Windows 10 Enterprise 2019 LTSC for Dell Wyse Thin Clients Administrator’s Guide October 2020 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. © 2020 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: Introduction................................................................................................................. 6 Technical support................................................................................................................................................................ 6 About this guide...................................................................................................................................................................
Enabling auto logon........................................................................................................................................................... 21 System shortcuts.............................................................................................................................................................. 22 Viewing and configuring SCCM components.............................................................................................................
Language codes................................................................................................................................................................. 43 Adding languages to LTSC 2019 (RS5)....................................................................................................................... 43 Windows 10 IoT enterprise language packages..........................................................................................................
1 Introduction Dell Wyse thin clients that run the Windows 10 IoT Enterprise 2019 LTSC operating system provide access to applications, files, and network resources. The applications and files are made available on machines hosting Citrix Receiver, Remote Desktop Connection, and VMware Horizon Client session. Other locally installed software permits remote administration of thin clients and provides local maintenance functions.
2 Getting started The Quick Start application launches when you boot into a thin client for the first time. This tool displays the software and hardware features of the thin client. It also provides information about the VDI applications, management software, and supported peripherals. You can also install the Wyse Easy Setup application using the Quick Start application. The Wyse Easy Setup application enables administrators to quickly and deploy configurations on thin clients.
If you log in as an administrator, the Administrator Desktop is displayed. On the right of the taskbar, click the Notifications icon to open the Action Center window. For more information about the Action Center, see Using Action Center. In addition to the Standard Desktop icons, an extended set of resources for configuring user preference settings and system administration is included in the administrator control panel. To open control panel, go to Start > Control Panel.
● Quick Action icons—Quick Action icons allow you to access All Settings and applications that you use often, such as Bluetooth to VPN. Select the Expand option to see the settings and applications such as location, the quiet hours, brightness, bluetooth, VPN, the battery saver, project, and connect.
3 Accessible applications When you log in to your thin client as an administrator or a user, the Windows desktop displays certain extended features in the Start menu. NOTE: Keyboard Caps Lock Indicator Application—Dell Keyboard driver software (KM632) software provides the Caps Lock status indication on the desktop. After you log in to your thin client, when you press the Caps Lock key to enable the Caps Lock feature, the lock symbol is displayed on the desktop.
Using VMware Horizon Client to connect to virtual desktop VMware Horizon Client is a locally installed software application that communicates between View Connection Server and thin client operating system. It provides access to centrally hosted virtual desktops from your thin clients. VMware session services can be made available on the network after you install the VMware Horizon 6. It provides virtualized or hosted desktops and applications through a single platform to end users.
Workspace app on domain and non-domain joined thin clients. For more information, see Citrix Workspace app for Windows Embedded Operating System Release Notes at support.dell.com. Configuring remote desktop connection session services Prerequisites Remote desktop connection is a network protocol that provides a graphical interface to connect another computer over a network connection. NOTE: If you use a Windows Server, or Citrix XenApp 5.
Using Ericom Connect and WebConnect client Prerequisites Ericom Connect and WebConnect client provides you with remote access to Windows desktops and applications from any compatible phone or tablet. It is dedicated for managed broker access. Ericom Connect and PowerTerm WebConnect connections use the Secure Gateway as the address. You can access the Ericom Connect-WebConnect client either as a standalone application or on a network.
Steps 1. Open the TELNET : PowerTerm InterConnect for thin clients window, using one of the following options mentioned: ● Double-click the PowerTerm Terminal Emulation icon on the desktop. ● From the Start Menu, click Ericom PowerTerm Terminal Emulation > PowerTerm Terminal Emulation. 2. In the Connect dialog box, go to Session Type > TELNET to configure the connection of your choice. Windows Media Player Windows Media Player provides an intuitive, and easy-to-use interface to play digital media files.
Cisco JVDI Agent is the JVDI connector that runs on the Citrix desktop or server. Cisco JVDI client is the JVDI package that runs on the thin client. The Jabber client that runs on the Citrix server handles the authentication, and the media processing is achieved on the thin client. Setting up the Cisco Jabber Softphone for VDI About this task This section describes how to install and use the Cisco Jabber Softphone for VDI on a Citrix desktop. Steps 1. Go to www.cisco.
For information about Cisco Jabber-related issues, see the Release notes for Cisco Jabber Softphone for VDI document at www.cisco.com. For information about accessories for headsets and speakers, see the Unified Communications Endpoint and Client Accessories article at www.cisco.com.
