Windows 10 GPO Modernization and EUC Product Updates for the week ending November 30th, 2019.

VMware Digital Workspace Tech Zone Podcast – Episode 1 Record Date – 12/01/2019 Intro/Disclaimer In this Podcast we will cover VMware End User Computer (EUC) products from a technical perspective. The Podcast will only cover Generally Available (GA) products and features however at times there may be guest speakers that will discuss roadmap or announced but not currently available features or products. Agenda * Guest * Tech Zone/Tech Marketing Update * Hub Services * Workspace ONE Access * Worksapce ONE Intelligence * Horizon * Workspace ONE UEM * Productivity Apps & Tools Guest Josue Negron – Staff Architect in VMware EUC Technical Marketing Josue and I will discuss GPO Migration and his new Operational Tutorial as well as some recently released Windows 10 management features in Workspace ONE UEM. Tech Marketing Tech Zone Videos Intelligent Hub Mobile Flows JIRA Service Desk Connector Feature Walk-through Workspace ONE UEM: Auto-Device Enrollment with Apple Business Manager Reference Architecture Tutorials New Operational Tutorial on Integrating FSLogix Profile Containers with the VMware Horizon Just-in-Time Management Platform (JMP) New Blast Extreme Optimization Guide – Latest info on configuring and optimizing the Horizon Blast extreme display protocol. Fundamental Knowledge Blogs & Announcements Blog: Two-for-One Update to Network Ports on Horizon Cloud Service Asset Blog: Introducing VMware Zero Trust Announcement: New Network Ports in VMware Horizon Cloud Service Enabling Patient Device Wipe with Epic & Workspace ONE UEM Integration Ignoring the macOS Catalina Upgrade Tools Activity Path New path on Zero Trust available on TZ Deployment Considerations VMware Horizon Cloud Service on IBM Cloud Network Ports Diagrams Zero Trust Secure Access to Traditional Applications with VMware Labs The new and updated labs that were released at VMworld 2019 are publically available. Please go to labs.hol.vmworld.com/hol and search for 2051 labs to see what is available. Hub Services SaaS Update – 10/31/2019 New Features Notifications Can Be Sent as Urgent A notification marked as Urgent can be used to alert users of important updates that require their immediate attention. Urgent messages block access to the Intelligent Hub app until users act on the notification. Note: To view Urgent notification, Workspace ONE Intelligent Hub app 19.10 or later must be installed on iOS and Android devices. Mac support will follow in a later release. On macOS devices, when a notification is marked as Urgent, users see it as a high-priority notification. Notification Builder Usability Enhancements Configuring the Completed Action Button textbox is no longer required when a notification is repeatable. Only the Action Button text is displayed. When creating custom notifications, you now receive a warning message when the notification message is too large. The maximum size limit of a notification message is 399 KB. Workspace ONE Access Workspace ONE Intelligence SaaS Release Update Version 19.11.13 Windows App Approvals with ServiceNow Integration You can now configure your Windows 10 apps to require approval before installing, all while using your existing ServiceNow processes. Version 19.10.30 Custom Connectors for Automation You can now add your favorite REST API supported systems as built-in connectors. Customize actions and workflows simply by uploading a Postman collection and then using the action within any workflow. Horizon Horizon Update There is a public beta available for App Volumes 4. If you’d like to participate check out the VMware EUC blog for details on the new features and how to get into the beta: https://blogs.vmware.com/euc/2019/11/app-volumes-beta.html Workspace ONE UEM and Related Products Workspace ONE UEM Workspace ONE 1910 – Released to SaaS on 10/31/2019 macOS Device Traffic Rule for macOS Tunnel Windows 10 Sensors Enhancements, run Powershell scripts in 64-bit context Proxy Awareness for Enrollment Smart Groups – new OEM & Model Filters Chrome OS Certificate Lifecycle Management Lost Mode – Remotely Disable Lost or Stolen Devices Workspace ONE Assist macOS Support Incremental Permissions on Remote View Granular control over Assist Features at Admin Level Disabled Notifications on Corporate Owned Rugged Devices Support for Whiteboarding on Windows 10 Productivity Apps & Tools VMware Secure Email Gateway v2.14 – GA on 11/27/2019 New Features Updated Java version to jre1.8-u231 Added support for identifying the .rpmsg file type within attachment exclusion list Bug Fixes VMware Workspace ONE Web for Android v7.10 – GA on 11/25/2019 New Features Web is now available as a Share option Open URLs from any app into Web using the native share option Kiosk mode enhancements Open hyperlinks from Boxer into Web multi-tab kiosk mode Ability to disable long press/right click in kiosk mode - This can be configured by setting the following KVP in SDK custom settings {"DisableLongPressInKiosk":"true/false"} VMware Workspace ONE PIV-D Manager for iOS v1.5 – GA on 11/6/2019 New Features Added feature to digitally sign PDF files using a derived credential certificate in PIV-D. Bug Fixes VMware Workspace ONE Web for iOS v7.11 – GA on 11/18/2019 New Features Web now supports Dark Mode introduced in iOS 13!  