This chapter describes tasks that a Parallels RAS administrator can perform to manage user devices, such as desktop computers, phones, or tablets.

Parallels RAS supports multiple platforms ranging from desktop PCs and Mac computers to mobile devices and ChromeApps. The Invitation Email feature is designed to reduce the complexities involved in the installation and client rollout process. This feature allows the administrator to send client installation and automatic configuration instructions to end users right from the Parallels RAS Console.

Before proceeding, please confirm that you've configured the mailbox as described in Configuring SMTP server connection for email notifications. To send an invitation email to users, use the Start category in the RAS Console. For more information see Invite users.

If you need to configure Parallels Client that is already installed on multiple devices in your organization, you can simplify the procedure by using one of the following mass configuration options:

• By exporting Parallels Client settings to a file and then importing them into all other Parallels Client installations.

• Using the Parallels Client URL scheme.

Exporting and importing Parallels Client settings

Parallels Client includes the Export/Import functionality that lets you export RAS or RDP connection settings to a file and then import them into Parallels Client running on another device. This functionality is available on all platforms, including desktop and mobile versions of Parallels Client (except Parallels Client for Chrome App). The Export/Import functionality is accessed in Parallels Client as follows:

• Windows, Mac, Linux:On the main menu, click File > Export Settings or File > Import Settings.

• iOS/iPadOS: To export connection settings, tap the [...] icon in the top right corner and choose Share Connection. To import, select the file that you exported earlier and choose to open it with Parallels Client.

• Android: To export connection settings, tap the menu icon (three vertical dots) in the top right corner and choose Share connections. To import, select the file that you exported earlier and choose to open it with Parallels Client.

For more information about exporting and importing connection settings, see the Parallels Client Guide for a desired platform.

Using Parallels Client URL scheme

Parallels RAS uses a URL scheme to perform actions in Parallels Client installed on user devices. Specifically, the URL scheme can be used to configure RAS and RDP connections using predefined settings. For the information about the URL scheme please see RAS Web Client API and Parallels Client URL scheme.

The URL scheme is used in invitation emails when you send an email to your users to install Parallels Client on their devices. An invitation email includes a link, which is a complete URL that uses the Parallels Client URL scheme. When you mass install Parallels Client on user devices, you simply send an invitation email to your users. If you need to reconfigure existing Parallels Client installations (and don't want to do it by sending an invitation email), you can do the following:

1. Create an invitation email containing configuration profiles for all required platforms and send it to yourself.

2. Open the email and copy Parallels Client configuration URLs to a local intranet portal.

3. Let your users know where the URLs are.

4. To configure Parallels Client, your users will need to simply click a URL for their platform. This will automatically configure Parallels Client on their devices.

Parallels Client provides users with the ability to send a support request, together with a problem report, to your organization's help desk.

To enable Help Desk support for users, do the following:

1. In the RAS Console, select the Features category.

2. Select the Enable Helpdesk functionality in Parallels Client option and specify your help desk email address in the field provided. This email address will be updated in Parallels Client every time a user connects to Parallels RAS from it.

Help desk can be accessed in Parallels Client from the Help section (or menu). When the user selects the Request support from helpdesk item, a local email client will open. The following information will be prefilled in the email:

• Help desk email address (the one you set in the RAS Console).

• Application name.

• A screenshot.

• User name.

• Application version.

• Operating system version.

The user can provide their own description of the request.

RAS console and Management Portal provide custom administrators with the ability to send a support request to your organization's help desk.

To enable Help Desk support for custom administrators, do the following:

1. In the RAS Console, select the Features category.

2. Select the Overwrite the local support actions with the following URL option and specify the link to to your local support portal in the field provided. This link will open when a custom administrator clicks on Help > Request Support in RAS Console or Help and Support > Request Support in Management Portal.

