Help App-V EndPointRM

This page will explain the working of App-V EndPointRM and it’s functions. The current available Free Edition version is 1.5.0.0.
This application makes use of WinRM to connect remotely to the App-V Clients. No software installation is required on the destination, just follow the preparation steps and the “How to start”.

App-V EndPointRM GUI

Requirements

Management Client Destination App-V Clients
AD Domain membership AD Domain membership
Microsoft .NET Framework 4.5 or higher installed (Link) Microsoft App-V Client 5 SP2/5 SP3/5.1 Clients (5.1.86.0) installed
Microsoft Powershell 3.0 installed WinRM access configured.
Requires Administrator privileges on the local computer
Screen resolution of 1280 x 1024 or higher
Target platform x86 and x64
WinRM authenitication configured

Preparations

Destination App-V Clients
1) Enable WinRM on your destination App-V Clients through a Group Policy for example.
GPO > Computer Configuration > Administrative Templates > Windows Components > Windows Remote Management (WinRM)
Enable this policy “WinRM Service > Allow remote server management through WinRM”.
Configure this policy so that it will match your IT security standards.

2) Enable Allow CredSSP Authenication on your destination App-V Clients.
GPO > Computer Configuration > Administrative Templates > Windows Components > Windows Remote Management (WinRM)
Enable this policy below “WinRM Service > Allow CredSSP Authentication

3) Enable “Turn on Script Excution” on your destination App-V Clients.
GPO > Computer Configuration > Administrative Templates > Windows Components > Windows Powershell
Enable this policy below “Turn on Script Excution > “Allow local scripts and remote signed scripts”

4) For security purpose make use of a standard Domain user that’s only a member of “Domain Users” which will be used as a service account.
The next step is giving this user the necessary local administrator rights on every App-V Client by for example a Group Policy Preference.
Choose Computer Configuration > Preferences > Control Panel Settings > Local Users and Groups > New Group > Action Update ……….)
The following step is giving this user read rights on the central App-V package source share(s).

Notes:
CredSSP is required for tasks like Mount/Sync and Add Packages on a remote system which require remote data access on second remote system. (double-hop)
All other tasks don’t use CreddSSP but the default Kerberos authentication. See the below link for a good explanation.
http://blogs.technet.com/b/heyscriptingguy/archive/2013/04/04/enabling-multihop-remoting.aspx

The first 3 steps can also be done without GPO settings, just for quick test. Just use the below powershell commands on the destination App-V Client and run them under administrator privileges.
Enable-PSRemoting -Force
Enable-WSManCredSSP -Role Server –Force
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine -Force

Management Client
1) Configure the client from which you will launch the application with the below WinRM setting through a Group Policy for example.
GPO > Computer Configuration > Administrative Templates > Windows Components > Windows Remote Management (WinRM)
Enable this policy below “WinRM Client > Allow CredSSP Authentication

Notes:
CredSSP is required for tasks like Mount/Sync and Add Packages on a remote system which require remote data access on second remote system. (double-hop)
All other tasks don’t use CreddSSP but the default Kerberos authentication. See the below link for a good explanation.
http://blogs.technet.com/b/heyscriptingguy/archive/2013/04/04/enabling-multihop-remoting.aspx

2) Configure the client from which you will launch the application with the below Credential Delegations setting.
GPO > Computer Configuration > Administrative Templates > System > Credential Delegation
Enable this policy “Allow Delegating Fresh Credentials” and configure it with the right scope.

Example
WSMAN/* to allow all destinations.
WSMAN/CTX00* to allow all clients with the name beginning with CTX00
WSMAN/RDS0* to allow all clients with the name beginning with RDS0
WSMAN/PC0* to allow all clients with the name beginning with PC0

Configure this policy so that it will match your IT security standards.

How to start

1) Launch the application on a client from which the management will take place.
2) Go to the settings tab, accept the EULA checkbox if you agree with the EULA. After that fill the Remote Authentication credentials with the service account which is prepared within the preparation steps.
3) Fill in a default App-V source which is used when adding packages to the App-V Clients.
4) Save your settings within the Menubar.
5) Go the Client List and add your App-V Clients, launch an “Update Info”. This retrieves information from the added App-V Clients like settings and versions.
6) Launch an “Inventory” which will retrieve the App-V Packages and Connection Groups on the App-V clients.
7) View the Menubar statistics after the running Inventory. The statistics means that there are 5 clients, all are checked. There are 3 Groups available and 13 Total Packages and all are unique.
The total count of packages can be higher than the unique count if packages are available from multiple sources.

Menubar-statistics
8) For each task you can watch the progress in the below statusbar.

App-V EndPointRM - Progressbar

9) To watch more detailed results of a task select the Log Tab. Also connection errors with App-V Clients will be reported here.

