VDI and Remote Desktop Solutions for Chromebook

Companies are increasingly introducing or reviewing thin clients, Virtual Desktop Infrastructure (VDI), and Desktop as a Service (Daas) solutions to enhance security and maintain Windows-based legacy applications.

Computers reviewed as thin clients or zero clients are Windows-based thin clients and dedicated OS-based zero clients. These devices are more secure, but less usable (eg, laptop that can be carried around outside the company), and the cost of managing these devices is as high as a regular PC.

The dilemma of thin client adoption is that it is highly secure but not as cheap as you might think. One of the disadvantages is that the thin client of Windows OS or the zero client based on proprietary OS are not utilized very much. (In some cases, a corporate VPN connection may not be possible with a dedicated OS-based zero client solution.) In addition, some companies are demanding that they can work in an offline environment that does not have an Internet connection.

Chromebooks are emerging as new computers that solve this dilemma. Google is announcing a partnership with Citrix and VMware to connect VDI technologies to Chromebook. In addition, each solution-specific remote access app for Chromebook is already available in the Chrome Web Store.

Citrix Solution

Citrix Receiver is client software provided by Citrix. Supports remote access of Windows applications through XenDesktop and XenApp installed on Windows server or desktop. Allows access to applications, desktops, and data from any device, including Chromebook, smartphones, tablets, PCs, and Macs.

This is the screen to access the remote virtual window desktop through Citrix Receiver for Chromebook.

VMware Horizon Client Solution

Windows virtual desktop access via VMware Horizon for Chromebook

Remote Desktop Access Solution - Ericom AccessNow

Ericom has long since developed HTML5-based solutions to connect remote desktops or Windows servers (HTML5-based) without any S/W installed on Chromebook. Many schools and businesses also use it.

Remote Windows server access via Ericom's AccessNow on Chromebook

Example of creating a web page for remote Windows app access using Ericom portal page function

Google's Chrome Remote Desktop Program

Google's free app for Chrome. You can install it for free from the Chrome Web Store.

It is a module that enables mutual remote connection between computers with Chrome browser installed (Windows, Mac, Linux, Smartphone).

Chromebook users can access the Windows desktop to work remotely.

It has two functions.

1). Remote Assistance

• It is mainly for use when you need to connect to a remote computer to support it.
• On the other computer, click on "Share" after running Chrome Remote Desktop and pass the access code value to connect using this code value.

2). My Computer

• You can access remotely My Computer as My Account and connect remotely when needed.
• When registering my computer, I need to register my PIN number and enter this PIN number when connecting from a remote location.

Remote desktop access to Windows desktop using Chrome desktop module on Chromebook.

For more information for Chrome (Chromebook) Device Management- Author:Advanced Chrome Device Management - Kindle edition  - Paperback/Kindle Edition)

[Chromebook Security] How to protect your Chromebook safetly

Chromebook Security

Chromebook provides multiple layers of protection using the principle of "defense in depth." Even if one of the layers of protection is disabled, the other layers remain in effect, so take precautions to protect your data, you can use the Internet a little more peace of mind.

The following security features are built into your Chromebook:

Auto update

The most effective protection against malware is to keep all software up-to-date and to apply the latest security fixes. Existing operating systems provide different software components from different vendors, and update mechanisms and user interfaces are different, which can be difficult to manage. Chromebook automatically manages updates, so they always run the latest and most secure version.

Sandbox

On a Chromebook, all web pages and applications run in a restricted environment called a "sandbox." So when you visit an infected webpage on your Chromebook, it will not affect anything else on your computer, including other tabs or apps. The threat is being blocked.

Self-Test Booting

Your Chromebook will continue to be protected even if malware penetrates the sandbox environment. Every time you start your Chromebook, it will perform a self-check called "self-test boot." If it detects that a system has been misconfigured or damaged in any way, it usually self-heals itself without any extra effort and reverts the Chromebook to a new operating system.

