Skip to content

Connection Profile Management

Create a New Connection Profile

  1. Navigate to Policies > Profiles > Connection Profiles.

  2. Click Add.

  3. Choose Creation Type as:

    1. Select From Template to create a profile by cloning from a pre-defined template.

    2. Select Create New to create a blank profile.

  4. Provide all the required information and enable or disable all required settings in different sections.

  5. Once all configurations are done, click Add Profile.

The new profile will be added, and the Administrator can assign the new profile to objects in HyWorks, e.g. devices, device sets, users/ groups/ OUs, desktop pools, applications, etc.

Edit Connection Profile

  1. Navigate to Policies > Profiles > Connection Profiles.

  2. Select the connection profile and click Edit.

  3. Update the required configurations and click Update.

  4. Changes will be saved and users will be able to get sessions as per the updated connection profile from the next logon or connections to virtual apps or desktops.

Delete Connection Profile

  1. Navigate to Policies > Profiles > Connection Profiles.

  2. Select the connection profile to be deleted and click Delete.

  3. Confirm and click Delete.

The selected Connection Profile will be deleted and will be removed from the Connection Profile section in the Setup.

Note

  • Default Profile cannot be deleted.
  • On deletion, the connection profile with any existing references will display an appropriate error and will not get deleted until all the references are deleted completely.

Copy Connection Profile

HyWorks allows the copying of connection profiles to prepare a replica of an existing connection profile. Follow the below steps to copy a connection profile:

  1. Select a Connection Profile to be copied.

  2. Click Copy to clone a profile or create a new one.

  3. Provide a name for the new profile.

The new profile will be added and can be used.

Reset a Connection Profile

In case the connection profile is system-generated or defined using pre-defined templates, the connection profiles can be reset to default. To reset a connection profile:

  1. Select the Connection Profile (Default Profile, system-generated, or profiles created from system-defined templates).

  2. Click Reset Profile and confirm the action.

The selected profile will be reset to default. For profiles created from templates that have been modified, all options are set as per templates upon resetting.

Connection Profile Assignment and Fallback Model

In HyWorks, a connection profile can be assigned to multiple objects to have maximum granularity, while providing application or desktop sessions to the clients. The following objects can be assigned with connection profiles in respective sections:

  1. Devices:

    1. Default Settings: To all devices using default settings.

    2. Group Settings: To a group of devices using Group settings.

    3. Device Settings: To individual devices using Device Settings.

  2. Entitlements:

    1. Users: To assign connection profiles to different users, navigate to the Entitlements > Users section.

    2. User Groups: To assign a connection profile to a group of users, navigate to Entitlements > Groups section.

    3. OUs: To assign a connection profile to an OU, navigate to the Entitlements > OUs section.

    4. Pools: User based shared hosted desktop pools can be assigned with specific connection profiles from Entitlements > Pools section.

  3. Desktop Pools: To use any specific connection profile for a desktop pool, a connection profile can be assigned to a desktop pool as well. Desktop pools can be assigned with a connection profile from the wizard.

  4. Applications: Applications can also be assigned with specific connection profiles while being added or being modified in the Add Application or Edit Application wizard respectively.

Connection Profile Fallback Model

The connection Profile fallback model in HyWorks defines the priority order in which the connection profile can be applied.

Connection profiles are used to define two types of attributes for a session:

  1. Session timeouts

  2. Connection parameters

Session timeouts are derived from the connection profile applied to the user, whereas connection parameters for application or desktop sessions are derived from the connection profile applied to the application session or desktop session.

Connection Profile priorities are calculated in the following manner based on the type of client from where the user is logging in:

Connection profiles are used in the following priority order:

User Session Application Session Desktop Session
Assigned to User Assigned to Application Assigned to Desktop Pool
Assigned to Group Assigned to User Assigned to User
Assigned to OU Assigned to Group Assigned to User Group
Assigned to Device (Only when the desktop client is being used to log in) Assigned to OU Assigned to OU
Assigned to Device Group (Only when the desktop client is being used to log in) Assigned to Device (Only when the desktop client is being used to log in) Assigned to Device (Only when the desktop client is being used to access)
Organization Default Settings (For HyLite based log on) Assigned to Device Group (Only when desktop client is being used to login) Organization Default Settings (For HyLite based access) Assigned to Device Group (Only when the desktop client is being used to log in) Organization Default Connection Profile (For HyLite based access)

