RES ONE Workspace 2015 SR1 Release Notes · Release Notes 9.10.1.0 . ii Disclaimer Whilst every care has been taken by RES to ensure that the information contained in this document

RES ONE Workspace 2015 SR1 Release Notes

9.10.1.0

ii

Disclaimer

Whilst every care has been taken by RES to ensure that the information contained in this document is correct and complete, it is possible that this is not the case. RES provides the information "as is", without any warranty for its soundness, suitability for a different purpose or otherwise. To the maximum extent permitted by applicable law, RES is not liable for any damage which has occurred or may occur as a result of or in any respect related to the use of this information. RES may change or terminate this document at any time without further notice and shall not be responsible for any consequence(s) arising there from. Subject to this disclaimer, RES is not responsible for any contributions by third parties to this information.

Copyright Notice

Copyright © 1998-2016 Real Enterprise Solutions Development B.V.. All rights reserved. The software licensed by RES Software B.V. or Real Enterprise Synergy, Inc. is covered by patents, any patents pending, identified on www.ressoftware.com/legal-statements. Commercial Computer Software documentation/data - Restricted Rights.

www.ressoftware.com/legal-statements

Copyright © 1998-2016 Real Enterprise Solutions Nederland B.V. All rights reserved. iii

Contents

1. What's new in RES ONE Workspace 2015 SR1 1

1.1 About this Release ............................................................................... 1 1.2 Highlighted Features ............................................................................ 2

Microsoft Windows 10 compatibility ........................................................... 2 Access Control: Date and Time as new principle ............................................ 3 Authorized Files: Support for SHA-256 file hashes, and enhancements to the import of file hashes ............................................................................ 4

New RES ONE Workspace Agent for Linux and Apple OS X ................................. 5 RES Viewpoint now available ................................................................... 5

1.3 Important Changes ............................................................................... 6 Errors: Logging enhancement ................................................................... 6 Microsoft Windows 10 known limitations ..................................................... 7

1.4 Enhancements and Improvements ......................................................... 11 Agents: Enhanced performance when new Agent connects to a Relay Server ....... 11 Applications: https:// entries in Notifications become hyperlinks .................... 11 Building Blocks: Building Blocks for duplicate applications include application IDs in XML file ...................................................................................... 11

Console: 'WebGuard version' shows actual driver version ............................... 11 Console: Option to edit Workspace Container added to context menu ............... 11 Drivers: New drivers implemented ........................................................... 12 Execute Command: Splash screen enhancements ......................................... 12 Licensing: Logging enhancement ............................................................. 12 Licensing: Optimizations in licensing ........................................................ 12 Lockdown and Behavior: New option "Hide "Pin to Start Menu" in Workspace Preferences" .................................................................................... 12

Microsoft System Center: New option "Allow action outside maintenance window" ......................................................................................... 13

RES ONE Automation Integration: Improved autodiscovery of RES ONE Automation Dispatchers ...................................................................... 13

Screensaver: Enhanced functionality to turn screensaver off .......................... 13 Usage Tracking Viewer: Enhanced performance of "All applications for computer" view .............................................................................................. 14

User Session Security: Improved detection of user sessions ............................. 14 User Settings: Optimization when capturing User Settings on application end ...... 14 Website Security: Microsoft Edge now supported for browser independent website security ............................................................................... 14

Workspace Composer: Logon process of RES ONE Workspace sessions enhanced ... 14 Workspace Composer: Windows Startup folder no longer removed in Merge mode 14

1.5 Resolved Issues ................................................................................. 15 Agents: Labels not properly aligned or missing in Edit RES ONE Workspace Agent window .......................................................................................... 15

Alerting: Canceling a new notification type resulted in errors ......................... 15 Applications Security: Selecting multiple log entries might give error "Object variable or With block variable not set" ................................................... 15

Applications: Applications controlled by application manager might disappear after user was renamed ...................................................................... 16

Applications: Importing or deleting an application might give error "No transaction is active" ......................................................................... 16

Applications: Opening an application could give error 'Index out of bounds' ........ 17 Applications: Seat license could be reserved for a rejected machine ................. 17 Applications: Shortcut pinned to desktop not removed when value "Set mandatory shortcut" was changed to "Take no action" ................................. 17

Copyright © 1998-2016 Real Enterprise Solutions Nederland B.V. All rights reserved. iv

Building Blocks: Creating Building Block using a command line might result in incomplete XML file and missing XBB file ................................................. 17

Citrix XenApp Publishing: New or changed published application might not start after session refresh .......................................................................... 18

Console: Drive and Port Mappings, Printers on application level might not be applied in user session ........................................................................ 19

Console: Opening Console might give error "Input past end of file" ................... 19 Console: Sorting Agents by 'Synchronization status' not working correctly after upgrade to RES ONE Workspace 2015 ...................................................... 19

Console: Switching between exceptions for Workspace Containers could lead to wrong settings being displayed ............................................................. 20

Datastore: Creating a Datastore or changing password could give error when using special characters ...................................................................... 20

Error message: "Access Denied" error could be logged ................................... 20 Files and Folders Security: Blocked file types might not be blocked in user sessions .......................................................................................... 21

Installation: Using parameter ADDTOWORKSPACE in combination with Relay Servers might cause Agent not to get in sync ............................................ 21

Locations and Devices: Zone based on Group membership might not be applied when using cached context .................................................................. 21

Locations and Devices: Zones displayed incorrectly in overview ....................... 22 Memory Optimization: Applications that run under different context may cause performance issues ............................................................................ 22

Microsoft App-V 4.x: User Settings for applications might not be applied on application start ............................................................................... 22

Microsoft App-V 5: Application could not be started in user session .................. 23 Microsoft App-V 5: Error "The application failed to launch. This may be due to a network failure." might be displayed ...................................................... 23

Microsoft App-V 5: RES ONE Workspace Package delivery not working when Citrix XenApp Application Publishing was enabled .............................................. 24

Microsoft App-V 5: 'Run application now' button might give error ..................... 25 RES ONE Automation Integration: Testing settings might give error "No dispatchers discovered for this RES ONE Automation environment" after installing RES ONE Workspace 2015 ........................................................ 25

RES ONE Workspace Start Menu: Search function not available when cursor hovered over application list ................................................................ 26

RES VDX Integration: Extended Microsoft Internet Explorer might not start correctly ........................................................................................ 26

RES VDX Integration: User might experience delay at logon when using VMware View .............................................................................................. 26

Security: Application security and Network security not applied in VMware View sessions based on PCoIP to a server-based Operating System ......................... 27

Usage Tracking: Website Usage Tracking could give error "Invalid procedure call or argument" ................................................................................... 27

Usage Tracking: Website Usage Tracking not working when using RES ONE Workspace Shell ............................................................................... 27

User Profile Directory: Duplicate profile directory objects for files and folders could be configured ........................................................................... 28

User Registry: Policy settings not saved if based on ADMX template .................. 28 User Registry: Resizing 'New/Edit registry setting' window could give error "Invalid property value" ...................................................................... 28

User Settings: "Per Site Privacy Actions" for Microsoft Internet Explorer not preserved correctly ........................................................................... 28

Website Security: Exporting data from Log tab using context menu not possible .. 29 Website Security: Icons not properly aligned on the Log tab ........................... 29 Website Security: Learning mode might result in websites being blocked ........... 29 Website Security: The Workspace Composer might hang when browser independent website security was configured ........................................... 29

Website Security: The Workspace Composer might stop unexpectedly when browsing to certain websites ................................................................ 29

Copyright © 1998-2016 Real Enterprise Solutions Nederland B.V. All rights reserved. v

Website Security: Value for "# blocked websites" always remained "0" ............... 30 Workspace Analysis: Application might be shown for user erroneously ............... 30 Workspace Composer: "Automation Error" might occur .................................. 30 Workspace Composer: Application in 'Learning' mode might be blocked by Managed Application Security ............................................................... 31

Workspace Composer: Application's Startup style might not be applied .............. 31 Workspace Composer: Black screen at logon on Microsoft Windows 8.1 .............. 31 Workspace Composer: Changing default printer via Printing Preferences might not work correctly............................................................................. 32

Workspace Composer: Desktop Background not always applied on Microsoft Windows Server 2012 or higher ............................................................. 32

Workspace Composer: Enabling tracing could cause delay at logon ................... 32 Workspace Composer: Environment variables might not be resolved correctly when used in Zone rules ..................................................................... 32

Workspace Composer: Error "Maximum number of licenses reached" might be logged unexpectedly in User Event Log ................................................... 33

Workspace Composer: Folder Redirection might cause white icons on desktop ..... 33 Workspace Composer: Hidden PowerShell script might not be executed when configured as action for Microsoft App-V 5 application ................................ 33

Workspace Composer: igstub.exe process might terminate unexpectedly ........... 34 Workspace Composer: Logging on to Microsoft Windows XP could result in empty desktop, no taskbar after upgrading to RES ONE Workspace 2015 Revision 6 ...... 34

Workspace Composer: Microsoft Outlook might not start ............................... 34 Workspace Composer: Microsoft Windows error might be displayed when starting an intercepted unmanaged application ................................................... 34

