I have a question about the ongoing maintenance of the installs. If you are patching say Visio or Project, do you need to "apply" your redirection rules, or keep them applied somehow on the base image for patching to work?
Hello Jim, thanks for the detailed Video. I have followed the steps in this video but when i try to apply and test redirect rule, it says conflict detected and hence redirect registry keys are not created. Can you provide any direction on how do i troubleshoot this issue further.
Hi Jim. Great work, thanks for sharing ! I used it to manage Office 2019. I only had to tweak a few things, but it's working perfectly. I have a question regarding Office updates... Will I have to recreate the rules files after applying updates to Office on my golden VM, or do the files and registry keys referenced in the rules always stay the same ? How do you manage this situation ? Thanks again !
Files and registry are *relatively* static, but no guarantees are given by the product team or anyone else about keeping those things constant. So it's up to you really, many people find you can reuse with relative impunity and redo if it breaks, or you can go for certainty and redo rules each time. It depends on your time availability and the risk profile of your workload. If it was me, I'd keep them the same, but test new Office releases with a small group of users and redo if they have issues.
Hi Jim - this is a great video. We are working in an RDSH environment where we have a pretty good lockdown in place. I am trying to figure out a way to hide powershell.exe but not block its functionality. Every time I try this with fslogix I get a warning from the software this is a bad idea. :) And the warning makes sense. :) I have a policy in place to block the cmd. Any ideas?
Great video Jim, I have an off topic question: lets say a particular app you want masked out but also want to stop or prevent a service or process associated with the apps from even running in a user's session....can App Masking do that type of thing?
Great tutorial Jim! Just wondered if there was a way of automating the system wide apply of the rules during installation. I am automating the image creation so it would be useful to do this in a scripted fashion, rather than logging on and doing this via a GUI.
So unfortunately there is a manual step which can't be automated here, I'd just use the existing files you created though and test after image creation. I think I explain this in the video.
Jim Moyle thanks for the confirmation. It was as I expected but wasn’t sure whether there might be a work around. At the moment the build pipeline pauses for someone to log in and apply the rules manually. Will stick with that for now. Thanks again!
@@laughtonsm You don't need to apply the rules manually, once you have the files, just copy them to the right directory. Creating the files that will apply everywhere only needs to happen once
Jim Moyle OK, so redirection rules don’t have to be applied system wide during the application install? I thought this was a required step, as this is how it was detailed towards the end of your video. I’ll try this again just copying all the rules files at the end of the build and see what effect this has. I’m sure I tried this and all of Office just ended up broken, but will have another look.
@@laughtonsm If you build each VM individually you are right you need to bugger about for each one. If you have a golden image and provision from that you just need the files.
Hi Jim, Thank you for video, it's very helpful. I have question for you. In my case, I have two versions Viso - Standard and Professional. Do you have an idea how to mask only Visio Professional and keep Visio Standard?
Thank you for the answer. The problem is installing Visio Standard and Professional on a single machine. When I try install Visio Standard, I got error that Visio Standard cannot be installed with Visio Professional.
Yes, I hided Visio pro and redirected but I noticed that fslogix doesn’t redirect registry keys on HKLM\Software\Wow6432Node. Of course before installation I applied rules to system. I try to install Visio 2013 32-bit.
@@ArturChojnacki92 If you are noticing the wizard is not picking up all the application components, then you need to add manual rules to make sure you redirect those bits.
Hello, Jim, I have read your articles about FSL App Masking Advanced Hiding of Project and Visio and asked myself if I can use this method to install Office 2019 Pro & Standard as well. Or do you have any other idea how I can manage to run both Office versions Pro & Std together? Thanks and greetings Thomas
Thomas- We are running fslogix in an RDSH - Citrix CVAD W2k19 environment. We have the full office pro installed with Visio and Project. We are using app masking rules for these executables and then using AD application security groups to allow access. Because we are using Citrix we have access to Citrix WEM. However, you could do something similar with logon scripts based on AD group copy a shortcut to the desktop. I hope this helps. :)
@@peerplaut I'm looking to do something very similar for 365/ProPlus, with Office installed on the PVS server image with different components masked out. Since we also have GSuite and our users are being pushed to it as a preferred alternative to Office apps, components like MSAccess and Publisher will be hidden from most but not all users even though they are licensed to use them. App-V is available to us too but I don't know that it'll be helpful (vs more complex) for this use case.
Awesome Job Jim. Thank you for sharing. That make my day!! Kudos
Awesome Job Jim! :-) Thanks for sharing your knowledge. I just added the Startmenu Icon into the Visio (or Project) Hiding-Rule.
I have a question about the ongoing maintenance of the installs. If you are patching say Visio or Project, do you need to "apply" your redirection rules, or keep them applied somehow on the base image for patching to work?
Patch the app then re-apply the rules. If the app changes too much, you'll have to remake the rules.