Now you are ready to start managing the App-V Clients remotely.

App-V EndPointRM GUI

1 Tabs

Tabs Description
Package View An overview of the Packages available on the added remote App-V clients. Manage a single package on multiple clients at once.
Client View An overview of the added remote clients and it's packages available on the App-V client. Manage multiple packages on a remote client at once.
Group View An overview of the Connection Groups available on the added remote App-V clients. Manage a single group on multiple clients at once.
Client View An overview of the added remote clients and it's groups available on the App-V client. Manage multiple groups on a remote client at once.
Virtual Processes View the open virtual processes for users on a remote added App-V client. Kill the one or multiple processes at once.
Usage View View the current usage of all App-V Packages and Connection Groups on the added remote App-V Clients. It will give you a good overview who is using which packages and groups and where.
Client List Add here your App-V clients. You can also see detailed information of your clients/App-V versions/App-V Client settings.
Log View View the history of all the task that you have launched. It will tell you if task completed/failed or skipped and when they are launched.
Settings View and manage the settings for the application and manage your remote authentication.

2 Main Tasks

This are global application tasks and will be available depending on the selected tab.

Tasks Description
Inventory Inventory the added App-V Clients for all the Packages and Connection Group information currently available on these App-V Clients. It will be a required task to begin with after adding your remote authentication credentials and App-V Clients. It will also be necessary to run this task when adding new clients within "Client List" or when package and group mutations are done outside this application. An Inventory task will always result in a fresh overview of all the Packages and Groups.
Cancel This will give you the possibility to cancel a launched task. Cancelling will only have effect on not yet processed packages/groups on clients. A package or group that is in progress within a launched task will not be cancelled. Also when the configured concurrency exceeds the selected package/group count cancelling will not have any effect.
Add Single Package Add a single Package to multiple remote App-V clients. Only packages that are currently not in the list can be added.
Add Multiple Packages Add multiple packages to multiple remote App-V clients. Only packages that are currently not in the list can be added.

Application Information

Package View
Package View will give you an overview of all Packages available on the added remote App-V clients. It will give you a view of packages with it’s relationship to the client and the Connection Group. Within this view you can launch the below tasks. These tasks will be available depending of what you have selected. For example when selecting a package in group, publishing will not be available. Buttons may be greyed out because of Connection Group membership.

Taskbar-PackageView

Task Description
(1)  Mount Mount the selected package on the selected App-V clients. (only UNC sources)
(2)  Stop Stop the selected package on the selected App-V clients.
(3)  Publish Global Publish the selected package on the selected App-V clients. One version of a package can be published.
(4)  Unpublish Global Unpublish the selected package on the selected App-V clients. If the package is a member of a Connection Group this task cannot be started.
(5)  Remove Remove the selected package on the selected App-V clients. If a package is published or a member of Connection Group this task cannot be started.
(6)  Add Clients Add App-V clients to the selected package.
(7)  Refresh Refresh the latest information for the selected package on the listed App-V Clients. When the checkbox "Refresh only selection" is checked only the selected clients will be updated with the latest information.
(8)  Repair Packages (Global) Repair the selected Packages Global with 3 possible choices.

Note: All tasks will do a second check if it is allowed/possible to run, otherwise they will be marked failed within the log view.

Client View
Client View will give you an overview of all Packages available on one selected App-V client. It will give you a view of packages with it’s relationship to the client and the Connection Groups. Within this view you can launch the below tasks.
These tasks will be available depending of what you have selected. For example when selecting a package in group, publishing will not be available. Buttons may be greyed out because of Connection Group membership.

Taskbar-Package Client View

Task Description
(1)  Mount Mount the selected packages on the selected App-V client.
(2)  Stop Stop the selected packages on the selected App-V client.
(3)  Publish Global Publish the selected packages on the selected App-V client. One version of a package can be published.
(4)  Unpublish Global Unpublish the selected packages on the selected App-V client. If the package is a member of a Connection Group this task cannot be started.
(5)  Remove Remove the selected packages on the selected App-V client. If a package is published or a member of Connection Group this task cannot be started.
(6)  Refresh Refresh the latest information for the selected packages on the listed App-V Client. When the checkbox "Refresh only selection" is checked only the selected packages will be updated with the latest information.
(7)  Info Information counters for the selected client. These statistics are updated when the Inventory task is launched or the refresh (7) button is started.
(8)  Info Information counters for the selected package. These statistics are updated when the Inventory task is launched or the refresh (7) button is started.

Note: All tasks will do a second check if it is allowed/possible to run, otherwise they will be marked failed within the log view.

Group View
Group View will give you an overview of all Groups available on the added remote App-V clients. It will give you a view of groups with it’s relationship to the client and the packages. Within this view you can launch the below tasks.

