FusionAccess Features and Management · Topic 1 of 1

Policies, Service Adjustment and O&M

Learn FusionAccess policy types, peripheral, access control and folder redirection, changing and reclaiming desktops, and daily O&M, backup and logs.

  • 5 min
In a nutshell
  • Policies apply to users, user groups or desktop groups and are enforced in the HDP session.
  • Peripheral policies allow or block devices; access control limits client IP ranges and times; folder redirection keeps user data on a share.
  • Service adjustment covers spec changes, adding VMs, changing users, unassigning, reassigning and reclaiming desktops.

What it is

After desktops are provisioned, three kinds of work remain. Policy management controls what users can do in their desktops, service adjustment changes desktops and assignments as needs change, and FusionAccess O&M keeps the system running and recovers it from faults.

All three are done mainly in the ITA portal, which pushes settings to the HDC and the desktops.

Need from the businessPolicyperipherals, access, displayService adjustmentspecs, users, reclaimO and Mcheck, back up, fix

How it works

Policy management

A policy is a set of rules for the desktop session, applied to users, user groups or desktop groups. The HDA in each desktop and the HDP client enforce it during the session.

Policy areaExamples of what it controls
PeripheralUSB storage, printers, cameras, serial or parallel devices allowed or blocked
File and clipboardCopy and paste and file transfer between client and desktop
Audio and multimediaSound playback and recording, video redirection
Display and bandwidthImage quality, frame rate, bandwidth limits
Access controlWhich client IP ranges may connect, and at what times
SessionIdle timeouts and what happens on disconnection
WatermarkA visible mark on the desktop that deters screen photos
Folder redirectionUser folders kept on a network share instead of the system disk

Policies are the main tool for a secure office. Blocking USB storage, the clipboard and file transfer keeps data inside the data center.

Choosing the right policy

RequirementPolicy
User data must be stored in a network directoryFolder redirection
Only clients from certain IP segments may connectAccess control
A special device, such as a parallel cable printer, must workPeripheral
Office staff must not copy files to a USB drivePeripheral, block USB storage
Screens must show who is logged inWatermark

Folder redirection pairs naturally with linked clone desktops, whose system disk can be reset.

Service adjustment

Service adjustment covers the changes made to desktops and assignments after provisioning.

OperationNotes
Change VM specificationsAdjust vCPUs, memory or disks; power off the VM first for changes that need it
Add VMs to a groupGrow a VM group or pool when more users arrive
Add or remove usersChange who may use a desktop, for example in a static multi user group
Unassign and reassignFree a desktop from one user and give it to another
Reclaim a desktopTake back a desktop that is no longer needed
Restore a linked clone system diskReturn it to the base image; data on the system disk is lost
Migrate a VMMove a desktop to another host, through FusionCompute
Employee leavesUnassign desktopReclaim or reassignto new employeeNew user logs in through WI

A reassigned full copy desktop still holds the old user's data unless it is cleaned first.

FusionAccess O&M

RoutineTasks
DailyCheck component status, alarms, desktop states and user sessions; check the gateways
RegularRestart user desktops periodically, for example weekly, to keep them clean; do not rely on desktops running for weeks
MonthlyApply patches through the templates and run virus scans
BackupManagement data can be backed up automatically on a schedule, locally and to a remote backup server

Component backups let the administrator restore a failed management component. Use the backup taken just before the fault, so no later changes are mixed with a broken state.

Troubleshooting

Faults fall into a few groups: provisioning, login and connection, performance, peripherals and application compatibility. A steady method works for all of them.

Collect informationCheck alarmsRead logsLocate the faultFix and verify

For a failed provisioning task, read the error in the task center first, then the alarms, then the logs in the VM, such as the Sysprep logs for a full copy desktop. For login problems, check whether WI is reachable, the account works in AD, the desktop is registered with the HDC and the gateway is up.

Thin clients are managed from TCM, which pushes upgrades and settings and shows their state.

A worked example

A hospital wants nurses' files kept on a server and USB sticks blocked. The administrator creates a policy with folder redirection to a file server and a peripheral rule blocking USB storage, and applies it to the nurses' desktop group.

Later a parallel cable printer stops working, and the peripheral policy is adjusted to allow that device.

How the exam asks about this

  • "Which policy stores user data in a network directory?" -> Folder redirection.
  • "Clients outside a configured IP segment must not connect. Which policy is used?" -> Access control.
  • "What is lost when a linked clone desktop's system disk is restored?" -> Any data saved on the system disk.

What to remember for the exam

  • Policies apply to users, user groups or desktop groups and are enforced in the HDP session.
  • Peripheral policies allow or block devices; access control limits client IP ranges and times; folder redirection keeps user data on a share.
  • Service adjustment covers spec changes, adding VMs, changing users, unassigning, reassigning and reclaiming desktops.
  • Power off a VM before specification changes that need it, and expect system disk data loss when a linked clone is restored.
  • O&M means daily checks of components and alarms, regular desktop restarts, scheduled backups and a steady troubleshooting order.
Watch out

Restoring a linked clone system disk or reassigning a full copy desktop affects user data. Confirm where the data lives before either action.

Common mistakes

Using a peripheral policy to restrict client addresses. Restricting which IP ranges may connect is an access control policy.

Changing VM specs on a running desktop. Some changes need the VM powered off, and users should be warned first.

Restoring any backup at hand. Choose the backup taken just before the fault, not one that may already contain the broken state.

Check yourself

  • Which policy should be used so that user files survive a linked clone reset?

    Folder redirection, which stores the user's folders on a network share instead of the system disk.

  • What does reclaiming a desktop do?

    It takes a desktop that is no longer needed back from its user, so the resources can be reused or reassigned.

  • What should be checked first when a desktop provisioning task fails?

    The error shown in the ITA task center, followed by the alarms and the logs in the VM.

Topic 1 of 1 in FusionAccess Features and Management

Test yourself on FusionAccess Features and Management

The full Huawei H13-511 question bank has 600 questions, with timed practice exams and an explanation for every answer.

This study guide is independent and is not affiliated with, endorsed by, or sponsored by Huawei. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.