AWS Logo
Menu
Manage your Entra ID joined Amazon WorkSpaces Personal settings

Manage your Entra ID joined Amazon WorkSpaces Personal settings

This post describes how to deploy policies to manage the Amazon DCV protocol settings on Amazon WorkSpaces Personal machines joined to Microsoft Entra ID.

workspacesamazon-workspaceseucend-user-computing
Justin Grego
Amazon Employee
Published Oct 4, 2024
Last Modified Oct 9, 2024
Traditionally, customers utilized Group Policy Objects (GPOs) to apply settings to manage the Amazon DCV (formerly WSP) protocol settings on their user's personal Amazon WorkSpaces. With the introduction of Microsoft Entra ID joined WorkSpaces, legacy Active Directory (AD) and Organizational Unit (OU) concepts are no longer an option. Entra ID joined WorkSpaces are enrolled in Microsoft Intune for their management and configuration. In this guide, you will learn how to manage the protocol configuration on these personal WorkSpaces.

Procedure

  1. From a running Windows WorkSpace, make a copy of the wsp.admx and wsp.adml files in the C:\Program Files\Amazon\WSP directory.
  2. Inside your Microsoft Intune console, choose Devices.
  3. Under By platform, choose Windows.
  4. Under Manage devices, choose Configuration.
  5. Choose the Import ADMX tab, then choose + Import.
    Screenshot of the Intune console showing the Import ADMX tab.
  6. For ADMX file, select the wsp.admx file you obtained from your WorkSpace in Step 1.
  7. For ADML file, select the wsp.adml file you obtained from your WorkSpace in Step 1.
  8. Choose Next, then choose Create.
  9. Choose the Policies tab, then choose + Create then + New Policy.
    Screenshot of the Intune console showing the Create Policy tab.
  10. For Platform, select Windows 10 and later.
  11. For Profile type, select Templates.
  12. For Template name, select Imported Administrative templates.
  13. Choose Create.
  14. On the (1) Basics page, give your policy a name and description. Choose Next.
  15. On the (2) Configuration settings page, select Amazon then WSP.
  16. Configure the policy settings required by your organization and users.
    Example of configuring a policy setting in Intune.
  17. Once all required settings are configured, choose Next.
  18. On the (3) Scope tags page, configure any tags for your environment, then choose Next.
  19. On the (4) Assignments page, under Included groups, choose + Add groups.
  20. Select the group that your Entra ID joined WorkSpaces are in, then choose Next.
  21. On the (5) Review + create page, review the configuration, then choose Create.
Your WorkSpaces Personal machines will download and apply these policy settings on their next check-in to Intune. You can select the Policy name from the list to view details on the status of the policy deployment.
Screenshot of a policy deployment status.

Conclusion

For more information on using Amazon WorkSpaces Personal with Microsoft Entra ID please see the relevant section of the Amazon WorkSpaces administration guide. See this page for an overview of the WorkSpaces settings you can configure via the DCV protocol policy. Lastly, check out the AWS End User Computing YouTube channel for additional content related to Amazon WorkSpaces and the other AWS EUC services.
 

Any opinions in this post are those of the individual author and may not reflect the opinions of AWS.

Comments