Parallels RAS 20 Administrator's Guide
ProductsSupportPartnersDocumentation
English
English
  • Parallels RAS 20 Administrator’s Guide
    • Introduction
      • Parallels RAS release history
      • About Parallels RAS
      • About this guide
      • What's new
      • Terms and abbreviations used in this guide
    • Installing Parallels RAS
      • System requirements
        • Hardware requirements
        • Software requirements
        • Microsoft license requirements
      • Install Parallels RAS
      • Log in and activate Parallels RAS
    • Getting Started with Parallels RAS
      • The Parallels RAS Console
      • Set up a basic Parallels RAS Farm
        • Add an RD Session Host
        • Publish applications
        • Invite users
        • Azure Virtual Desktop
        • Conclusion
    • Farm and Sites
      • Connecting to a Parallels RAS Farm
      • About Sites
      • Sites in the RAS Console
      • Adding a Site to the Farm
      • Replicating Site settings
      • Managing Licensing Site
      • Managing administrator accounts
        • Adding an administrator account
        • Administrator account permissions
        • Managing administrator accounts
        • Configure RAS Console idle sessions
        • Using instant messaging
        • Joining Customer Experience Program
    • RAS Connection Broker
      • Configuring RAS Connection Brokers
      • Secondary Connection Brokers
      • Managing Secondary Connection Brokers
      • Using computer management tools
    • RAS Secure Gateway
      • Overview
      • Adding a RAS Secure Gateway
      • Manually adding a RAS Secure Gateway
      • Checking the RAS Secure Gateway status
      • Configuring a RAS Secure Gateway
        • Enable or disable a Secure Gateway
        • Set public address
        • Set IP addresses for client connections
        • Site defaults (Secure Gateways)
        • Gateway mode and forwarding settings
        • Gateway network options
        • SSL/TLS encryption
          • SSL server configuration
        • Configure User Portal
          • Using Site defaults
          • Enable or disable User Portal
          • Client settings
          • Network load balancers access
        • Wyse ThinOS support
        • Secure Gateway security
        • Web request load balancing
      • Secure Gateway tunneling policies
      • Configure logging
      • Viewing Secure Gateway summary and metrics
      • Using computer management tools
    • RD Session Hosts
      • RD Session Host types
      • Add an RD Session Host
        • Installing the agent manually
      • Add a template-based RD Session Host
      • Manage RD Session Hosts
        • Manage host pools (RD Session Hosts)
          • Add host pools (RD Session Hosts)
          • Upgrading Agents (RD Session Hosts)
        • Manage templates (RD Session Hosts)
          • Creating an RD Session Host template
          • Assigning a template to a host pool (RD Session Host)
          • Managing RD Session Hosts based on a template
        • Manage hosts (RD Session Hosts)
          • Viewing RD Session Hosts
          • Check an RD Session Host Agent status
          • Change RD Session Host Site assignment
          • View and modify RD Session Host properties
            • Using default settings
            • General
            • Agent settings
            • User profile
            • Application Packages
            • Optimization
            • Desktop access
            • RDP printer
          • User profile
            • User Profile Disks
            • FSLogix
              • Configure managing existing profiles by Parallels RAS
              • FSLogix antivirus exclusions
          • Optimization
          • Drive redirection cache
          • Configure logging
        • Manage sessions (RD Session Host)
        • Using scheduler (RD Session Hosts)
      • Planning for high availability
      • Managing logons
      • Using computer management tools
      • Publishing from an RD Session Host
      • Viewing published resources
    • Virtual Desktop Infrastructure (VDI)
      • Supported providers
      • Add a provider
        • RAS Provider Agent information
          • RAS Provider Agent installation options
        • Add a hypervisor provider
        • Add a cloud Provider
          • Microsoft Azure
            • Introduction and prerequisites
            • Create Microsoft Entra ID application
            • Add Microsoft Azure as a Provider
            • Microsoft Azure and templates
          • Amazon Web Services
            • Introduction and prerequisites
            • Design considerations
            • Step 1. Creating an IAM user for programmatic access
            • Step 2. Adding AWS as a Provider
      • Manage VDI
        • Manage providers (VDI)
          • Installing RAS Provider Agent using the installer
          • Checking the RAS Provider Agent status
          • Using a Provider in multiple farms
        • Manage host pools (VDI)
          • Add host pools (VDI)
          • Delete host pools (VDI)
          • Add and delete host pool members
          • Using a wildcard to filter VMs
          • Managing hosts in pools
          • Upgrading Agents (VDI)
        • Manage templates (VDI)
          • Virtual desktop templates
          • Multi-provider template distribution
          • Creating a VM template
            • Step 1: Check and install the Agent
            • Step 2: Configure the template
              • Properties
              • Distribution
              • Advanced
              • Preparation
              • Optimization
              • License keys
              • Summary
              • Host naming
            • Parallels Test Template Wizard
            • Modifying template properties
          • How hosts are created from a template
          • Manually adding a host
          • Assigning a template to a host pool (VDI)
          • Template maintenance