Workspace Composer: Microsoft Windows options "Sleep" and "Hibernate" not available in user sessions with RES ONE Workspace Shell .............................. 35

Workspace Composer: Option "skip unmanaged printers" might not work correctly when logging off or refreshing .................................................. 35

Workspace Composer: Option "skip unmanaged printers" not working correctly in combination with registry value "ForcePrinterConnections=yes" ..................... 36

Workspace Composer: Removable Disks Security might block fixed devices erroneously ..................................................................................... 36

Workspace Composer: RES Service not restarted correctly after rebooting machine running RES Workspace Manager 2014 SR3 or higher ........................ 36

Workspace Composer: Session on Citrix virtual desktop could appear to hang at logon when Citrix Time Zone Management was used ................................... 37

Workspace Composer: Starting application might give "Application can't be started" error ................................................................................... 37

Workspace Composer: Starting Microsoft TS RemoteApp could give error "File not found: wfapi.dll" ............................................................................... 37

Workspace Composer: Starting unmanaged Infor applications not successful ....... 38 Workspace Composer: Tiles for Microsoft Internet Explorer might disappear if more than one tile was pinned to Start Screen .......................................... 38

Workspace Composer: Usage Tracking might not track websites visited with Mozilla Firefox ................................................................................. 39

Workspace Composer: User Account Control (UAC) prompt might be displayed even though Dynamic Privileges were set ................................................. 40

Workspace Composer: User-pinned tiles on Start screen might disappear if session ended without proper logoff ....................................................... 41

Workspace Containers: Closing the confirmation dialog box with [x] resulted in deleting the exception for a Workspace Container ..................................... 41

1.6 Relay Servers: Enhancements and Improvements ...................................... 42 Relay Servers: Default certificate key length increased to 1024 ....................... 42 Relay Servers: Improved performance by reducing disk I/O ............................ 42 Relay Servers: Improved performance when using Usage Tracking .................... 42

Copyright © 1998-2016 Real Enterprise Solutions Nederland B.V. All rights reserved. vi

1.7 Relay Servers: Resolved Issues .............................................................. 43 Relay Servers: Cascaded Relay Servers might become unresponsive .................. 43 Relay Servers: Configuring connection to FIPS-encrypted Datastore sometimes not successful .................................................................................. 43

Relay Servers: Option /silent in combination with /configfile might cause an error ............................................................................................. 43

Copyright © 1998-2016 Real Enterprise Solutions Nederland B.V. All rights reserved. 1

1.1 About this Release

Datastore

This table shows the RES ONE Workspace version that introduced the Datastore revision level that applies to RES ONE Workspace 2015 SR1.

Datastore revision level introduced in Datastore revision level

RES Workspace Manager 2014 SR3 13

When installing this release, if the Datastore is of a lower revision level, it will automatically be updated.

Drivers

This table shows what drivers will be updated by installing this release.

Driver Driver update

AppGuard Yes

ImgGuard Yes

NetGuard Yes

RegGuard Yes

RESNFLT Yes

1. What's new in RES ONE Workspace 2015 SR1


1.2 Highlighted Features

Microsoft Windows 10 compatibility

RES ONE Workspace is now compatible with both x86 and x64 versions of Microsoft Windows 10,

build 10.0.10240.xxx.150916-2039. Several known limitations apply (Microsoft Windows 10 known limitations (on page 7)).

Changes have, among others, been implemented in Zone rules, Agent overview, and application shortcuts and tiles to achieve this.

Please note that RES ONE Workspace 2015 SR1 does not yet include support for Microsoft Office 2016.

User Settings: New templates for Microsoft Windows 10

User Settings templates provide a good starting point when configuring global User Settings or when configuring User Settings for an application.

New templates have been added for Microsoft Windows 10:

Control Panel

Accessibility Options

Desktop Content

Desktop Icons

Keyboard Settings

Mouse Settings

Regional and Language Options

Screen Saver

Sounds

Taskbar

Themes

Toolbars

Visual Settings

Windows Explorer

Folder General

Folder Search

Folder View

User Certificates

Windows Messaging Subsystem

User Settings can be configured on global level at Composition > User Settings, on the User Settings tab, and on application level at Composition > Applications, on the User Settings > Properties tab of an application.


Access Control: Date and Time as new principle

A new principle in Access Control has been introduced for managed applications and all other objects. In addition to Access Control based on Identity (who) and Locations and Devices (where and what), it is now also possible to base Access Control on Date and Time (when).

With this new principle, you can schedule ahead of time when configurations or objects become available or unavailable. Example 1: you want a folder redirection activated for the coming weekend, because maintenance is scheduled on the network share where the folder is actually located. Example 2: you want to activate a new company branding on a specific date on the desktop for all employees.

For this purpose, the following changes have been made:

On the objects' Access Control tab, the Date and Time area has been added with Start and End fields.

For applications, the Access Control > Time Restrictions tab has been renamed to Date and Time. On this tab, Start and End fields have been added.

Please note that in user sessions, date and time configured on objects are evaluated and applied at the start and refresh of a RES ONE Workspace session. Date and time evaluation is based on the local time of the RES ONE Workspace Agent.

Start/End Date/Time

You can specify the date using the date picker or by typing the date and time. The date format is dd-mm-yyyy (for example, 20-12-2015). The time format is 24-hour (for example, 15:00).

You can define the start and end date and time in the present, the future and the past.

If you only specify the start date without setting a specific time, the time is automatically set to 00:00.

If you only specify the end date without setting a specific time, the time is automatically set to 23:59.


Authorized Files: Support for SHA-256 file hashes, and enhancements to the import of file hashes

In RES ONE Workspace 2015 SR1, importing and adding file hashes has been enhanced. Below more detailed information about these enhancements.

Importing allowed or denied file hashes including Workspace Control

When importing file hashes for Authorized Files using a CSV or TXT file, you can now include whether the file hash is denied or allowed, and you can update Workspace Control on the global Authorized Files containing the imported file hash. For more details and examples, please refer to the RES ONE Workspace Help and Administration Guide.

In the Console, file hashes can be imported using the option Import file hashes (at Security > Applications > Managed Applications, on the Log tab or at Security > Authorized Files, in the

context menu). They can also be imported using the command line option Pwrtech.exe

/importhashes=<file> /createifnotexists.

Support SHA-256 algorithm

RES ONE Workspace 2015 SR1 now supports the SHA-256 algorithm for file hashes, besides the existing support for SHA-1. New file hashes are calculated using SHA-256. After upgrading to RES ONE Workspace 2015 SR1, existing SHA-1 file hashes will still work, and it also remains possible to import SHA-1 file hashes. In addition, it is now also possible to import or manually add MD5 file hashes, which can be useful for legacy purposes. When importing file hashes from a CSV or TXT file, the applicable file hash algorithm is automatically detected based on the length of the hexadecimal file hash string. If a CSV or TXT file contains a file hash that is not recognized as a valid MD5, SHA-1, or SHA-256 string, then the entire file will not be imported.

In the Management Console the following changes have been made to indicate the file hashes' algorithms:

At Security > Authorized Files, when editing an Authorized File, on the File Hashes tab, the column Algorithm has been added.

When adding/changing a file hash, the algorithm is automatically recognized based on the file hash string, and the relevant name shown in the Algorithm field.

When upgrading to RES ONE Workspace 2015 SR1, existing SHA-1 file hashes will not change. It is not possible to convert existing SHA-1 file hashes to SHA-256 automatically. To start using SHA-256, you must add new file hashes.

In a mixed RES ONE Workspace environment, Agents that have not been upgraded to RES ONE Workspace 2015 SR1 will not recognize the MD5 and SHA-256 file hashes. Also when downgrading to a version prior to RES ONE Workspace 2015 SR1, MD5 and SHA-256 file hashes will not be recognized and, therefore, not applied.

Search engine enhancement

At Security > Authorized Files, it is now possible to search for specific file hashes in the list of Authorized Files. Previously, it was only possible to search on the data that is displayed in the Authorized Files overview.


New RES ONE Workspace Agent for Linux and Apple OS X

RES ONE Workspace 2015 SR1 introduces a RES ONE Workspace Agent for Linux and Apple OS X.

This new Agent supports the Managed Applications Security feature, providing the capability to allow or block executables in user sessions based on Authorized Files with MD5, SHA-1 and SHA-256 file hashes.

Agents for Linux and Apple OS X must be connected to a RES ONE Workspace Relay Server. Direct connection to the Datastore is not possible. Please note that the new Agent does not support the use of Access Control on Authorized Files, and that the feature is disabled by design for the root user.

This new Agent is supported on SUSE Linux Enterprise Server release 11 SP3, CentOS Linux 5.11, and Apple OS X 10.8-10.11.

RES Viewpoint now available

With RES ONE Workspace 2015 SR1 we also offer RES Viewpoint, which allows you to quickly gain visibility into your existing desktop infrastructure through a rich analysis of your user environment.

