Deploying the Settings Storage Location for UE-V 1.0

  • Article

Microsoft User Experience Virtualization (UE-V) deployment requires a settings storage location where the user settings are stored in a settings package file. The settings storage location can be configured in one of the following two ways:

  • Active Directory home directory – if a home directory is defined for the user in Active Directory, the UE-V agent will use this location to store settings location packages. The UE-V agent dynamically creates the user-specific storage folder below the root of the home directory. The agent only uses the home directory of the Active Directory if a settings storage location is not defined.

  • Create a settings storage share – the settings storage share is a standard network share that is accessible by UE-V users.

Deploy a UE-V settings storage share

When you create the settings storage share, you should limit access only to users that need access. The necessary permissions are shown in the tables below.

To deploy the UE-V network share

  1. Create a new security group for UE-V users.

  2. Create a new folder on the centrally located computer that will store the UE-V settings packages, and then grant the UE-V users with group permissions to the folder. The administrator supporting UE-V will need permissions to this shared folder.

  3. Set the following share-level (SMB) permissions for the setting storage location folder:

    User account Recommended permissions

    Everyone

    No Permissions

    Security group of UE-V users

    Full Control

  4. Set the following NTFS permissions for the settings storage location folder:

    User account Recommended permissions Folder

    Creator/Owner

    Full Control

    Subfolders and Files Only

    Security group of UE-V users

    List Folder/Read Data, Create Folders/Append Data

    This Folder Only

  5. Click OK to close the dialog boxes.

This permission configuration allows users to create folders for settings storage. The UE-V agent creates and secures a settingspackage folder while running in the context of the user. The user receives full control to their settingspackage folder. Other users do not inherit access to this folder. You do not need to create and secure individual user directories, because this will be done automatically by the agent that runs in the context of the user.

Note   Additional security can be configured when a Windows server is utilized for the settings storage share. UE-V can be configured to verify that either the local administrator's group or the current user is the owner of the folder where settings packages are stored. To enable additional security complete the following:

  1. Add a REG_DWORD registry key named "RepositoryOwnerCheckEnabled" to HKEY_LOCAL_MACHINE\Software\Microsoft\UEV\Agent\Configuration.

  2. Set registry key value to 1.

Deploying UE-V 1.0

Supported Configurations for UE-V 1.0

Deploy the Central Storage for User Experience Virtualization Settings Templates and Settings Packages Installing the UE-V Generator

Deploying the UE-V Agent