ProfileUnity Installation Guide

ProfileUnity
withFlexAppTechnology
Installation&
ConfigurationGuide
Introduction
This guide has been authored by experts at Liquidware Labs in order to provide information and guidance
concerningtheinstallationandconfigurationofProfileUnitywithFlexApp.
Informationinthisdocumentissubjecttochangewithoutnotice.Nopartofthispublicationmaybereproducedin
wholeorinpart,storedinaretrievalsystem,ortransmittedinanyformoranymeanselectronicormechanical,
including photocopying and recording for any external use by any person or entity without the express prior
writtenconsentofLiquidwareLabs.
LiquidwareLabs,Inc.
3600MansellRoad
Suite200
Alpharetta,Georgia30022
U.S.A.
Phone:6783970450
www.liquidwarelabs.com
2013LiquidwareLabsInc.Allrightsreserved.LiquidwareLabs,Stratusphere,FlexApp,StratusphereIXDandProfileUnityare
trademarksofLiquidwareLabs.Allotherproductsaretrademarksoftheirrespectiveowners.130821
ProfileUnitywithFlexAppTechnology:Installation&ConfigurationGuide Page1
Contents
PROFILEUNITYWITHFLEXAPPTECHNOLOGYOVERVIEW....................................................................................4
SOFTWAREREQUIREMENTS...............................................................................................................................6
MANAGEMENTCONSOLEREQUIREMENTS..........................................................................................................................6
FLEXAPPPACKAGINGCONSOLEREQUIREMENTS..................................................................................................................7
CLIENTREQUIREMENTS...................................................................................................................................................8
ADDITIONALREQUIREMENTS............................................................................................................................................8
ActiveDirectory....................................................................................................................................................8
UserAccountControl...........................................................................................................................................8
UPGRADINGPROFILEUNITYFROMVERSIONSPRIORTO5.5................................................................................9
INSTALLINGPROFILEUNITY................................................................................................................................10
LOGGINGINTOTHEMANAGEMENTCONSOLEFORTHEFIRSTTIME..................................................................14
USINGTHEGUIDEDCONFIGURATIONWIZARD..................................................................................................15
STEP1:ADJUSTGLOBALSETTINGS.................................................................................................................................17
STEP2:SELECTATEMPLATEFORCONFIGURATION...........................................................................................................18
STEP3:ASSIGNVALUESTOTEMPLATEVARIABLES............................................................................................................19
StoragePathPermissions...................................................................................................................................19
STEP4:CONFIGUREACTIVEDIRECTORYGPOSANDLICENSEGROUP...................................................................................20
STEP5:CONFIRMYOURSETTINGS&SAVEYOURCONFIGURATION......................................................................................22
ADDINGPROFILEUNITYUSERSTOYOURLICENSEGROUP..................................................................................23
MANUALLYPREPARINGYOURENVIRONMENTTOUSETHEPROFILEUNITYCLIENT.............................................25
CREATEAPROFILEUNITYGROUPPOLICYOBJECT...............................................................................................................25
CreatingtheGPOinWindowsServer2003ActiveDirectory..............................................................................25
CreatingtheGPOinWindowsServer2008ActiveDirectory..............................................................................28
ASSIGNAGROUPPOLICYSTARTUPSCRIPT........................................................................................................................31
CONFIGUREADMINISTRATIVE(ADM)TEMPLATESETTINGS.................................................................................................33
AddingtheProfileUnityADMTemplate.............................................................................................................33
ViewingtheADMTemplateonWindowsServer2003.......................................................................................35
ConfiguringandEnablingthePolicy..................................................................................................................37
ASSIGNAGROUPPOLICYLOGOFFSCRIPT.........................................................................................................................41
CREATEASECURITYGROUPANDACTIVATEYOURPROFILEUNITYLICENSE...............................................................................43
INSTALLINGTHECLIENTSOFTWARE..................................................................................................................47
INSTALLINGTHEFLEXAPPPACKAGINGCONSOLESOFTWARE.............................................................................48
TROUBLESHOOTINGASSIGNINGSTARTUPANDLOGOFFSCRIPTS.......................................................................49
INSTALLINGSOFTWAREUPDATESFORPROFILEUNITY.......................................................................................50
UPDATINGTHEPROFILEUNITYMANAGEMENTCONSOLE.....................................................................................................50
OnlineMode.......................................................................................................................................................50
OfflineMode......................................................................................................................................................50
UPDATINGTHEFLEXAPPPACKAGINGCONSOLE.................................................................................................................51
UPDATINGTHEPROFILEUNITYCLIENT..............................................................................................................................51
GETTINGHELPINSTALLINGPROFILEUNITY.........................................................................................................52
USINGONLINERESOURCES............................................................................................................................................52
CONTACTINGSUPPORT.................................................................................................................................................52
APPENDIXANOTUSINGNETLOGON?..............................................................................................................53