RES Viewpoint is an online, Microsoft Windows Azure-based service with which you capture a real-time snapshot of your organization’s environment and user-base. Based on this snapshot, you can generate reports that provide background information that can be useful when implementing desktop and infrastructure changes.

You can also use RES Viewpoint at any time to identify unexpected changes in your environment, or uncover additional opportunities to manage user workspaces more effectively.

To start using RES Viewpoint, go to http://viewpoint.ressoftware.com.

http://viewpoint.ressoftware.com/


1.3 Important Changes

Errors: Logging enhancement

The logging of errors caused by a malfunction of a machine on which RES ONE Workspace is running,

or a RES component (e.g. pfwsmgr.exe, pwrgrid.exe) has been enhanced. Now, if more than 300 errors are logged within 10 minutes, error logging is suspended for one hour. After one hour, error logging will resume again. The check for the number of errors within 10 minutes will also resume again.

When suspending the error logging, the following entry is logged in the common error log at Diagnostics > Errors:

"Error logging will be suspended for the next hour. More than 300 errors

were logged during the last xx seconds."

After one hour, when error logging is resumed, the following entry is logged in the common error log:

"Error logging has resumed after an hour suspension."


Microsoft Windows 10 known limitations

RES ONE Workspace is compatible with Microsoft Windows 10, build 10.0.10240.xxx.150916-

2039, with known limitations as listed below.

Microsoft Windows apps with User Settings or Network Connections Security

Microsoft Windows apps* (such as Microsoft Edge) interact with the Operating System in a new way and with changed timing. This particularly affects our User Settings and Network Connections Security features, which may not behave exactly as expected for Microsoft Windows apps. For example, Network Connections Security does not work correctly on Microsoft Explorer 11 running in Enhanced Protected Mode. We are fully aware of this, and are working hard to address the issues in order to provide full support as soon as possible.

* Windows apps are also referred to as Metro, Windows 8-style, Modern, Windows Store and Universal apps.

Enabled Microsoft Group Policy "Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands" results in a black box in the Start Menu

If the Microsoft Group Policy "Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands" is enabled, on Windows 10, a black box appears in the user's Start Menu instead of the actual options. This Windows 10 behavior also occurs in RES ONE Workspace sessions when using the following Lockdown and Behavior options that make use of the same policy:

Disable "Shutdown" for all users on all computers

Disable "Shutdown" for end users on workstations.

RES ONE Workspace and tile management (Microsoft Windows 8.1, 2012 R2, and 10)

Consider the following scenario:

At Composition > Applications, on the Settings tab, Windows Shell shortcut creation was set to Merge with unmanaged shortcuts.

At Composition > Applications, an application, e.g. Microsoft Excel, was added.

In the user session, the user pins the managed Microsoft Excel to the Start screen.

In the Management Console, the administrator changes Access Control or removes the managed application completely, so that the user no longer has access to the managed Microsoft Excel.

In this scenario, when the user next logs on, Microsoft Excel is still pinned to the Start screen, but the managed application is not present. When the user clicks the tile, Microsoft Excel will start unmanaged if it is present on the user's machine, or nothing will start.

RES ONE Workspace with Windows Shell shortcut creation set to Replace mode

Consider the following scenarios:

In an existing Microsoft Windows 10 environment users have pre-existing Start Screen lay-outs including pinned tiles and RES ONE Workspace is installed with Windows Shell shortcut creation set to Replace mode.

When switching the Windows Shell shortcut creation mode to Merge or Do not create shortcuts, or uninstalling RES ONE Workspace, unmanaged application tiles might not be restored.

RES ONE Workspace is installed with Windows Shell shortcut creation set to Merge mode and in the user session, users pinned tiles to their Start Screen.

When switching Windows Shell shortcut creation to Replace mode, and then back to Merge mode again, unmanaged application tiles might not be restored.


RES ONE Workspace Folder Redirection not reflected in Microsoft Windows 10 explorer views "Quick access" and "This PC"

At Composition > Actions By Type > Files and Folders > Folder Redirection, when redirections are configured for one or more folders, the Microsoft Windows 10 explorer views "Quick access" and "This PC" might not use the redirected locations for these folders.

RES VDX Integration

When the option Windows keys passthrough is enabled (at Setup > Integration > RES Software > RES VDX, on the Settings tab) for user sessions running on Microsoft Windows 8/8.1, 2012/2012 R2, and Windows 10, the ALT+Tab key combination to switch between application windows does not work.


Recommendation when starting to use RES ONE Workspace Managed Applications for users with pre-existing Microsoft Windows 10 profiles

If you have an existing Microsoft Windows 10 environment in which you are going to install RES ONE Workspace with Windows Shell shortcut creation set to Merge mode, then the following configuration will preserve the pre-existing Start Screen lay-outs for users with Windows 10 profiles with pinned tiles:

At Composition > Applications, on the Settings tab, set Windows Shell shortcut creation to Merge with unmanaged shortcuts.

Ensure that each managed application at Composition > Applications is configured as follows on the Shortcuts tab of the application:

Turn off the options Replace existing unmanaged shortcuts and Create Start Menu shortcut (checkboxes empty)

Set the option If managed shortcut was not used to Intercept new process and apply configuration to manage all applications, also those that have a different name in the user profile and the RES ONE Workspace Console


In the user’s first RES ONE Workspace session, no tiles will be added to the Start Screen for new managed applications (those that are not yet existing in the user's Windows 10 profile). From the user’s second logon, tile management as defined in the RES ONE Workspace Console will be applied in all sessions.

In this scenario, if you do configure options in the Automatic shortcuts section differently than recommended above, then users will experience changes to the lay-out of tiles pinned to their Start Screen for unmanaged applications for which a managed equivalent also exists in the RES ONE Workspace Console, but with a different name:

the tile sizes of these applications will all be set to medium.

the Start Screen groups to which these applications belonged will be lost. All tiles will be put in a single, nameless, group.


1.4 Enhancements and Improvements

Agents: Enhanced performance when new Agent connects to a Relay Server

A new Agent that connects to a Relay Server now generates fewer transactions to register itself in the Datastore. This decreases the load on the Relay Server.

Applications: https:// entries in Notifications become hyperlinks

At Composition > Applications, on the Properties > Notifications tab of an application, when

editing a notification, an https:// entry will now also become a hyperlink when saving the

notification. Previously, only http:// entries would become a hyperlink. The hyperlinks are also available in the user sessions.

Building Blocks: Building Blocks for duplicate applications include application IDs in XML file

If multiple applications with the same Title exist in one menu, when creating Building Blocks for these applications from the Application List tab (at Composition > Application), the XML of the second/third/... Building Block will now include the application ID in its file name. Previously, when creating the second/third/... Building Block, a message box was displayed, asking the user if the existing file should be replaced.

Console: 'WebGuard version' shows actual driver version

The field WebGuard version now displays version information for the actual WebGuard driver. This is in line with the information that is shown for other RES ONE Workspace drivers. Previously, the version of a supporting DLL file was displayed.

The WebGuard version can be found at (for example) Administration > Agents, on the Agents tab.

Console: Option to edit Workspace Container added to context menu

The option Edit Workspace Container has been added to the context menu on Workspace Container exception tabs. This makes it possible to edit an existing Workspace Container while configuring features in RES ONE Workspace. Previously, it was only possible to edit Workspace Containers at User Context > Workspace Containers.


Drivers: New drivers implemented

For the Website Security enhancement to also support Microsoft Edge, the RESNFLT driver has been updated.

Also, for versioning purposes, RES ONE Workspace 2015 SR1 contains new versions of the AppGuard, ImgGuard, NetGuard, and RegGuard drivers.

Note

A system reboot is required to activate the new AppGuard, ImgGuard, NetGuard, RegGuard, and RESNFLT drivers.

Execute Command: Splash screen enhancements

For Execute Command actions that contain %script% in the Command line, some enhancements have been made to the splash screen that is displayed in user sessions when the Execute Command is applied.

Now, the Administrative note of the Execute Command action is displayed in the splash screen. If

the Administrative note is too long for the splash screen, "..." is displayed for the remaining

text. If no Administrative note is available for the Execute Command action, the text "Execute

Command" is displayed in the splash screen.

Execute Commands are configured at Composition > Actions By Type > Execute Command.

Licensing: Logging enhancement

When starting a RES ONE Workspace session is aborted because If no license available at logon is set to Do not continue, log off (at Setup > Licensing), the following entry is now logged in the User Event Log:

"RES ONE Workspace cannot continue because no licenses are available."

Licensing: Optimizations in licensing

This release contains optimizations in RES ONE Workspace 2015 licensing.

Lockdown and Behavior: New option "Hide "Pin to Start Menu" in Workspace Preferences"

At Composition > Desktop > Lockdown and Behavior, in the Personalization by end user section, the option Hide "Pin to Start Menu" in Workspace Preferences has been added.

If this option is selected, in a user session, when opening the Workspace Preferences, the Pin to Start Menu tab is not visible.


Microsoft System Center: New option "Allow action outside maintenance window"

When adding Microsoft System Center Configuration Manager software distributions, it is now possible to deploy applications in the user workspace outside the maintenance window that was specified on the Microsoft System Center Configuration Management Server for the Device Collection. Please note that this is only possible when adding a software distribution for deployment of applications.