Hello Jim, thanks for the detailed Video. I have followed the steps in this video but when i try to apply and test redirect rule, it says conflict detected and hence redirect registry keys are not created. Can you provide any direction on how do i troubleshoot this issue further.
Hi Jim. Great work, thanks for sharing ! I used it to manage Office 2019. I only had to tweak a few things, but it's working perfectly. I have a question regarding Office updates... Will I have to recreate the rules files after applying updates to Office on my golden VM, or do the files and registry keys referenced in the rules always stay the same ?
How do you manage this situation ?
Thanks again !
Files and registry are *relatively* static, but no guarantees are given by the product team or anyone else about keeping those things constant. So it's up to you really, many people find you can reuse with relative impunity and redo if it breaks, or you can go for certainty and redo rules each time. It depends on your time availability and the risk profile of your workload.
If it was me, I'd keep them the same, but test new Office releases with a small group of users and redo if they have issues.
@@JimMoyle Thanks for your reply and advice. I'll probably go that way :)
Hi Jim - this is a great video. We are working in an RDSH environment where we have a pretty good lockdown in place. I am trying to figure out a way to hide powershell.exe but not block its functionality. Every time I try this with fslogix I get a warning from the software this is a bad idea. :) And the warning makes sense. :) I have a policy in place to block the cmd. Any ideas?
Great video Jim, I have an off topic question: lets say a particular app you want masked out but also want to stop or prevent a service or process associated with the apps from even running in a user's session....can App Masking do that type of thing?
I'm afraid not.
Hi Jim, hope all is well
I got an issue with AppMasking rules not applying where Unidesk/AppLayering is.. any clue?
Many thanks in advance :)
social.msdn.microsoft.com/Forums/windows/en-US/660959a4-f9a9-486b-8a0d-dec3eba549e3/using-citrix-app-layering-unidesk-with-fslogix?forum=FSLogix
Great tutorial Jim! Just wondered if there was a way of automating the system wide apply of the rules during installation. I am automating the image creation so it would be useful to do this in a scripted fashion, rather than logging on and doing this via a GUI.
So unfortunately there is a manual step which can't be automated here, I'd just use the existing files you created though and test after image creation. I think I explain this in the video.
Jim Moyle thanks for the confirmation. It was as I expected but wasn’t sure whether there might be a work around. At the moment the build pipeline pauses for someone to log in and apply the rules manually. Will stick with that for now. Thanks again!
@@laughtonsm You don't need to apply the rules manually, once you have the files, just copy them to the right directory. Creating the files that will apply everywhere only needs to happen once
Jim Moyle OK, so redirection rules don’t have to be applied system wide during the application install? I thought this was a required step, as this is how it was detailed towards the end of your video. I’ll try this again just copying all the rules files at the end of the build and see what effect this has. I’m sure I tried this and all of Office just ended up broken, but will have another look.
@@laughtonsm If you build each VM individually you are right you need to bugger about for each one. If you have a golden image and provision from that you just need the files.
Hi Jim, Thank you for video, it's very helpful. I have question for you. In my case, I have two versions Viso - Standard and Professional. Do you have an idea how to mask only Visio Professional and keep Visio Standard?
You can use the same method, however you *must* install the programs to their individual directories to enable this.
Thank you for the answer. The problem is installing Visio Standard and Professional on a single machine. When I try install Visio Standard, I got error that Visio Standard cannot be installed with Visio Professional.
@@ArturChojnacki92 you need to redirect and hide pro and have the rules in place before you install standard
Yes, I hided Visio pro and redirected but I noticed that fslogix doesn’t redirect registry keys on HKLM\Software\Wow6432Node. Of course before installation I applied rules to system. I try to install Visio 2013 32-bit.
@@ArturChojnacki92 If you are noticing the wizard is not picking up all the application components, then you need to add manual rules to make sure you redirect those bits.
Hello, Jim,
I have read your articles about FSL App Masking Advanced Hiding of Project and Visio and asked myself if I can use this method to install Office 2019 Pro & Standard as well.
Or do you have any other idea how I can manage to run both Office versions Pro & Std together?
Thanks and greetings
Thomas
Whilst it's possible, to be honest there's probably better ways of coping with this need, like multiple images or publishing apps into the image.
Thomas- We are running fslogix in an RDSH - Citrix CVAD W2k19 environment. We have the full office pro installed with Visio and Project. We are using app masking rules for these executables and then using AD application security groups to allow access. Because we are using Citrix we have access to Citrix WEM. However, you could do something similar with logon scripts based on AD group copy a shortcut to the desktop. I hope this helps. :)
@@peerplaut I'm looking to do something very similar for 365/ProPlus, with Office installed on the PVS server image with different components masked out. Since we also have GSuite and our users are being pushed to it as a preferred alternative to Office apps, components like MSAccess and Publisher will be hidden from most but not all users even though they are licensed to use them. App-V is available to us too but I don't know that it'll be helpful (vs more complex) for this use case.
@@srstelzer App masking should work.
Davis Ronald Lee Elizabeth Lee Brenda