Lab 11: Application Access and Security for Windows
Objective and Tasks
Provision and manage Windows applications:
- Add a Public Application
- Manage Public Applications
- Add an Internal Application
- Manage Internal Applications
- Manage Applications on an Individual Device
- View Applications in Workspace ONE Intelligent Hub
This lab requires the core configurations set in previous tasks. Required configurations include an organization group (OG) hierarchy set up with a group ID, test user, and enrolled device.
Task 1: Add a Public Application
You add a universal Windows application to the Workspace ONE UEM console and push this application to the enrolled Windows endpoints.
- Log in to the ControlCenter desktop VM.
- User name: administrator
- Password: Pa$$w0rd
- Open Chrome and log in to Workspace ONE UEM.
- User name: studentadmin{labid}
- Password: Pa$$w0rd
- On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from the Organization Group drop-down menu.
- In the navigation pane on the left, select Resources > Apps > Native.
- Click the Public tab.
- Click Add Application.
- The Add Application dialog box appears.
- Configure the applicable settings.
- From the Platform drop-down menu, select Android.
- Next to Source, click Import from Play.
- Select the Tube Map - London Underground .
- Click IMPORT.
- Click Save & Assign.
- Enter All Android Devices in the Name text box.
- Click in the Assignment Groups box and select All Devices ({labid}).
- Click Create.
- Set the
- Click Save.
- Click Publish.
Task 2: Manage Public Applications
You manage the public applications added to your Workspace ONE UEM tenant.
- On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from the Organization Group drop-down menu.
- In the navigation pane on the left, select Resources > Apps > Native.
- Click the Public tab. You can see all the managed applications on the Apps List View page.
- Under Install Status, click View.
If the app is not assigned to any device, the link reads Assign.
You can see the number of devices that have a Not Installed, Installed, or Assigned status for this application.
NOTE |
Devices might require a check-in (query) to show an updated status if the application is installed on the device but does not show an updated status on the Application List View page. |
- Click the application name to open the Details View page.
- Review the tabs on the Details View page.
- Summary: View statistics about this application, such as installation status and peer distribution data.
- Details: View general information about this application.
- Devices: See the application assignment and installation status on each assigned device.
- Assignment: View application assignments.
- More: Manage the application's icon image and terms of use.
- In the top-right corner of the Details View page, click the More drop-down menu and review the available options.
- Deactivate: Put the app into a deactivated status, removing it from devices.
- User Ratings: View application ratings and user-provided feedback.
- Events: Display events for applications and export activity as a CSV file.
- Delete Application: Remove the application from Workspace ONE UEM.
Task 3: Add an Internal Application
You add a second application by uploading the Win32 application installer file.
- On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from the Organization Group drop-down menu.
- In the navigation pane on the left, select Devices > Device Settings > Windows > Windows Desktop > Intelligent Hub Application.
- Next to Current Settings, click Override.
- Select the Publish Workspace ONE Intelligent Hub and Intelligent Hub Automatic Update check boxes.
- Select every check box in the Device Ownership Type row.
- Click Save.
- Close the Settings dialog box.
- In the navigation pane on the left, select Resources > Apps > Native.
- On the Internal tab, click ADD. Click Application File.
- Ensure that Student{labid} is selected in the Organization Group ID box.
- Click Upload.
- The Add dialog box appears.
- Click Choose File.
- Navigate to the Software folder on the desktop and double-click Lab Activities.
- Select the WIN64_MSI_VLC Player 3.0.16.msi file and click Open.
- Click Save.
- Click Continue and review the general application details.
- Click the Deployment Options tab and review the How To Install section.
- The Install Command command-line argument is already configured with an install command.
- No action is required.
- Click Save & Assign.
- Configure the assignment settings.
- Enter All Windows Devices in the Name text box.
- Click in the Assignment Groups text box and select Windows Devices (Student{labid}).
- In the App Delivery Method row, click Auto.
- Click Create.
- Click Save.
- Click Publish.
The software package is automatically downloaded and installed once you have a Windows machine enrolled.
NOTE |
The software distribution and installation process can take up to 10 minutes to complete. |
Task 4: Manage Internal Applications
You manage the internal applications that you added to your Windows 10 device.
- On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from the Organization Group drop-down menu.
- In the navigation pane on the left, select Resources > Apps > Native > Internal.
- Review all the managed applications on the Apps List View page.
- Under Install Status, click View to verify the installation status of the application.
NOTE |
Applications might require a check-in (query) to show an up-to-date status. The check-in is necessary if the application is installed on the device but is not reflected on the status dashboard. |
- Click the application name to open the Details View page.
- The Details View page includes the Summary, Details, Devices, Assignment, Files, and More tabs. Each tab shows you the related application information.
- Review the internal application management controls in the top-right corner of the page.
- Edit: Modify some levels of application information.
- Assign: Assign applications on the Assignment page.
- Add Version: Upload a new version of the same internal application.
- More: Access additional management controls.
- Click More to review additional management controls.
- Deactivate: Deactivate and remove all versions of the application from the device and the Workspace ONE UEM catalog.
- User ratings: View and delete user ratings and comments about applications.
- Events: Show device and console events for applications and export events as a CSV file.
- Other Versions: Show previous versions of the application added to the console.
Task 5: Manage Applications on an Individual Device
You practice application management on an individual device.
- On the Workspace ONE UEM console menu bar, verify that Student{labid} is selected from the Organization Group drop-down menu.
- In the navigation pane on the left, select Devices > List View.
- Click the friendly name hyperlink of your Windows 10 device to view specific device details in the record.
- Click the Apps tab and review the application status for your device.
- Click an application name to review the settings.
In the dialog box that appears, you also have the option to install or remove the application.
NOTE |
If personal applications are not shown, your Privacy settings are configured to suppress this information. The Workspace ONE Intelligent Hub application cannot be removed or pushed again because it was installed before enrollment. |
- Click Cancel.
Task 6: View Applications in the Workspace ONE Intelligent Hub
You navigate the Workspace ONE Intelligent Hub application and become familiar with the Hub Catalog user interface.
- Connect to the W11-Clien-01a VM.
- From the ControlCenter Desktop, double click the Remote Desktops folder.
- Double click W11Client-01a.RDP
- Open the Workspace ONE Intelligent Hub application if it is not already open.
- On the W11Client-01a VM Windows desktop, click the Start menu icon.
- Select Workspace ONE Intelligent Hub from the list of available applications.
- If necessary, log in to the Workspace ONE Intelligent Hub.
- User name: craig
- Password: Pa$$w0rd
- In the left navigation pane of the Workspace ONE Intelligent Hub application, select Apps.
- Review the native applications assigned to the device.
- Minimize the Remote Desktop Connection Manager window.
0 Comments
Add your comment