Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Summary

Evolve IP requires the following best practices be implemented with DaaS, ensuring best user experience and supportability.  As the client administrator, you are responsible to understand and implement all or some of the policies below, based on your specific requirements.  

Evolve IP service delivery requires that the following be setup, configured and tested prior to entering a UAT phase of the project.  Long term Evolve IP support and SLA's will be contingent upon the client environment being in compliance with the following recommendations and best practices.

Recommended Best Practices and Policies:

Disabling Windows Feature Updates

A feature update is when Windows 10 version 1903 is upgraded to the next feature release of Windows 10 1909.  This update process can impact performance and functionality of your desktops for many reasons such as 3rd party vendors who needs to test the update from Microsoft before they will deploy their own update.  Disabling the Windows feature update reduces the impact of this process and maintains the stability of your DaaS platform. 


Applications and Load Over Time - Memory Requirements Will Grow 

Memory resources are a driving factor in the performance of your DaaS seat.  It is important to recognize that over time as you add new applications that were not part of the initial design requirements, less free memory (RAM) can constrain performance.  Specifically, Real Time Audio Video collaboration tools will see a performance decrease as memory is consumed by additional applications.  See the Real Time Audio Video Collaboration Tools section below for more details.

It is recommended that before you add new applications or software to check with Evolve IP to see if any changes to the DaaS seat resources are necessary.


Real Time Audio Video Collaboration Tools

Real Time Audio Video (RTAV) collaboration has become a standard tool for every business.  It is important to recognize that the manufacturer's recommendation to use RTAV tools like Microsoft Teams and Zoom is to run them locally from the users endpoint.  Evolve IP deploys our vendor's RTAV optimizations in order to provide the best RTAV possible outside of running from the local endpoint.  RTAV will have performance and feature limitations running in DaaS when compared to to running them from your local machine. We have detailed our experience with RTAV in virtualized environments here for your reference to help you select the best DaaS seat option. 


Group Policy Objects

GPOs are settings within Microsoft's OS that define what a system will look like and how it will behave for a defined group of users.  For example, GPOs enable control over a user's ability to access restricted files, run 3-D graphics, deploy new software, run background processes and limit a user's access to applications like the payroll software.

Evolve IP has provided the following GPOs to provide the best user experience: 

Microsoft Teams Optimization


Panel
borderColor#000000
titlePerformance Optimization GPOs


Message Box
iconbuild
titleMicrosoft Teams Optimization
typehint
  1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Microsoft Teams Optimization
  2. Evolve IP can provide the needed admx/adml files if these options are missing.
    1. The ADMX files would get copied into your “Policy Definitions” folder
    2. The ADML files would get copied into your “Policy Definitions\en-US” folder
  3. Right-click the GPO that you created for the group policy settings and select Edit.
    1. Computer Configuration -> Policies -> Administrative Templates -> VMware View Agent Configuration → VMware HTML5 Features → VMware WebRTC Redirection Features
      1. Enable Media Optimization for Microsoft Teams
        1. Enabled
Zoom OptimizationZoom


Message Box
iconbuild
title
IE Graphics Optimization
typehint

Prevent Bing Extension for Chrome

Message Box
iconbuild
titlePrevent Bing Extension for Chrome
typehint
  1. Download and install the Microsoft Office Group Policy Templates (ADMX and ADML files)
    1. https://www.microsoft.com/en-us/download/details.aspx?id=49030
  2. Create new GPO Under the OU with the desktops in it with the name:  Evolve IP - DaaS 3 - Disable Bing
  3. Right-click the GPO that you created for the group policy settings and select Edit.
    1. Navigate to Computer Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 (Machine) -> Updates
    2. Look through the list of policies and double-click on the Don't install extension for Microsoft Search in Bing that makes Bing the default the search engine option.
    3. Select Enabled and then press Apply followed by OK to configure the policy.