ProfileUnitywithFlexAppTechnologyOverview
Awardwinning ProfileUnity is a featurerich, affordable user virtualization and virtualized software distribution
solutionforbothvirtualdesktopdeploymentsandphysicalPCs.ProfileUnitydecouplesuserprofiles,settingsand
datafrom theoperating system for migration to VMware View,Citrix XenDesktop, orany platform that supports
Windows OS, making it the ideal bridge solution for heterogeneous environments running physical, virtual and
TerminalServicessessions.
ProfileUnity delivers a flexible universal profile that is compatible across multiple Windows versions. With no
softwaretodistributetoindividualdesktops,thiscosteffectivesolutionseparatelystoresandinfusesuserprofiles,
configurations,anddataintotheWindowsOSinsecondsatlogin,enablingorganizationstobemoreflexiblethan
everbeforewiththeirdesktops.
Currently for use with nonpersistent virtual desktops, ProfileUnitys FlexApp technology is designed to allow
administrators to deploy corporate or department installed applications (DIA) or users to install their own
applications (UIA) without affecting theunderlying base image of virtual machines. FlexApp enablesa potentially
limitless number of applications to be stored separately from the Windows operating system yet 'snappedin' in
only seconds at login. Applications look native to the operating system, enabling compatibility of thousands of
more applications than with other methods of application virtualization. FlexApp addresses a need in the virtual
desktop market to empower virtual desktop users to install the applications they need to be productive. UIA
applications are selfmanaged by user who is responsible for all updates and the ongoing viability of the
application.
AwardWinningProfileUnityoffersthesekeyadvantages:
ProfileUnity retains profiles in native Windows formats, which keeps them backward and forward
compatibleacrossWindowsoperatingsystems,includingWindowsXP/Vista/Server2003/2008/Windows
7. ProfileUnity is the perfect solution to harvest user profiles and user data from Windows XP
environmentsinpreparationformigrationtoWindows7.
Anyplatform that runsWindows OScanutilize ProfileUnityforprofilemanagement,including VMware
View,CitrixXenDesktop,TerminalServicessessionsandphysicalmachines.Soyoucanuseonesolution
for your entire desktop environment. User Profiles, User Authored Data, and Application Data Settings
(even between mixed versions) are dynamically made available to any desktop Windows OS at every
login.
ProfileUnityrunsasastandalonesystem.Nobackendsystemsorproprietarydatabasesarerequired.The
lightweight client installs to endpoints without the need for software distribution or user downtime.
ProfileUnityispricedanaverageof40to50percentlessthanotheruservirtualizationofferings,forfaster
ROIandaloweroverallbudget.
ProfileUnity offers sophisticated features including ContextAware Filters, Integration with Microsoft
ActiveDirectory,DriveMappings,AutomatedFolderRedirectionandmore.
InnovativeFlexApptechnologyprovideskeybenefitstocustomers,including:
Simplifies management of nonpersistent Windows environments dramatically because fewer master
imagesmustbemaintained
Promotes greater desktop virtualization ROI and economies of scale because more workers can use the
virtualdesktopinfrastructure
Reducesdesktopadministratortimeonmaintenanceandtroubleshootingactivities
SignificantlylowersTCOasorganizationsrealizeoptimallicenseuseandreducestoragerequirements
Virtualizestheinstallationofanapplicationlocation,nottheapplicationitself,thusappearsnativetothe
OS,therefore,applicationsareinstantlyusablewithoutanymodifications
Forthemostpart,customerschooseProfileUnitytoautomatemanyoftheprocessesaroundmanagingtheiruser
profiles,userdataandtheresources(includingprinters,drive,applications,etc.)thatareassignedtousers.
ThetopreasonsthatcustomersdeployProfileUnityinclude:
Speedingupuserlogintimes
Movinguserauthoreddatatothenetwork
MigratinguserprofilestonewenvironmentsorupgradedOS
Configuringdesktopswithassignedshortcuts,drives,printers,etc.
Capturingandportabilityofuserinstalledapplications