4 Administrative features Admin is a default user profile that is created for the user who is a member of the administrator group. To log in as an administrator, see Automatic and manual login. When you log in to your thin client device as an administrator, you can access certain notable extended features in the Control Panel. To access the Control Panel, on the taskbar, click Start Menu > Control Panel.
NOTE: Ensure that the Write Filter is disabled while managing the services. Using TPM and BitLocker Trusted Platform Module (TPM)—A TPM is a microchip that provides basic security-related functions, that primarily involve encryption keys. BitLocker Drive Encryption (BDE)—A BDE is a full disk encryption feature that protects data by providing encryption for entire volumes. By default, it uses the AES encryption algorithm in Cipher Block Chaining (CBC) mode with a 128-bit key.
5. Change the password to an alphanumeric format. 6. Go to C:\Windows\Setup. 7. Run Build_master. 8. Run Custom Sysprep if you are using Wyse Management Suite or USB Imaging tool or ConfigMgr Sysprep if you are using System Center Configuration Manager. The thin client automatically turns off. 9. Turn on the thin client and pull the image from the thin client. 10. After the image pull is complete, push the image to the target client.
. Click Turn on BitLocker in the Operating system drive section. 21. Select Enter a PIN (recommended) in the BitLocker Drive Encryption (C:) window. 22. Enter the PIN (alphanumeric characters allowed) using the keyboard and reenter PIN in the BitLocker Encryption Drive (C:) window. 23. Click Set Pin. 24. Select Save to a file in the BitLocker Encryption Drive (C:) window. 25. Click Next. 26.
CAUTION: To permanently save the information, ensure that you disable/enable the Unified Write Filter (UWF). For more information, see Before configuring your thin client. NOTE: For details about the custom field information, see the WDM and WMS documentation at www.dell.com/support. Configuring RAM disk size About this task RAM disk is a volatile memory space that is used for temporary data storage. It can also be used for temporary storage of other data according to administrator discretion.
NOTE: By default, the Enable Auto Logon check box is selected. 5. If you want to start with the Logon window with default administrator and user selections and other accounts, clear the Enable Auto Logon check box. CAUTION: To permanently save the information, disable/enable the Unified Write Filter (UWF). For more information, see Before configuring your thin clients. NOTE: If auto login is enabled and you log off from your current desktop, the lock screen is displayed.
Next steps For more information about how to use the Configuration Manager Properties dialog box, see Managing Windows-based Dell Wyse Thin Clients using System Center Configuration Manager Administrator’s Guide at support.dell.com/manuals. System Center Configuration Manager Client 2016 and 2019 Microsoft System Center Configuration Manager (SCCM) helps you to empower devices and applications which must be productive, while maintaining corporate compliance and control.
d. e. f. g. Enter a name for the printer and click Next. Select Do not share this printer and click Next. Select whether to print a test page and click Next. Click Finish to complete the installation. A test page will print after installation if this option was selected. Adding devices About this task To add a device to the thin client: Steps 1. Click the Devices and Printers icon in Control Panel and open the Devices and Printers window. 2. To open and use the Add a Device wizard, click Add a Device.
2. Use the following tabs, and configure the sound related settings: ● Playback—Select a playback device and modify the settings. ● Recording—Select a recording device and modify the settings. ● Sounds—Select an existing or modified sound theme for events in Windows or programs. ● Communications—Click an option to adjust the volume of different sounds when you are using your thin client to place or receive telephone calls. 3. Click Apply, and click OK.
The Customize Format window is displayed. b. Customize the settings, and click OK. 4. Click Apply, and then click OK. 5. In the Location tab, select a particular location to display additional information such as news and weather. 6. In the Administrative tab, change the language to be displayed in programs that do not support Unicode, and copy the settings. Managing user accounts To manage users and groups, use the User Accounts window.
Threat Defense Dell Data Protection | Threat Defense Agent (powered by Cylance) detects and blocks malware before it can affect your computer. Cylance uses a mathematical approach for malware identification. It uses machine learning techniques instead of reactive signatures, trust-based systems, or sandboxes. Dell Data Protection | Threat Defense analyzes potential file executions for malware in the operating system.
Wyse Device Agent Wyse Device Agent (WDA) is a unified agent for all thin client management solutions. Installing WDA on a thin client makes it manageable by Dell Wyse Device Manager (WDM), and Dell Wyse Management Suite (WMS). NOTE: You cannot manage Wyse 5070 thin client using Wyse Device Manager.