Data Encryption

When you use the web app on your Chromebook, all your important data is stored securely in the cloud. Files such as download, cookies, and browser cache files may remain on some computers. Accessing these files is very difficult on Chromebooks that encrypt data using tamper-resistant hardware.

Recovery mode

If you experience a problem with your Chromebook, you can simply press a button or use keyboard shortcuts to enter recovery mode and restore your operating system to a safe version without errors.

Check out the video below to learn more about the simple and essential steps you can take to improve your security while on the go.

Recover from malware attacks

Sometimes a link or email leads to a fake site that locks the browser. These sites are called "robbery sites" or "rogue sites," and make you think that users should pay to continue using their computers. This is not true. After a few simple steps, you can unlock your Chrome browser and use your Chromebook again as usual.

Unlock Chrome browser

1. Select your Chromebook from this list and follow the instructions to reset your Chromebook. If your Chromebook is not listed, press Refresh + Power on your keyboard.
2. When you sign in to your Chromebook and open the Chrome browser, the Restore window opens.
3. Click the X in the top right corner to close the window.
4. Note: Do not click Restore. Clicking Restore will reopen the malicious webpage and lock your browser.
5. Open a few websites and make sure your browser is working properly.

Securing your Wi-FI Network

If your browser is still locked, learn more about restoring your Chromebook.

Learn more - Chromebook Security

Two-step verification for enhanced security

Gmail and G Suite provide a one-step verification to sign in with the user's email address and password most often used to sign in, and two-step verification to enter the verification code (SMS message / Google OTP / Security key).

2-step verification is the safest way to increase security when using a Google account. Even if user accounts and passwords are leaked, it is the safest method because once again you need to authenticate (send text / Google OTP / Security key) at login.

Why do I need 2-step verification?

• If you use a public PC in a public place, such as an Internet cafe, and log in to Gmail, your account may be automatically saved on the exposed or borrowed PC and leaked to others. 2-step verification prevents this.
• When presenting from outside, it prevents the leakage of account information if you log in using a PC other than your own PC.
• Sometimes Gmail accounts are leaked, preventing you from paying for game items in the Google Play Store without your knowledge.
• Prevent unauthorized use of your Gmail account information through your smartphone

In addition to this, you need to prevent your account information from being leaked for various reasons. To protect you from such information leakage, we offer 2-step verification.

There are four different 2-step verification methods we offer.

1. Send verification codes to voice or SMS messages
2. Use a one-time password with the Google Authenticator app
3. Backup code - use 10 disposable codes
4. Use the USB security key

How to set up 2-step verification

1. Log in to Gmail and click 'My Account'

2. My Account> Sign-In & Security

3. Sign-In & Security > 2 Step Verification

4. 2 Step Verification > Security Key, Voice or Text Message

An example of using 'security key' for 2-step verification.

I'm using a security key for 2-step verification. This is a security key product certified by Google. Yubico's FIDO U2F key is purchased and used. When I login to Gmail, I need to authenticate to this security key in 2-step, and I login after I press the key with the blue light on the USB port. Once authenticated, my Chromebook does not require a security key for 30 days. When I work on someone else's computer, or open a new incognito window and ask for my security key when I sign in to Gmail.

For more information- https://goo.gl/IMl8Bu  - Paperback/Kindle Edition)

The new Chromebook will come out in 2017

The new Chromebook will come out in 2017 with the following features:

• Stylus pen support
  • Use pen to input handwriting. The pen does not require recharging and is easy to buy it as a new one once lost. Handwriting input makes it easy to input through Google's machine learning. Students will be able to input mathematical formulas and formulas more easily.
•  World-facing camera support
  