Taskbar-GroupView

Task Description
(1)  Mount Mount the selected group on the selected App-V clients.
(2)  Stop Stop the selected group on the selected App-V clients.
(3)  Publish Global Publish the selected group on the selected App-V clients. One version of a group can be published.
(4)  Unpublish Global Unpublish the selected group on the selected App-V clients.
(5)  Remove Remove the selected group on the selected App-V clients.
(6)  Refresh Refresh the latest information for the selected group on the listed App-V Clients. When the checkbox "Refresh only selection" is checked only the selected clients will be updated with the latest information.
(7)   Info Information counters for the selected group. These statistics are updated when the Inventory task is launched or the refresh (6) button is started.

Note: All tasks will do a second check if it is allowed/possible to run, otherwise they will be marked failed within the log view.

Client View
Client View will give you an overview of all Connection Groups available on one selected App-V client. It will give you a view of groups with it’s relationship to the client and the packages. Within this view you can launch the below tasks.

Taskbar - Group Client View

Task Description
(1)  Mount Mount the selected groups on the selected App-V client.
(2)  Stop Stop the selected groups on the selected App-V client.
(3)  Publish Global Publish the selected groups on the selected App-V client. One version of a package can be published.
(4)  Unpublish Global Unpublish the selected groups on the selected App-V client.
(5)  Remove Remove the selected groups on the selected App-V client.
(6)  Refresh Refresh the latest information for the selected groups on the listed App-V Client. When the checkbox "Refresh only selection" is checked only the selected groups will be updated with the latest information.
(7)  Info Information counters for the selected client. These statistics are updated when the Inventory task is launched or the refresh (6) button is started.
(8)  Repair Groups (Global) Repair the selected Groups Global with 3 possible choices.

Note: All tasks will do a second check if it is allowed/possible to run, otherwise they will be marked failed within the log view.

Virtual Processes
Select the App-V Client of your choice and retrieve the current open virtual processes. Select the process(es) you want to stop and close them remotely. This view will tell you who and which process are opened by a user on one specific App-V client. Before you start press the button with a Computer Icon so the selectionbox will be filled with all the Checked Clients.

Usage View
This view will give you detailed information about the current active Packages and Connection Groups in your environnement. It will list the package or group with its current user count. It’s important to know that this information is retrieved in a timeframe and may not reflect the current status. A user may have launched or closed a package while measuring, but it will give you a very good indication about the current usage.
Just press the button “Update Info” to start the process, depending how many clients you have added or the configured Client Concurrency determines how long it takes.
After the process is finished, double-click a Package or Group to show more information about it’s usage and which processes where opened by the users.

Client List
Add your App-V Clients here and retrieve the latest information for your clients. This view will give you detailed information about the added App-V clients.  Within this view you can launch the below tasks.

App-V EndPointRM - ClientList

Task Description
(1)  Update Info This task will retrieve the requirde App-V Client Information.
(2)  Add Client range Add App-V Clients by a range of names. This clientnames needs to begin max 8 characters followed by suffix of numbers.
(3)  Add Clients Add App-V clients by searching your Active Directory domain where the local client is a member of.
(4)  Remove Clients Remove the selected App-V clients.
(5)  Sync Clients Synchronize the selected App-V clients global with the configured App-V Publishing servers.
(6)  Settings View View the App-V client settings in a single or multiple view. The multiple view gives you the possiblity to compare settings quickly.
(7) Clients All the added App-V Clients with it's detected versions and other information specific for each client.

Log
View detailed information about all launched tasks. It will give you information each task which is launched in a certain view, which clients/packages/groups where selected and the status. Only Virtual Processes tasks are not included in the logging.
Double-Click a task to get more detailed information.

App-V EndPointRM - Log

Settings
View and manage the application settings and configure your remote authentication credentials. Settings can be saved within the Menubar for the next time this application is launched. Every time the application is launched you need to set your password for security purpose. Within this view you can configure the following settings.

App-V EndPointRM - Settings

Setting Description
(1)  Package source UNC path Configure a default path which will be used withing Add Package Single and Multiple.
(2)  Remote Authentication Fill in your credentials every time you launch this application. The username can be saved only within the menubar and not the password. The domainfield will be filled with the domain membership information of the local computer.
(3)  Refresh only selection (Default) This will set the checkbox in the 4 different views when the application is launched.
(3)  Load Default Client List This will load the saved default file "DefaultClientList.bin" when checked at launch of the application.
(3)  I Accept this EULA Accept the EULA before start using the application if you can agree with it.
(4)  Concurrency Set the concurrency (simultaneous requests to clients) for different views. When a concurrency of 12 is chosen for Package View the tasks like mount for example will get launched at 12 clients concurrently so tasks will take less time to process.