Reference Guide

Security Management Server Virtual v10.2.10 AdminHelp
53
• Last Reconciled - date and time stamp
• AG Enabled - is configured for a user group when selected
Members - To view or modify the information of a user in the group, click Members. The list of
users in the group displays. Click a user to view the user's Security Policies, Details & Actions,
Endpoints, User Groups, and Admin. For instructions on how to view or modify User information,
refer to View or Modify User Information
.
Admin - To view, assign, or modify administrator roles assigned to the group, click Admin.
Select or deselect administrator roles to modify administrator roles assigned to the Group. For
more information about privileges available to each administrator role, refer to
Administrator
Roles.
4. If modified, click Save.
VDI User Policies
To manage policy for users in a VDI environment, create a Windows domain group, associate domain
users with that group, and then import the group into Dell Server. This allows Dell Server to manage the
users and their policies.
Policy settings differ, based on whether persistent or non-persistent VDI is deployed in the environment.
For an explanation of the differences between persistent and non-persistent VDI, see
Persistent vs.
Non-Persistent VDI.
Policy and Configuration Requirements for VDI Users
The policy requirements below are for VDI users running Advanced Threat Prevention. The list includes
only policies that are significant for VDI users. VDI endpoint group policy settings must also meet certain
requirements. See Policy and Configuration Requirements for VDI Endpoint Groups
.
Note: Ensure that you turn off Advanced Threat Prevention Agent Auto Update. In the left pane of the
Management Console, select Management > Services Management > Advanced Threats - Agent
Auto Update, then select Off.
Note: With Persistent VDI groups, ensure that roaming user profiles are configured.
These policy and configuration settings for VDI users must be configured before VDI client activation:
Technology Category
Policy or
Setting
P
ersistent VDI
group setting
Non-
Persistent VDI
group setting
Windows Encryption
Policy-Based
Encryption
Policy-Based
Encryption
On Off
Windows Encryption
Policy-Based
Encryption
Encrypt Outlook
Personal Folders
Not Selected Not Selected
Windows Encryption
Policy-Based
Encryption
Encrypt Temporary
Files
Not Selected Not Selected
Windows Encryption
Policy-Based
Encryption
Encrypt Temporary
Internet Files
Not Selected Not Selected
Windows Encryption
Policy-Based
Encryption
Encrypt User Profile
Documents
Not Selected Not Selected