  •  In a tablet-mode Chromebook with a 360-degree rotation, it was inconvenient to take a picture or video with a camera that was on the screen. To overcome this, Chromebooks equipped with a camera on the keyboard were introduced.
•  USB-C charging
  • You can use your Chromebook for at least 8 hours on a single charge, but at the same time, it allows fast charging. It is already supported by Samsung Chromebook Plus / Pro version.
• Android Apps support
  • Every Chromebook launched in 2017 says it can run "Android apps." As a result, most of the Android apps currently available on the Google Play Store will run on Chromebooks
• Adobe Apps Support
  • Optimized Adobe Suite for Chromebooks - Photoshop, Lightroom mobile, Illustrator Draw, Photoshop Sketch, Adobe Comp CC, and Create Cloud Mobile
• Powered by Creative Apps
  
  •  Among the apps that students need at school are 'Video Production Tools - WebVideo', 'Tools for Composing Music - Soundtrap', 'Story-based Multimedia Content Creation Tools - Explain Everything'
   

 Here is the image for the new Chromebook for Education:

Full Youtube Video  by Google's G Suite - https://www.youtube.com/watch?v=oBSN0lwqLVU&t=0s 

-----------------

For new book  - https://goo.gl/IMl8Bu Kindle Store - Paperback/Kindle Edition

How to use Chromebook in offline

Chromebooks are only devices you can use when you have an Internet connection. In the early days when Chromebooks were introduced to the market, there was little work to do with Chromebooks unless the Internet was connected. As a result, Chromebook models with 4G / LTE features that were always available on the internet used to be sold. (Devices supporting 4G / LTE were sold 1.5-2 times more expensive than devices supporting only WiFi)

At one time, as well as those with a critical perspective on Chromebooks, Chromebook competitors criticized it as a very limited computer that could not be compared to computers that could create documents, write emails, play games, edit photos, I have done.

In the meantime, Google has upgraded many features for Chromebooks. And also, many features have been upgraded to work offline.

Here are some of the top apps that let Chromebook users work offline.

• Write an email. Gmail offline (Gmail offline app install from the Chrome Web Store) allows you to read, reply to, search, and archive messages without an Internet connection. Gmail Offline will send mail that was created offline as soon as the Internet is connected.

• View the calendar. If you access offline from the Google Calendar app, you can view your calendar in a read-only version. To work in calendar offline mode, you must first sign in to My Calendar and choose Offline mode in Settings.

• View, create, and edit documents. The Google Drive app lets you view and edit Google Docs and presentations, spreadsheets, and drawing files. You must select "Offline" in your Google Drive settings for offline use.

• View and modify images. Your Chromebook comes with a built-in photo editor, so you can view and edit photos stored on your Chromebook. If you click the image in the file explorer, you can edit the image as follows (crop, image brightness, rotation)

• Listening to music. You can play music stored on your Chromebook while offline. You can also copy music files directly from your storage device, such as a USB memory or SD card, to your Chromebook.

• Watch the video. You can download movies and TV episodes to watch offline on the Google Play Movies & TV app. Videos purchased on the Google Play Movies site can be downloaded offline and viewed on your Chromebook. (You will not be able to watch movies on an external USB stick because you can not watch them on multiple Chromebooks or mobile at the same time with the same account.) If you download from one device and watch offline on other devices while offline, You need to delete downloaded movie)
• View Microsoft Office and Adobe .pdf files. Easily view MS Office documents and PDF files with your Chromebook without an Internet connection. (See 'Handling MS Office Documents')
• Take notes. You can use Google Keep to create and save simple notes, which are stored in the Cloud when you connect to the Internet. (Install the Google Keep notes and lists app in the Chrome Web Store)
• View web pages offline. If you've saved your webpage for offline viewing later, you can open it on Chrome on your Chromebook.
• Playing games. The Chrome Web Store offers hundreds of games and offers a variety of games that you can enjoy offline, like Angry Birds or Cube Slam.

With the release of Chrome OS version 53, you can install most of the Android apps on the Google Play Store and use them offline. As a result, finding and using offline apps on your Chromebook has become meaningless in the future.

