Permissions for publishing App-v packages

On our Xenapp 6.5 environment, we precache all out appv packages.
when a user logs on his or her applications are immediate available, very happy with this.
but now by accident i found out that when a regular  user is aware of the powershell command
"get-appvclientpackage -all | publish-appvclientpackage" he is able to use all appv applications.
is this by design? and how can we prevent this, users must only be able to use the applications assigned to them.
Thanks in Advance.
for publishing we use app-v publishing server and app-v management server.
Johnny Bos

Hello,
I would expect that this is by design, and that everyone involved expects it to behave like this.
A few ways forward;
Restrict powershell execution (may break things)
Hide PowerShell
If this is a concern that you feel should be addressed, you can most likely raise a support call (or design change).
Nicke Källén | The Knack| Twitter:
@Znackattack

Similar Messages

  • Published App-V package doesn´t show icon

    Hey Pro´s,
    I got a problem with one of the applications that I´m publishing with App-V (5.0 SP2).
    The icon I have chosen doesn´t show up, it just shows a default icon.
    I´ve already taken a look into the AppXManifest.xml which says:
    <appv:Shortcut><appv:File>[{Desktop}]\Cotel.lnk</appv:File><appv:Target>[{ProgramFilesX86}]\Cotel\Start_Cotel.cmd</appv:Target><appv:Icon>[{ProgramFilesX64}]\Icons\COTEL.ico</appv:Icon><appv:Arguments/><appv:WorkingDirectory>[{ProgramFilesX86}]\Cotel</appv:WorkingDirectory><appv:ShowCommand>1</appv:ShowCommand><appv:ApplicationId>[{ProgramFilesX86}]\Cotel\Start_Cotel.cmd</appv:ApplicationId></appv:Shortcut>
    I´ve also checked the existence of this ico-file within the package and it does exist, exactly at the path defined in the xml-file.
    Do you guys have any idea what the problem could be?
    Thanks in advace and best regards
    GoProo
    /e: no errors or warnings can be found in eventvwr

    Looks like you sequenced it on a x64 machine. Are you by chance deploying it to a 32-bit client?
    The reason I ask is the tokenized location will only be translated on a 64-bit client:
    [{ProgramFilesX86}]\Cotel\Start_Cotel.cmd</appv:Target><appv:Icon>[{ProgramFilesX64}]\Icons\COTEL.ico</appv:Icon><appv:Arguments/><appv:WorkingDirectory>[{ProgramFilesX86}]\Cotel</appv:WorkingDirectory><appv:ShowCommand>1</appv:ShowCommand>
    Steve Thomas, Senior Consultant, Microsoft
    App-V/MED-V/SCVMM/Server App-V/MDOP/AppCompat
    http://blogs.technet.com/gladiatormsft/
    The App-V Team blog: http://blogs.technet.com/appv/
    The MED-V Team Blog: http://blogs.technet.com/medv
    The SCVMM Team blog: http://blogs.technet.com/scvmm/
    “This posting is provided "AS IS" with no warranties, and confers no rights. User assumes all risks.”

  • To get list of permissions for iview/apps with the help of API (UME API?)

    hello all
    who can answer how to get list of permissions (list of roles or users) for iview or other application with the help of API (UME API ?)
    thanx!

    if anybody whant to know
    https://media.sdn.sap.com/html/submitted_docs/60_sp2_javadocs/ume/com/sap/security/api/acl/IAclManager.html#getAcl(java.lang.String)
    https://media.sdn.sap.com/html/submitted_docs/60_sp2_javadocs/ume/com/sap/security/api/IRole.html

  • Office 365 ProPlus App-V 5.0 Package installs Lync, Outlook, Infopath and Onenote even though they are not selected for publishing