          • Template status
          • Managing multi-provider template distribution
          • Managing template-based hosts
        • Manage hosts (VDI)
          • Persistent hosts
          • Configuring hosts to interact with RAS Provider Agent in a different subnet
        • Manage sessions (VDI)
        • Using scheduler (VDI)
      • Configure logging
      • Enabling high availability for VDI
      • Site defaults (VDI)
      • Using computer management tools
      • Viewing Provider summary
      • Remote PC pools in VDI
        • Adding a Provider
        • Adding Remote PCs to a Provider
        • Adding Remote PCs to a pool
        • Managing Remote PCs in a pool
        • Persistent Remote PCs
        • RAS Guest Agent installation options
    • Azure Virtual Desktop
      • Introduction
      • Prerequisites
      • Deploy Azure Virtual Desktop
        • Enable Azure Virtual Desktop and add a provider
        • Add workspaces
        • Add host pools (Azure Virtual Desktop)
      • Manage Azure Virtual Desktop
        • Manage providers (Azure Virtual Desktop)
        • Manage workspaces (Azure Virtual Desktop)
        • Manage host pools (Azure Virtual Desktop)
          • Upgrading Agents (Azure Virtual Desktop)
        • Manage templates (Azure Virtual Desktop)
          • Create a template
          • Manage existing templates
          • Assigning a template to a host pool (Azure Virtual Desktop)
        • Manage hosts (Azure Virtual Desktop)
        • Manage sessions (Azure Virtual Desktop)
        • Using scheduler (Azure Virtual Desktop)
      • Site defaults (Azure Virtual Desktop)
        • Site defaults for single-session hosts
        • Site defaults for multi-session hosts
      • Using Parallels Client with Azure Virtual Desktop
      • Verify the deployment
    • Remote PCs
      • Overview
      • Manage host pools (Remote PC)
      • Manage hosts (Remote PC)
        • Adding a Remote PC to a Farm
          • Admin-initiated Remote PC enrollment
          • Self-service Remote PC enrollment
        • Configuring a Remote PC
      • Viewing Remote PC summary
      • Using computer management tools
    • Publishing
      • Overview
      • Publishing a desktop
      • Publishing an application
      • Publishing local applications
      • Publishing an application with MSIX app attach
      • Publishing a web application
      • Publishing a network folder
      • Publishing a document
      • General management tasks
      • Manage published applications
      • Manage published desktops
      • Manage published documents
      • Manage folders
      • Site defaults (Publishing)
      • Using filtering rules
      • Configuring preferred routing
      • Understanding session prelaunch
      • Checking effective access
      • Specifying client settings
      • Quick keypad
    • Session Management
      • Overview
      • Session information
      • Monitoring settings
      • Managing sessions
      • The Resources tab
    • SSL Certificate Management
      • Generating a self-signed certificate
      • Generating a certificate signing request (CSR)
      • Let's Encrypt certificates
        • Requesting a Let's Encrypt Certificate
        • How Parallels RAS requests certificates from Let's Encrypt
      • Importing a certificate
      • Exporting a certificate
      • Assigning a certificate to Secure Gateways and HALBs
      • Auditing certificates
      • Permissions to manage certificates
      • Upgrading from an older RAS version
    • Connection and Authentication Settings
      • RAS Connection Broker connection settings
      • Remote session settings
      • Logon hours settings
      • Restricting access by Parallels Client type and build number
      • Multi-factor authentication
        • Adding an MFA provider
        • Using RADIUS
          • Connection
          • Attributes
          • Automation
          • Advanced
          • Configuring Azure MFA
          • Configuring Duo
        • Using TOTP
          • Configuring TOTP
          • Configuring Google Authenticator
          • Configuring Microsoft Authenticator
        • Configuring email OTP
        • Using Deepnet DualShield
          • Supported tokens
          • Configuring DualShield 5.6+ Authentication Platform
          • Configuring Parallels RAS to use the DualShield Authentication Platform
          • Connect to a RAS Farm
        • Using SafeNet
          • Configuring SafeNet
        • Configuring MFA rules
      • Allowing users to change domain password
      • Allowing users to discover RAS connections via email address
    • Load Balancing and HALB
      • Resource based & round robin load balancing
        • Configure CPU optimization
      • High availability load balancing (HALB)
        • Prerequisites
        • Deploying a Parallels HALB appliance
        • Adding a HALB virtual server
        • HALB Device status and version number
        • HALB maintenance
        • HALB connection and session information
        • Changing the HALB appliance password
    • RAS Multi-Tenant Architecture
      • Overview
      • Architecture description
        • Implementation overview
        • User connection flow
      • Deploying Tenant Broker and Tenants
        • Deploying Tenant Broker
        • Deploying a Tenant
          • Join a Tenant to Tenant Broker
          • Joining with a secret key
          • Verify join status
          • Configure network
          • Assign a public domain address
          • Configure an SSL certificate
          • Set up routing for incoming traffic
        • User authentication
        • Unjoining from Tenant Broker
      • Managing Tenants
        • Tenant configuration
        • Deleting a Tenant object
        • Opening a Tenant console
      • Shared Gateways
      • Third-party network load balancers
      • Web Client and Themes
      • Monitoring Tenants