Web is now available in native share sheet Open URLs from any app into Web using the native share option Kiosk mode enhancements Open hyperlinks from Boxer into Web kiosk mode Ability to disable long press/right click in kiosk mode - This can be configured by setting the following KVP in SDK custom settings {"DisableLongPressInKiosk":"true/false"} Bug Fixes VMware Workspace ONE Assist for Windows Mobile/CE v5.3 – GA on 11/13/2019 Bug Fixes VMware Workspace ONE Assist for Windows 10 v5.3 – GA on 11/13/2019 New Features Support for Remote View ONLY with Incremental Permissions to preserve user trust. The following new cases are supported - Ability to restrict admins to View only session based on the permissions granted in the admin roles Ability to start a session as a View only session and request for control from the end user Ability to revoke control by the end user during an active session Role Based access to features and functionality within WS1 Assist. The following features can be customized at an Admin role level – Remote View Remote Control File Manager Command Line/Shell Registry Editor White Boarding on Windows 10 Supporting ‘How to’ use cases becomes easier now with the introduction of White boarding on Windows 10 platform. Support personnel can now draw and highlight elements on the remote desktop to better communicate with the end user. Bug Fixes VMware Workspace ONE Assist for macOS v5.3 – GA on 11/13/2019 New Features Workspace ONE Assist now supports macOS platform in addition to Android, iOS, Windows 10 and Windows CE. Experience the same consistent workflow supported on all other supported platforms Tools Supported for macOS. Share Screen – Allows view and control of remote device screen. Manage Files -- Provides access to file system on the remote device. Remote Shell – Send terminal commands remotely via a secure channel. Notable Features. Enhanced privacy and security features like mandatory PIN entry authentication, Persistent notifications, and end user control like pause and resume session. Ability to access apps and settings that require admin permissions Shortcuts to commonly used settings and applications. Multiple monitor support. Detailed app and process related information available for export. Automatic reconnection after reboot and network interruptions. Support for Proxy on the network VMware Workspace ONE Assist for Android v5.3 – GA on 11/13/2019 New Features Support for Remote View ONLY with Incremental Permissions to preserve user trust. Ability to restrict admins to View only sessions based on the permissions granted in the admin roles Ability to start a session as a View only session and request for screen control from the end user Ability to revoke control by the end user during an active session Role Based access to features and functionality within WS1 Assist. The following features can be customized at an Admin role level – Remote Control - Allows view and control of a remote device. Remote View – Allows View ONLY access to a remote device. NOTE: If Remote View and Control are enabled, a session is initiated as view only but user can be requested for access to control screen File Manager - Provides access to manage files on the remote device Command Line/Remote Shell - Provides access to execute commands via command line interface on a remote device Registry Editor - Provides access to make registry changes on Windows mobile devices Support for Android Q Disable Persistent notification (Blue Halo) and Toast messages on unattended client for Corporate Owned Rugged devices On-screen notifications like the Blue “Halo” and toast messages will be disabled This change will only affect Fully managed – Corporate Owned Rugged devices using the Unattended Assist agent (DA and DO mode) Android COPE/BYOD will continue to display on-screen notifications Eliminate the need for OEM Specific service application on Zebra With introduction of Android Q, Zebra will discontinue providing platform signatures  Assist 5.3 agent will support remote control on Zebra devices using the Zebra provided API’s. As a result, customers no longer need to deploy a Service APK to Zebra devices running android Q and later. Bug Fixes VMware Workspace ONE PIV-D Manager for Android v1.4.1 – GA on 11/13/2019 Bug Fixes VMware Workspace ONE SDK for Android v19.10 – GA on 11/12/2019 New Features The SDK for Android now supports use of the new Tunnel protocol in addition to the legacy proxy protocol. Updated SDK authentication UI to the latest Android Biometric APIs. Added Javadoc improvements for Client SDK APIs. Making continuous security improvements. Bug Fixes VMware Workspace ONE Boxer for Android v5.12 – GA on 11/07/2019 New Features Modern Auth Fallback improvements We have made improvements to what happens when Modern Auth fails and the user needs to revert to entering a password to authenticate. New Application: Workspace ONE Notebook Are you looking for the ability to sync Notes and Tasks from Exchange to your mobile device? VMware has a new application called Workspace ONE Notebook to do just that! More information can be found here. The admin guide for configuration can be found here. To standardize the configuration of our productivity applications, In the near future Boxer will be removing the key AppForceActivateSSO from the Application Configuration settings. The new functionality with behave as if the key AppForceActivateSSO is set to “true”. Please make sure to test that your environment still works with this key set to “true” before we change the default to be “true” and remove the option to set it to “false”. Please test Login flows, passcode, and copy-in restriction. More information on AppForceActivateSSO can be found in the Boxer Admin Guide. Bug Fixes VMware Workspace ONE Notebook for Android v1.2 – GA on 11/11/2019 New Features Certificate authentication with Exchange Bug Fixes