    I have created an App-V 5.0 Package for Office 365 ProPlus using the documentation provided here:
    http://technet.microsoft.com/en-us/library/jj219422.aspx
    I am able to load the App-V Package into my SCCM 2012 SP1 environment and deploy the package to a test machine
    Within SCCM, I have configured the deployment type to only select a couple of applications.  Notice that Lync, Outlook, Infopath and Onenote are not selected.
    http://i.imgur.com/1eMxUlY.jpg
    For my deployment type, I only selected Word, Excel and Powerpoint.  Looking at my test machine, those 3 applications now show up in my start screen.
    http://i.imgur.com/amZmxAT.jpg
    I don't see any of the other Office applications be default on my start screen, so I would think all looks good.  If I type another Office application, lets say access at the start screen I get, "No apps match your search."
    http://i.imgur.com/fxbWEvb.jpg
    But if I type Lync, Outlook, Infopath or Onenote, it shows me that those applications are available, and I can launch them as an App-V application just as I could Excel, Word or Powerpoint, the applications that I wanted to have available.
    This is not what I was expecting when I went through the trouble to create an App-V package.  It looks like almost all of the apps become available on my client machine, all App-V is doing is making the application button in the start screen a little
    harder to find.
    What is interesting is that for the applications I did want published, I can search for them by just entering a few letters of the application name, and they show up with the 2013 version label, see below for an example search for Word.
    http://i.imgur.com/0LeS05z.jpg
    For the applications that I did not publish but still show up on my client, I have to type in the full name of the application for the launch button to come up.  For example, I can't type lyn and expect to see Lync, but if i type lync I will get an
    option to launch the application.  The same goes for Outlook, Infopath and Onenote, and when you do type in the full namke of the app, it doesn't show the version number like Word does as Word 2013, it just shows Lync, or Outlook, or Infopath, or
    Onenote.
    http://i.imgur.com/QV1afuc.jpg
    vs
    http://i.imgur.com/PxgSmUc.jpg
    Can anyone from Microsoft confirm that this is expected behavior.  If this is to be expected this is pretty disappointing, because a main point of the App-V package is it is the only way to limit which applications are deployed via Office 365 ProPlus
    but from what I can tell, it really isn't limiting anything beyond the start screen for most cases.

    So it looks like the config xml files are the best option
    http://blogs.technet.com/b/office_resource_kit/archive/2013/12/02/announcing-app-v-5-0-sp2-support-for-office-2013-volume-licensing-editions.aspx
    You can now use the Deployment Configuration file to configure the Office installation. One question I often get is, “How do I disable msaccess.exe or infopath.exe from an Office install if I am not using the MSI package?” This can be done by modifying the
    Deployment Configuration file in App-V with entries like the following:
    <Application Id="[(AppVPackageRoot}]\office15\MSACCESS.EXE" Enabled="false">
      <VisualElements>
        <Name>Access 2013</Name>
        <Icon />
        <Description />
      </VisualElements>
    </Application>
    That will prevent App-V from publishing msaccess.exe on the system and/or you can remove any undesired application shortcuts from publishing on the targeted computer using the shortcuts properties by deleting or commenting them out. Once you’ve configured your
    Deployment and User Configuration files, you’ll have everything you need to import the packages into your App-V environment to start testing.

  • The publisher of the uploaded package does not match the expected publisher . The publisher for this app is expected

    I have a Windows Phone Silverlight 8.1 project that i am trying to publish
    The publisher in the uploaded package does not match the
    expected publisher. The expected publisher for this app is: "CN=00000000-8F5B-44B4-BFC6-F16FB18F2358"
    I have the same Publisher Id set in the WMAppManifest file
    help me 
    thank you 

    Hi kadir u,
    >>The publisher in the uploaded package does not match the expected publisher. The expected publisher for this app is: "CN=00000000-8F5B-44B4-BFC6-F16FB18F2358"
    Based on the error information, we can see that the publisher value does not have the correct one. So please try to open the Package.appxmanifest, then modify the Publisher as "CN=00000000-8F5B-44B4-BFC6-F16FB18F2358":
    <Identity Name="*******"
    Publisher="CN=00000000-8F5B-44B4-BFC6-F16FB18F2358"
    Version="1.0.0.0" />
    Best Regards,
    Amy Peng
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • Slow Mount for App-V Packages

    Hi,
    I'm having an issue I first noticed with App-V 5 sequence packages deployed via ConfigMgr 2012 SP1 that are taking forever to mount.
    To rule out ConfigMgr i've manually copied an app-v package (around 1GB) and ran the following powershell commands locally on a test client...
    Add-AppvClientPackage -Path "path to package" | Publish-AppvClientPackage -Global | Mount-AppvClientPackage -Verbose
    The mount command takes around 25-35+ minutes to complete, which is the behaviour i'm seeing when ConfigMgr deploys the package to a client.
    If i was to just run the MSI from the same sequenced App-V Package on a client system this would complete a number of minutes.
    Whats the difference between how and what the MSI installer does and why is the mount command taking so long?
    App-V version is 5.0 SP1.
    Thanks,
    Doug