      • Tenant Broker compatibility and updates
      • Upgrading from an older RAS version
      • Configuring notifications
      • Communication ports
    • SAML SSO Authentication
      • Introduction
      • System requirements
      • SAML basics
      • SAML configuration
        • Prerequisites
        • IdP side configuration
        • SP side configuration (RAS side)
        • Active Directory user account configuration
        • Configure certificate authority templates
          • Create an Enrollment Agent template
          • Create a smartcard logon certificate template
        • RAS Enrollment Server configuration
        • RAS Enrollment Server high availability
        • SAML integration examples and tips
          • User account attributes
          • Security tip
      • Parallels Client configuration
      • Parallels client policy configuration
      • Test the SAML SSO deployment
      • Error messages
    • Parallels Web Client and User Portal
      • Configure Web Client
      • Configure Themes
        • General settings
        • Access settings
        • Message settings
        • Web Client settings
          • URLs
          • Branding
          • Colors
          • Language bar
          • Messages
          • Input prompt
          • Gateway
          • Legal policies
        • Parallels Client for Windows settings
        • General Theme tasks
        • Delegating session management permissions
      • Open Parallels Web Client
      • Main menu options
      • Running remote applications and desktops
        • Using drag and drop functionality
        • Native clipboard experience
        • Other useful features
      • Auto login
      • Direct App access
      • Using the toolbar
        • Using the toolbar on desktop computers
        • Using the Toolbar on Mobile Devices
        • Using the remote clipboard
        • Hiding toolbar items
    • Universal Printing
      • Managing Universal Printing Settings
      • Universal Printing drivers
      • Font management
    • Universal Scanning
      • Managing Universal Scanning
      • Adding scanning applications
    • User Device Management and Client Policies
      • Inviting users to connect to Parallels RAS
      • Mass configuring user devices
      • Enabling Help Desk support for users
      • Enabling Help Desk support for custom administrators
      • Monitoring devices
        • Getting additional device information
      • Windows device groups
      • Managing Widows devices
        • Windows desktop replacement
      • Scheduling Windows devices & groups power cycles
      • Client policies
        • Add a new client policy
        • Configure session settings
          • Appearance
          • Connection
          • Display
          • Printing
          • Scanning
          • Audio
          • Keyboard
          • Local devices and resources
          • Experience
          • Network
          • Server authentication
          • Advanced settings
        • Configure client policy options
        • Configure control settings
        • Configure Gateway redirection
        • Client policy backward compatibility
        • Policy information in Parallels Client
      • Configuring remote file transfer
        • Configure file transfer to a server
        • Configure file transfer in User Portal
        • Configure file transfer for a client policy
    • Reporting
      • System requirements
      • Install Microsoft SQL Server
        • Install Microsoft SQL Server 2016 or earlier
        • Install Microsoft SQL Server 2017 or 2019
        • Install Microsoft SQL Server 2022
      • Install Parallels RAS Reporting
      • Running Parallels RAS Reports
      • GDPR compliance
    • Performance monitor
      • Overview
      • Install RAS Performance Monitor
      • Using Parallels RAS Performance Monitor
      • Configure RAS Performance Monitor security
      • Updating RAS Performance Monitor
    • Common Management Tasks
      • Recovery – add a root administrator
      • Host name resolution
      • Computer management tools
      • Site information
      • Site settings
      • Using MSIX application packages
      • Using template versions
      • Settings audit
      • Upgrading RAS agents
      • Licensing
      • Configure HTTP proxy settings
      • System event notifications
        • Configuring notification handlers
        • Configuring notification scripts
        • Configuring SMTP server connection for event notifications
      • RAS session variables
      • Resolving z-order issues
      • Maintenance and backup
        • Importing and exporting Farm settings from the command line
      • Problem reporting and troubleshooting
      • Logging
      • Suggest a feature
    • Parallels RAS Management Portal
      • Overview
      • Prerequisites
      • Installation
      • Log in to RAS Management Portal
      • Configure RAS Web Administration Service
      • RAS Management Portal user interface
    • Parallels RAS APIs
      • RAS PowerShell API
      • RAS REST API
        • Installation
        • Permissions
        • Getting started
        • Logging in and sending requests
        • More information
      • RAS Web Client API and Parallels Client URL scheme
    • Appendix
      • Microsoft license requirements in Parallels RAS
      • Port reference
        • Parallels Client
        • Web browsers
        • HALB
        • RAS Secure Gateway
        • RAS Connection Broker
        • RAS Console
        • SSRS
        • RAS Reporting
        • RAS Web Administration Service (REST/Management Portal)
        • RAS PowerShell
        • RAS Provider Agent
        • RAS Enrollment Server
        • RAS RD Session Host Agent
        • RAS Guest Agent
        • RAS Remote PC Agent
        • Tenant Broker
        • Active Directory and Domain Services ports
        • Azure Virtual Desktop
      • RAS performance counters
Powered by GitBook