Windows 10 Device Registration

  1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - IE Graphics Optimization
  2. Right-click the GPO that you created for the group policy settings and select Edit.
    1. User Configuration -> Preferences -> Windows Settings -> Registry
      1. Action: Create
      2. Hive: HKEY_CURRENT_USER
      3. Key Path: Software\Microsoft\Internet Explorer\Main
      4. Value Name: UseSWRender
      5. Value Type: REG_DWORD
      6. Value Data: 00000001
      7. Base: Hexadecimal


Message Box
iconbuild
titleChrome Graphics Optimization
typehint
  1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Chrome Graphics Optimization
  2. Evolve IP can provide the needed admx/adml files
    1. Copy CHROME.ADMX into your “Policy Definitions” folder
    2. Copy CHROME.ADML into your “Policy Definitions\en-US” folder
  3. Right-click the GPO that you created for the group policy settings and select Edit.
    1. Computer Configuration -> Polices -> Administrative Templates -> Google - > Google Chrome
      1. Use hardware acceleration when available: Disabled


Message Box
iconbuild
titleChrome - Disable Software Reporter Tool
typehint
  1. Create new GPO Under the OU with the desktops in
Message Box
iconbuild
titleWindows 10 Device Registration
typehint
Create new GPO Under the OU with the desktops in
  1. it with the name: Evolve IP - DaaS 3 -
Windows 10 Device Registration
  • Evolve IP can provide the needed admx/adml files if these options are missing.
    1. The ADMX files would get copied into your “Policy Definitions” folder
    2. The ADML files would get copied into your “Policy Definitions\en-US” folder
    1. Chrome Disable Software Reporter Tool
    2. Right-click the GPO that you created for the group policy settings and select Edit.
      1. Computer Configuration ->
    Policies
      1. Preferences ->
    Administrative Templates ->
      1. Windows
    Components
      1. Settings ->
    Device Registration
    1. Register domain-joined computers as devices
      1. Enabled
  • Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Update
    1. Do not connect to any Windows Update Internet Locations
      1. Disabled
  • Display and ScreensaverTurn Off Display
      1. Registry
        1. Registry Key 1:
          1. Action: Create
          2. Hive: HKEY_LOCAL_MACHINE
          3. Key Path: Software\Policies\Google\Chrome
          4. Type: DWORD
          5. Name: ChromeCleanupEnabled
          6. Value: 0
        2. Registry Key 2:
          1. Action: Create
          2. Hive: HKEY_LOCAL_MACHINE
          3. Key Path: Software\Policies\Google\Chrome
          4. Type: DWORD
          5. Name: ChromeCleanupReportingEnabled
          6. Value: 0


    Message Box
    iconbuild
    title
    Office 2016/2019/365 Graphics Optimization
    typehint
    Create
    1. NOTE: This GPO is version specific. If using an older version of office, the appropriate ADMX/ADML files would be required.
    2. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
    Turn Off Display
  • Right-click the GPO that you created for the group policy settings and select Edit.
    1. Computer Configuration -> Administrative Templates -> System -> Power Management -> Video and Display Settings
      1. Turn Off the Display (Plugged In): Enabled
      2. Turn Off the Display (seconds): 0
  • Screensaver - No 3D screensavers are supported in DaaS.  

    PCoIP - Clipboard Redirection & vSphere Console Access

    hint
    1. Office 2016/2019/365 Graphics Optimization
    2. Evolve IP can provide the needed admx/adml files
      1. Copy all office ADMX files into your “Policy Definitions” folder
      2. Copy all office ADML files into your “Policy Definitions\en-US” folder
    3. Right-click the GPO that you created for the group policy settings and select Edit.
      1. User Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 -> Miscellaneous
        1. Do not use hardware graphics acceleration: Enabled


    Message Box
    titleMicrosoft Edge Graphics Optimization
    typegeneric
    Message Box
    iconbuild
    titlePCoIP - Clipboard Redirection & vSphere Console Access
    type
    1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 –
    PcoIP
    1. Microsoft Edge Graphics Optimization
    2. Evolve IP can provide the needed admx/adml files
    Copy PCOIP.ADMX
    1. Download Microsoft Edge for Business - Microsoft 
      1. Copy msedge.admx, msedgeupdae.admx, and msedgewebview2.admx into your “Policy Definitions” folder
      2. Copy
    PCOIP.ADML
      1. msedge.adml, msedgeupdae.adml, and msedgewebview2.adml into your “Policy Definitions\en-US” folder
    1. Right-click the GPO that you created for the group policy settings and select Edit.
      1. Computer Configuration -> Policies -> Administrative ->
    Classic -> PCoIP Session Variables -> Overridable Administrator Defaults
    1. Enable access to a PCoIP session from a vSphere console
      1. Enabled
    2. Configure Clipboard Redirection
      1. Enabled
      2. Enabled in both directions
    Blast - Screen Blanking & Clipboard Redirection
      1. Microsoft Edge
      2. User Hardware Acceleration when available
        1. Disabled



