Ribbon
Home tab
The Home tab contains the following controls:
Connect. Connects administration console to the specified infrastructure server. In the New Infrastructure Server Connection dialog, specify:
-
Infrastructure server name. Name of the infrastructure server you want to connect to.
-
Administration port. Port on which you want to connect to the infrastructure service. Default value of 8284 is pre-populated.
Disconnect. Disconnects administration console from the current infrastructure service. This lets the administrator manage multiple infrastructure services from a single console, by disconnecting from one and connecting to another.
Configuration set. Switches from one Workspace Environment Management (WEM) site (configuration set) to another.
Create. Opens the Create configuration set window. Allows you to configure multiple WEM sites (configuration sets).
-
Name. Site (configuration set) name as it appears in the configuration set list in the Ribbon.
-
Description. Site (configuration set) description as it appears in the site edition window.
-
Site State. Toggles whether the site (configuration set) is Enabled or Disabled. When Disabled, the WEM Agents cannot connect to the site (configuration set).
Edit. Opens the Edit configuration set window, with similar options to the Create configuration set window.
Delete. Deletes the site (configuration set). You cannot delete “Default site” because it is required for WEM to function. You can, however, rename it.
Refresh. Refreshes the site (configuration set) list.
Note:
The list does not automatically refresh when sites are created from different administration consoles.
Backup. Opens the Backup wizard to save a backup copy of your current configuration to the WEM administration console machine. You can back up actions, settings, security settings, and Active Directory (AD) objects.
-
Actions. Backs up selected WEM actions. Each type of action is exported as a separate XML file.
-
Settings. Backs up selected WEM settings. Each type of setting is exported as a separate XML file.
-
Security Settings. Backs up all settings present on the Security tab. Each type of rule is exported as a separate XML file. You can back up the following items associated with a configuration set:
- AppLocker Rule Settings
- Privilege Elevation Settings
-
AD objects. Backs up the users, computers, groups, and organizational units that WEM manages. The Backup wizard lets you specify which type of AD objects to back up. There are two types of AD objects:
- Users. Single users and user groups
- Machines. Single machines, machine groups, and OUs
-
Configuration set. Backs up the WEM configuration set you selected. Each type of configuration set is exported as a separate XML file. You can back up only the current configuration set. You can back up the following items associated with a configuration set:
- Actions
- AppLockers
- Assignments (related to actions and action groups)
- Filters
- Users
- Settings (WEM settings)
You cannot back up the following:
- AD objects related to machines (single machines, machine groups, and OUs)
- Monitoring data (statistics and reports)
- Agents registered with the configuration set
Restore. Opens the Restore wizard to revert to a previously backed up version of your WEM service configuration. When prompted, select the applicable folder that contains the backup copies (.XML files).
-
Security Settings. Restores all settings present on the Security tab. The settings in the backup files replace the existing settings in your current configuration set. When you switch to or refresh the Security tab, invalid application security rules are detected. Those rules are automatically deleted. Deleted rules are listed in a report that you can export if needed. The Restore wizard lets you select what to restore:
- AppLocker Rule Settings
-
Privilege Elevation Settings
- Overwrite Existing Settings. Controls whether to overwrite existing privilege elevation settings when there are conflicts.
In the Confirm Application Security Rule Assignment dialog, select Yes or No to indicate how you want the Restore wizard to handle application security rule assignments:
- If you select Yes, restore attempts to restore rule assignments to users and user groups in your current site. Reassignment succeeds only if the backed up users or groups are present in your current site or AD. Any mismatched rules are restored but remain unassigned, and they are listed in a report dialog which you can export in CSV format.
- If you select No, all rules in the backup are restored without being assigned to users and user groups in your site.
-
AD objects. Restores the backed up AD objects to the existing site. The Restore wizard gives you granular control over AD objects to be imported. On the Select the AD objects you want to restore page, you can specify which AD objects you want to restore and whether to overwrite (replace) existing WEM AD objects.
-
Configuration set. Restores the backed up configuration set to WEM. You can restore only one configuration set at a time. It might take some time for the WEM administration console to reflect the configuration set you restored. To view the restored configuration set, select it from the Configuration set menu in the Ribbon. When restoring a configuration set, WEM automatically renames it to
<configuration set name>_1if a configuration set with the same name already exists.
Note:
- Restored actions are added to existing site actions.
- Restored settings replace existing site settings.
- Restored AD objects are added to or replace existing site AD objects, depending on whether you selected Overwrite mode in the AD objects page of the Restore wizard.
- If you selected Overwrite mode, all existing AD objects are deleted before the restore process starts.
Migrate. Opens the Migrate wizard to migrate a zip backup of your Group Policy Objects (GPOs) to WEM.
Important:
- The Migrate wizard migrates only the settings (GPOs) that WEM supports.
- We recommend that you back up your existing settings before you start the migration process.
We recommend that you perform the following steps to back up your GPOs:
- Open the Group Policy Management Console.
- In the Group Policy Management window, right-click the GPO you want to back up and then select Back Up.
- In the Back Up Group Policy Object window, specify the location where you want to save the backup. Optionally, you can give the backup a description.
- Click Back Up to start the backup and then click OK.
- Navigate to the backup folder and then compress it into a zip file.
Note:
WEM also supports migrating zip files that contain multiple GPO backup folders.
After you back up your GPOs successfully, click Migrate to migrate your GPOs to WEM. On the File to Migrate page, click Browse and then navigate to the applicable file.
- Overwrite. Overwrites existing WEM settings (GPOs) when there are conflicts.
-
Convert. Converts your GPOs to XML files suitable for import to WEM. Select this option if you want to have granular control over settings to be imported. After the conversion completes successfully, use the Restore wizard to manually import the XML files.
Note:
You can name the output folder, but you cannot specify the names for the files to be saved.
About tab
The About tab contains the following controls:
Configure License Server. Allows you to specify the address of your Citrix License Server, without which the administration console does not let you modify any settings. Alternatively, you can use the Licensing tab in the Infrastructure Services Configuration utility to specify these credentials. Citrix License Server information is stored in the same location in the database in both cases.
Get Help. Opens the Citrix Product Documentation website in a web browser window.
Options. Opens the Administration Console Options dialog. These options are specific to this local instance of the administration console.
-
Auto Admin Logon. If enabled, the administration console automatically connects to the last infrastructure service it connected to at startup.
-
Enable Debug Mode. Enables verbose logging for the administration console. Logs are created in the root of the current user “Users” folder.
-
Console Skin. Allows you to select from various skins for the administration console only.
-
Port Number. Allows you to customize the port on which the administration console connects to the infrastructure service. This port must match the port configured in the infrastructure services configuration.
About. Lists the current version of the administration console and licensing (license type, registration, and count) and legal information.