© 2025 Parallels International GmbH. All rights reserved.

On this page
  • Connection
  • Logging
  • Update
  • PC keyboard
  • Single sign-on
  • Advanced
  • Global
  • Language
  • Printing
  • Windows client
  • RemoteFX USB redirection
  • Customer Experience Program

Was this helpful?

Export as PDF
  1. Parallels RAS 20 Administrator’s Guide
  2. User Device Management and Client Policies
  3. Client policies

Configure client policy options

PreviousAdvanced settingsNextConfigure control settings

Last updated 3 months ago

Was this helpful?

The Client options node allows you configure client policy options. Select the node and then select and configure individual items under it as described below.

Connection

On the Connection pane, specify the following options:

  • Connection Banner. Select a banner to display while establishing a connection.

  • Automatically refresh connected RAS connections every [ ] minutes. Select this option and specify the time interval to automatically refresh a connection. This will refresh the published resources list in Parallels Client.

  • When all sessions are closed. Specifies what happens when all user sessions are closed:

    • Do nothing. Nothing happens.

    • Lock workstation. The computer is locked.

    • Sign out from workstation. The current user is signed out from their account.

Note: The Lock workstation option is not supported on the .

Logging

Specify a log level for Parallels Client. Choose from the following options:

  • Standard

  • Extended

  • Verbose

You should normally use the Standard logging. When you have an issue with Parallels Client, you can temporarily raise the log level by selecting Extended or Verbose and setting start date/time and a duration. Note that start date and time correspond to the local client time zone. Parallels Client must be running in order for the logging to take place. If Parallels Client is launched when Extended or Verbose levels should be already in effect, the level will stay on for the remainder of the original duration setting. If a policy changes during this time, the actual log level settings will be reapplied accordingly.

Update

Note: This option works with Parallels Client for Windows only. Parallels Client for Mac can be updated only from the App Store. Parallels Client for Linux does not support this feature.

PC keyboard

To force a particular keyboard to be used, select the Force use PC keyboard and select a keyboard layout from the drop-down list. Note that the selected layout can and will only be used in a Parallels Client version that supports this particular layout.

Single sign-on

Parallels Client for Windows comes with its own SSO component that you can install and use to sign in to Parallels RAS. If you already use a third-party credential provider component on your Windows computers, you first need to try if the single sign-on works right out of the box. If it doesn't, you need to configure Parallels RAS and Parallels Client to use the Parallels RAS SSO component to function as a wrapper for the third-party credential provider component.