    Blast - Screen Blanking & Clipboard Redirection
    Panel
    borderColor#000000
    titleWindows 10 & Update GPOs


    Message Box
    iconbuild
    title
    Windows 10 Device Registration
    typehint
    1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3
    – Blast
    1. - Windows 10 Device Registration
    2. Evolve IP can provide the needed admx/adml files
    Copy VDM_BLAST.ADMX
    1. if these options are missing.
      1. The ADMX files would get copied into your “Policy Definitions” folder
    Copy VDM_BLAST.ADML
      1. The ADML files would get copied into your “Policy Definitions\en-US” folder
    1. Right-click the GPO that you created for the group policy settings and select Edit.
      1. Computer Configuration -> Policies -> Administrative Templates ->
    Classic
      1. Windows Components ->
    VMware Blast
    1. Screen Blanking
      1. Disabled
    2. Configure Clipboard Redirection
      1. Enabled
      2. Enabled in both directions

    Internet Explorer Graphics Optimization

      1. Device Registration
        1. Register domain-joined computers as devices
          1. Enabled
      2. Computer Configuration -> Policies -> Administrative Templates -> Windows Components -> Windows Update
        1. Do not connect to any Windows Update Internet Locations
          1. Disabled


    Message Box
    titleDisable Peer to Peer Windows Updates
    typegeneric
    1.  Create new GPO under
    Message Box
    iconbuild
    titleIE Graphics Optimization
    typehint
    Create new GPO Under
    1. the OU with the desktops in it with the name:  Evolve IP- DaaS 3 -
    IE Graphics
    1. Windows Update Delivery Optimization
    2. Right-click the GPO that you created for the group policy
    settings
    1. settins and select Edit.
      User
        1. Computer Configuration ->
      Preferences -> Windows Settings -> Registry
      1. Action: Create
      2. Hive: HKEY_CURRENT_USER
      3. Key Path: Software\Microsoft\Internet Explorer\Main
      4. Value Name: UseSWRender
      5. Value Type: REG_DWORD
      6. Value Data: 00000001
      7. Base: Hexadecimal

      Microsoft Edge Graphics Optimization

        1. Policies → Administrative Templates → Windows Components → Delivery Optimization
          1. Edit Download Mode
            1. Enabled
            2. HTTP only (0)


      Message Box
      iconbuild
      titleAllow Windows Store Apps to Auto Update
      typehint
      1. Create new 7GPO
      Message Box
      titleMicrosoft Edge Graphics Optimization
      typegeneric
      Create new GPO
      1. Under the OU with the desktops in it with the name: Evolve IP - DaaS 3
      – Microsoft Edge Graphics Optimization
    2. Evolve IP can provide the needed admx/adml files. Download Microsoft Edge for Business - Microsoft 
      1. Copy msedge.admx, msedgeupdae.admx, and msedgewebview2.admx into your “Policy Definitions” folder
      2. Copy msedge.adml, msedgeupdae.adml, and msedgewebview2.adml into your “Policy Definitions\en-US” folder
    3. Right-click the GPO that you created for the group policy settings and select Edit.
      1. Computer Configuration -> Policies -> Administrative -> Microsoft Edge
      2. User Hardware Acceleration when available
        1. Disabled
    4. Disable Peer to Peer Windows Updates

      1. - Windows Store Apps
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        1. Computer Configuration -> Preferences -> Windows Settings -> Registry
          1. Action: Delete
          2. Hive: HKEY_LOCAL_MACHINE
          3. Key Path: Software\Policies\Microsoft\WindowsStore
          4. Value Name: AutoDownload


      Message Box
      iconbuild
      titleDaaS Windows Updates
      typehint
      1. Create new GPO Under
      Message Box
      titleDisable Peer to Peer Windows Updates
      typegeneric
       Create new GPO under
      1. the OU with the desktops in it with the name:
       
      1. Evolve IP - DaaS 3 - Windows
      Update Delivery Optimization
      1. Updates
      2. Right-click the GPO that you created for the group policy
      settins
      1. settings and select Edit.
        1. Computer
      Configuration -> Policies → Administrative Templates → Windows Components → Delivery Optimization
      1. Edit Download Mode
        1. Enabled
        2. HTTP only (0)
      Google Chrome Graphics OptimizationChrome Graphics Optimization
        1. Configuration → Policies →  Administrative Templates →  Windows Components →  Windows Updates → Windows Updates for Business
          1. Select when Preview Builds and Feature Updates are received: Enabled
            1. Select the Windows readiness level for the updates you receive: Semi-annual Channel
            2. After a Preview Build or Feature Update is released, defer receiving it for this many days: 366