SoftwareRequirements
ProfileUnity is now available only as a standalone product and is no longer included as part of Liquidware Labs
Stratusphere virtual appliance. ProfileUnity consists of three parts: the Management Console, the FlexApp
Packaging Console, and the Client. The ProfileUnity Management Console provides one central location where
administratorscanconfigurepersonamanagementanduserandmachinepolicies.TheFlexAppPackagingConsole
allowsadministratorstoconfigureandprepareanyapplicationsthatwillneedtobeconfiguredforusersandmade
availableasadepartmentinstalledapplication(DIA).TheClientmanageseachuserssettingsandpersonaduring
theirsession.
The ProfileUnity standalone installer will guideyou through the setup of theManagementConsole. The FlexApp
Packaging Console and the Client are installed from the Administration area of the Management Console.
Installation is straightforward and merely requires an administrator to answer a few simple prompts. There are
two installers to choose from: a full version (ProfileUnityNetFull_vX.X.X.exe) which contains the Microsoft 4.5
.NET Framework and one without the Microsoft .NET Framework (ProfileUnityNet_vX.X.X.exe). If the smaller
ProfileUnityonlyinstallerdoesnotdetectMicrosoft.NETFrameworkontheserverduringinstallation,aninternet
connection is required to automatically download the .NET Framework. Here are the download sizes for both
installers:
DownloadSize
~25 MB for the ProfileUnity only installer. If this installer does not detect
Microsoft .NET Framework installed on your server, the installer will
automaticallydownloadandinstallthe.NETFrameworkforyou.
~100 MB for the ProfileUnity installer that includes the Microsoft .NET
Frameworkinstallationfiles
ManagementConsoleRequirements
TheProfileUnityManagementConsolerequiresthefollowingforinstallation:
ManagementConsoleSystemRequirements
Platforms
Supported
Windows Server 2008 R2 or Windows 7. Both 32bit and 64bit versions where
applicablearesupported.Bothphysicalandvirtualinstancesarealsosupported.
Note: Installing on Windows 7 requires an internet connection regardless of the
downloadyouchose.
AdditionalSoftware Microsoft.NETFramework4.5
BrowserSupport Chrome 22.x, Firefox 12.x, or Internet Explorer 9.x. If you are using Internet
Explorer9,disableenhancedsecurity.
CPU 1gigahertz(GHz)orfaster
Memory 2gigabyte(GB)RAM
Storage 20GBavailableharddiskspace
TheProfileUnityManagementConsolerequiresyouruseraccounttohaveadministrativeprivilegesonthe
localmachineforinstallation.
FlexAppPackagingConsoleRequirements
TheProfileUnityFlexAppPackagingConsolerequiresthefollowingforinstallation:
FlexAppPackagingConsoleSystemRequirements
Platforms
Supported
Windows7.Both32bitand64bitversionswhereapplicablearesupported.The
packaging console should be on a Windows 7 OS that can be reset after each
package is created. Using a nonpersistent pool or a virtual machine with a
snapshotthatcanberolledbackisfullyacceptable.
AdditionalSoftware Microsoft.NETFramework4.5
CPU 1gigahertz(GHz)orfaster
Storage 200MBavailableharddiskspace(32bit)or20GB(64bit)
The FlexApp Packaging Console has an additional bitlevel requirement. The bitlevel of the operating
system on which you package applications with the FlexApp Packaging Console needs to match the
operatingsystemofthedesktoptowhichyoudeployapplications.Ifyouarepackagingapplicationstobe
used in a 32bit environment, you must use the Packaging Console on a 32bit OS. If you are packaging
applicationstobeusedina64bitenvironment,youmustusethePackagingConsoleona64bitOS.

ClientRequirements
TheProfileUnityClientrequiresthefollowingforinstallation:
ClientSystemRequirements
Platforms
Supported
Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008,
Windows 7, Terminal Server, and Citrix XenApp Server. Both 32bit and 64bit
versionswhereapplicablearesupported.Bothphysicalandvirtualinstancesare
alsosupported.Both32bitand64bitversionswhereapplicablearesupported.
Windows 7 only for FlexApp. Deployed as nonpersistent virtual desktops for
FlexApp.
AdditionalSoftware none
CPU 2CPUsat1gigahertz(GHz)orfaster
Storage 200MBavailableharddiskspace(32bit)or20GB(64bit)
The ProfileUnity Client is dependent on a Microsoft domain infrastructure. Machines running the
ProfileUnityClientmustbemembersofthedomain.
Any client machines making use of ProfileUnitys FlexApp features must have Windows 7 or higher
installedandbedeployedasnonpersistentvirtualdesktops.
Additionally,writepermissiontotheNETLOGONshareonyourdomaincontrollerisrequiredtoinstallthe
ProfileUnityClient.Pleaseinsureyouruseraccounthasthenecessaryprivilegespriortocontinuing.Ifyou
are not using the NETLOGON share on your domain controller, please see Appendix A Not Using
NETLOGONformoreinformation.
AdditionalRequirements
ActiveDirectory
ProfileUnity requires Active Directory to deploy its client files to the desktop and point the user to its
configurationfile.UsersalsomustuseActiveDirectorytologintotheirphysicalorvirtualdesktops.
UserAccountControl
TheFlexAppPackagingConsolerequiresthatyouturnoffMicrosoftWindowsUserAccountControl(UAC)
beforeinstallingthesoftware.
UpgradingProfileUnityfromVersionsPriorto5.5
IfyouarerunningaversionofProfileUnitypriorto5.5inyourenvironment,youwillwanttosaveaBackupofall
youruserandenvironmentsettingsthatyoucurrentlyhave.TheConfigurationManagement,FilterManagement,
andPortabilityManagementcustomizationscanlaterbeaddedbacktothenewversionofProfileUnityyouinstall
intoyour environment. All ProfileUnityconfiguration settings are savedin a PostgreSQL database whichyou will
useinperformingyourbackupandrestoreprocedures.
If you do not backup your existing ProfileUnity settings before installing the
new version of software, you will not be able to recover them. They will be
overwrittenwiththedefaultsettings.
StartingwithVersion5.5,ProfileUnityisavailableonlyasastandaloneproduct.ProfileUnityisnolongerincluded
aspartoftheLiquidwareLabsStratuspherevirtualappliance.
OnlydatabasesfromVersion4.8.1,5.0,and5.2arecompatiblewithProfileUnity5.5andbeyond.Ifyouneedto
upgradeversionspriorto4.8.1,pleasecontactourSupportTeam.
To find out which version of the ProfileUnity Management Console you are running, open the Management
Consoleandlookinthelowerlefthandcornerfortheversionnumber.Youcancomparethisversionnumberwith
whatisavailableonLiquidwareLabsSoftwareDownloadArea(http://www.liquidwarelabs.com/Download/).
To preserve your existing user and environment settings while upgrading your ProfileUnity software, please see
ourGuideforUpgradingVersionsPriorto5.5forfullinstructionsbeforeremovingorinstallinganysoftware.
IfyouhavealreadyupgradedProfileUnitytoversion5.5.Xor5.6.X,thenyoucansimplydosoftwareupdatesfrom
within the Management Console without reimporting your settings data. Please see the section, Installing
SoftwareUpdatesforProfileUnity,formoreinformationoninstallingsoftwareupdates.

