeijl

 

De voordelen van Windows Virtual Desktop voor de IT-organisatie

The benefits of Windows Virtual Desktop for the IT organisation

Windows Virtual Desktop (WVD) is a Microsoft service you can deploy to offer your users a virtual Windows 10 workspace from the cloud. In a previous blog, we explained what the benefits of Microsoft Windows Virtual Desktop (WVD), a platform-as-a-service, are for the business. In this blog, we take a look at the IT benefits.

1 – SCALABILITY

As Christiaan already explained in his blog, one of the greatest advantages offered by Windows Virtual Desktop is its scalability. This feature provides benefits for the business but also certainly for the IT organization. If, for example, you are building a classic Remote Desktop Services (RDS) environment, you must first establish an entire infrastructure. You do that on the basis of requirements. One of those requirements is the number of users you estimate will work in that environment. Is that a hundred or is that a thousand? This number is a key factor in how you will build the environment and what you must invest in it. With Windows Virtual Desktop, you no longer have to worry about that because that infrastructure is now already offered from the cloud as a service. This means that you can set up a WVD environment for a small legal office just as easily as you can for a large corporate business – because the exact same WVD platform is available to everyone.

2 – TRIAL BALLOON

So, with WVD, you can relatively easily establish a proof of concept and you can very easily scale that up or down according to the client’s current needs. Previously, you had to take account of a large number of issues and once you had built the environment with all sorts of components, you just hoped that it would also be used and accepted. With Windows Virtual Desktop, you can very easily put up a trial balloon to discover whether the WVD platform offers what the client is looking for. If that is the case, you can continue to build the environment. If not, you can look for a different solution.

3 – LICENSING COSTS

Many organizations are familiar with Microsoft. They already have licences for multiple Microsoft products and therefore often also for Windows Virtual Desktop. This means they can offer their users a hosted desktop without extra licensing costs from a different third-party supplier. Whether the Microsoft WVD solution offers them exactly what they need, or whether another market solution such as that from Citrix or VMware is more suitable, remains to be seen. But if the Microsoft WVD solution satisfies their requirements, this can quickly reduce licensing costs.

THE BIG PICTURE

Where you previously had to build a physical infrastructure in a data centre or on-premise at the client, this is now a thing of the past thanks to Windows Virtual Desktop. In many cases, extra licensing costs are eliminated and upscaling or downscaling is a snap. This does not alter the fact that you still must have sound knowledge of how to set up the Windows host where the end user lands and that you must have good insight into the wishes and needs of the client. For example: How do you deal with User Environment Management? How do you link the on-premise Active Directory to the Azure Active Directory? How do you deal with existing legacy applications? Establishing a standard WVD workspace can be done quickly, but how should this be integrated in the big picture? How do you administer such an environment if it runs in production? We have years of experience with hosted desktop environments and with linking a cloud environment to an organization’s existing environment. We also have a complete set of tools at our disposal to make all of this possible. Because we operate independently of any vendor, we can give you honest advice about what the best virtual workspace solution is for your organization.

INTERESTED?

If you’re looking for someone who can help you configure Windows Virtual Desktop and ensure that your employees have access to a suitable desktop-as-a-service, please get in touch – we’d be delighted to help you.

Benno Rummens