Introduction to the Application Virtualization Security Guide
Updated: October 9, 2009
Applies To: Application Virtualization
This Microsoft Application Virtualization (App-V) security guide provides instructions for administrators who are responsible for configuring the security features that were selected for the App-V deployment.
|This documentation does not provide guidance for choosing the specific security options. That information is provided in the App-V Security Best Practices white paper available at http://go.microsoft.com/fwlink/?LinkId=127120.|
As an App-V administrator using this guide, you should be familiar with the following security-related technologies:
Active Directory Domain Services
Public key infrastructure (PKI)
Internet Protocol Security (IPsec)
Internet Information Services (IIS)
APP-V Infrastructure Components
When planning an enhanced security App-V environment, you can consider several different infrastructure models.
|For more information about App-V infrastructure models, see the following documentation:|
These models utilize some but possibly not all of the App-V components depicted in the following illustration.
- Application Virtualization (App-V) Management Server
- The App-V Management Server streams the package content and publishes the shortcuts and file-type associations to the App-V Client. The App-V Management Server also supports active upgrade, license management, and a database that can be used for reporting.
- Application Virtualization (App-V) Streaming Server
- The App-V Streaming Server hosts the packages for streaming to App-V Clients in environments such as branch offices, where the bandwidth of the connection to the App-V Management Server is insufficient for streaming package content to clients. The Streaming Server contains only streaming functionality and does not provide you with the App-V Management Console or the App-V Management Web Service.
- Application Virtualization (App-V) Data Store
- The App-V data store, in the SQL database, retains information related to the App-V infrastructure. The information in the App-V data store includes all application records, application assignments, and which groups manage the Application Virtualization environment.
- Application Virtualization (App-V) Management Service
- The App-V Management Service communicates read/write requests to the Application Virtualization data store. This component can be installed on the same computer as the App-V Management Server or on a separate computer with IIS installed.
- Application Virtualization (App-V) Management Console
- The App-V Management Console is a snap-in management utility for App-V Server administration. This component can be installed on the same computer as the App-V Server or on a separate workstation that has MMC 3.0 and .NET 2.0 installed.
- Application Virtualization (App-V) Sequencer
- The App-V Sequencer monitors and captures the installation of applications and creates virtual application packages. The output of the Sequencer consists of the application icon, the OSD file containing application definition information, a package manifest file, and an SFT file containing the application’s content files. Optionally, a Windows Installer file can be created for installing the package without using the App-V infrastructure.
- Application Virtualization (App-V) Client
- The App-V Client is installed on the App-V Desktop Client computer or on the App-V Terminal Services Client computer. It provides the virtual environment for the virtual application packages. The App-V Client manages the package streaming to the cache, virtual application publishing refresh, and interaction with the Application Virtualization Servers.
You can learn more about MDOP in the TechNet Library, search for troubleshooting on the TechNet Wiki, or follow us on Facebook or Twitter.