Deploying the Settings Storage Location for UE-V 1.0
Microsoft User Experience Virtualization (UE-V) deployment requires a settings storage location where the user settings are stored in a settings package file. The settings storage location can be configured in one of the following two ways:
Active Directory home directory – if a home directory is defined for the user in Active Directory, the UE-V agent will use this location to store settings location packages. The UE-V agent dynamically creates the user-specific storage folder below the root of the home directory. The agent only uses the home directory of the Active Directory if a settings storage location is not defined.
Create a settings storage share – the settings storage share is a standard network share that is accessible by UE-V users.
Deploy a UE-V settings storage share
When you create the settings storage share, you should limit access only to users that need access. The necessary permissions are shown in the tables below.
To deploy the UE-V network share
Create a new security group for UE-V users.
Create a new folder on the centrally located computer that will store the UE-V settings packages, and then grant the UE-V users with group permissions to the folder. The administrator supporting UE-V will need permissions to this shared folder.
Set the following share-level (SMB) permissions for the setting storage location folder:
User account Recommended permissions Everyone
No Permissions
Security group of UE-V users
Full Control
Set the following NTFS permissions for the settings storage location folder:
User account Recommended permissions Folder Creator/Owner
Full Control
Subfolders and Files Only
Security group of UE-V users
List Folder/Read Data, Create Folders/Append Data
This Folder Only
Click OK to close the dialog boxes.
This permission configuration allows users to create folders for settings storage. The UE-V agent creates and secures a settingspackage
folder while running in the context of the user. The user receives full control to their settingspackage
folder. Other users do not inherit access to this folder. You do not need to create and secure individual user directories, because this will be done automatically by the agent that runs in the context of the user.
Note Additional security can be configured when a Windows server is utilized for the settings storage share. UE-V can be configured to verify that either the local administrator's group or the current user is the owner of the folder where settings packages are stored. To enable additional security complete the following:
Add a REG_DWORD registry key named "RepositoryOwnerCheckEnabled" to HKEY_LOCAL_MACHINE\Software\Microsoft\UEV\Agent\Configuration.
Set registry key value to 1.
Related topics
Supported Configurations for UE-V 1.0
Deploy the Central Storage for User Experience Virtualization Settings Templates and Settings Packages Installing the UE-V Generator