      Message Box
      iconbuild
      title
      RMM Windows Firewall Exceptions
      typehint
      1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
      Chrome Graphics OptimizationEvolve IP can provide the needed admx/adml files
    5. Copy CHROME.ADMX into your “Policy Definitions” folder
    6. Copy CHROME.ADML into your “Policy Definitions\en-US” folder
      1. Windows Firewall
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        1. Computer
      Configuration -> Polices -> Administrative Templates -> Google Chrome
      1. Use hardware acceleration when available: Disabled

      Google Chrome Disable Software Reporter Tool

      generic
        1. Configuration →  Polices →  Administrative Templates →  Network → Network Connections → Windows Defender Firewall → Domain Profile
          1. Windows Defender Firewall: Allow inbound file and printer sharing exception : Enabled
            1. Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24
          2. Windows Defender Firewall: Allow ICMP exceptions: Enabled
            1. Options: Allow inbound echo request
          3. Windows Defender Firewall: Allow inbound remote administration exception: Enabled
            1. Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24


      Message Box
      iconbuild
      titleUser Group Policy Loopback
      typehint
      Message Box
      titleChrome - Disable Software Reporter Tool
      type
      1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
      Chrome Disable Software Reporter Tool
      1. User Group Policy Loopback
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        1. Computer Configuration -> Policies ->
      Preferences
        1. Administrative Templates ->
      Windows Settings
        1. System ->
      Registry
      1. Registry Key 1:
        1. Action: Create
        2. Hive: HKEY_LOCAL_MACHINE
        3. Key Path: Software\Policies\Google\Chrome
        4. Type: DWORD
        5. Name: ChromeCleanupEnabled
        6. Value: 0
      2. Registry Key 2:
        1. Action: Create
        2. Hive: HKEY_LOCAL_MACHINE
        3. Key Path: Software\Policies\Google\Chrome
        4. Type: DWORD
        5. Name: ChromeCleanupReportingEnabled
        6. Value: 0

      Office 2016/2019/365 Graphics Optimization

        1. Group Policy
          1. Configure user Group Policy Loopback processing mode: Enabled
            1. Mode: Merge
      1. Ensure this GPO is processed last.



      Office 2016/2019/365 Graphics Optimization
      Panel
      borderColor#000000
      titleUser Experience GPOs


      Message Box
      iconbuild
      title
      Turn Off Display
      typehint
      NOTE: This GPO is version specific. If using an older version of office, the appropriate ADMX/ADML files would be required.
      1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
      Office 2016/2019/365 Graphics Optimization
    7. Evolve IP can provide the needed admx/adml files
      1. Copy all office ADMX files into your “Policy Definitions” folder
      2. Copy all office ADML files into your “Policy Definitions\en-US” folder
    8. Right-click the GPO that you created for
      1. Turn Off Display
      2. Right-click the GPO that you created for the group policy settings and select Edit.
        User
          1. Computer Configuration ->
        Policies
          1. Administrative Templates ->
        Administrative Templates
          1. System ->
        Microsoft Office 2016
          1. Power Management ->
        Miscellaneous
        1. Do not use hardware graphics acceleration: Enabled
        Outlook - Cached Mode EnabledOutlook - Cached Mode Enabled
          1. Video and Display Settings
            1. Turn Off the Display (Plugged In): Enabled
            2. Turn Off the Display (seconds): 0


        Message Box
        iconbuild
        title
        PCoIP - Clipboard Redirection & vSphere Console Access
        typehint
        1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3
        - Outlook Cached Mode.Right-click the GPO that you created for the
        1. – PcoIP
        2. Evolve IP can provide the needed admx/adml files
          1. Copy PCOIP.ADMX into your “Policy Definitions” folder
          2. Copy PCOIP.ADML into your “Policy Definitions\en-US” folder
        3. Right-click the GPO that you created for the group policy settings and select Edit.
          User
            1. Computer Configuration -
          > Policies
            1. > Policies -> Administrative
          Templates → Microsoft Outlook 2016 → Account Settings → Exchange → Cached Exchange Mode
        4. Set Cached Exchange Mode Sync Settings to enabled and 3 months unless customer requests longer duration
        5. Set Use Cached Exchange Mode for new and existing Outlook profiles to enabled.
        6. User Configuration -> Policies -> Administrative Templates → Microsoft Outlook 2016 → Outlook Options → Delegates
        7. Set Disable shared mail folder caching to enabled
        8.  

