Workspace Control 2022.1 (10.8.20.0)

Authorized Owners increases the security of your Workspace Control environment by not allowing untrusted software to run. Untrusted software is software that is not installed by company authorized entities, such as administrators or automation accounts.

The Authorized Owners feature was enhanced with the following capabilities:

• Blocked Paths — you can now configure rules to block software to launch from specific file paths.

  

  Workspace Control managed applications are excluded from Blocked Paths rules.

• Improved authorization checks — Workspace Control now verifies if software is allowed to run by performing the following authorization checks:

  • Managed application — Workspace Control checks if the software is a Workspace Control managed application.

  • Blocked Paths — Workspace Control checks if the software is found in any configured blocked paths.

  • Authorized Owners — Workspace Control checks if the file owner of the software matches the configured NTFS owners.

  • Authorized Certificates — Workspace Control checks if the software's certificate matches any rules configured under the Authorized Certificates node.

  • Authorized Hashes — Workspace Control checks if the software file hash matches any known authorized file hashes.

  

• Log — shows what software Workspace Control prevented from running.

For more details on the Authorized Owners feature, see the Workspace Control Administration Guide.

When starting the Workspace Control Console, any Workspace Container exceptions configured under Access Balancing are automatically removed and the Access Balancing feature is set to disabled. The Access Balancing feature is found in the Workspace Control Console, under Administration > Performance > Access Balancing.

Access Balancing has been deprecated and will be removed from the Workspace Control Console in a future version of the product. The logon information previously available under the Access Balancing node can now be found under the Diagnostics > Logon Performance node. For more details, see the Workspace Control Administration Guide.

The Ivanti Neurons for Edge Intelligence integration was removed from Workspace Control. The integration is no longer present in the Workspace Control Console and previous Neurons for Edge Intelligence configurations are removed. Ivanti Neurons Tenants are deactivated and Ivanti Neurons Agents are automatically removed 90 days later.

To manually remove Ivanti Neurons Agent, open a command prompt with administrator privileges and run the following command to trigger the uninstall of the Agent:

<Ivanti Neurons Agent file path>\STAgentManagement.exe -uninstall

If you installed the Ivanti Neurons Agent using the default installation path, the command is:

C:\Program Files\Ivanti\Ivanti Cloud Agent\STAgentManagement.exe -uninstall

If you installed the Ivanti Neurons Agent not using the default installation path, the installation directory is stored in Windows registry under the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Ivanti\Ivanti Cloud Agent\Agent\InstallDir

With the removal of the Neurons for Edge Intelligence integration, the size of Workspace Control installation MSI files is now reduced approximately by half. For example, the Ivanti Workspace Control Auto Upgrade Pack MSI file is now around 63 MB, instead of 155 MB.

User session event logs show logoff events. When the Workspace Control managed session is closed on a Workspace Control Agent, the events associated with the session logoff process are written to the event log for that session.

Text improvements have been made to the logoff events presented in Event Logs, providing a clearer understanding of the actions occurring during session logoff.

Event logs are found in the Workspace Control Console, under Diagnostics > User Sessions. The right-side pane displays on overview of the currently active Workspace Control managed user sessions. Open a user session by double-clicking on it. In the Workspace Analysis window for the selected user session, navigate to Diagnostics > Event Log and select a log.

The Offer remote assistance option is now compatible with user sessions running on Microsoft Windows Server 2019 or higher. An offer remote assistance request is redirected to the session directly instead of showing a user or session selection window.

The Offer remote assistance option is found in the Workspace Control Console, under Diagnostics > User Sessions. In the right-side pane, right-click on a user session and select Offer remote assistance to option from the context-menu.

The option is available only when the Microsoft Remote Assistance integration is enabled. For more details on Microsoft Remote Assistance, see the Workspace Control Administration Guide.

In the Workspace Control Console, under Composition > User Settings, administrators can create user settings by importing Flex configuration INI files created by VMware Dynamic Environment Manager (DEM).

The Flex Profile Kit option was renamed to VMware DEM. The option is found in the New/Edit User Setting window, under the Capturing tab. Select Add > Import > VMware DEM and import the Flex configuration INI file.

For more details, see the Workspace Control Administration Guide.