InstallingProfileUnity
ProfileUnityisavailableonlyasastandaloneproduct.TheProfileUnitystandaloneinstallerinstallstheProfileUnity
Management Console and downloads the software for the ProfileUnity FlexApp Packaging Console and the
ProfileUnity Client. There are now two installers: a full version (ProfileUnityNetFull_vX.X.X.exe) which contains
theMicrosoft4.5 .NET Framework andone without theMicrosoft .NET Framework (ProfileUnityNet_vX.X.X.exe).
Installationisstraightforwardandmerelyrequiresanadministratortoanswerafewsimpleprompts.
The ProfileUnity Management Console requires your user account to have
administrative privileges on the local machine for installation. Additionally,
write permission to the NETLOGON share on your domain controller is
requiredtoinstalltheProfileUnityClient.Pleaseinsureyouruseraccounthas
thenecessaryprivilegespriortocontinuing.
1. BrowsetoeitherProfileUnityNetFull_vX.X.X.exe or ProfileUnityNet_vX.X.X.exe,whereX.X.Xstands
for the version number of the software, and execute the ProfileUnity standalone installer to begin the
installation.
2. PleaseselectyourlanguageandclickOKtocontinue.
3. TheWelcomeScreendialogdisplaysasshown.ClickNexttoproceed.

4. Please enter the folder on your local machine where you would like the Management Console installed
thenclickNext.
5. TheLicenseAgreementdisplaysasshown.PleasereadtheagreementandchoosetheIacceptoption
ifyouacceptthetermsoftheagreement.ClickNexttoproceed.

6. ProfileUnity is ready to install. Click Install to install the software or Back to change any of your
installationsettings.
7. The setup wizard installs your files. The wizard will make sure you have the Microsoft .NET Framework
installed on your machine. If files are still needed, the wizard will use your computers internet
connectiontoautomaticallyretrievethosefilesforyou.

8. Oncetheinstallationiscompleted,clickFinish.

LoggingintotheManagementConsolefortheFirstTime
ThefirsttimeyoulogintotheProfileUnityManagementConsole,pleaseuseadminasyourusernameandleave
the password field blank. The Management Console will ask you to set up a password for the admin account at
thistime.
Your password must be at least 8 characters long and must include at least one character from three of the
followingcategories:
Uppercaseletters
Lowercaseletters
Numbers
Nonalphanumericcharacters
Pleasekeepthisinformationinasafeplacesoyoucanrefertoitasneeded.
Once you have logged in as the Admin, the Guided Configuration Wizard will automatically start to help you
configureyourenvironmentforProfileUnity.Thenextsectionwalksyouthroughthosesteps.
UsingtheGuidedConfigurationWizard
To configure your environment using the Management Console, ProfileUnity has an easytouse Guided
Configuration Wizard. The Guided Configuration wizard is a stepbystep wizard that walks you through the
creation and assignment of ProfileUnity groups and group policies. It also allows you to easily create a basic
configuration for your environment that includes Profile Portability, Folder Redirection and migration of certain
folders(ifdesired),andoptionallyturnsonandconfiguresFlexApp.
ThefirsttimeyoulogintotheProfileUnityManagementConsole,theGuidedConfigurationWizardwillbestarted
foryoutohelpyouautomatethesetupofyourenvironmentforProfileUnity.
You may also choose to start the Guided Configuration Wizard anytime you create a new configuration from the
ConfigurationManagementsectionintheManagementConsoleasseenbelow.

Tostartthewizard,clickontheConfigurationManagementsectioninthenavigationbarontheleft.Clickonthe
Createbutton.SelectGuidedtostartthewizardforthisnewconfiguration.

STEP1:AdjustGlobalSettings
You can grant other users access to the Profile Management Console by adding them to the list of valid
ActiveDirectoryusers.SimplytypeintheADgroupandclickAdd.Toremovegroups,selectRemovenext
tothatgroupsname.
ProfileUnitys client tools and configuration files are typically installed on the NETLOGON share of your
domaincontroller.Ifyouneedtochangewheretheclientfilesaredeployedinyourenvironment,typein
thenewlocationfortheDeploymentPath.
Click Next to proceed. Youwill thenbe asked if you would likethe Guided ConfigurationWizard to skip
thisstepthenexttimeitruns.IfyouchooseYes,thenSelectingaTemplatewillactuallybethefirststep
youseethenexttimeyourunthewizard.

STEP2:SelectaTemplateforConfiguration
Please choose a template from the library on which to base your configuration. Liquidware Labs has
created configuration templates that automatically preconfigure settings based on the goals you are
trying to achieve in your environment. You also have the ability to add templates or import templates
intothislibraryfromtheAdministrationarea.
ClickNexttoproceed.

STEP3:AssignValuestoTemplateVariables
Withtheuseoftemplates,therewillbeoneormorevariablesinthetemplatethatneedvalueswhichare
specific to your environment assignedto them. For example, you will need toconfigure a default home
directory or location where the users settings and data will be stored on an existing server in your
network.Remembertoinclude%username%inthepathtomakeitsothateachuserwillhaveaunique
datafolder.Thenenteranyothervaluesthatarerequested.
ClickNexttoproceed.