          Allow Windows Store Apps to Auto UpdateAllow Windows Store Apps to Auto Update
            1. -> Classic -> PCoIP Session Variables -> Overridable Administrator Defaults
              1. Enable access to a PCoIP session from a vSphere console
                1. Enabled
              2. Configure Clipboard Redirection
                1. Enabled
                2. Enabled in both directions


          Message Box
          iconbuild
          title
          Blast - Screen Blanking & Clipboard Redirection
          typehint
          1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3
          - Windows Store Apps
        9. Right-click the GPO that you created for the group policy settings and select Edit.
          1. Computer Configuration -> Preferences -> Windows Settings -> Registry
            1. Action: Delete
            2. Hive: HKEY_LOCAL_MACHINE
            3. Key Path: Software\Policies\Microsoft\WindowsStore
            4. Value Name: AutoDownload
        10. Windows UpdatesDaaS Windows Updates
          1. – Blast
          2. Evolve IP can provide the needed admx/adml files
            1. Copy VDM_BLAST.ADMX into your “Policy Definitions” folder
            2. Copy VDM_BLAST.ADML into your “Policy Definitions\en-US” folder
          3. Right-click the GPO that you created for the group policy settings and select Edit.
            1. Computer Configuration -> Policies -> Administrative -> Classic -> VMware Blast
              1. Screen Blanking
                1. Disabled
              2. Configure Clipboard Redirection
                1. Enabled
                2. Enabled in both directions


          Message Box
          iconbuild
          title
          Outlook - Cached Mode Enabled
          typehint
          1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
          Windows Updates
          1. Outlook Cached Mode.
          2. Right-click the GPO that you created for the group policy settings and select Edit.
          3. Computer Configuration → Policies →  Administrative Templates →  Windows Components →  Windows Updates → Windows Updates for Business
            1. Select when Preview Builds and Feature Updates are received: Enabled
              1. Select the Windows readiness level for the updates you receive: Semi-annual Channel
              2. After a Preview Build or Feature Update is released, defer receiving it for this many days: 365  
          4. RMM Windows Firewall ExceptionsRMM Windows Firewall Exceptions
              1. User Configuration -> Policies -> Administrative Templates → Microsoft Outlook 2016 → Account Settings → Exchange → Cached Exchange Mode
              2. Set Cached Exchange Mode Sync Settings to enabled and 3 months unless customer requests longer duration
              3. Set Use Cached Exchange Mode for new and existing Outlook profiles to enabled.
              4. User Configuration -> Policies -> Administrative Templates → Microsoft Outlook 2016 → Outlook Options → Delegates
              5. Set Disable shared mail folder caching to enabled


            Message Box
            iconbuild
            title
            Prevent Bing as Default Search Engine
            typehint
            Create new GPO
            1. Download and install the latest Microsoft Office 365 Group Policy Templates (ADMX and ADML files)
              1. https://www.microsoft.com/en-us/download/details.aspx?id=49030
            2. Create new GPO Under the OU with the desktops in it with the name:  Evolve IP - DaaS 3 -
            Windows Firewall
            1. Disable Bing
            2. Right-click the GPO that you created for the group policy settings and select Edit.
              1. Computer
            Configuration →  Polices →  Administrative Templates →  Network → Network Connections → Windows Defender Firewall → Domain Profile
            1. Windows Defender Firewall: Allow inbound file and printer sharing exception : Enabled
              1. Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24
            2. Windows Defender Firewall: Allow ICMP exceptions: Enabled
              1. Options: Allow inbound echo request
            3. Windows Defender Firewall: Allow inbound remote administration exception: Enabled
              1. Allow unsolicited incoming messages from these IP addresses: 10.200.1.0/24

            User Group Policy Loopback

            User Group Policy Loopback
              1. Configuration -> Policies -> Administrative Templates -> Microsoft Office 2016 (Machine) -> Updates
              2. Look through the list of policies and double-click on the Don't install extension for Microsoft Search in Bing that makes Bing the default the search engine option.
              3. Select Enabled and then press Apply followed by OK to configure the policy.


