HOWTO Configure an exclusion on RES PowerFuse Application(s) or PowerLaunch object(s)

Recently we’ve received a question from one of our customers, who would like to create an access control exclusion on managed application(s) in RES PowerFuse 2008. The existing access control of the application is based on an Active Directory group with 100 users. The customers goal is to exclude 10 users from this application.

Normally the following steps should be performed:
1. Remove the existing AD group with 100 users
2. Create a new AD group with 90 users (10 excluded)
3. Add the new AD Group with 90 users at the access control part of the application

With the use of Workspace Containers it’s possible to create an exclusion without changing the existing access control configuration.

1. Create a new AD Group with the 10 users which should be excluded (Grp_Exclude in this example)
2. Create a Workspace Container with “Include all Computers”

3. Add the newly created AD Group at the access control and select “Exclude members of the selected group”

4. Add the newly created Workspace Container to the Workspace Control node of the application

When a user is only member of Workspace Containers without access control (same behaviour when “Exclude members of the selected group” is selected) the following error message appears during the logon process of the RES PowerFuse session:

To avoid this message, make sure the user has access control of at least one Workspace Container:

1. Create a new Workspace Container (for example named “All”)
2. Select “Include all computers” on the Computer Control tab
3. At identity (Access Control tab) select “Will be accessible for all users”.

Besides the use of Workspace Containers to exclude access control on applications, it’s also applicable on PowerLaunch objects.

This is an easy way to exclude a group of users from access control to a RES PowerFuse application(s) or PowerLaunch object(s) without changing the existing access control.