The new option Allow action outside maintenance window (on the Properties tab of the software distribution) is useful for software distributions that should run when a session or application starts regardless of the configured maintenance window (in Microsoft SCCM). Please note that this option is not included in the Instant Report.

Software distributions that should run when a session starts can be added at Composition > Actions By Type > Microsoft ConfigMgr, on the Distributions tab. If they should run when an application starts, the software distributions can be added at Composition > Applications, on the Configuration > Actions tab of the application.

When upgrading to RES ONE Workspace 2015 SR1, for existing Microsoft ConfigMgr software distributions deploying applications, the option Allow action outside maintenance window is not selected. For newly added software distributions to deploy applications, the new option will be selected by default.

RES ONE Automation Integration: Improved autodiscovery of RES ONE Automation Dispatchers

In certain scenarios, when Autodetect was selected for Dispatcher detection settings (at Setup > Integration > RES Software > RES ONE Automation), not all RES ONE Automation Dispatchers were autodiscovered by RES ONE Workspace. This mechanism has been improved.

Screensaver: Enhanced functionality to turn screensaver off

RES ONE Workspace now offers the possibility to always manage screensaver behavior. In addition to turning the screensaver on or not managing it, the screensaver can now be explicitly turned off. This option can be useful to, for example, turn the screensaver off for a specific workspace container.

Screensaver Composition can be configured at Composition > Screensaver. Available configurations are:

Disabled: This setting disables the RES ONE Workspace Screensaver feature.

Enabled > Turn screensaver off: This new option takes control of the screensaver and turns it off.

Enabled > Turn Screensaver on: This option takes control of the screensaver and turns it on. It behaves the same as Enabled in previous versions of RES ONE Workspace.

When upgrading an existing RES ONE Workspace environment, the screensaver settings will be migrated as follows:

If the screensaver is Disabled, it will stay Disabled.

If the screensaver is Enabled, it will now be set to Enabled > Turn Screensaver on. Screensaver configuration like background image, timeout and color will be kept.


Usage Tracking Viewer: Enhanced performance of "All applications for computer" view

In the Usage Tracking Viewer (available from Setup > Usage Tracking and from Diagnostics > Usage Tracking Overview), on the Computer tab, the performance of generating Graph type: All applications for computer for All Computers has been enhanced.

User Session Security: Improved detection of user sessions

User Session Security has been enhanced by improving the detection of existing user sessions.

This feature can be configured at Security > User Sessions, on the Settings tab.

User Settings: Optimization when capturing User Settings on application end

The saving of User Settings has been optimized in the following scenario:

At Administration > Agents, an Agent (e.g. "Computer 1") is configured to connect to the Datastore through a Relay Server.

At Composition > Applications, application "A" is configured with the following settings:

On the User Settings > Properties tab:

Zero Profile mode is set to Capture targeted items on application end.

The option Allow end users to: Restore settings from previous session(s) is enabled.

In the RES ONE Workspace environment, both Named and Concurrent licenses are available.

A user logs on to a RES ONE Workspace session on "Computer 1".

The user starts application "A", works in it, and closes it again.

Now, the saving of User Settings (in this scenario) no longer requires a cache update, which optimizes the action.

Website Security: Microsoft Edge now supported for browser independent website security

In RES ONE Workspace 2015 Website Security has been enhanced to also support Microsoft Edge.

If Website Security is enabled, it now automatically secures the following browsers: Microsoft Edge, Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, and Opera. To secure additional browsers, their process names can be specified at Additional processes.

Workspace Composer: Logon process of RES ONE Workspace sessions enhanced

The logon process of RES ONE Workspace sessions has been enhanced to improve the reliability of loading the taskbar and desktop icons.

Workspace Composer: Windows Startup folder no longer removed in Merge mode

For RES ONE Workspace sessions in Merge mode, the Windows Startup folder is no longer removed from the user's profile.

Merge mode is configured at Composition > Applications, on the Settings tab, by setting the option Windows Shell shortcut creation to Merge with unmanaged shortcuts.


1.5 Resolved Issues

Agents: Labels not properly aligned or missing in Edit RES ONE Workspace Agent window

At Administration > Agents, when editing an Agent, on the Information tab, the "Laptop" label was missing and several other labels were not properly aligned. This has been resolved.

Alerting: Canceling a new notification type resulted in errors

At Setup > Integration > Alerting, on the Notification Types tab, when creating a new notification type and clicking Cancel without making any changes, the following errors were displayed:

Process pwrtech.exe

Procedure clsPFDAL.fysnSaveObject

Error # -2147467259

Error description Conversion failed when converting from a character

string to uniqueidentifier

and

"An error occurred while saving the changes to the database"

This has been resolved.

Applications Security: Selecting multiple log entries might give error "Object variable or With block variable not set"

At Security > Applications > Managed Applications, on the Log tab, when selecting more than one log entry while a Properties window for another entry is open, the following message might be displayed:

Process pwrtech.exe

Procedure frmDetail.LoadFields

Error # 91

Error description Object variable or With block variable not set



Applications: Applications controlled by application manager might disappear after user was renamed


At User Context > Directory Services, a directory service was configured with the following setting:

On the Properties tab of the directory service, Process Access Control based on was set to Account names.

At Composition > Applications, an application was configured with the following setting:

On the Access Control > Identity tab of the application, Type was set to Controlled by application manager(s).

On the Access Control > Identity > Assignment tab of the application, an application manager was configured.

The application manager used the Access Wizard (accessible from a RES ONE Workspace session or from the Management Console) to grant access to the application to, for example, user "A".

In Active Directory, user "A" was renamed to "A1".

At Administration > Maintenance, the action Rename group or user was used to rename all instances of user "A" to "A1", in the RES ONE Workspace environment.

User "A1" (formerly user "A") logged on to a RES ONE Workspace session.

In this scenario, in the user session, the application was not available. This has been resolved. Now, when using the action Rename group or user, access control configured by application managers will also be updated.

Applications: Importing or deleting an application might give error "No transaction is active"


An environment was set up to use dynamic Relay Server configuration through DHCP.

A user logged on to a computer that contained a full installation of RES ONE Workspace, and opened the Management Console.

At Composition > Application, the user imported or deleted an application.

In this scenario, the following error was displayed:

Process pwrtech.exe

Procedure clsPFDAL.CommitTransaction

Error # -2147168242

Error description No transaction is active.


Note

For details on how to set up Relay Server configuration through DHCP, please refer to the RES ONE Workspace Help.


Applications: Opening an application could give error 'Index out of bounds'

At Composition > Applications, when opening an application that had one file type configured (on the Properties > File Types tab of the application), the following error might occur:

Process pwrtech.exe

Procedure frmItem.FillFileAssociations

Error # 35600

Error description Index out of bounds


Applications: Seat license could be reserved for a rejected machine

At Composition > Applications, on the Properties > Licensing tab of an application, when clicking the Seats button, the Reserve button was also available for rejected machines (i.e. machines that did not comply to the configured license availability). This has been resolved.

Applications: Shortcut pinned to desktop not removed when value "Set mandatory shortcut" was changed to "Take no action"

When the automatic shortcut placement for an application's Desktop shortcut was changed from Set mandatory shortcut to Take no action, the shortcut was not removed from the desktop at the next session logon. This has been resolved.

Shortcut placement of an application is configured at Composition > Applications, on the Properties > Shortcuts tab of the application.

Building Blocks: Creating Building Block using a command line might result in incomplete XML file and missing XBB file

In various scenarios, creating a Building Block using a command line might result in an incomplete XML file and a missing XBB file. Creating the same Building Block via the Management Console would, however, result in a correct and complete Building Block. This has been resolved.


Citrix XenApp Publishing: New or changed published application might not start after session refresh


'User A' logged on to a RES ONE Workspace session on a computer with Citrix Receiver 4.x installed.

While the RES ONE Workspace session remained active:

In the RES ONE Workspace Console at Composition > Applications:

A new application was configured with the following settings:

On the Properties > Publishing > Citrix XenApp Published Application tab of the application, Citrix XenApp Application Publishing was enabled.

Access Control for the application granted access for 'User A'.

The application was published. - or -

In the RES ONE Workspace Console at Composition > Applications:

An application existed, that was configured with the following settings:

On the Properties > Publishing > Citrix XenApp Published Application tab of the application, Citrix XenApp Application Publishing was enabled.

Access Control for the application did not grant access for 'User A'.

Access Control for the application was changed to grant access for 'User A'.

The application was republished.

In the user session of 'User A', a workspace refresh was initiated. The application became available in the session.

'User A' started the application.

In this scenario, in the user session, the application might not start. The issue occurred because the Citrix cache was not yet refreshed. This has been resolved. Now, if Citrix XenApp integration is enabled, when a workspace refresh is initiated, RES ONE Workspace also triggers a Citrix cache refresh.


Console: Drive and Port Mappings, Printers on application level might not be applied in user session


In a RES ONE Workspace 2015 Console, at Composition > Applications, an application was configured.