Device monitoring allows you to view devices which are connected to the Farm or have established a connection at least once in the past. To monitor devices, select the Device Manager category in the Parallels RAS Console and click the Devices manager tab in the right pane. The information for a device includes:

• Device name

• IP address

• State (see below for the list of states)

• Last user (who used a device)

• MAC address

• OS version

• Parallels Client version

• Group (if a device is a member of a device group)

• Gateway name (the RAS Secure Gateway a device is connected to)

• Gateway IP address

Device states

Devices that connect to Parallels RAS can have any of the following states:

• Off: Device is switched off.

• Connected: Device is connected.

• Logged On: Devices is logged on to the system.

• Standalone: Device has previously connected to the Parallels RAS but is not using Parallels Client, therefore it cannot be managed.

• Not Support: Device is not supported by the Parallels RAS.

• Foreign Managed: Connecting to the Farm but managed by a different Farm.

• Not Manageable: Client not manageable due to incompatible client version or uninstalled component.

• Locked. Device has an active session in locked status.

• Pair Pending. Connection should be refreshed on the client side; port UDP 20009 is blocked from the client to gateway; client management port is disabled on the gateway.

Switching off device monitoring

If you use third-party endpoint management solutions and do not need Parallels RAS device monitoring, you can switch it off on the Device Manager > Options tab. It helps you to save computing resources and may improve performance of the RAS Console.

To switch off device monitoring:

1. In the RAS Console, navigate to Device Manager > Options.

2. Clear the Enable device manager option.

3. Click Yes and Apply.

As soon as you switch off device monitoring, the RAS Console stops tracking connected devices and deletes device connection history, which is displayed on the Device Manager > Device Manager tab. After that you can still view information about current connections in the Sessions category.

To see the additional device information, right-click a device and choose Get Device Information in the context menu. In the dialog that opens, review the following properties:

• Name: Device name.

• IPs: Device IP address (or multiple addresses if applicable).

• MAC Address: MAC address.

• State: State (see below for the list of states).

• Last User: The user who logged in from this device the last time.

• Last Logon Time: The time of last logon.

• OS Version: The operating system version running on the device. Windows portable and U3 clients are marked as "Portable".

• Client Version: Parallels Client version installed on the device.

• Gateway IP: The RAS Secure Gateway IP address (the gateway the client is using).

• Secure Gateway: The RAS Secure Gateway name.

• Last Activity: The date and time when any activity was detected from this device.

The Windows device groups tab (Device Manager category) allows you to group managed Windows devices and administer them together.

Creating a Windows device group

To create a Windows Device Group:

1. Navigate to the Windows device groups tab in the Device Manager category and click Tasks > Add.

2. On the Main tab page, specify a group name and an optional description.

3. On the OS Settings tab, set the following options:

   • Disable removable drives. Disable mounting of removable drives on managed Windows device.

   • Disable Print Screen. Disable the Print Screen key.

   • Replace desktop. This feature makes a Windows computer behave like a thin client. It limits users from changing system settings or installing new applications. The administrator can add local apps (which are already installed on a computer) to the app list in addition to published resources from Parallels RAS. If you select this option, specify an administrator password in the Admin Mode Password field (below) to be used to switch a computer between user and admin modes.

   • Kiosk mode. Enable the kiosk mode.This will disable power cycling functions (reboot, shutdown) on computers in the group. Note that power functions will still be available when the computer is switched to the Admin mode.

   • Use client as desktop. If this option is selected, Parallels Client will run in full screen mode. A user will not be able to minimize it. Select this option to overcome an issue with Parallels Client breaking out of the kiosk mode on Windows 8.x. The issue may manifest itself in the tile-based UI or while using the "drag to close" feature.

   • Admin Mode Password. Specify a password to switch between user and admin modes when a Windows desktop is replaced (see Replace desktop above).

4. On the Firewall Settings tab, enable or disable the firewall and add the inbound ports if necessary.

Adding a Windows device to a group

To add a Windows device to a group:

1. Navigate to the Device Manager > Device Manager tab.

2. Select one or more devices, then click Tasks (or right-click) and choose Move to Group.

3. Select a group and click OK to save the settings.

The administrator can now perform standard Windows power operations (Power On, Power Off, Reboot, Logoff, Lock) on groups of devices.