    +1
    We similarly have 30 - 45 minute mount times particularly for the larger Autodesk products (using App-V Server infrastructure) compared to 2 - 3 minutes for exactly the same package sequenced in 4.6.
    I raised a ticket with Microsoft and initially figuring it must be something in the way we were sequencing in 5.0. They played with one or two of our packages and gave a few tips to tidy up the packages, told us there were general performance issues at that
    stage with 5.0 but essentially there was no answer. To us, a package taking 20 minutes to load against 30-45 does not real make a huge difference. It is not acceptable coming from what we had with 4.6.
    I was told that a Hotfix was due to be released immediately after SP2 that would deal with some of the "performance issues" but no sign yet.
    We have been rolling out Windows 8.1 across our regional offices and have taken to sticking a member of IT in all of the App-V Groups that are required for the local office and doing the Mount on the weekend as part of the install. We can't be rolling
    out Windows 8.1 and then having the guys come in on a Monday and telling them they can't use any Apps for 2 hours. I'd be laughed out of the office.

  • Deploy permissions for side loaded win8 app

    Hello everybody,
    I've just implemented and deployed a custom Windows 8 app for my Company and deployed it using side loading.
    The app makes use of a background task which is essential for it, because the main purpose of the app is displaying some information on ist live tile. Unfortunatly this only works, after I start the app once and accept to add the app to the lock screen.
    Now, here's my question:
    How can I automatically rollout this permission for this app?
    Is there a way doing this by
    gpo
    powershell
    sccm
    I only need this functionality for the automatical deployment in my Company. The app is not deployed by the store.

    do you know if permissions need to be reset after each app update? I've already published a version of the app and just want to prevent that each user needs to set the permission once again. Updates are getting really annoying for the users if they have
    to authorize the app after each update to run in the Background..
    I've updated the app using system Center and checked replacing previous version.

  • Permissions for creating a folder in Bi Publisher

    Hi All,
    I am unable to create a folder in Bi Publisher Shared Folder.
    Regards,
    Vishwanath

    hi vishwam,
    do u have permissions that for u r login user? please check the permissions
    Bi Publisher-->Admin>Roles and Permissions>Add Folders: ( Login User name)
    Thanks,
    Saichand.v

  • Problems with Lync integration in App-V Package for Office 365 ProPlus

    We have problems with setting Lync 2013 to automatic start after Windows start with Office 365 ProPlus App-V Package made by Office Deployment Tool. We use latest version for both (ODT and download package) at Windows 7 Enterprise 64 bit.
    We have done this for Lync 2010 and also for Lync 2013 (MSI installations) and it works correctly.
    User can choose to start Lync automatically, but this settings is ignored and in virtual registry is set wrong. We look for possible ways to set this by GPO (in ADMX is not this option available) by inserting in virtual registry with Package ID and user
    SID in registry path.

    Usually setting apps to auto start sets a registry key under HKCU\Software\Microsoft\Windows\CurrentVersion\Run, but since this registry key is inside the virtual environment, Windows does not read it at logon.
    The workaround is to either set this key in the native registry (perhaps by an App-V script), or easier still, just copy the shortcut to the Start Menu\Programs\Startup folder. Since you can't really modify Office 2013 packages with the sequencer, you'd
    have to add this shortcut by modifying the deployment config file.
    Dan Gough - UK App-V MVP
    Blog: packageology.com
    Twitter: @packageologist
    LinkedIn

  • How to solve this error 'This package is using an app name that hasn't been reserved for this app: "Matest"

    i already reserved app name as Ma_Test. But only one error showing "This package is using an app name that hasn't been reserved for this app: "Matest". how to solve?

    Hello,
    You need to make sure both names match exactly

  • App for SharePoint online : Resource files can not with the app install package deployment

    I come from China, my English is not very good, bring you the confusion, I apologize;In the development of the APP to the store, I met a problem, hope someone can help me to solve, thank you very much, specific as follows:
    The development tools: vs2012
    Platform: office 365 development version
    Host:Auto
    Problem presentation:
    Press "F5" debugging running normally,Generate app install package, deploy to test environment, the app page error, tip can't find the resource file"
    error:
    Server Error in '/' Application.
    Object reference not set to an instance of an object.
    Description: An
    unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 
    Exception Details: System.NullReferenceException: Object reference not set to an instance of an object.
    Source Error: 
    Line 107: <div id="FoundareADUserIndex_PageHead">
    Line 108: <span><img alt="" src="../images/head.png" height= "45px" width="45px" /> </span>
    Line 109: <span style="color: #000000; font-size: 28px; font-weight: bold"><%=HttpContext.GetGlobalResourceObject("FoundareADUserResource", "foundare_index_head").ToString()%></span>&nbsp;
    Line 110:
    Line 111:
    Source File: c:\DWASFiles\sites\fzym9dfaguchcdqnvjrwcr2pqasevj5hpvhmcaydkdg1.0.0.0\VirtualDirectory0\site\wwwroot\Pages\Default.aspx   
    Line: 109 
    Stack Trace: 