On the Configuration > Actions tab of the application, an action of type Drive and Port Mapping or Printer was created.

A user logged on to a RES ONE Workspace session and started the application.

In this scenario, in the user session, the Drive and Port Mapping or Printer action was not applied. This has been resolved.

Note

Actions that show this behavior need to be removed and re-added in the Console after having upgraded to RES ONE Workspace 2015 SR1.

Console: Opening Console might give error "Input past end of file"

Under rare circumstances, when opening the RES ONE Workspace Console, the following error was displayed:

Process pwrtech.exe

Procedure sharedPF8.UpdateIconCache

Error # 62

Error description Input past end of file


Console: Sorting Agents by 'Synchronization status' not working correctly after upgrade to RES ONE Workspace 2015

After installing or upgrading to RES ONE Workspace 2015, sorting Agents by Synchronization status (at Administration > Agents, on the Agents tab, or at Diagnostics > Agents Overview, on the Agents tab) did not work correctly. This has been resolved.


Console: Switching between exceptions for Workspace Containers could lead to wrong settings being displayed


An exception for a Workspace Container was added at, for example, Composition > Desktop > Background.

The Enabled/Disabled setting for Background Composition was changed for the exception.

At Composition > Desktop > Background another tab was selected, for example the Settings tab.

The changes were then preserved using the Save Settings button on the command bar.

In this scenario, on the Settings tab, the Enabled/Disabled setting for Background Composition might be displayed with the wrong option selected and highlighted, giving the impression that this global setting had also changed. This has been resolved.

Datastore: Creating a Datastore or changing password could give error when using special characters

At Setup > Datastore, when creating a Datastore or when changing the password for the database login account, if the password for the SA account and/or for the database login contained a quote ('), a double quote (") or a semicolon (;), the following error was displayed:

"Could not connect to datastore server!

<reason the connection could not be established>"


Error message: "Access Denied" error could be logged

Under rare circumstances, the following error could be logged in the common error log (at Diagnostics > Errors):

Process pwrcache.exe

Procedure modPwrCache.CheckForTransactions at line 1340

Error # -2147024891

Error description Access Denied



Files and Folders Security: Blocked file types might not be blocked in user sessions


At Security > Data > Files and Folders, on the Settings tab:

Files and Folders Security was enabled.

In the Security events section, Notify user about security events was checked.

At Security > Data > Files and Folders, on the Files and Folders tab, a Block file type was configured with the following settings:

Type of blocked resource was set to File type.

For Blocked resource *.docx was specified (as an example).

A user logged on to a RES ONE Workspace session.

In the user session, on the user's desktop, several Microsoft Word documents with file type DOCX existed.

In this scenario, in the user session, when the user opened a DOCX file that was located on the desktop, he was permitted to view the file. This has been resolved. The user now gets, as expected, a message informing him that he is not permitted to open the file.

Installation: Using parameter ADDTOWORKSPACE in combination with Relay Servers might cause Agent not to get in sync


An Agent-only or full installation of RES ONE Workspace was performed unattended, using parameters to configure the following settings:

The Agent was added to more than one Workspace Container (parameter:

ADDTOWORKSPACE).

The Agent connected to a Relay Server (multiple parameters possible).

In this scenario, until the RES Agent service was restarted, the following issues could be observed:

In the Management Console at Administration > Agents, on the the Agents tab, the Agent appeared in the list, but did not get in sync.

The Agent continuously sent transactions to the Relay Server.

Both issues have been resolved.

Locations and Devices: Zone based on Group membership might not be applied when using cached context


At Setup > Advanced Settings, the option Use cached user context if latency to AD is above: n ms was enabled.

At User Context > Locations and Devices, a Zone was configured with a rule based on Active Directory > Group membership.

A user logged on to a RES ONE Workspace session on a computer that was a member of the Active Directory Group that was configured for the Zone.

In this scenario, when the Active Directory latency threshold was exceeded, access to the Zone was not granted. This has been resolved.


Locations and Devices: Zones displayed incorrectly in overview


At User Context > Locations and Devices:

The option Show associated applications and other objects was enabled.

A Zone (e.g. "Europe") was configured and saved.

The "Europe" Zone was edited:

On the Members tab, a new member (e.g. "Italy") was created via the Create new member button.

In this scenario, when saving the "Europe" Zone again and unfolding it in the overview, the child Zone was named "Europe" as well. Also, when opening the parent Zone, it was called "Italy" and in the overview the child Zone was displayed as the parent Zone. All these issues have been resolved.

Memory Optimization: Applications that run under different context may cause performance issues


At Administration > Performance > Memory Optimization, on the Settings tab:

Memory Optimization was enabled.

Limit amount of memory per session was enabled.

Show memory usage in systemtray was enabled.

A user logged on to a RES Workspace Manager session on a computer.

In the session, an application was running under a different context than the user session, for example under SYSTEM.

In this scenario, in the user session, the Workspace Composer could send a lot of calls to the RES Service, causing the session to slow down over time. This has been resolved.

Microsoft App-V 4.x: User Settings for applications might not be applied on application start

Under certain circumstances, in a user session, when starting a Microsoft App-V 4.x application, the application's User Settings might not be loaded and the following error was logged in the User Event Log:

'Loading async User Setting "<application>" Processing error'



Microsoft App-V 5: Application could not be started in user session


At Composition > Applications, an application was configured using a Microsoft App-V application package.

The Microsoft App-V application package was created as follows:

It contained a single shortcut.

It contained a virtualized application executable.

In the AppxManifest.xml file, the TargetInPackage attribute for the Application node was set to "False".

A user logged on to a RES ONE Workspace session and double-clicked the application shortcut.

In this scenario, in the user session, the application did not start. This has been resolved.

This issue was a result of an incorrect value in the Parameters field of the application (on the Properties > General tab of the application), causing the Workspace Composer to look for the application executable outside the virtual environment. Now, when importing the Microsoft App-V package, the following dialog box will be displayed:

"Executable 'xxx' is specified in the application manifest to reside

outside the .appv package, but has been found inside. Do you want to use

the executable inside the package?"

Note

When experiencing this issue, previously configured Microsoft App-V 5 applications need to be removed and re-added in the Console after having upgraded to RES ONE Workspace 2015 SR1 or higher.

Microsoft App-V 5: Error "The application failed to launch. This may be due to a network failure." might be displayed


At Composition > Applications, a Microsoft App-V 5 application was configured with the following settings:

On the Properties > General tab of the application, Package delivery mode was set to Minimal (per user) or Full (per user).

The option Always use latest version of package was selected.

A user with a mandatory user profile logged on to a RES ONE Workspace session.

Different versions of the .appv file existed in the package folder.

The user started the application, closed it again, and logged off.

The user logged on again.

In this scenario, in the user session, when the user started the application, the following error might be displayed:

"The application failed to launch. This may be due to a network failure."



Microsoft App-V 5: RES ONE Workspace Package delivery not working when Citrix XenApp Application Publishing was enabled


In the RES ONE Workspace Console:

At Composition > Applications a Microsoft App-V 5 application was configured with the following settings:

On the Properties > General tab of the application, the Package delivery mode was set to a value other than None.

On the Properties > Publishing > Citrix XenApp Published Application tab, Citrix XenApp Application Publishing was enabled.

On the Properties > Publishing > Citrix XenApp Published Application > Settings tab, Instant Passthrough for computers not publishing this application was enabled.

In the Instant Passthrough settings window, on the Behavior tab, the option Do not passthrough if application is available on local computer was selected. - or -

At Composition > Applications a Microsoft App-V 5 application was configured with the following settings:

On the Properties > General tab of the application, the Package delivery mode was set to None.

On the Properties > Publishing > Citrix XenApp Published Application tab, Citrix XenApp Application Publishing was enabled.

On the Properties > Publishing > Citrix XenApp Published Application > Settings tab, Instant Passthrough for computers not publishing this application was enabled.

In the Instant Passthrough settings window, on the Behavior tab, the option Do not passthrough if application is available on local computer was selected.

On the Configuration > Actions tab of the application, an Action to add and publish the App-V package was configured with the following options selected:

Wait for task to finish before continuing.

Run outside App-V virtual environment.

A user logged on to a RES ONE Workspace session on a computer with the Microsoft App-V 5 client installed.

The App-V application package was not yet available on the local computer.

The user started the App-V application.

In this scenario, in the user session, instead of delivering the App-V application package to the local computer, the Workspace Composer would launch the published application from the Citrix XenApp server. This has been resolved. Now, in this scenario, when a user starts the App-V application, the Workspace Composer will invoke the configured Package delivery mode and start the application locally.


Microsoft App-V 5: 'Run application now' button might give error


At Composition > Desktop > Lockdown and Behavior, in the Workspace Composer section, the option Hide mini splash at application start was not enabled.

On the machine on which the Management Console was running:

RES ONE Workspace 2015 was installed.

The Microsoft App-V 5 client was installed.

No Microsoft App-V applications were deployed.

At Composition > Applications, a Microsoft App-V 5 application was configured with the following setting:

On the Properties > General tab of the App-V application, the Package delivery mode was set to a value other than None.