StoragePathPermissions
ProfileUnityneedstheappropriatepermissionsconfiguredonthestoragepathforproperoperation.
NTFSPermissions
ListedbelowaretherecommendedtolevelNTFSpermissionsforthestoragepath.
UserAccount RecommendedPermissions Folder
Administrator FullControl Thisfolder,Subfolders,andFiles
AuthenticatedUser Modify Thisfolderonly
Creator/Owner Modify Subfoldersandfilesonly
Alternatively,youcanspecifyEveryoneFullControlfortestingpurposes.
SharePermissions
TherecommendedsharepermissionsforthestoragepathareEveryoneFullControl.
STEP4:ConfigureActiveDirectoryGPOsandLicenseGroup
The next step in the guided configuration is to configure Active Directory so that ProfileUnity can be
activated without physically installing the Client on all of your desktops. If you click Automatic,
ProfileUnity will attempt to configure Active Directory for you. However, you must be logged in as an
ActiveDirectoryadmintotheProfileUnityManagementConsoleforthisoptiontoworkcorrectly.
Otherwise, click Manual if you prefer to configure Active Directory yourself or if you have already
configuredActiveDirectoryandthelicensingonapriorrunthroughtheGuidedConfigurationWizard.
The instructions for manually configuring Active Directory can be found in the Installation &
ConfigurationGuideinthesectioncalledManuallyPreparingYourEnvironmenttoUsetheProfileUnity
Client.

If you click Automatic, you have an extra step of answering a few questions so that ProfileUnity can
automatically configure the Group Policy Object for this particular User Group. ProfileUnity will use the
groupyoupickforyourlicensegroup.ClickontheRunbuttontoallowProfileUnitytomaketheseActive
Directorychanges.
ClickNexttoproceed.

STEP5:ConfirmYourSettings&SaveyourConfiguration
Clicking Finish will create a configuration that incorporates the settings as you set them in the previous
steps and will include basic configuration for all Portability Management rule sets as well. These
configuration changes need to be made available to the ProfileUnity Client so that it can apply your
settings with each user login. Each configuration is stored in an INI file. The wizard will create this
configurationfilethatyouwillneedtosavetothesamelocationwheretheProfileUnityClientisinstalled.

AddingProfileUnityUserstoyourLicenseGroup
The Guided Configuration Wizard uses an existing group or a group you created. If you used an existing group
duringtheGuidedConfigurationWizardasyourgroup,thenyoujustneedtoaddyouruserstothisgroup.Youwill
notneedtoedityourlicensefile.IfyoudidnotusetheGuidedConfigurationWizardtopickagroup,thenyouwill
needtocreateagroupcalledProfileUnity.
1. Onyourdomaincontrolleropen"ActiveDirectoryUsersandComputers.Rightclickonthesecuritygroup
thatwascreatedandselectProperties.
2. OntheMemberstabclicktheAddbutton.
3. EnteroneormorenamesofusersyouwishtobelicensedtouseProfileUnity.Formultiplenamesusea
semicolontoseparatenames.ThenclickOKtoaddthenamestothesecuritygroup.
Please remember that this security group must match the name in your
licensefile,andthatthenumberofitemsinthisgroupshouldnotexceedthe
number of users licensed. The ProfileUnity licensing system does not accept
nested groups. ProfileUnity will only execute for users that are direct
membersoftheProfileUnitygroup.
4. Saveyourlicensefile,profileunity.lic,totheProfileUnityfolder,locatedintheNETLOGONshareonyour
domaincontroller.IfyouhavenotreceivedalicensefilepleasecontacttheLiquidwareLabssalesteamat
Sales@liquidwarelabs.com.

ManuallyPreparingYourEnvironmenttoUsetheProfileUnity
Client
ProfileUnity was designed to deliver flexible profiles across your environment without having to distribute the
software to each individual machine. The ProfileUnity Client takes advantage of Microsoft Active Directory (AD)
andGroupPolicyObjects(GPOs)toaccomplishitswork.Thissectioncoversthechangesthatwillneedtobemade
to the environment. Administrators can make these changes manually following these instructions or they can
skip this section and use the Guided Configuration Wizard in the Management Console to have ProfileUnity
automatetheseenvironmentchanges.
CreateaProfileUnityGroupPolicyObject
CreatingtheGPOinWindowsServer2003ActiveDirectory
1. GotoStart>AdministrativeTools>GroupPolicyManagement.

2. Right click and select New Organizational Unit to create an OU that will contain the machines for
whichProfileUnitywillmanageuserprofiledata.
3. Right click and select Create and Link a GPO Here to create a policy and link it to this OU.

CreatingtheGPOinWindowsServer2008ActiveDirectory
1. GotoStart>AdministrativeTools>GroupPolicyManagementtoopentheGroupPolicy
ManagementConsole.

2. Right click and select New Organizational Unit to create an OU that will contain the machines for
whichProfileUnitywillmanageuserprofiledata.