There are over one million Android apps on the Google Play Store. You can install most of them on your Chromebook. Most of these apps work in offline mode

For More information - https://goo.gl/IMl8Bu Kindle Store - Paperback/Kindle Edition

How to effectively manage many Chromebooks and users at School

In general, when a school distributes computers to students, it requires the cost and staffing of user preferences, software, OS updates, security software updates, and replacement or repair for other computers in the event of a malfunction.  

Chromebook is easy to manage remotely through the Chrome Device Management Console. Administrator can manage all of their environments, software to be installed, automatic OS updates, and the ability to use the Internet only on a controlled network.

If a Chromebook is lost or if it is stolen in a cafe, the administrator can remotely disable the device directly and the device will be immediately logged out and no longer available. If a lost Chromebook is retrieved, the administrator can make it available immediately by changing the device to reuse.

To efficiently manage the many Chromebooks distributed to students at school, Chrome Device Management console is required. The Chrome device management console allows administrator or teacher to define and set up more than 150 policies. But It's more complicated than it sounds, and it takes a lot of time and effort to figure it out and use it efficiently. 

Key policy settings for Chrome Device Management

If you're using a Chromebook at a school that uses G Suite for Education, you may be confused by the difference between user settings and Chromebook device settings.

User settings can be set through admin console of G Suite for Education. However, Chrome Device Management console is required for Chromebook device-specific settings.

There are more than 150 policies that can be set through Chrome Device Management. The settings can be broadly categorized into five categories - User Settings, Network Settings, Device Settings, Public Session Settings, and Kiosk Settings.

One important aspect of setting up Chrome devices is setting Chrome devices to Public Session, Kiosk Settings, and Single App Kiosk Mode.

For example, if you are using a chromebook for multiple users, a business center PC, a PC for book searching in a bookstore or library, or a public PC used by several production workers in a production plant for business purposes, Device Management is setting this as a public session. You can use your PC without a login in a public session.

A single app kiosk setting lets you run only a single specified app, which only works in full-screen mode. Other apps, including things like regular Internet search, will not be available.

Typically, the most important of the administrative settings at a school will be User settings and Device settings. Public session and kiosk mode settings are optional depending on your Chromebook usage.

Differences between user and device settings

• User policies apply regardless of which devices are logged in
• Targeted users in the domain through the Admin Console.
• Control your Chrome browser environment
• Allowed apps and extension controls
• Force apps and extensions to install
• Chrome Web Store Permission Limitations
• Browser environment control - Incognito mode, history, ad hoc mode, safe browsing, malicious sites, remote access client allowed
• Proxy settings
• Control the use of screenshots, block and allow access URLs
• Print control etc.
•  Organizations that use G Suite for Education users can manage policies in the G Suite Admin console.
• Schools that do not use G Suite for Education must acquire Chrome Device Management Console licenses..

• Device policies are to control and manage devices regardless of who logs in.
• Control who can log in, how to update, etc.
• Control how users operate the device rather than what they use on the device

● Device registration and access

● Allow Guest Mode, Login Restrictions (Use only specified users), SSO,

● Chrome OS auto-update control, distribution channel control

● Manage kiosk settings

● Device status reporting

● Scheduled reboot

● Cloud Print Management

● Bluetooth control

● Stop using your device remotely

•       Device policies can only be controlled through the Chrome Device Management console through Chrome device management licensing.

●         Each policy is mutually exclusive. - There is no policy that conflicts with each other.

You can manage all users using Chromebook and set up network without having to register your device. However, device management or opt-in settings, kiosk settings, device provisioning /deprovisioning, etc. are only available if you have a Chrome Device Management license.

Companies that use Chromebooks without G Suite will need a Chrome device management license to manage their Chromebooks and manage their users.

Management topics	G Suit /GSuite for Education Admin Console	Chrome device management console
User Settings	O	O
Network Settings	O	O
Device Settings	X	O
Public Settings	X	O
Kiosk Settings	X	O
Device Provision/Deprovision	X	O

For More information - https://goo.gl/IMl8Bu Kindle Store - Paperback/Kindle Edition

-----------