In the Edit application window of the App-V application, the Run application now button

was clicked.

In this scenario, the following error was displayed:

"Workspace Composer was not initialised correctly. Please contact your

administrator or helpdesk."


RES ONE Automation Integration: Testing settings might give error "No dispatchers discovered for this RES ONE Automation environment" after installing RES ONE Workspace 2015


In a RES ONE Workspace 2015 Console, at Setup > Integration > RES Software > RES ONE Automation, on the Settings tab:

RES ONE Automation Integration was enabled.

Use Dispatcher address list was selected for Dispatcher detection settings.

More than one Dispatcher was listed.

A RES ONE Automation Environment and valid credentials were entered.

A Console user clicked Test now.

In this scenario the following error message was displayed:

"No dispatchers discovered for this RES ONE Automation environment"



RES ONE Workspace Start Menu: Search function not available when cursor hovered over application list

In a user session, the search function in the RES ONE Workspace Start Menu (for Microsoft Windows 8.1 and Server 2012 R2) was not available when the cursor hovered over the application list in the Start Menu. This has been resolved. Now, the availability of the search function is in line with the behavior of the Microsoft Windows 7 Start Menu.

RES VDX Integration: Extended Microsoft Internet Explorer might not start correctly


At Setup > Integration > RES Software > RES VDX, RES Virtual Desktop Extender (VDX) integration was enabled.

At Composition > Applications, Microsoft Internet Explorer was configured with the following settings:

On the Properties > General tab of the application:

www.google.com was entered for Parameters (as an example).

Run as Workspace Extension was selected.

On the Properties > Shortcuts tab of the application, If managed shortcut was not used was set to Ignore.

A user logged on to 'Computer 1', on which the RES VDX Plugin was installed.

From 'Computer 1', using an RDP connection, the user logged on to a RES ONE Workspace session on 'Computer 2'.

'Computer 2' had the following configuration:

The Operating System was Microsoft Windows Server 2012 R2.

The RES VDX Engine was installed.

In the RES ONE Workspace session, the user started Microsoft Internet Explorer by (double)clicking a shortcut on the taskbar, the desktop or the Start screen.

In this scenario, in the RES ONE Workspace session, Microsoft Internet Explorer started on 'Computer

2' and opened 0.0.0.<AppID>. This has been resolved. Now, in this scenario, Microsoft Internet

Explorer will start extended from 'Computer 1' and open www.google.com.

RES VDX Integration: User might experience delay at logon when using VMware View


At Setup > Integration > RES Software > RES VDX, on the Settings tab, RES Virtual Desktop Extender (VDX) integration was enabled.

Enable VDX Engine was cleared.

A user logged on to 'computer 1', that had the following configuration:

The VMware View client was installed.

The RES VDX Plugin was not installed.

From 'computer 1', the user logged on to a RES ONE Workspace session on a VMware View Agent.

In this scenario, the user might experience a delay at logon. This has been resolved.


Security: Application security and Network security not applied in VMware View sessions based on PCoIP to a server-based Operating System

In VMware View, sessions based on PCoIP to a server-based Operating System, that were managed by RES ONE Workspace, Application security and Network security (At Security in the Management Console were not applied. This has been resolved.

Usage Tracking: Website Usage Tracking could give error "Invalid procedure call or argument"

At Setup > Usage Tracking, when Usage Tracking was enabled and the option Enable Website Usage Tracking and log web sites visited was selected, one of the following errors could appear in the common error log (at Diagnostics > Errors):

Process pfwsmgr.exe

Procedure modWebTrace.ProcessWebSiteCreated

Error # 5

Error description Invalid procedure call or argument

Or:

Process pfwsmgr.exe

Procedure modWebTrace.ProcessWebSiteClosed

Error # 5

Error description Invalid procedure call or argument


Usage Tracking: Website Usage Tracking not working when using RES ONE Workspace Shell


At Setup > Usage Tracking, Usage Tracking was enabled.

The option Enable Website Usage Tracking and log web sites visited was selected.

At Composition > Desktop > Shell, Use RES ONE Workspace Shell as the default shell was selected.

'User A' logged on to a RES ONE Workspace session and visited some websites.

A Console user opened the Usage Tracking Viewer (at Diagnostics > Usage Tracking Overview, or at Setup > Usage Tracking).

On the User tab:

All web sites for user was selected for Graph type.

'User A' was entered for User.

The view was refreshed.

In this scenario, the Usage Tracking Viewer did not show any data because no data was collected. This has been resolved.


User Profile Directory: Duplicate profile directory objects for files and folders could be configured

At Composition > Actions By Type > Files and Folders > User Profile Directory, when creating a new profile directory object, the check to determine if a folder or file name already existed was case-sensitive, causing unwanted duplicates (e.g. ‘Folder’ and ‘folder’). This has been resolved.

User Registry: Policy settings not saved if based on ADMX template


At Composition > Actions By Type > User Registry, a Policy was configured based on an ADMX file, for example for ThinDirect or Microsoft Excel 2010.

In the New/Edit registry setting window, on the Properties tab, different registry values were activated and configured.

The registry setting policy was closed, and in the Save Changes dialog, Yes was clicked.

In this scenario, when reopening the policy, the changes were not saved. This has been resolved.

User Registry: Resizing 'New/Edit registry setting' window could give error "Invalid property value"

At Composition > Actions By Type > User Registry, on the User Registry tab, when the New/Edit registry setting (based on <policy name>) window was resized below a certain threshold size, the following error was displayed:

Process pwrtech.exe

Procedure frmEditADM.Resize

Error # 380

Error description Invalid property value

This has been resolved. Now, resizing this window below the threshold size is no longer possible.

User Settings: "Per Site Privacy Actions" for Microsoft Internet Explorer not preserved correctly


At Composition > Applications, an application, for example Microsoft Internet Explorer, was configured with the following settings:

On the User Settings > Capturing tab, a user setting was configured (e.g. based on a User Settings Template for Internet Explorer 11 (Internet Browsers > Internet Explorer > 11)).

Zero Profile mode was set to Capture targeted items on application end or Capture targeted items on session end (on the User Settings > Properties tab of the application).

A user started an RES ONE Workspace session on a machine running on Microsoft Windows 7 64-bit.

In this scenario, in the user session, blank default registry values (e.g. HKCU\Software\Microsoft\Windows\CurrentVersion\Internet

Settings\P3P\History) of any type might be preserved in the application user setting, and

applied at next use, as type REG_BINARY or REG_SZ. This has been resolved.


Website Security: Exporting data from Log tab using context menu not possible

At Security > Applications > Websites, on the Log tab, when selecting the option Export to file from the context menu, the logged data would not be exported. This has been resolved.

Website Security: Icons not properly aligned on the Log tab

At Security > Applications > Websites, on the Log tab, when double-clicking a log entry and using the up and down buttons to scroll through the list, the icons in the overview were not properly aligned. This has been resolved.

Website Security: Learning mode might result in websites being blocked


At Security > Applications > Websites, on the Settings tab, Website Security was set to Learning.

At Security > Applications > Websites, on the Websites tab, a Website Rule was configured.

On the Settings tab of the New/Edit Website Rule window:

www.google.com was entered for Website (as an example).

Action was set to Deny.

Learning mode was set to Yes.

A user logged on to a RES ONE Workspace session and browsed to www.google.com.

In this scenario, in the user session, the website was blocked by Website Security and a 'Block' message was entered into the Website Security log (in the Management Console at Security > Applications > Websites, on the Log tab). This has been resolved. Now, in this scenario, when the

user browses to www.google.com, Website Security will not block the site and an 'Alert' message will be entered into the Website Security log.

Website Security: The Workspace Composer might hang when browser independent website security was configured


RES ONE Workspace was upgraded to RES ONE Workspace 2015.

At Security > Applications > Websites, browser independent website security was configured.

A user logged on to a RES ONE Workspace session and a workspace refresh was initiated.

In this scenario, in the user session, when the website security tray icon was double clicked during the workspace refresh, the Workspace Composer might hang. This has been resolved.

Website Security: The Workspace Composer might stop unexpectedly when browsing to certain websites

At Security > Applications > Websites, when browser independent website security was configured,

the Workspace Composer (pfwsmgr.exe) might stop unexpectedly when browsing to websites that internally request resources using URLs longer than 2048 characters. This has been resolved.


Website Security: Value for "# blocked websites" always remained "0"

At Security > Applications > Websites, on the Log tab, at the bottom of the window (under the overview), the value for # blocked websites always remained "0". This has been resolved.

Workspace Analysis: Application might be shown for user erroneously

Under certain circumstances, when importing a Building Block of an application with access control based on an Active Directory group, the application might be shown in the Workspace Analysis for a user, even though the user was not a member of that Active Directory group. This has been resolved.

Workspace Composer: "Automation Error" might occur


At Composition > Applications, on the Settings tab, the option Disable process interception for unmanaged shortcuts was not selected.

At Composition > Applications, on the Properties > Shortcuts tab of Application A, If managed shortcut was not used was set to Intercept new process and apply configuration.

