Export (0) Print
Expand All
0 out of 1 rated this helpful - Rate this topic

Deploying the Settings Storage Location for UE-V 2.0

Updated: December 2, 2013

Applies To: User Experience Virtualization 2.0

Microsoft User Experience Virtualization (UE-V) 2.0 deployment requires a settings storage location where the user settings are stored in a settings package file. The settings storage location can be configured in one of the following ways:

  • Active Directory home or custom directory – If a home directory is defined for the user in Active Directory (AD), the UE-V Agent uses this location to store settings location packages. If a custom directory setting is configured in AD, then that directory is used instead. The UE-V Agent dynamically creates the user-specific storage folder under the root of the home directory. The agent only uses the Active Directory home directory if a settings storage location is not defined.

  • Create a settings storage share – The settings storage share is a standard network share that UE-V users can access.

Deploy a UE-V 2.0 settings storage share

When you create the settings storage share, you should limit access only to users that require access. The necessary permissions are shown in the tables below.

To deploy the UE-V 2.0 network share

  1. Create a new security group for UE-V users.

  2. Create a new folder on the centrally located computer that stores the UE-V settings packages, and then grant the UE-V users access with group permissions to the folder. The administrator who supports UE-V must have permissions to this shared folder.

  3. Set the following share-level Server Message Block (SMB) permissions for the settings storage location folder.

     

    User account Recommended permissions

    Everyone

    No permissions

    Security group of UE-V users

    Full control

  4. Set the following NTFS file system permissions for the settings storage location folder.

     

    User account Recommended permissions Folder

    Creator/owner

    Full control

    Subfolders and files only

    Security group of UE-V users

    List folder/read data, create folders/append data

    This folder only

This configuration grants users permission to create folders for settings storage. The UE-V Agent creates and secures a Settingspackage folder while it runs in the context of the user. These users receive full control to their Settingspackage folder. Other users do not inherit access to this folder. You do not have to create and secure individual user directories, because the UE-V Agent does this automatically as it runs in the context of the user.

noteNote
Additional security can be configured when a computer that runs a Windows Server operating system is used for the settings storage share. UE-V can be configured to verify that either the local Administrators group or the current user is the owner of the folder where settings packages are stored. To enable additional security, complete the following settings in the Windows Server Registry Editor:

  1. Add a REG_DWORD registry key named "RepositoryOwnerCheckEnabled" to HKEY_LOCAL_MACHINE\Software\Microsoft\UEV\Agent\Configuration.

  2. Set the registry key value to 1.

See Also

Other Resources

Deploying UE-V 2.0

 
Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft. All rights reserved.