3. RightclickandselectCreateaGPOinthisdomain,andLinkitheretocreateapolicyandlinkitto
thisOU.

AssignaGroupPolicyStartupScript
ProfileUnitymanagesusersthroughGroupPolicystartupscriptsandlogoffscripts.
1. From the Group Policy Management Console on your server, find your ProfileUnity Group Policy
Object.RightclickontheGPOandselectEdit
2. Navigate on the left to Computer Configuration > Windows Settings > Scripts (Startup/Shutdown).
On the right in the main settings window, right click on Startup and select Properties to setup the
startupscript.

3. ClicktheAddbuttontoaddanewstartupscript.
4. Assignstartup.vbsasastartupscript.
ScriptName:%systemroot%\system32\wscript.exe
ScriptParameters:\\<domain name>\netlogon\ProfileUnity\startup.vbs //b
NOTE: This policy should be applied to the OU(s) that contains the computers that will
execute ProfileUnity. You will need to replace <domain name> in the above example
withthenameofyourdomainsothatthepathresolvestoyourNETLOGONpath.
ConfigureAdministrative(ADM)TemplateSettings
AddingtheProfileUnityADMTemplate
Load the ProfileUnity Group Policy template into the Group Policy editor and configure the ProfileUnity
settings. This is a user policy and should be applied to the OU(s) containing the user accounts that will
executeProfileUnity.
2. Under the policy, browse to User Configuration > Administrative Templates and right click on
AdministrativeTemplatestoselectAdd/RemoveTemplates
3. ClicktheAddbuttontoaddanewtemplate.
4. Browse to the location where you extracted the ProfileUnity files (by default this is the
NETLOGON\ProfileUnityfolder)andselecttheProfileUnity.admtemplate.ThenclickOpen.

5. OnthenextdialogclickClose.TheProfileUnityADMtemplatewillbeaddedinoneofthefollowing
locations:
a. On Windows Server 2003 User Configuration > Administrative Templates > Liquidware
Labs>ProfileUnity
b. On Windows Server 2008 User Configuration > Policies > Administrative Templates >
ClassicAdministrativeTemplates(ADM)>LiquidwareLabs\ProfileUnity
ViewingtheADMTemplateonWindowsServer2003
This allows you to view and enable the ADM template you have just added in the Group Policy
ManagementConsoleonWindowsServer2003.
1. FromtheGroupPolicyManagementConsole,gotothemainmenuandselectView>Filtering

2. UnchecktheoptionOnlyshowpolicysettingsthatcanbefullymanaged.

ConfiguringandEnablingthePolicy
IfyouareusingtheGroupPolicyManagementConsoleonaWindowsServer2003domaincontroller,use
thenavigationonthelefttobrowsetoUserConfiguration>AdministrativeTemplates>LiquidwareLabs
>ProfileUnity.

IfyouareusingtheGroupPolicyManagementConsoleonaWindowsServer2008domaincontroller,use
thenavigationonthelefttobrowsetoUserConfiguration>Policies>AdministrativeTemplates>Classic
AdministrativeTemplates(ADM)>LiquidwareLabs>ProfileUnity.
1. On the right in the main settings window, right click on Enabled and select Properties on Windows
Server2003orselectEditonWindowsServer2008.

2. SelecttheEnabledoption,andthenclickOK.
3. Back in the main settings window, right click on INI File Path and select Properties for Windows
Server2003orselectEditforWindowsServer2008.

4. SelecttheEnabledradialbutton.ThenedittheUNCPathtomatchthefolderwhereyourINIfileswill
bestoredwhichbydefaultwillbeyourNETLOGON\ProfileUnityfolder.ClicktheOKbuttonwhenyou
arefinished.
NOTE:Thispolicyshould beappliedtotheOU(s)thatcontainstheusersthatwillexecute
ProfileUnity. You will need to replace <YourDomainHere> in the above example UNC
Pathwiththenameofyourdomain.
5. Back at the main settings window again, there are two more settings which can optionally be
configured:
a. Silent The ProfileUnity splash screen seen on desktops at startup is helpful in that it displays
which configurations are being run and assists in troubleshooting logon and logoff processes
executedby ProfileUnity.After a ProfileUnityconfigurationhas been refined, the splash screen
can be turned off (if desired) to allow ProfileUnity to run silently. To enable silent mode, right
clickSilentandselecttheEnabledradiobutton.ThenclicktheOKbutton.
b. Disable Time Stamp Check In most cases, it is important to have the time stamp check
enabled. ProfileUnity looks at the date and time stamp of the portability settings files before
retrieving or storing user preferences at logon or logoff. This saves time at logon or logoff,
becauseProfileUnityonlyretrievesorstoresthepreferencesthathavechanged.Thecheckalso
helpsavoidmostlastwritewinsconflicts.However,insomecasesyoumightneedtodisablethe
time stamp check to force ProfileUnity to disregardthe cached files. Todisable the time stamp
check,rightclickDisableTimeStampCheckandselecttheEnabledradiobutton.Thenclickthe
OKbutton.
AssignaGroupPolicyLogoffScript
Assignlogoff.vbsasalogoffscript.ThisisauserpolicyandshouldbeappliedtotheOU(s)containingthe
useraccountsthatwillexecuteProfileUnity.
2. Under the policy, browse to User Configuration > Windows Settings > Scripts (Logon/Logoff) and
rightclickonLogofftoselectProperties.
3. ClickAddtoaddanewscript.ThenpointthescriptparameterstoyourdomainsNETLOGONshare.
ScriptName:%systemroot%\system32\wscript.exe
ScriptParameters:\\<domain name>\netlogon\ProfileUnity\logoff.vbs //b
4. ClickOKandthenApplytosaveyourchanges.
NOTE:Thispolicyshould beappliedtotheOU(s)thatcontainstheusersthatwillexecute
ProfileUnity.

