WEM 2206 UPDATE AVAILABLE

Intro

As we ease into Summer, Citrix has released the new version of WEM – 2206. You can download the new version here (requires Platinum/Premium licenses and login to Citrix.com). I’ve provided the release notes below.

What’s new in 2206

This release includes the following new features and addresses issues to improve the user experience:

Process hierarchy control

This release introduces the process hierarchy control feature. The feature lets you control whether certain child processes can be started through their parent processes. You create a rule by defining parent processes and then designating an allow list or a block list for their child processes. You then assign the rule on a per user or per user group basis. The following rule types are available:

  • Path. Applies the rule to an executable according to the executable file path.
  • Publisher. Applies the rule according to publisher information.
  • Hash. Applies the rule to identical executables as specified.

For the feature to work, you need to use the AppInfoViewer tool on each agent machine to enable the feature. Every time you use the tool to enable or disable the feature, a machine restart is required. For more information, see Process Hierarchy Control.

Enhancements to memory management

This release includes enhancements to the memory management feature. The feature now provides you with two extra options to perform memory management:

  • Do Not Optimize When Total Available Memory Exceeds (MB). This option lets you specify a threshold below which WEM optimizes memory usage for idle applications.
  • Enable Memory Usage Limit for Specific Processes. This option lets you limit the memory usage of processes by setting upper limits for the memory they can consume.

For more information, see Memory Management.

Administration console

The user interface of the administration console has changed:

  • A new node, Process Hierarchy Control, is now available in Security. The node contains a tab that lets you control whether certain child processes can be started through their parent processes.
  • An option, Do Not Optimize When Total Available Memory Exceeds, is now available in System Optimization > Memory Management > Memory Management. The option lets you specify a threshold limit below which Workspace Environment Management optimizes memory usage for idle applications.
  • A new tab, Memory Usage Limit, is now available in System Optimization > Memory Management. The tab lets you configure memory usage limits for specific processes.

Deprecation

Click here to see deprecated features.

Thanks for reading,
Alain

WEM 2203 UPDATE AVAILABLE

Intro

Spring has sprung and Citrix has released a new version of WEM along with the new 2203 LTSR announcement. Citrix has released the first WEM version of 2022. You can download the new version here (requires Platinum/Premium licenses and login to Citrix.com). I’ve provided the release notes below.

What’s new in 2203

This release includes the following new features and addresses issues to improve the user experience:

Allow users to self-elevate certain applications

This release introduces self-elevation for the privilege elevation feature. With self-elevation, you can automate privilege elevation for certain users without the need to provide the exact executables beforehand. Those users can request self-elevation for any applicable file simply by right-clicking the file and then selecting Run with administrator privileges in the context menu. After that, a prompt appears, requesting that they provide a reason for the elevation. The reason is for auditing purposes. If the criteria are met, the elevation is applied, and the files run successfully with administrator privileges. In addition, self-elevation gives you flexibility to choose the best solution for your needs. You can create allow lists for files you permit users to self-elevate or block lists for files you want to prevent users from self-elevating. For more information, see Self-elevation.

Configure user processes as triggers for external tasks

This release includes enhancements to the external task feature. The feature now provides you with two additional options to control when to run external tasks:

  • Run when processes start. Controls whether to run the external task when specified processes start.
  • Run when processes end. Controls whether to run the external task when specified processes end.

Using the two options, you can define external tasks to supply resources only when certain processes are running and to revoke those resources when the processes end. Using processes as triggers for external tasks lets you manage your user environments more precisely compared with processing external tasks on logon or logoff.

For more information, see External Tasks.

Profile container insights

Starting with this release, you can monitor profile containers for Profile Management and FSLogix. The feature provides insights into the basic usage data of the profile containers, the status of sessions using the profile containers, the issues detected, and more. Use the feature to stay on top of space usage for profile containers and to identify problems that prevent profile containers from working. For more information, see Profile Container Insights.

Administration console

The administration console user interface has changed:

  • In Security, there is a new node, Self-elevation. The node contains a tab that lets you automate privilege elevation for users.
  • In Monitoring, there is a new node, Profile Container Insights. The node contains two tabs. The Summary tab includes two pie charts, providing a summary that shows the status of profile containers. The Profile Container Status tab displays a list of status records for profile containers.

Deprecation

Click here to see deprecated features.

Thanks for reading,
Alain

WEM 2112 UPDATE AVAILABLE

Intro

Happy holidays! Citrix has released the last WEM version of 2021 as an early Christmas present. You can download the new version here (requires Platinum/Premium licenses and login to Citrix.com). I’ve provided the release notes below.

What’s new in 2112

Workspace Environment Management 2112 includes the following new features. For information about bug fixes, see Fixed issues.

Privilege elevation

This release introduces the privilege elevation feature. The feature lets you elevate the privileges of non-administrative users to an administrator level necessary for some executables. As a result, those users can start those executables as if they are members of the administrators group.

You can configure privilege elevation using two types of rules: executable rules and Windows installer rules. You can configure how a rule behaves according to the type of the operating system. You can also configure whether a rule takes effect at a particular point in time or within a time range. You assign a rule on a per user or per user group basis.

For more information, see Privilege elevation. For more information, see Privilege elevation.

Support for optimizing multi-session OS machines

Multi-session OS machines are used to run multiple sessions from a single machine to deliver desktops and applications to users. A disconnected session remains active and its applications continue to run. The disconnected session can consume resources needed for connected desktops and applications that run on the same machine. With this feature, you can optimize multi-session OS machines where disconnected sessions are present. The feature improves the user experience of connected sessions by limiting the number of resources disconnected sessions can consume. For more information, see Multi-session Optimization.

Administration console

The administration console user interface has changed:

  • In System Optimization, there is a new Multi-session Optimization node. On the node, there is a new Multi-session Optimization tab for you to configure settings designed to optimize multi-session OS machines with disconnected sessions.
  • In Security, there is a new Privilege Elevation node. On the node, there is a Privilege Elevation tab for controlling whether to enable the feature and to apply global settings. Below the node, there are two subnodes:
    • Executable Rules with a Privilege Elevation tab where you can apply privilege elevation using executable rules.
    • Windows Installer Rules with a Privilege Elevation tab where you can apply privilege elevation using Windows installer rules.

Deprecation

Click here to see deprecated features.

Thanks for reading,
Alain