Let us try to understand this priority order with an example:

Suppose User-1 is a member of group 2 and both are paths of OU-3. Then User-1 is assigned with an application app-4 and desktop pool-5 and the connection profiles will be assigned in the following manner:

  1. User-1 > Profile-1

  2. Group-2 > Profile-2

  3. OU-3 > Profile-3

  4. App-4 > Profile-4

  5. Pool-5 > Profile-5

Connection Profile Assignments and Precedence:

The connection profiles will be assigned to the following:

  1. The user session and all remote session timeouts will be managed through the connection profile assigned to the user i.e. Profile-1 (as the User has the highest priority), which means if profile-1 has an idle timeout of 5 minutes, then user sessions and remote sessions will be marked idle on the inactivity of 5 minutes. However, other connection profiles have some other timeouts defined for them.

  2. While accessing the application app-4, the applied connection profile on the remote session will be Profile-4 as the application has higher precedence over the user, but this won't change the user session connection profile which is already using Profile-1 and the session timeouts for app session will be used from the profile assigned to user session.

Important

Connection Profile assigned to an application takes precedence while setting up the remote session only when: - The Shell mode is enabled, and the connection setting assigned to the application is used. If no connection is assigned to the application, then the connection profile assigned to the user will be used. - In RemoteApp mode, the application session is the first from that session host server, else the remote app will use the connection profile being assigned to first application. - Now if the user accesses the desktop from the assigned pool, then the remote session environment will be decided by the user assigned connection profile (having high precedence over the pool) and the session timeouts for the remote session will also be defined by the user assigned connection profile.

Session Recording Profile

The session recording profiles will work as per the Application or Desktop Pool Connection Profile Fallback Model.

USB Profile

While editing a connection profile, you can now associate a USB Profile to enforce USB device redirection rules across the sessions.
Follow the steps below to configure the USB profile:

  1. Navigate to the Connection Profiles

    • Go to the Profiles page.

    • Click on the Connection Profiles tab to view all connection profiles.

  2. Edit the Desired Connection Profile:

    • Select the connection profile you want to edit.
    • Click Edit to open the profile settings.

  3. Locate the USB Profile Dropdown:

    • In the Additional Settings tab, find the USB Profile dropdown menu.
    • By default, the dropdown is set to None.

  4. Select a USB Profile:

    • Click on the dropdown to see the list of all the available USB Profiles.
    • Select the USB Profile to associate with the connection profile.

  5. Save the Connection Profile:

    • Once a USB Profile is selected, a warning message will be displayed: Warning - The USB Profile feature works only with compatible endpoints. Using an incompatible client may cause failure in applying the USB Profile rules.
    • Click Save to apply the changes.

By associating a USB Profile with a connection profile, you can ensure that only the desired USB devices are redirected according to your organizational policies. Make sure that the selected USB Profile is compatible with the endpoints used by the clients to avoid any issues.

Note

  • If no USB Profile is selected, the default setting (None) will be applied, and no USB redirection rules will be enforced.

Connection Profile Assignment in Conflicting Situations

In the following cases, a conflicting situation occurs where the user is assigned two connection profiles.

  1. In case the user is a member of two groups and both groups are assigned to different connection profiles.

Applied Connection Profile: In such cases, the controller randomly selects the connection profile from the two groups and assigns it to the user.

Connection Profile using Advanced Configurations

Following are some of the advanced configurations for the connection profile:

  • Connection Profile Tab Control: Allows to perform Disabled Edit operation on connection profile tabs. The default value is False.

  • Disable Edit On Connection Profile Tabs: Disables the Edit operation on Connection Profile Tabs for all users (except Super Admin Role). The tab number needs to be entered with commas separating each number. The default value is 2.

  • This configuration depends upon the Connection Profile Tab Control.

  • If the Connection Profile Tab Control is set as true, then this configuration will work else, it will not.

  • For example 2, 5 - It means tab number 2, which is the Experience tab, and tab number 5, which is the Advanced Settings tab, got disabled while editing the connection profile.

Advance Settings

To configure the Advanced Settings on HyWorks Controller, navigate to Management Console Settings > General > Advance Settings

  • UI Control: Connection Profile related configurations are available in the UI Control Group.