Application A was set to auto-start at session logon:

In a RES ONE Workspace session, in the Workspace Preferences tool, on the Startup tab, Application A was put in the Start at startup of RES ONE Workspace list. - or -

At Composition > Applications, on the Properties > Settings tab of Application A, in the Options section, Autolaunch at session start was set to Voluntary or Mandatory.

In this scenario, when the user started a RES ONE Workspace session, the following error might occur:

"Automation Error"



Workspace Composer: Application in 'Learning' mode might be blocked by Managed Application Security


At Security > Applications > Managed Applications, on the Settings tab:

Managed Application Security was enabled.

Only allow authorized file hashes was selected for Additional security.

At Composition > Applications an application was configured with the following settings:

On the Security > Authorized Files tab of the application, Run this application in learning mode was selected.

In the Authorize file window of the application executable, Allow any, except denied hashes was cleared.

A user logged on to a RES ONE Workspace session and started the application.

In this scenario, in the user session, the application was blocked. Additionally, a BLOCK entry was entered into the Managed Applications log (at Security > Applications > Managed Applications, on the Log tab). This has been resolved.. Now, in this scenario, the application will start as expected and an ALERT entry will be entered into the Managed Applications log.

Workspace Composer: Application's Startup style might not be applied


At Composition > Applications, Microsoft Word (as an example) was configured with the following settings:

On the Properties > Shortcuts tab of the application, If managed shortcut was not used was set to Intercept new process and apply configuration.

On the Properties > Settings tab of the application, in the Settings section, the option Startup style of application was set to Minimized or Maximized.


In the user session, an unmanaged application shortcut existed for Microsoft Word.

In the scenario, in the user session, when the user clicked on the unmanaged application shortcut to start Microsoft Word, the application's Startup style was not applied. This has been resolved.

This behavior could also occur for Microsoft Internet Explorer and Google Chrome in user sessions running on Microsoft Windows 8 or higher, even if the option If managed shortcut was not used was set to Ignore for these applications. This has been resolved as well.

Workspace Composer: Black screen at logon on Microsoft Windows 8.1


At Composition > Desktop > Lockdown and Behavior, in the Microsoft Windows Shell section, Enable Windows 8.1 Start Menu (Windows 8.1/2012 R2) was selected.

A user logged on to a RES ONE Workspace session on a machine running Microsoft Windows 8.1.

In this scenario, in the user session, the user could get a black screen at logon instead of the desktop or Start screen. This has been resolved.


Workspace Composer: Changing default printer via Printing Preferences might not work correctly


At Composition > Actions By Type > Printers, on the Printers tab, several printers were configured with the following setting:

On the Properties tab of the printers, the option Wait for task to finish before continuing was not selected (printers will be connected asynchronously).

At Composition > Actions By Type > Printers, on the Settings tab, for Refresh printers the option on session refresh was selected.

A user logged on to a RES ONE Workspace session and changed the default printer from printer "A" to printer "B" via the Printing Preferences.

No default printer was selected for Current, only for Anywhere ("My location" column).

In this scenario, in the user session, after a workspace refresh, the default printer was set to printer "A" again. This has been resolved.

Workspace Composer: Desktop Background not always applied on Microsoft Windows Server 2012 or higher

Under certain circumstances, when a Background was configured (at Composition > Desktop > Background) and a user logged on to a session on a computer running on Microsoft Windows Server 2012 or higher, the background was not applied. This has been resolved.

Workspace Composer: Enabling tracing could cause delay at logon

Under certain circumstances, when tracing was enabled, users could experience a significant delay during logon. This has been resolved.

Note

For information about how to enable tracing, please refer to the RES ONE Workspace Administration Guide.

Workspace Composer: Environment variables might not be resolved correctly when used in Zone rules


At User Context > Locations and Devices, a Zone was configured.

On the Rules tab of the Zone, a rule was based on, for example, Active Directory > User property.

The value of the Computer property contained a system environment variable.

A user logged on to a RES ONE Workspace session that qualified for the Zone.

In this scenario, in the user session, the environment variable was not resolved for the Zone and access to the Zone was not granted. This has been resolved.


Workspace Composer: Error "Maximum number of licenses reached" might be logged unexpectedly in User Event Log

When logging on to a RES ONE Workspace session, if the RES Service was not running, the following message might be logged unexpectedly in the User Event Log:

"Maximum number of licenses reached"


Workspace Composer: Folder Redirection might cause white icons on desktop


A user's Desktop folder was redirected, for example by configuring a redirection at Composition > Actions By Type > Files and Folders, on the Redirections tab, with the following settings:

On the Properties tab of the New/Edit folder redirection window:

Windows folder was set to Desktop.

H:\Windows\Desktop was entered for Root path, where H:\ was the user's homedrive.

On 'Computer 1' the registry value LocalCachePath was set to, for example, D:\RES\Cache. This registry value was not set on 'Computer 2'.

The user logged on to a RES ONE Workspace session on 'Computer 1'.

The user then also logged on to a RES ONE Workspace session on 'Computer 2'.

In this scenario, in the user session on 'Computer 1', white icons were displayed for managed shortcuts on the desktop. This has been resolved.

Workspace Composer: Hidden PowerShell script might not be executed when configured as action for Microsoft App-V 5 application


At Composition > Applications, a Microsoft App-V 5 application was configured with the following settings:

On the Configuration > Actions tab of the application, an Execute Command was configured.

On the Properties tab of the New/Edit Command window:

PowerShell.exe %script% was entered for Command line.

Run using Dynamic Privileges was enabled.

Run hidden was enabled.

Run outside App-V virtual environment was enabled.

On the Script tab of the New/Edit Command window, a PowerShell script was entered.

A user logged on to a computer with the Microsoft App-V 5 client installed, and started the application.

In this scenario, in the user session, the PowerShell script might not be executed. This has been resolved.


Workspace Composer: igstub.exe process might terminate unexpectedly

In rare circumstances, the igstub.exe process might terminate unexpectedly. This has been resolved.

Workspace Composer: Logging on to Microsoft Windows XP could result in empty desktop, no taskbar after upgrading to RES ONE Workspace 2015 Revision 6

After upgrading to RES ONE Workspace 2015 Revision 6, if the Workspace Composer was configured to run automatically (at Administration > Agents) and a user logged on to a RES ONE Workspace session on a computer running Microsoft Windows XP, the explorer shell did not start and the session had an empty desktop and no taskbar. This has been resolved.

Workspace Composer: Microsoft Outlook might not start

Outlook might not start for Active Directory users that were entered in Active Directory with a

sAMAccountName property that contained invalid characters, such as "\/[]:;|=,+*?<>@". This has been resolved.

Workspace Composer: Microsoft Windows error might be displayed when starting an intercepted unmanaged application


At Composition > Applications, on the Settings tab, the option Disable process interception for unmanaged shortcuts was not selected.

At Composition > Applications, application "A" was configured with the following settings:

On the Properties > Shortcuts tab of the application, If managed shortcut was not used was set to Intercept new process and apply configuration.


The user clicked an unmanaged application shortcut for application "A". The application could not start, for instance, because of one of these reasons:

Seat/Concurrent licenses were not available

The application was disabled

Required connection state did not match

Memory usage limit was reached

Maximum number of instances was reached

Time Restrictions were not met

In this scenario, in the user session, after the user closed the RES ONE Workspace message about the application not being available, the following Microsoft Windows error message might be displayed:

"Windows cannot access the specified device, path, or file. You may not

have the appropriate permission to access the item."



Workspace Composer: Microsoft Windows options "Sleep" and "Hibernate" not available in user sessions with RES ONE Workspace Shell


At Composition > Desktop > Shell, Use RES ONE Workspace Shell as the default shell was selected.

At Composition > Desktop > Lockdown and Behavior, in the RES ONE Workspace Shell section, the option Show "Hibernate" in "Exit" dialog on workstations was enabled.

A machine running Microsoft Windows 8 or 8.1 was configured to have the Shutdown settings "Sleep" and "Hibernate" available.

A user logged on to a RES ONE Workspace session on the machine and clicked on Exit in the Start Menu. The Exit dialog opened.

In this scenario, in the user session, the options "Sleep" and "Hibernate" were not available in the Exit dialog. This has been resolved.

Workspace Composer: Option "skip unmanaged printers" might not work correctly when logging off or refreshing


At Composition > Actions By Type > Printers, on the Settings tab, for Disconnect network printers the option skip unmanaged printers was selected.

At Composition > User Settings, on the User Settings tab, a User Setting was configured for

registry tree HKCU\Printers\Connections.

A user logged on to a RES ONE Workspace session in which both managed and unmanaged printers were available.

An unmanaged printer was set as default printer.

The user logged off or a workspace refresh was initiated.

In this scenario, in the user session, when logging on again/after the workspace refresh, the unmanaged default printer might be identified as a managed printer. This has been resolved.


Workspace Composer: Option "skip unmanaged printers" not working correctly in combination with registry value "ForcePrinterConnections=yes"


At Composition > Actions By Type > Printers, on the Settings tab, for Disconnect network printers the following options were selected:

before logging off

before logging on or on reconnect

skip unmanaged printers.