    Hi,
    According to your post, my understanding is that you want to use resource files in your SharePoint app project.
    Here is an article for your reference:
    http://msdn.microsoft.com/en-us/library/office/fp179919.aspx
    Code sample: SharePoint 2013: Localize the app web, host web, and remote components of an app
    http://code.msdn.microsoft.com/office/SharePoint-2013-Bookstore-328060fc/sourcecode?fileId=60464&pathId=1536365664
    Best Regards
    Dennis Guo
    TechNet Community Support

  • Best approach for publishing a paid version and an ad supported free version of the same app

    Hi,
    One of my Windows 8 store app is almost ready for store submission.
    What is the best approach for publishing a paid version and  an ad supported  free version of the same app.
    Can I do the following
    1. Submit the app with unlimited free trial to store
    2. During the free trial ads will be displayed
    3. If the user purchases the app, then the ad would not displayed
    Any advise is greatly
    appreciated.
    Best Regards

    Although the in-App purchase option is good but for ad based apps my approach is different.
    I would suggest putting 2 different apps in the store, one free with Ads and one without. Reason being you want the extra reference and xaml ad controls depending upon how
    many you have on the paid version of the apps. I would keep my apps as lighter and cleaner as possible specially when its a paid app.
    I currently manage both free and paid app through one solution and reuse most of the code except for the views.
    Binoj Daniel www.CodeRewind.com

  • 1 App-v package for server and clients?

    Hi,
    Please verify if this setup is correct.
    The idea is to deploy an App-v 5.0 package to servers as well as pc's.
    Deploy of an app-v package with 2 deployment types:
    1.for a Windows 2008 R2 without any dependency = prereq Windows 2008 R2 (no dependency to App-v 5 since it is installed in build of server)
    2.for a Windows 7 X64 with dependency App-v 5.0 hotfix 5 (which has a dependency to App-v 5)
    ... and 2 deployments:
    1.to a terminal server farm (which has App-v 5.0 RDS deployed already), mandatory
    2.to Windows 7 pc's (not to users for now), also mandatory
    This to avoid having two sepeare App-v applications for the same source.
    Please advise or correct.
    J
    Jan Hoedt

    Looks fine, I have stopped using the App-v client as a dependency, I set it as a requirement instead as it makes it easier to manage the App-v client as there are no dependecies to take care of.
    Regards,
    jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • Cp 8.0.1,What difference between "Publish for Devices" and "Publish for Devices (App) ?

    i think "Publish for Devices" and "Publish for Devices (App). it same.
    "Publish for Devices (App)" for easy connect phonegap.
    "Publish for Devices"  for advance user.
    not sure you understand but i only share.

    Publish for Devices (App) is to publish your captivate project as a native application using PhoneGap API.
    Publish for Devices is the normal html publish but for Responsive project. It will publish your project as html content and later you can upload it on some LMS or WebServer to view the content on devices using Browser. It has not nothing to do about advance users.
    In both the cases the content will change according to the size of the viewing device.

  • Adobe Presenter is unable to publish this presentation. Please check that you have enough disk space and you have appropriate permissions for the destination folder.

    I have Presenter 10 and published already my presentation to adobe connect. But now I cannot do that any more. I can't publish to my computer or as pdf also. I used collaboration and then put it off, but no effects. Where is the problem?

    Hello Thomas,
    I also deleted files in C:\Windows\Temp, but that didn't help, I still don't have a presenter add in icon in a ribbon, but under the new windows account I have presenter in a ribbon. 
    I am using Adobe Presenter 10, MS PowerPoint 2013 and Windows 7 Professional (Service Pack 1). On my "old" account I can see presenter in File, Options, Add-Ins as Inactive Application Add Ins. Every time I check it to be active, but all without result. So I prepare the slides on my account and go to another account for publishing. I'll be happy to resolve this problem.
    Svetlana

Maybe you are looking for