            Message Box
            iconbuild
            titleFolder Redirection
            Message Box
            iconbuild
            title
            typehint
            1. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 -
            User Group Policy Loopback
            1. Folder Redirection
            2. Right-click the GPO that you created for the group policy settings and select Edit.
              Computer
                1. User Configuration -> Policies ->
              Administrative Templates
                1. Windows Settings ->
              System -> Group Policy
              1. User Group Policy Loopback processing mode: Enabled
                1. Mode: Merge
            3. Ensure this GPO is processed last.
            4. Folder Redirection

              Message Box
              iconbuild
              titleFolder Redirection
              typehint
              Message Box
              icon
            5. Create new GPO Under the OU with the desktops in it with the name: Evolve IP - DaaS 3 - Folder Redirection
            6. Right-click the GPO that you created for the group policy settings and select Edit.User Configuration -> Policies -> Windows Settings -> Folder RedirectionFavorites (right click the folder)
                1. Folder Redirection
                  1. Favorites (right click the folder)
                    1. Setting: Basic (Redirect everyone’s folder to the same location)
                    2. Target Folder Location: Create a folder for each user under the root path
                    3. Root Path: \\server\share
                    4. Options:
                      1. Grant user exclusive rights to Favorites: Disabled
                      2. Move the Contents of Favorites to the new location: Enabled
                      3. Also apply redirection policy to Windows 2000 server, Windows…: Disabled
                      4. Policy Removal Behavior: Leave Contents
                  2. Desktop
                    1. Setting: Basic (Redirect everyone’s folder to the same location)
                    2. Target Folder Location: Create a folder for each user under the root path
                    3. Root Path: \\server\share
                    4. Options:
                      1. Grant user exclusive rights to
              Favorites
                      1. Desktop: Disabled
                      2. Move the Contents of
              Favorites
                      1. Desktop to the new location: Enabled
                      2. Also apply redirection policy to Windows 2000 server, Windows…: Disabled
                      3. Policy Removal Behavior: Leave Contents
              Desktop
                  1. Documents
                    1. Setting: Basic (Redirect everyone’s folder to the same location
              )
                    1. Target Folder Location: Create a folder for each user under the root path
                    2. Root Path: \\server\share
                    3. Options:
                      1. Grant user exclusive rights to
              Desktop
                      1. Documents: Disabled
                      2. Move the Contents of
              Desktop
                      1. Documents to the new location: Enabled
                      2. Also apply redirection policy to Windows 2000 server, Windows…: Disabled
                      3. Policy Removal Behavior: Leave Contents
              Documents
                  1. Downloads
                    1. Setting: Basic (Redirect everyone’s folder to the same location)
                    2. Target Folder Location: Create a folder for each user under the root path
                    3. Root Path: \\server\share
                    4. Options:
                      1. Grant user exclusive rights to
              Documents
                      1. Downloads: Disabled
                      2. Move the Contents of
              Documents
                      1. Downloads to the new location: Enabled
                      2. Also apply redirection policy to Windows 2000 server, Windows…: Disabled
                      3. Policy Removal Behavior: Leave Contents
              Downloads
                  1. Music
                    1. Setting:
              Basic (Redirect everyone’s folder to the same location)
            7. Target Folder Location: Create a folder for each user under the root path
            8. Root Path: \\server\share
            9. Options:
              1. Grant user exclusive rights to Downloads: Disabled
              2. Move the Contents of Downloads to the new location: Enabled
              3. Also apply redirection policy to Windows 2000 server, Windows…: Disabled
              4. Policy Removal Behavior: Leave Contents
            10. Music
              1. Setting: Follow the Documents Folder
            11. Videos
              1. Setting: Follow the Documents Folder
            12. Pictures
              1. Setting: Follow the Documents Folder
            13. File Exclusions for Anti Virus

                    1. Follow the Documents Folder
                  1. Videos
                    1. Setting: Follow the Documents Folder
                  2. Pictures
                    1. Setting: Follow the Documents Folder

              File Exclusions for Anti Virus

              Message Box
              icon
              build
              titleFile Exclusions for Anti Virus
              type
              hint
              hint

              File Exclusions for Anti Virus:

              C:\Windows\system32\wbem\wmiprvse

              File Exclusions for Anti Virus:

