VMware AirWatch Windows 7 Platform Guide .Title: VMware AirWatch Windows 7 Platform Guide Author:

  • View
    229

  • Download
    1

Embed Size (px)

Text of VMware AirWatch Windows 7 Platform Guide .Title: VMware AirWatch Windows 7 Platform Guide Author:

VMware AirWatch Windows 7 Platform GuideDeploying and managing Windows 7 devices.AirWatch v9.2

Have documentation feedback?Submit a Documentation Feedback support ticket using the Support Wizard onsupport.air-watch.com.Copyright2017 VMware, Inc. All rights reserved. This product is protected by copyright and intellectual property laws in the United States and other countries as well as byinternational treaties. VMware products are covered by one ormore patents listed at http://www.vmware.com/go/patents.

VMware is a registered trademark or trademark of VMware, Inc. in the United States and other jurisdictions. All othermarks and names mentioned hereinmay be trademarks of theirrespective companies.

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

1

http://support.air-watch.com/

Revision TableThe following table displays revisions to this guide since the release of AirWatch v9.2.

Date Reason

September 2017 Initial upload.

2

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Table of ContentsChapter 1: Overview 5

Introduction toWindows 7 6Windows 7 Requirements 6

Chapter 2: Windows 7 Enrollment 8

Windows 7 Enrollment Overview 9Windows Desktop andWindows 7 Devices 9AirWatch Agent forWindows Enrollment 10Enroll Windows 7 Devices with the AirWatch Agent 10Install the AirWatch Agent on a Base Operating System Image 11Enroll Windows 7 Devices Through a Proxy 11Windows 7 Silent Enrollment 13Enroll Windows 7 Devices Silently 13Silent Enrollment Parameters and Values 13

Chapter 3: Windows 7 Device Profiles 16

Windows 7 Profiles Overview 17Configure aWi-Fi Profile (Windows 7) 17Enforce a VPN Profile (Windows 7) 18Credentials Profile (Windows 7) 19Create a Credentials Profile (Windows 7) 19Configure a Shortcuts Profile (Windows 7) 20Create an ExchangeWeb Services Profile (Windows 7) 21Encryption Profile (Windows 7) 21Configure an Encryption Profile (Windows 7) 23Configure a Passcode Profile (Windows 7) 24Configure an Automatic Updates Profile (Windows 7) 26Configure a Firewall Profile (Windows 7) 27

Chapter 4: Compliance Policies 29

Compliance Policy Overview 30

3

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Chapter 5: AirWatch Apps forWindows 7 31

Windows 7 Application Overview 32Configure the AirWatch Agent forWindows 7 32AirWatch Agent forWindows Upgrades 33VMware Content Locker forWindows 7 34

Chapter 6: Product Provisioning forWindows 7 Devices 35

Product Provisioning Overview 36

Chapter 7: ManagingWindows 7 Devices 37

Device Dashboard 38Device List View 38Windows 7 Device Details Page 38Remote Management 39

Accessing Other Documents 40

4

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Chapter 1:OverviewIntroduction toWindows 7 6

Windows 7 Requirements 6

5

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Introduction to Windows 7AirWatch provides you with a robust set ofmobility management solutions for enrolling, securing, configuring, andmanaging yourWindows 7 device deployment. Use AirWatch to ensure that your device fleet remains secured.

Through the AirWatch Console, you have several tools and features for managing the entire lifecycle of corporate andemployee-owned devices. You can also enable end users to perform tasks themselves, for example, through the Self-Service Portal and user self-enrollment, which saves you vital time and resources. AirWatch provides completemanagement solutions for enterprise-managed Windows laptop devices running Windows 7, 8, and 10.

AirWatch allows you to enroll both corporate and employee-owned devices to configure and secure your enterprise dataand content. By using of our device profiles, you can properly configure and secure yourWindows devices.

Windows 7 RequirementsBefore reading this guide, gather and prepare the requirements AirWatch requires for Windows 7 devices.

Platforms Supported

Windows 7 interchangeably refers to the following supported Windows Operating Systems:

Microsoft Windows

Operating System

32-bit Windows 7, Windows 8, or Windows 10

64-bit Windows 7, Windows 8, or Windows 10

Silent Enrollment Agent Requirements

Win32Agent_installer.exe file version 3.8.2 to 6.0.4 or AirwatchAgent.msi version 7.0.0 or later must be downloaded oraccessible to theWindows device.

