Citrix xendesktop Distributed Virtual Desktop Local Administrator rights under static distribution mode

The main issue of this blog is that I met at the beginning of this year, I was helping to deal with some of the problems of Virtual Desktop (Citrix), and I also played a virtual desktop environment in the test environment.

1. Background of the problem

Use Virtual Desktop The original intention is to facilitate the IT information department to control the user's office behavior, so the actual use of more users to assign ordinary permissions, however, many times the user needs administrator privileges to perform some operations (running some programs to install software, etc.). If it is troublesome for a network administrator to use a domain administrator to help users solve these problems every time, it is necessary to provide a quick way to assign the local administrator account, which can be quickly recovered after the user has finished using it.

2. Solution

A. Prepare a user group on the AD domain controller (for example: admins)

B. When making the primary image, add the primary image to the domain

C, after the addition domain is complete, open the primary image, In Computer Management (local)-System tools – Local Users and groups – groups, the Administration group will be the first prepared admins added in

D. Distributing virtual desktops to users

This way, when the user needs the Virtual desktop local Administrator rights, it is only necessary to join the user to the Admins group in the AD domain controller and remove the user from the Admins group when the administrator rights are exhausted.

In the process can first let the user fill in the use of the Administrator rights in the document, stating the reasons for use and the use of time, the relevant director signed, the system administrator according to the above method to complete the administrator rights assignment, the use of time, you can use the Citrix Virtual Desktop Message pop-up window to inform the user permission is about to be recalled, Then revoke permissions. This allows for quick and reasonable control of user Virtual Desktop Local Administrator privileges.

------------------------------------------I'm a split line----------------------------------------------------

Additional content:

Additional content is my first to do operations, to play RouterOS, because RouterOS built on the local virtual machine, in doing experimental testing, the need to modify the local office environment IP, test and then change back, very troublesome, so wrote a quick change IP bat script, not too much technical content, is mainly to reflect the work of the lazy people to avoid duplication of thinking

@echo off

@color 0A

Title quickly modify IP

: Menu

Echo.

Echo 1, intranet IP 2, test IP

Echo.

Set cho=0

set/p cho= Enter Number:

If%cho%==1 goto CH1

If%cho%==2 goto CH2

Echo.

: CH1

netsh interface ip set address name= "Ethernet" source=static addr=172.31.77.236 mask=255.255.255.0 gateway=172.31.77.1

Echo.

Goto Menu

: CH2

netsh interface ip set address name= "Ethernet" source=static addr=192.168.10.100 mask=255.255.255.0

Echo.

Goto Menu

This article is from the "never-say-nothing" blog, please be sure to keep this source http://yahuinm.blog.51cto.com/9686320/1689706

Citrix xendesktop Distributed Virtual Desktop Local Administrator rights under static distribution mode