              Folders:
              C:\Windows\SoftwareDistribution\Datastore

              Files:
              C:\Program Files (x86)\VMware\VMware DaaS Agent\service\DaaSAgent.exe
              C:\Program Files (x86)\VMware\VMware Remote Console\vmrc.exe
              C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
              C:\Program Files\VMware\VMware View\Agent\bin\VMWVvpsvc.exe
              C:\Program Files\VMware\VMware View\Agent\bin\ws_scripthost.exe
              C:\Windows\system32\taskmgr.exe
              C:\Windows\system32\wbem\wmiprvse.exe
              C:\Program Files\VMware\Horizon Agents\Horizon Agent\VMware Blast\VMBlastS.exe
              C:\Program Files\VMware\Horizon Agents\Horizon Agent\VMware Blast\VMBlastW.exe
              C:\Program Files\Common Files\VMware\Teradici PCoIP Server\pcoip_server_win32

              .exe
              C:

              \Windows

              \

              splwow64.exe
              C:\

              Program Files\

              VMware\VMware Tools\vmtoolsd

              Citrix\User Profile Manager\UserProfileManager.exe
              C:\Program Files\

              Common Files\VMware\Remote Experience\x64\VMwareViewClipboard

              Citrix\Server Resource Management\Memory Optimization Management\Program\CtxSFOSvc.exe
              C:\

              Program Files

              Windows\

              Common Files\VMware\Remote Experience\x64\vmware-print-redir-server.exe
              C:\Program Files\Common Files\VMware\Remote Experience\x64\vmware-print-redir-service.exe
              C:\Program Files\Common Files\VMware\Remote Experience\x64\VMwareView-RdeServer.exe
              C:\Program Files\Common Files\VMware\Remote Experience\x64\VMToolsHookProc64.exe
              C:\Program Files\VMware\Horizon Agents\Horizon Agent\bin\wsnm.exe
              C:\Program Files\VMware\Horizon Agents\Horizon Agent\bin\wsnm_jms.exe
              C:\Program Files\VMware\Horizon Agents\Horizon Agent\bin\wssm.exe
              excel.exe
              outlook.exe
              mspub.exe
              winword.exe
              msaccess.exe
              onenote.exe
              powerpnt.exe
              Teams.exe
              chrome.exe
              firefox.exe
              iexplore.exe
              MicrosoftEdge.exeFile Extensions:
              CHK
              EDB
              EVT
              EVTX
              LOG
              OST
              PST
              SDB

              system32\taskmgr.exe
              ${WinDir}\SoftwareDistribution\Datastore\DataStore.edb
              ${WinDir}\SoftwareDistribution\Datastore\Logs\Edb*.jrs
              ${WinDir}\SoftwareDistribution\Datastore\Logs\Edb.chk
              ${WinDir}\SoftwareDistribution\Datastore\Logs\Tmp.edb
              ${windir}\Security\Database\*.edb
              ${windir}\Security\Database\*.sdb
              ${windir}\Security\Database\*.log
              ${windir}\Security\Database\*.chk
              ${windir}\Security\Database\*.jrs
              ${windir}\Security\Database\*.xml
              ${windir}\Security\Database\*.csv
              ${windir}\Security\Database\*.cmtx
              pcoip_server_win32.exe
              wssm.exe
              VMBlastS.exe
              wsnm_jms.exe
              vmwareviewclipboard.exe*
              outlook.exe*
              excel.exe
              splwow64.exe
              vmtoolsd.exe
              C:\Program Files (x86)\VMware\VMware DaaS Agent\service\DaaSAgent.exe

              Local Horizon View Client

              Message Box
              iconbuild
              titleLocal Horizon View Client
              typehint

              Thick Client Requirements:

              Minimum Version to support Teams Optimization is v2012 Build 8.1


              Thin Client Requirements:

              If using a Wyse 5030: The Firmware version must be v8.6_412_3040 in order for Teams Optimization to function

              RMM Checks

              Message Box
              iconbuild
              titleRMM Checks
              typehint

              RMM allows you to set up periodic checks to ensure optimal performance.  We recommend setting these checks for after hours in order to reduce load on the platform.  Using any RMM scheduled task.  Preexisting IT policies should be reevaluated prior to deploying automated 




              Client Signature:  __________________________________________

              Date:  _______________________________________________









              ...