The support directory contains the applications, drivers, and QFE of current manifest information of the thin client. Viewing operating system image factory manifest information Steps 1. Log in as an administrator. 2. Go to C:\Windows\Setup\Tools. The BuildContent folder contains the factory manifest of the thin client. 3. View the information of the operating system image manifest.
5 Additional administrator utility and settings information This section provides additional information about utilities and settings available for administrators. Automatically launched utilities The following utilities start automatically after you turn on the system, or after you log in to the thin client: ● Unified Write Filter—After you turn on the system, the Unified Write Filter utility starts automatically.
Unified Write Filter About this task Unified Write Filter (UWF) is a sector-based write filter that protects your storage media. UWF redirects the write attempts to a virtual overlay, and intercepts the write attempts to the protected volume. This improves the stability, reliability of the device thereby reducing the wear on write media, such as solid-state drives. In UWF, overlay is a virtual storage space that saves changes made on the protected volume.
Using Unified Write Filter About this task To configure thin client devices using UWF, do the following: Steps 1. Log in as an administrator. If automatic login to a user desktop is enabled, log off from the user desktop and log in as an administrator. 2. To disable the Unified Write Filter, double-click the Dell Wyse WF Disable icon on the desktop. This icon disables the filter and reboots the system. 3. Configure the thin client device as per your requirements. 4.
Table 2. Running Unified Write Filter command–line options (continued) Command-line options Description uwfmgr file add-exclusion C: This command-line adds the specified file to the file exclusion list of the volume protected by Unified Write Filter. Unified Write Filter starts excluding the file from filtering after the next system restart. For example, to add a registry directory HKLM\SYSTEM\WPA, the command is UWFmgr.exe registry addexclusion HKLM\SYSTEM\WPA.
○ Boot Command—Shows the status of the Boot Command. UWF_ENABLE means that the UWF is enabled for the next session; and UWF_DISABLE means that the UWF is disabled for the next session. ○ RAM used by UWF—Shows the amount of RAM allocated to the Unified Write Filter in Mega bytes (MB) and Percentage. If Current Status is disabled, RAM allocated to UWF is always zero (0).
ALM CLI tool You can use the ALM CLI tool to add or remove application configuration nodes from ALM configuration file ApplicationLaunchConfig.xml. This tool is available at the installation path of the ALM application. By default, the tool is available at %systemdrive%\Program Files\ALM. Configuration of nodes using ALM You can use the following options and parameters to configure application nodes in ApplicationLaunchConfig.xml: Table 3.
It also enables you to configure multilevel logs which are essential for troubleshooting. You can clean up files, folders, and enable or disable xDCM using Application Programming Interface (API). You can also add or remove configuration nodes from the xDCM configuration file using command-line interface. NOTE: ● Existing NetXclean.ini configurations are ported to new xDataCleanupConfig.xml. ● Content in the xData Cleanup Manager are cleaned by default.
Table 8. Examples to configure nodes using xDCM (continued) Scenario Command \database, C:\Windows\logs" -Event: USER_LOGOFF -CleanType:DIR_EMPTY CleanFrom:Disk Deleting a file cleanup node under OverlayCleanup element Notepad in XdataCleanupConfig.xml. XDCM.exe -Remove -CleanupType:File Name:Notepad -CleanFrom:Overlay NOTE: ● If you log off from the thin client when UWF is disabled, the folder cleanup node is used by ClientServiceEngine service to clean up the contents inside the directory C:\Windows\S
Saving files and using local drives Thin clients use an embedded operating system with a fixed amount of disk space. It is recommended that you to save files that you want to keep on a server rather than on a thin client. CAUTION: Be careful of application settings that write to the drive C, which resides in disk space. By default, these applications write cache files to the drive C on the local system. If you must write to a local drive, change the application settings to use the drive Z.
b. Enter the domain of your choice. c. Click OK. 5. To join a thin client device to a domain, click Network ID. The Join a Domain or Workgroup wizard is displayed. On the first page of the wizard, select the option that describes your network. ● Business Network—Click this option if your thin client is a part of business network and you use it to connect to other clients at work. a. Click Next. b. Select the option according to your company’s network availability on a domain.
Managing Users and Groups with User Accounts To create and manage user accounts and groups, and configure advanced user profile properties, use the User Accounts window. By default, a new user is only a member of the Users group and is not locked down. As an administrator, you can select the attributes and profile settings for users.
