WEM Administration Console Version 1906 – Part 4 (Administration & Monitoring)

Update of the article to the Workspace Environment Management Version 1906.

In the fourth (and last) part of the series about the WEM Administration Console, I give you an insight into the menu items Administration & Monitoring.

Administration

These settings control administrative functions such as delegation, user statistics, and change logging.

Administrators

In the main window of Configured Administrators List you see a list of the configured administrators with their permission level (Full Access, Read Only or Granular Access) to the Configuration Sets.

At the bottom of the window you have the buttons Refresh (Refresh the list), Add (Add a new Group or User), Edit (Editing existing entries) & Delete (Delete the selected entry).

With Add and Edit you get the following window:

• Name
  • The Down-Level Logon Name (deyda.loc\Manuel) or User Principal Name (Manuel@deyda.loc) of the user or group you are currently add/edit.
• Description
  • Additional information about the user or group.
• Global Administrator
  • Select to specify that the selected user/group is a Global Administrator. Clear to specify that the selected user/group is a Site Administrator.
  • Global Administrators have their permissions applied to all sites (configuration sets). Site Administrators have their permissions configured on a per-site basis.
    • If the Global Administrator is cleared, the following controls are enabled.
      • Site Name
        • All Workspace Environment Management sites (configuration sets) belonging to the database this infrastructure service is connected to.
      • Enabled
        • Select to enable this administrator for the specified Workspace Environment Management site (configuration set). When disabled, the user/group is not considered to be an administrator for that site and cannot access it.
      • Permissions
        • Select a permission level for the selected user/group for each Workspace Environment Management site (configuration set) attached to this infrastructure service.
• Permissions
  • This allows you to specify one of the following levels of access to the selected user/group. Administrators can only view settings which they have access to.
    • Full Access 
      • Administrators have full control over every aspect of the specified sites (configuration sets).
      • Only Global Administrators with Full Access can add/delete Workspace Environment Management administrators.
      • Only Global Full Access and Global Read Only administrators can see the Administration tab.
    • Read Only 
      • Administrators can view the entire console, but cannot modify any settings at all.
    • Granular Access
      • Indicates that the administrator has one or more of the following permission sets
        • Action Creators
          • Can create and manage actions.
        • Action Managers
          • Can create, manage, and assign actions. They cannot edit or delete actions.
        • Filter Managers
          • Can create and manage conditions and rules. Rules that are in use on assigned applications cannot be edited or deleted by Filter Managers.
        • Assignment Managers
          • Can assign resources to users or groups.
        • System Utilities Managers
          • Can manage the System Utilities settings (CPU, RAM & process management).
        • Policies and Profiles Managers
          • Can manage Policies and Profiles settings.
        • Configured Users Managers
          • Can add, edit & remove users or groups from the configured users list. Users or groups with assigned actions cannot be edited or deleted by Configured Users Managers.
        • Transformer Managers
          • Can manage Transformer settings.
        • Advanced Settings Managers
          • Can manage advanced settings (enabling or disabling action processing, cleanup actions and so on).
        • Security Managers
          • Can access all controls in the Security tab.
• State
  • This controls whether the selected user/group is enabled or disabled.
  • When disabled, the user/group is not considered to be a Workspace Environment Management administrator and cannot use the administration console.
• Type
  • This field is read only and indicates whether the selected entity is a user or a group.

Users

This page displays a summary of users whose agent hosts have connected to the database.

In Users Summary you see a count of total users who have reserved a Workspace Environment Management license, for both the current site (configuration set) and all sites (configuration sets). It also displays a count of new users for the last 24 hours and for the last month.

Users History displays connection information for all the users associated with the current site (configuration set), including the last connection time, the name of the machine from which they last connected, the session agent type (UI or CMD) & WEM Agent version.

Agents

This page displays statistics about the agents in your Workspace Environment Management installation.

Statistics

The Agents Summary displays a count of total agents who have reserved a Workspace Environment Management license, for both the current site and all sites (configuration sets). It also reports agents added in the last 24 hours and in the last month.

In Agents History you see the connection information for all agents registered with this configuration set, including the last connection time, the name of the device from which they last connected and the agent version.

In the Synchronization State column, the following icons indicate when the agent last uploaded statistics to the infrastructure service (These icons do not indicate that the agent cache is synchronized with the WEM database).

Since Version 1811 you have the Profile Management Health Status column, here you can view the health status of Profile Management in your deployment.

Profile Management health status performs automated status checks on your agent hosts to determine whether Profile Management is configured optimally. You can view the results of these checks to identify specific issues from the output file on each agent host

%systemroot%\temp \UpmConfigCheckOutput.xml

The feature performs status checks every day or each time the WEM agent host service starts. Each status check returns a status. To view the most recent status, click Refresh.