Encryption

l Supported OS:Windows 7 Enterprise and Ultimate, 32-bit or 64-bit with .NET 4.5 framework.

l Levels of Encryption: System partition and complete hard disk.

l Default Encryption Type: BitLocker native encryption.

Enrollment Requirements for All Windows 7 Devices

l Enrollment URL The web address entered into the Internet browser to begin the enrollment procedure. Thislocation is specific to your company's enrollment environment.

l Group ID The unique identifier specific to the organization group within the environment which defines allconfigurations that devices receive.

Chapter 1: Overview

6

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

l Credentials The username and password used to authenticate the end-users account and to access the AirWatchenvironment. These credentials can be identical to the end-user's directory services credentials or specific toAirWatch.

l Local Administrator Privileges End users must have Admin Rights or be part of the Administrator Group toproperly run the AirWatch Agent EXE on their device.

AirWatch Agent Prerequisites

Before using the AirWatch Agent for Windows 7, you must download the following:

l Microsoft Visual C++ 2015 Redistributable (x86)

l Microsoft Visual C++ 2015 Redistributable (x64)

If you do not have .NET 4.5 or above installed before beginning the device enrollment process, the AirWatch Agentprompts you to install it before continuing enrollment.

Chapter 1: Overview

7

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Chapter 2:Windows 7 EnrollmentWindows 7 Enrollment Overview 9

Windows Desktop andWindows 7 Devices 9

AirWatch Agent forWindows Enrollment 10

Enroll Windows 7 Devices with the AirWatch Agent 10

Install the AirWatch Agent on a Base Operating SystemImage 11

Enroll Windows 7 Devices Through a Proxy 11

Windows 7 Silent Enrollment 13

Enroll Windows 7 Devices Silently 13

Silent Enrollment Parameters and Values 13

8

VMware AirWatchWindows 7 Platform Guide | v.2017.09 | September 2017

Copyright2017 VMware, Inc. All rights reserved.

Windows 7 Enrollment OverviewDevice enrollment establishes the initial communication with AirWatch to enableMobile DeviceManagement (MDM).Windows 7 requires the AirWatch Agent for Windows devices to enroll.

Enrollment Basics

Windows 7must begin communicating with AirWatch to access internal content and features. This communication usesthe AirWatch Agent. The AirWatch Agent provides a single resource to enroll a device and provides device details.

TheWindows 7 enrollment methods all use the AirWatch Agent to complete enrollment. End users enroll using theAirWatch Agent enrollment flow. You can also enroll devices using the silent enrollment or device imaging enrollment.

TheWindows 7 platform supports Windows 7, Windows 8.1, and Windows 10 devices. The functionality changes whenenrolling devices as Windows 7 devices. For more information, seeWindows Desktop and Windows 7 Devices on page 9.

AirWatch Agent Enrollment

The simplest enrollment workflow uses the AirWatch Agent for Windows to enroll devices. End users simply downloadthe AirWatch Agent from www.awagent.com and follow the prompts to enroll. For more information on Agent-basedenrollment, see AirWatch Agent for Windows Enrollment on page 10.

If you use a proxy server, you must configure the AirWatch Agent proxy settings. For more information, see EnrollWindows 7 Devices Through a Proxy on page 11.

Silent Enrollment

You can bypass end-user interaction and simplify enrollment using the silent enrollment work flow. This enrollmentmethod uses BAT files and command-line entries to download and configure the AirWatch Agent and completeenrollment. For more information, seeWindows 7 Silent Enrollment on page 13.

Device Imaging Enrollment

If you are imaging Windows 7 devices, you can download and configure the AirWatch Agent onto the base operatingsystem image. With this enrollment method, you can ship devices to end users with the AirWatch Agent preinstalled,only requiring the end users to enter their user credentials. For more information, see Install the AirWatch Agent on aBase Operating System Image on page 11.

Windows Desktop and Windows 7 DevicesYou can enroll your Windows devices into one of two platforms. The platform determines the available devicemanagement functionality for your Windows devices.

TheWindows Desktop platform supports Windows 8.1 and Windows 10 devices using the nativeMDM enrollment. TheWindows 7 platform supports Windows 7, Windows 8, and Windows 10 devices enrolled using the AirWatch Agent forWindows.