About this task CAUTION: ● By default, all application settings are set to cache to C drive. It is recommended that you cache to the RAM Disk Z drive as is preset in the account profiles to avoid overflowing the Unified Write Filter cache. ● It is recommended that other applications available to new and existing users be configured to prevent writing to the local file system because of the limited size of the disk space.
dism /online /remove-package /packagename:"Microsoft-Windows-LanguageFeatures-Speech-frfr-Package~31bf3856ad364e35~amd64~~10.0.14393.0" /norestart dism /online /remove-package /packagename:"Microsoft-Windows-LanguageFeaturesTextToSpeech-fr-fr-Package~31bf3856ad364e35~amd64~~10.0.14393.0" /norestart dism /online /remove-package /packagename:"Microsoft-Windows-LanguageFeatures-OCR-fr-frPackage~31bf3856ad364e35~amd64~~10.0.14393.
Language codes Following are the list of language codes: Table 10.
7. To verify all the packages that are installed, open a command prompt with administrator privileges, and run the following commands. Only proceed when all Client-LanguagePackages are displayed along with the language specific feature on demand packages for SNMP components. dism /online /get-packages | find /i “-Language” dism /online /get-packages | find /i “SNMP” 8. Remove Language Experience appx packages.
Table 13. Chinese Traditional Language packages Microsoft-Windows-Client-LanguagePack-Package-zh-TW Microsoft-Windows-LanguageFeatures-Basic-zh-tw-Package Microsoft-Windows-LanguageFeatures-Handwriting-zh-tw-Package Microsoft-Windows-LanguageFeatures-OCR-zh-tw-Package Microsoft-Windows-LanguageFeatures-Speech-zh-tw-Package Microsoft-Windows-LanguageFeatures-TextToSpeech-zh-tw-Package Microsoft-Windows-LanguageFeatures-Fonts-Hant-Package Microsoft-Windows-InternationalFeatures-Taiwan-Package Table 14.
Table 17. French (continued) Language packages Microsoft-Windows-LanguageFeatures-TextToSpeech-fr-fr-Package Table 18. French Canadian Language packages Microsoft-Windows-Client-LanguagePack-Package-fr-CA Microsoft-Windows-LanguageFeatures-Basic-fr-ca-Package Microsoft-Windows-LanguageFeatures-OCR-fr-ca-Package Microsoft-Windows-LanguageFeatures-Speech-fr-ca-Package Microsoft-Windows-LanguageFeatures-TextToSpeech-fr-ca-Package Table 19.
Table 22. Korean (continued) Language packages Microsoft-Windows-LanguageFeatures-Basic-ko-kr-Package Microsoft-Windows-LanguageFeatures-Handwriting-ko-kr-Package Microsoft-Windows-LanguageFeatures-OCR-ko-kr-Package Microsoft-Windows-LanguageFeatures-TextToSpeech-ko-kr-Package Microsoft-Windows-LanguageFeatures-Fonts-Kore-Package Table 23.
Table 27.
6 System administration To maintain your thin client device environment, you can perform local and remote system administration tasks. Accessing thin client BIOS settings About this task To access the thin client BIOS settings, do the following: Steps 1. During system start-up, press F2 when you see a Dell logo. The BIOS Setup screen is displayed. 2. Change the BIOS settings as required. 3. Save the changes and exit.
from-anywhere using a mobile application, enhanced security such as BIOS configuration and port lockdown. Other features include device discovery and registration, asset and inventory management, configuration management, operating system and applications deployment, real-time commands, monitoring, alerts, reporting, and troubleshooting of endpoints. For more information about Dell Wyse Management Suite, go to dell.com/support/manuals.
● To configure TightVNC server, the default password is DELL. Using TightVNC to shadow a thin client About this task TightVNC Server starts automatically as a service upon thin client startup. The TightVNC Server service can also be stopped and started by using the Services window. Steps 1. Log in as an administrator. 2. Go to Start > Control Panel > Administrative Tools > Services, and then select TightVNC Server. 3. You may also use the TightVNC Server features in Start > TightVNC.
8. Click OK. NOTE: For security purposes, it is recommended that the primary password be changed immediately upon receipt of the thin client and it is for administrator use only.