CreateaSecurityGroupandActivateYourProfileUnityLicense
The ProfileUnity Client requires a valid license file to function. The following steps are required to
configurelicensingfortheProfileUnityClient.
The default security group name is ProfileUnity which is included in your
license key file. If you prefer a different naming scheme for your security
group, this can be changed in the license key file. Your security group and
licensefilemustmatchinorderforProfileUnitytolicenseuserscorrectly.
1. OnyourdomaincontrolleropenActiveDirectoryUsersandComputers.
2. Tocreateanewsecuritygroup,rightclickontheservernameandselectNew>Group.

3. Type ProfileUnity for the Group name and select Security under the Group type. Then click
NextforWindowsServer2003orOKforWindowsServer2008.
4. RightclickonthesecuritygroupyouhavejustcreatedandselectProperties.

5. OntheMemberstabclicktheAddbutton.
6. Enter one or more names of users you wish to be licensed to use ProfileUnity. For multiple names
useasemicolontoseparatenames.ThenclickOKtoaddthenamestothesecuritygroup.
Please remember that this security group must match the name in your
licensefile,andthatthenumberofitemsinthisgroupshouldnotexceed
thenumberofuserslicensed.TheProfileUnitylicensingsystemdoesnot
accept nested groups. ProfileUnity will only execute for users that are
directmembersoftheProfileUnitygroup.
7. Save your license file, profileunity.lic, to the ProfileUnity folder, located in the NETLOGON share on
your domain controller. If you have not received a license file please contact the Liquidware Labs
salesteamatSales@liquidwarelabs.com.

InstallingtheClientSoftware
If you chose to automate your environment setup by using the Guided Configuration Wizard, the ProfileUnity
Clientfileswereinstalledto\NETLOGON\ProfileUnity.Howeverifyouchosetomanuallysetupyourenvironment,
youwillneedtolocate,download,andextracttheClientfilestoasubdirectoryforProfileUnityontheNETLOGON
share of your domain controller. Login to the ProfileUnity Management Console and go to the Administration
area.Togetthere,gotoyourusernameatthetoprightoftheManagementConsoleandselectAdministration
fromthedropdownlist.
ScrolldowntotheProfileUnityToolssectionandclickonDownloadClientTools.
If you are not using the NETLOGON share on your domain controller, please see Appendix A Not Using
NETLOGONformoreinformation.

InstallingtheFlexAppPackagingConsoleSoftware
Department installed applications include those that are still managed by IT staff or desktop administrators and
delivered to users but are not included in a master image. ProfileUnity with FlexApp DIA is enabled by the
administrator for select users or groups within the ProfileUnity Management Console from a list of application
packages.AdminspackagetheseapplicationsusingtheFlexAppPackagingConsole.
Login to the desktop where you will install the FlexApp Packaging Console and then login to the ProfileUnity
ManagementConsoletodownloadtheFlexAppPackagingConsoleinstallerfromtheAdministrationarea.Toget
there,gotoyourusernameatthetoprightoftheManagementConsoleandselectAdministrationfromthedrop
downlist.ScrolldowntotheProfileUnityToolssectionandclickonDownload FlexApp Packaging Console.Run
the installer on your login to your FlexApp Packaging Console desktop before creating a snap shot or composing.
For more information on installing and using the FlexApp Packaging Console, please see the FlexApp Packaging
ConsoleManual.

TroubleshootingAssigningStartupandLogoffScripts
While the Guided Configuration Wizard does a great job of automatically setting up your environment to use
ProfileUnity, there have been some cases where the wizard was unable to properly assign startup and logoff
scripts to the GPO. In most cases the wizard was prevented from making these system changes by antivirus
softwareorothersecurityprocesses.Youcanmanuallyassignthestartupandlogoffscriptsusingtheinstructions
intheManuallyPreparingYourEnvironmenttoUsetheProfileUnityClientsectionorcontactourSupportteamif
youneedmorehelp.