To use Parallels RAS SSO as a wrapper, specify a third-party component, select the Force to wrap third party credential provider component option and specify the component's GUID in the field provided. You can obtain the GUID in Parallels Client as follows:

  1. Install Parallels Client on a computer that has the third-party component installed.

  2. In Parallels Client, navigating to Tools > Options > Single Sign-On (tab page).

  3. Select the "Force to wrap..." option and then select your provider in the drop-down list.

  4. Click the Copy GUID to Clipboard button to obtain the component's GUID.

You will also need to specify the component's GUID when setting up an invitation email in the RAS Console. If you haven't set up an invitation email yet, you can do it as follows:

  1. In the RAS Console, select the Start category and then click the Invite Users item in the right pane.

  2. On the second page of the wizard (target platform and connection options), click the Advanced button.

  3. In the dialog that opens, select the Force to wrap third party SSO component option and specify the GUID of the component.

After the policies are applied on Windows computers, Parallels Client will be automatically configured to use the specified third-party credentials provider.

Advanced

Use this pane to specify advanced client options, as described below.

Global

  • Always on Top. With this feature enabled, other applications will no longer mask the launcher.

  • Show connection tree. Displays the connection tree.

  • Minimize to tray on close or escape. Enable this feature to place the Parallels Client into the System Tray when you click on the Close button or hit escape.

  • Enable graphic acceleration (Chrome client).

  • Do not warn if server certificate is not verified. When connected to a RAS Secure Gateway over SSL, and the certificate is not verified, a warning message will be displayed. You can disable this warning message by enabling this option.

  • Swap mouse buttons. When enabling this setting, the mouse buttons will be swapped on the remote computer.

  • DPI aware. This will force a published application to be DPI-aware depending on the client's DPI settings. This feature works on Windows 8.1 or higher.

  • Add RAS Connection automatically when starting web or shortcuts items. This option will add the connection preferences in the Parallels Client when starting an item contained in a connection that is not yet listed.

  • Do not show prompt message for auto add RAS connection. Enable this option to disable prompt messages when adding auto connections.

  • Close error messages automatically. When a session disconnects because of an error, the error is automatically dismissed after 15 seconds.

  • Clear session cookies on exit. When a user logs on, a Parallels RAS logon cookie is kept on the client side. This will allow the user to connect again with Parallels RAS without re-authenticating. Check this option to delete any cookies when the user closes the Parallels Client.

  • Enable extended logging. Enables extended logging.

  • Turn off UDP on Client: Turns off UDP traffic from Parallels Client for Windows.

Language

Specify a language that Parallels Client should use. The Default option uses the main language used by the client's operating system.

Printing

  • Install missing fonts automatically. If automatic fonts are installed on the server, they will be available when a session connects.

  • Raw printing support. When enabling this setting, printing will still work for applications sending data in RAW format.

  • Convert non distributable fonts data to images. During RAS Universal Printing, if a document includes non-distributable fonts, each page is converted to an image.

  • Dynamic printer redirection. This feature allows you to change your redirected printers without signing out from Parallels Client.

  • Cache RAS Universal Printing embedded fonts. Caching of embedded fonts locally to speed-up RAS universal printing process time.

Windows client

  • Hide Launcher when application is launched. If this option is enabled, the launcher will be minimized in the system tray after an application is launched.

  • Launch automatically at Windows startup. This option will place a shortcut in the start menu folder of the client and the Parallels Client will launch automatically on Windows startup.

RemoteFX USB redirection

  • Allow RDP redirection of other supported RemoteFX USB devices to all users. This setting applies to Parallels Client for Windows only. Outside Parallels RAS, the standard RemoteFX USB redirection feature must be enabled via Group Policy in order to work. When you select the "Allow RDP redirection ..." option on this screen, it will do the same as GPO, which is update the corresponding registry setting in Windows on a client machine. Parallels Client for Windows relies on this feature to be enabled in Windows registry in order to redirect USB devices. When the policy containing this setting is applied on a client machine, the user will see a message that RemoteFX USB redirection was enabled and that they will need to restart Windows.

Customer Experience Program

Select Check for updates on startup and specify an update URL if you want Parallels Client to check for updates when it starts. The URL can point to the Parallels website or you can store updates on your local network and use this local URL. For the information on how to configure a local update server, please read .

For more information, see the section.

Participate in Customer Experience Program. This setting allows you to join Parallels Customer Experience Program. For more information about Parallels Customer Experience Program, see .

devices managed in the Kiosk mode
https://kb.parallels.com/123658
Invite users
https://www.parallels.com/about/legal/pcep/