At Composition > User Settings, on the User Settings tab, a User Setting was configured for

registry tree HKCU\Printers\Connections.

A user logged on to a RES ONE Workspace session on a machine on which the registry value

ForcePrinterConnections=yes was set (key: HKLM\Software\RES\Workspace

Manager (32-bit) / HKLM\Software\Wow6432Node\RES\Workspace Manager (64-bit)).

In the user session, both managed and unmanaged printers were available.

The user logged off and on again.

In this scenario, in the user session, when logging off, all network printers were disconnected, including the unmanaged printers. This has been resolved.

Workspace Composer: Removable Disks Security might block fixed devices erroneously

In rare cases, when Removable Disks Security was enabled (at Security > Data > Removable Disks), it might block fixed local drives erroneously. This has been resolved.

Workspace Composer: RES Service not restarted correctly after rebooting machine running RES Workspace Manager 2014 SR3 or higher

When rebooting a machine on which RES Workspace Manager 2014 SR3 or higher was running, the following might happen:

the RES service was not restarted correctly;

a message was displayed to the user, informing him that no license was available, although enough licenses were available.



Workspace Composer: Session on Citrix virtual desktop could appear to hang at logon when Citrix Time Zone Management was used


Citrix XenDesktop 7.x or XenApp 6.5 was configured for use as a non-persistent VDI environment.

A Citrix policy was configured to set 'Time Zone Control' to 'Use local time of client'.

A user logged on to a computer with Citrix Receiver installed.

The time zone on the local computer was configured to be earlier (for example UTC-7:00) than the original time zone on the Citrix virtual desktops (for example UTC-5:00).

From the session, the user logged on to a RES ONE Workspace session on a Citrix virtual desktop.

In this scenario, logging on to the Citrix virtual desktop would proceed until the RES ONE Workspace splash showed progress at 100%, after which the session appeared to hang. This has been resolved.

Workspace Composer: Starting application might give "Application can't be started" error


At Composition > Applications, an application was configured with the following settings:

On the Properties > General tab of the application, the Command line contained a

wildcard and one or more spaces. For example: C:\Program Files

(x86)\Mozilla*\firefox.exe.


In this scenario, in the user session, when the user started the application, the following error was displayed:

"Application can't be started"


Workspace Composer: Starting Microsoft TS RemoteApp could give error "File not found: wfapi.dll"

After installing or upgrading to RES ONE Workspace 2015, when a user started a Microsoft TS RemoteApp, the following error could appear in the common error log (at Diagnostics > Errors):

Process pfwsmgr.exe

Procedure VCWriteData

Error # 53

Error description File not found: wfapi.dll



Workspace Composer: Starting unmanaged Infor applications not successful

In a RES ONE Workspace session, starting an unmanaged Infor application could cause unexpected errors and trigger the application to launch MSI in repair mode. This has been resolved. RES ONE Workspace now detects the use of Infor applications and allows starting these applications successfully.

Workspace Composer: Tiles for Microsoft Internet Explorer might disappear if more than one tile was pinned to Start Screen


At Composition > Applications:

An application for Microsoft Internet Explorer was configured with the following settings:


'Internet Explorer 1' was filled in for Title (as an example).

google.com was filled in for Parameters (as an example).

Another application for Microsoft Internet Explorer was configured with the following settings:


'Internet Explorer 2' was filled in for Title (as an example).

wikipedia.org was filled in for Parameters (as an example).

A user logged on to a RES ONE Workspace session on a computer running on Windows 8.1 or

Server 2012 R2, that had the registry value EnableMultipleIE set to Yes.

The user pinned tiles to the Windows Start Screen for both the Internet Explorer 1 and the Internet Explorer 2 applications.

The user logged off from the session

In this scenario, when the user logged on again, the pinned tiles for Internet Explorer had disappeared from the Start Screen. This has been resolved.


Workspace Composer: Usage Tracking might not track websites visited with Mozilla Firefox


At Composition > Applications Mozilla Firefox was configured in two managed applications.

On the Properties > General tab of the applications, for Title:

"Firefox A" was entered for one application (as an example).

"Firefox B" was entered for the other application (as an example).

For both applications, no URL was entered for Parameters.

At Setup > Usage Tracking:

Usage Tracking was enabled.

Enable Website Usage Tracking and log web sites visited was selected

A user logged on to a RES ONE Workspace session, started "Firefox A", but did not visit any websites.

The user started "Firefox B" and, again, did not visit any websites.

The user closed "Firefox A".

The user started browsing websites with "Firefox B".

In this scenario, in the user session, Usage Tracking would not track the websites that were visited using "Firefox B". This has been resolved.


Workspace Composer: User Account Control (UAC) prompt might be displayed even though Dynamic Privileges were set


A domain contained a Microsoft Windows Server 2012 R2 domain controller.

The domain account for 'User A' was a member of the local administrators group and multiple other groups.

In the Management Console:

At Compositions > Actions By Type > Execute Command, on the Commands tab, or at Composition > Applications, on the Configuration > Actions tab of an application, an (execute) Command was configured with the following settings:

On the Properties tab of the Command:

%script% was entered for Command line.

Run using Dynamic Privileges was enabled.

On the Script tab of the Command, a script that contained an executable that can make

changes to the system (for example regedit.exe or msconfig.exe) was entered. - or -

At Composition > Applications, an application was configured with the following settings:

On the Properties > General tab of the application, for Command line, an executable

that can make changes to the system (for example regedit.exe or msconfig.exe) was specified.

On the Security > Dynamic Privileges tab of the application, Add administrator rights was selected for Access token.

'User A' logged on to a RES ONE Workspace session on a computer that had User Account Control configured to a setting other than 'Never notify'.

In this scenario, in the user session, when the command was executed or the application was started, a User Account Control prompt might be displayed to the user. If the user then selected 'Yes', indicating that the changes were allowed, in some cases the following error was displayed:

"Windows cannot access the specified device, path, or file. You may not

have the appropriate permissions to access the item."

This has been resolved. Now, in this scenario, the command will be executed or the application will be started, without a User Account Control prompt being displayed.


Workspace Composer: User-pinned tiles on Start screen might disappear if session ended without proper logoff


At Composition > Applications, an application (for example Notepad):

was configured as a managed application, with Pin to Start set to Take no action (on the Properties > Shortcuts tab of the application, in the Tiles section). - or -

was not configured as a managed application.

A user logged on to a RES ONE Workspace session on a computer running Microsoft Windows 8.1 or Server 2012 R2.

The user pinned a tile to the Start screen for Notepad.

The session ended without a proper logoff, for example because of loss of power.

In this scenario, when the user logged on again, the tile for Notepad was no longer pinned to the Start screen. This has been resolved.

Workspace Containers: Closing the confirmation dialog box with [x] resulted in deleting the exception for a Workspace Container

Throughout the Console, if an exception for a Workspace Container was deleted, but the confirmation dialog box was closed by clicking [x], the exception was deleted instead of canceling the delete action. This has been resolved.


1.6 Relay Servers: Enhancements and Improvements

Relay Servers: Default certificate key length increased to 1024

The default certificate key length for Relay Servers has been increased to 1024. Previously, the default key length was 512.

A key length of at least 1024 is necessary when running RES ONE Workspace sessions on Microsoft Windows 10. On Microsoft Windows 8 / 8.1 / 2012 (R2) and earlier, a key length of 512 suffices.

Note

For this enhancement to work correctly, Relay Server 2015 SR1 or higher must be installed.

Relay Servers: Improved performance by reducing disk I/O

The performance of Relay Servers has been improved by reducing the number of disk I/O operations.

Note


Relay Servers: Improved performance when using Usage Tracking

When using Relay Servers in combination with the feature Usage Tracking, then the performance of saving Usage Tracking data in the Datastore has been improved.

Note



1.7 Relay Servers: Resolved Issues

Relay Servers: Cascaded Relay Servers might become unresponsive

Under rare circumstances, when Relay Servers were used in cascade, i.e. some Relay Servers connected to other Relay Servers instead of directly to the Datastore, Relay Servers that were not connected to the Datastore directly might become unresponsive. This has been resolved.

Note

For this resolved issue to work correctly, Relay Server 2015 SR1 or higher must be installed.

Relay Servers: Configuring connection to FIPS-encrypted Datastore sometimes not successful

When using the command line Relayserver.exe /configfile=<file> /silent to connect a Relay Server to a Datastore that used FIPS-compliant security algorithms, the configuration might not be applied and the Windows Event Log contained the following error for the Relay Server:

"Object reference not set to an instance of an object."


Note

For this resolved issue to work correctly, Relay Server 2015 SR1 or higher must be installed.

Relay Servers: Option /silent in combination with /configfile might cause an error

When using the command line RelayServer.exe /configfile=<file> /silent to connect a Relay Server, the following error might occur:

"Invalid configuration found using configfile '<file>'. Starting service

with last known configuration."


Documents

RES ONE Workspace 2015 SR1 Release Notes · Release Notes 9.10.1.0 . ii Disclaimer Whilst every care has been taken by RES to ensure that the information contained in this document