InstallingSoftwareUpdatesforProfileUnity
MakingsureyouarerunningthelatestversionofProfileUnityhasgotteneveneasier!BeginningwithVersion5.5,
theProfileUnityManagementConsolewillperformaversionchecktomakesureyouarerunningthelatestversion
of the software. If your version is not uptodate, you will see an orange starburst with an arrow pointing down
next to your user name at the top right of the console. This starburst indicates that there is a new version
availablefordownload.
Toupdateyoursoftware,youwillnotneedtobackuporrestoreyourexistingProfileUnityconfigurationdatabase.
Theupdateprocesswillpreserveyourdatabase.Also,itisnolongernecessarytouninstalltheoldsoftwarebefore
installinganewsoftwareupdate.
UpdatingtheProfileUnityManagementConsole
Choose your preferred method of installing software updates via either Online Mode from within the
ProfileUnityManagementConsoleorOfflineModeusinganinstaller.
OnlineMode
1. From the ProfileUnity Management Console, go to your username in the top right corner of the
console.ClickonAbout.
2. On the About screen, the version number you are currently running is displayed. If an update is
available, there will be a special message box with the version number of the update. Click the
Updatebuttontoinstallthelatestversionofthesoftware.
OfflineMode
1. GototheLiquidwareLabsDownloadformatwww.liquidwarelabs.com/download/index.asp.
2. FilloutandSubmittheDownloadform.
3. You will be redirected to the Download Page where you can select and download the ProfileUnity
Installerthatyouneedforyourenvironment.
4. RuntheinstallerandfollowthedirectionstoupdateyourProfileUnitysoftware.
UpdatingtheFlexAppPackagingConsole
IfupdateshavebeenmadetotheFlexAppPackagingConsolesinceyoulastinstalledit,youwillneedto
updateitfromtheProfileUnityManagementConsole.TofindinformationonFlexAppPackagingConsole
updates, please refer to the ProfileUnity Release Notes on the Liquidware Labs website. To install
updates:
console.ClickonAdministration.
2. On the Settings page, scroll down to the ProfileUnity Tools section and click on Download FlexApp
PackagingConsole.RuntheinstalleronyourlogintoyourFlexAppPackagingConsoledesktopbefore
creatingasnapshotorcomposing.
UpdatingtheProfileUnityClient
IfupdateshavebeenmadetotheProfileUnityClientsinceyoulastinstalledit,youwillneedtoupdateit
from the ProfileUnity Management Console. To find information on ProfileUnity Client updates, please
refertotheProfileUnityReleaseNotesontheLiquidwareLabswebsite.Toinstallupdates:
1. Backup your ProfileUnity license file by saving your license file, profileunity.lic, to your desktop or
another location. By default, this license file is located in the ProfileUnity folder, located in the
NETLOGONshareonyourdomaincontroller.
console.ClickonAdministration.
3. On the Settings page, scroll down to the ProfileUnity Tools section and click on Download Client
Tools.
4. SetyourDeploymentPathintheManagementConsoleasthedestinationoftheclientfilesandcheck
theOverwritefilesiftheyexistcheckbox.ClickonDeployClientTools.
5. Oncetheclientfileshavebeeninstalled,restoreyourlicensefilebacktoyourProfileUnityfolderon
yourdomaincontroller.
6. WithallClientupdates,youwillneedtoredownloadallofyourconfigurationINIfilestoensurethe
fileformatsynchronizeswiththenewsoftwareupdate.GototheConfiguration Managementarea
andforeachconfigurationinthelist:
a. ClickonDownloadnexttoitsname.
b. SavethisINIfiletothesamelocationwheretheProfileUnityClientisinstalled.

GettingHelpInstallingProfileUnity
IfyouhavequestionsorrunintoissueswhileinstallingandconfiguringProfileUnitywithFlexApp,LiquidwareLabs
isheretohelp.Ourgoalistoprovideyouwiththeknowledge,tools,andsupportyouneedtobeproductive.
UsingOnlineResources
LiquidwareLabsmaintainsvariouskindsofhelpfulresourcesonourCustomerSupportPortal.Ifyouhave
questions about your product, please use these online resources to your full advantage. The Support
Portalincludesproductforums,asearchableKnowledgeBase,documentation,andbestpracticesamong
otheritems.Youcanvisitourwebsiteathttp://www.liquidwarelabs.com.
ContactingSupport
If you wish to contact our Support staff for technical assistance, please either log a request on
the Liquidware Labs Customer Support Portal or give us a call. Prior to Logging a Case you may want to
reviewthesehelpfultips:
ChecktheProductDocumentationincludedwithyourLiquidwareLabsProduct.
Trytoseeiftheproblemisreproducible.
Checktoseeiftheproblemisisolatedtoonemachineormore.
Noteanyrecentchangestoyoursystemandenvironment.
NotetheversionofyourLiquidwareLabsproductandenvironmentdetailssuchasoperatingsystem,
virtualizationplatformversion,etc.
TospeakdirectlywithSupport,pleaseusethefollowingnumbers:
TollFreeinUSA&Canada: 18669149665
International: +16783970460

AppendixANotUsingNETLOGON?
By default, the ProfileUnity Client installs to the NETLOGON share on your domain controller. This path is
recommended but is not required. TheNETLOGON share is a DFS replicated path that is available onall properly
functioningdomaincontrollers.InstallingProfileUnitytothispathpreventsasinglepointoffailure.Ifatleastone
domain controller is online ProfileUnity can operate. Additionally this path allows ProfileUnity to scale through
loaddistributionacrossdomaincontrollers.
If you choose to install the ProfileUnity client to an alternative UNC path you will need to perform the following
twosteps:
1. SpecifythealternativeUNCpathwhenrunningtheClientinstaller.
2. Specify the alternative UNC path when manually configuring Group Policy. You will need to specify this
pathforthestartupscript,theINIFilePath,andthelogoffscript.
NOTE: The Group Policy startup script will execute using the computers
credentials. The ProfileUnity Client and the Group Policy logoff script will
execute using the users credentials. The recommended way to setup the
alternativeUNCpathistoalloweitherAuthenticatedUsersorEveryoneread
access. This permission setup will allow both the computer and the user to
accessProfileUnity.

ProfileUnity Installation Guide

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

ProfileUnity Installation Guide

Uploaded by

Copyright:

Available Formats

ProfileUnity

You might also like