The Workspace Control Agent Service and its subprocesses

Each desktop that has the Ivanti Workspace Composer installed, has an agent service that retrieves the information from the database and stores it locally. The Workspace Composer running on the Windows desktop will use this local information and the context of the user to compose and secure (parts of) the User Workspace. As someone works in their User Workspace, information is collected by the Workspace Composer in transactions. These transactions are stored in the central database by the agent service whenever it can access the central database.

The Workspace Control Agent Service runs on all Agents and handles the communication between the Agents and the Datastore or Relay Server. The Workspace Control Agent Service is named Res.exe. The executable and its sub processes have only one instance per device.

The following information is stored at HKEY_LOCAL_MACHINE\SOFTWARE\RES\Workspace Manager / HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\RES\Workspace Manager:

Key Contains
- (root)

Datastore Connection Properties

UpdateGUIDS

Update GUIDs

Data

Access Balancing

The tasks of the Workspace Control Agent Service (Res.exe) consist of:

  • Checking Datastore connectivity

  • Unlocking and locking the user Registry

  • Handle License requests (session and application)

  • Handle logging

  • Check its own running processes

 

The Workspace Control Agent Service contains the following sub processes:

  • Pwrcache/download (checks the Datastore for changes that should be downloaded to the Agent)

  • Pwrcache/upload (checks the Agent for transactions that need to be processed by the Datastore)

  • CPUShield (CPU Optimization)

  • islogoff

 

By default, the Workspace Control Agent Service runs under the Local System account and requires the following permissions:

  • Log on as a service

  • Act as part of the operating system

  • Member of the local administrators group

  • Citrix administrator (when using Citrix XenApp)

On the Agent, also the driver service Workspace Control PE (respesvc64.exe) runs. This service runs under the local system account, which may not be changed.