The Theme settings described below apply to Parallels Client for all available platforms.

General

Select General in the left pane and specify the following Theme properties:

• Enable Theme: Enable or disable the Theme (the default Theme cannot be disabled).

• Name: Specify a Theme name.

• Description: Specify an optional Theme description.

• Path: Specifies a postfix for the Theme login page URL. This field is populated automatically with the Theme name when you save it, but you can specify a name of your choice. The complete URL of the Theme login page is comprised of "https://<host-name>/" followed by the name specified in this field. For the explanation of what the <host-name> should be, please see Web request load balancing.

  For example, if you name the Theme "Theme-S1", the complete URL is https://<host-name>/Theme-S1. When you save the Theme, the URL is displayed on the Themes tab in the RAS Console (the User Portal URL column).

  Please note that the URL described above is the short version, which is easier to remember and use. The full version is:

  https://<host-name>/userportal/?theme=<team-name>

  Both the short and the long versions are equally valid.

The Theme settings described below apply to Parallels Client for all available platforms.

• Override authentication domain: Allows you to specify a domain name that will be passed to Parallels Client, so users don't have to enter it manually. This setting overrides the domain name setting in Connection > Authentication. For more information, see Allowing users to change domain password.

• Limit access to this Theme to members of these Active Directory groups: If this option is cleared, any Parallels RAS user can access the Theme if they know its URL. To limit access to a particular group (or groups), select this option and then click Tasks > Add (or click the [+] icon) and select the desired group(s).

• MFA provider: Select an MFA provider for the Theme.

• (Default theme only) Allow gateway tunneling connections: Allow gateway tunneling connections for the deafult theme.

Select Messages in the left pane and specify a post-logon message (up to 500 characters). The post-logon message appears as a message box immediately after the user successfully logs in. The message can be overridden for Web Client and Windows client individually (see Messages for each client in the subsequent sections).

The User Portal (Web Client) category allows you to configure Theme settings for User Portal. These settings affect how the User Portal looks and behaves in a web browser.

The URLs category is used to specify the Theme login page URL and add additional URLs to the User Portal page:

• Show Parallels Client download URL. If selected, users will see the Download Client link on the Web Client page, which can be used to download, install, and configure Parallels Client on users' computers.

• Override download URL for branded Parallels Client (Windows): Specifies a location from which your Windows users will download Parallels Client for Windows. By default, Parallels Client is downloaded from the Parallels web site. If you use a branded version of Parallels Client, you can specify its location in this field.

• Footer URLs. This option allows you to specify custom URLs that will be placed in the Web Client footer. To add a URL, click Tasks > Add and specify a URL, a text that will appear on the page footer, and a tooltip text. When entering similar URLs, you can duplicate an existing one by right-clicking it and choosing Duplicate (or select an entry and click the "duplicate" icon next to the [-] icon). If you've added multiple URLs, you can reorder them by clicking the up or down arrow icons or selecting Up or Down items in the Tasks menu. The URLs will appear in the footer in the order listed (you can click the Preview HTML4 Theme button to see how it looks).

The Branding category allows you to configure the branding of User Portal.

The following properties can be customized:

• Webpage title: Specifies the title that appears on the webpage. You can type any title you like.

• Login to: Specifies a name that will appear in the User Portal login dialog. For example, if you type "ABC" here, the login page will say, "Log in to ABC". There are two predefined variables that you can use here: %FARM% (the actual Farm name; this is the default value) and %SITE% (the Licensing Site name).

• Company logo: Displays the image which is displayed on the User Portal page header. To change the image, select browse and then specify the image file. Note that changing the logo image also removes the default Remote Application Server part from the page header.

• Favicon icon: Displays the currently set favicon icon. To change the icon, click Browse and select an icon file.

Select languages that will appear in the language selector on the User Portal page. The selector appears as a language flag icon on the page header to the right of the user name.

On this pane, you can specify pre-logon and post-logon messages:

• A pre-logon message will appear on the Log in page.

• To override the default post-logon message (see Messages in the beginning of this topic), select the Override post-logon message option and enter a message.

The messages must be 500 characters or less.

Input prompts specified here will appear on the login page to help users enter their username and password correctly in the fields provided. For example, the default user@domain login prompt will appear as a light gray text in the login field, hinting the user that they should enter their name in the UPN format. Predefined input prompts are provided for every supported language. You can specify your own prompts if needed.

Cookie consent

Select the Enable cookie consent option to show a notification about User Portal cookie policy to users on first time use. This provides users with information regarding the use of cookies and the option to accept.

End User License Agreement

Select the Enable EULA option to show the Parallels End User License Agreement (EULA) to users on first time use. User intervention is required to read and accept the agreement to complete the login process.

If your organization has multiple user groups, all sharing centralized Parallels RAS resources, you have the ability to delegate session management permissions to an administrator of a particular group. When you do, the administrator can see and manage Parallels RAS sessions only for users who belong to that group.

Here's how this functionality works:

2. When a custom administrator logs in to the Parallels RAS Console, they are presented with a limited user interface displaying sessions that belong to the Theme (or multiple Themes) that the administrator is allowed to manage.

The rest of this section describes how to configure and use this functionality.

Create a Theme and delegate session management permissions

1. When specifying settings on the General page, select the Limit access to this Theme to members of these Active Directory groups option and add one or more groups.

2. After creating or configuring the Theme, close the Theme Properties dialog, then right-click anywhere in the list and choose Delegate Permissions.

3. If you already have a custom administrator account that you would like to use, it will appear in the list. If you don't have an account, create one as follows:

   1. Click Tasks > Add.

   2. In the Account Properties dialog, click the [...] button next to Name and select an account.

   3. The Permissions field is read-only and set to Custom administrator (the type that must be used here).

   4. Populate the rest of the fields (email, mobile, etc.) as needed.

   5. Click OK.

4. Back in the Delegate Permission dialog, select the administrator in the left pane.

5. In the lower portion of the right pane, select permissions (view, modify, manage sessions) for the desired Theme. You can also set permissions in the upper portion of the right pane, but they will apply to all existing Themes, and this is probably not what we are trying to do here.

6. Click OK.

Manage sessions

Once the above is complete, the custom administrator can manage sessions that belong to the specified Theme(s). To manage sessions:

1. Run the Parallels RAS Console and log in using the credentials of a custom administrator.

2. The right pane will contain sessions that belong to the members of the group(s) assigned to the Theme.

3. To manage a session, select it, then click the Tasks drop-down list and choose a desired option (Disconnect, Log off, Send message, etc.).

Settings audit

Any changes to administrator permissions are recorded in the settings audit. Possible actions are create, update, and delete. You can view the changes by going to Administration > Settings audit or Farm > Themes > Settings Audit.

Using Themes in Parallels Client for Windows

In order for a user to use a corresponding Theme, the connection properties must be properly set. To do so:

1. In Parallels Client for Windows, right-click a connection and choose Connection Properties.

2. On the Connection tab, the server name must be followed by the Theme name after a forward slash, as in Server-name/Theme-name.

When the administrator views sessions in the RAS Console, a client using a Theme can be identified by the Theme name in the Theme column.