The icon in the Profile Management Health Status column provides general information about the health status of Profile Management:

• Good (check mark icon)
  • Indicates that Profile Management is in good shape.
• Warning (triangle exclamation point icon)
  • Informs about a suboptimal state of Profile Management. The suboptimal settings might affect the user experience with Profile Management in your deployment.
  • This status does not necessarily warrant action on your part.
• Error (X icon)
  • Indicates that Profile Management is configured incorrectly, which causes Profile Management not to function properly.
• Unavailable (question mark icon)
  • Appears when Profile Management is not found, or not enabled, or the WEM agent is not the latest version.

Options in the context menu:

• Refresh Cache
  • Triggers a refresh of the agent offline cache database. To optimize Windows performance, WEM has an offline cache database that includes a per-machine cache that stores non-user parameters (Microsoft USV, Citrix Profile Management), and a per-user cache that stores user parameters (assigned actions, start menu settings, etc.).
• Refresh Agent Host Settings
  • Triggers an immediate update of the WEM agent host settings (Machine based settings such as Environmental Settings).
• Refresh Workspace Agent(s)
  • Applies the settings to the agent(s) running on your machine(s) (User based settings such as Actions).
• Upload Statistics
  • Uploads statistics to the infrastructure service.
• Reset Profile Management Settings
  • Clears the registry cache and updates the associated configuration settings. If Profile Management Settings are not applied to your agent, click Reset Profile Management Settings, and then click Refresh

• Reset Vmware Persona Settings
  • Clears the registry cache and updates the associated configuration settings.
• Reset Microsoft Usv Settings
  • Clears the registry cache and updates the associated configuration settings.
• Refresh Profile Management Configuration Check
  • Performs status checks on your agent host(s) to determine whether Profile Management is configured optimally.
• Delete Record
  • Enables deletion of the agent record from the database. If the agent is still active, this option is grayed out.

Registrations

This page shows the registration status of the Workspace Environment Management agents recorded in the database.

In the window you have the column Machine Name, State and Description.

State shows the registration status of the agent on the host computer, indicated by icons and the following description giving more information about registration success or failure:

• Agent is not bound to any site
  • The infrastructure server cannot resolve any configuration set for this agent because the agent is not bound to any site.
• Agent is bound to one site
  • The infrastructure server is sending the necessary machine-dependent settings to the agent for that site (configuration set).
• Agent is bound to multiple sites
  • The infrastructure server cannot resolve a configuration set for this agent because the agent is bound to more than one site.

Logging

The Administrative tab displays a list of all changes made to the Workspace Environment Management settings in the database. By default, the log is unpopulated until the log is refreshed manually.

The Agent tab lists all changes made to your WEM agents. The log is unpopulated until you click Refresh.

The Clear Log Button in both tabs clears the log for all configuration sets. This cannot be undone.

Clearing the log adds one event in the new log indicating this has been done. This option is only available to Global Full Access administrators.

Monitoring

These item contain detailed user login and machine boot reports. You can Export all reports in various formats.

Daily Reports

In Daily Reports you find two tabs. The Daily Login Report tab, that show you a daily summary of login times across all users connected to this configuration set (for the last 24 hours). For a detailed view, with individual logon times for each user on each device, you must double-click a category.

The Daily Boot Report tab is a daily summary of boot times across all devices connected to this configuration set (for the last 24 hours). You can double-click a category for a detailed view showing individual boot times for each device.

This is extremely useful for baselining activities and comparing boot times between multiple minor or major changes/customisations both within WEM and outside of WEM i.e. Group Policy.

User Trends

The Login Trends Report show Login trends for all users combined within a WEM Configuration Set or Site (The Boot Trends Report the Boot Time). You can choose the time period to be displayed, and also drill down for a deeper view by hovering over, or double clicking a particular column.

The third tab (Device Types) display a report of a daily count of the number of devices of each listed operating system connecting to this site.

User & Device Report

The User Report allows you to view login trends for a single user over the selected period and the Device Report view boot trends for a single device. You can double-click each data point for a detailed view.

Note that all these different reporting features are exportable to Excel, PDF, HTML etc.

Configuration

These options allow you to control the reporting period and work days. You can also specify minimum Boot Time and Login Time (in seconds) below which values are not reported.

Link to the other Parts

WEM Administration Console Version 1906 – Part 1 (Actions, Filters & Assignments)

WEM Administration Console Version 1906 – Part 2 (System Optimization, Policies & Profiles and Security)

WEM Administration Console Version 1906 – Part 3 (Active Directory Objects, Transformer Settings and Advanced Settings)