7 Network architecture and server environment This section contains information about the network architecture and enterprise server environment needed to provide network and session services for your thin client. Understanding how to configure your network services Network services provided to thin clients can include DHCP, FTP file services, and DNS. You can configure, design, and manage your network services depending on the availability in your environment.
Table 28.
NOTE: For more information about installing and configuring the Citrix Studio, go to Citrix Website.
8 Installing firmware using USB Imaging Tool Firmware installation is the process of installing the Windows 10 IoT Enterprise firmware on your thin client. Use the Dell Wyse USB Imaging Tool version 3.2.0 to install the Windows 10 IoT Enterprise image on your thin client. For information about installation instructions, see the Dell Wyse USB Imaging Tool version 3.2.0 User's Guide at downloads.dell.com/wyse/.
9 Frequently asked questions How to install Skype for Business To install Skype for business on your thin clients, do the following: 1. 2. 3. 4. 5. 6. 7. 8. Log in as an administrator. Disable Unified Write Filter. Download the Skype for Business stand-alone (64-bit) from https://support.microsoft.com. Double-click the .exe file, and click Run. After the installation is complete, click Close. Launch Skype for business. On the license agreement screen, click Accept. Enable Unified Write Filter.
Using Sysprep—User Interface The System Preparation tool (Sysprep) can be configured using the inbuilt user interface. Using this tool, you can clear the data and customize the system as per your requirement. The operating system is installed as a fresh installation. The Sysprep tool is used with other deployment tools to install the Windows operating systems with minimal intervention by an administrator. Buildmaster.
Figure 1. Config Master 3. Click Next. The Configuration screen is displayed. Figure 2. Configuration 4. Select Custom configuration in the Configurations section. 5. Enable or disable hostname calculation in the Host Name calculation section. 6. Enter the appropriate values in the Configure Domain options section, and click Save Credentials—optional. 7. Click OK when prompted—optional. 8. Select Enable local account credentials changes—optional. The changes that are made to the credentials are applied.
9. Click Next. The Credential Manager page is displayed. 10. Select the user account, and type the login credentials. 11. Click Save. 12. Click Apply to save the changes. This process takes 5–10 minutes to complete. The device turns off after the Sysprep process is complete. NOTE: You cannot access the thin client if you terminate the Sysprep process. Make sure that the device is ready before you use the Sysprep tool.
Figure 4. Configuration 4. In the Configurations section, select SCCM configuration. 5. In the Host Name calculation section, enable or disable hostname calculation. NOTE: The Configure Domain Option and Configure local account credentials field are grayed out. 6. Click Apply to save the changes. After the completion of SCCM Config Sysprep, the HAgent service ends. You can now perform the pull operation using SCCM. Using Wyse Management Suite Prerequisites If you are using Wyse Management Suite 1.
● File repository—From the drop-down list, select the file repository to where the image is uploaded. There are two types of file repositories: ○ Local repository ○ Remote Wyse Management Suite repository ● Pull Type—Select either Default or Advanced based on your pull type requirement. ○ When the Default pull type is selected, the following options are displayed: ￭ Compress ￭ OS ￭ BIOS ○ When the Advanced pull type is selected, a drop-down list for selecting the template is displayed.
10 Troubleshooting Keyboard customization issues To customize the keyboard language that is not supported by default, do the following: 1. 2. 3. 4. Go to C:\Windows\system32\oobe. Delete the oobe.xml file and the related subdirectories. Customize the sysprep.xml file manually and set the keyboard, locales, and so on, to the respective language. Deploy the .xml file manually, or by using SCCM or Custom Sysprep. All preferences for keyboard, locale, time zone, countries, and so on, are applied.
CADMAP tool interfering with published application shortcut keys The Winlockworkstation.exe add-on must be pushed using Wyse Management Suite or SCCM. This feature enables you to use WIN+L key combination in remote sessions. You can enable or disable the WIN+L key combination in local sessions using WinLock Workstation application. You can also use /WE or /WD parameters to enable or disable the WIN+L key combination. In VDI sessions, WIN+L functionality works as configured on the server.
Wyse Management Suite registration information is not cleared after the Sysprep process Wyse Management Suite registration information is not cleared after the Sysprep process in Wyse 5070 Thin Clients. This leads to incorrect registration information that is displayed in the thin client. To troubleshoot the issue, do the following: Prerequisites Unregister the device from the Wyse Management Suite server before preparing the device for an image pull. Steps 1. Go to C:\Program Files\Wyse\WDA\Config. 2.
