So you may have heard rumours about App-V 5.0 applications being able to have less isolation and more entry points to the base OS. Well, that’s true, it’s all because of a new feature called Virtual Application Extensions.
This new feature allows you to be very intentional around certain Microsoft Windows components that you would like your application to be able to interact with. Depending on your application and the environment you are deploying it to you may want to enable or disable certain extensions, varying the level of isolation. The great thing about these extensions are that not only are they virtual-to-virtual but because they are registered natively on the Windows platform they are also native-to-virtual.
Here are some examples of the types of things we can have extensions for:
Well in App-V 5.0 we have two Dynamic Configuration XML files, one of which is read at the time of importing a package and affects all users, the other can be used at the time of publishing a package to target settings at a group of users. Stay tuned as I will be posting more about these XML files soon!
The good news is the sequencer does the hard work for you and automatically detects extensions and registers them in the XML files mentioned above. It is up to you to change, add or remove as you please.
Let’s take a look at the following example with virtualised Mozilla Thunderbird (mail client), virtualised Word Viewer and locally installed WordPad. In 4.x App-V a “mailto” handler in an application would not be able to natively call a virtualised mail client such as Mozilla Thunderbird. This is because Mozilla Thunderbird would not register this functionality on the base OS. In App-V 5.0 the sequencer picks up this feature and automatically adds the extension into our Dynamic Configuration XML files as shown:
This means, out the box, the mailto URL protocol will be registered natively for this package and clicking on a mailto link inside virtualised Word Viewer will invoke Mozilla Thunderbird:
Not only that but clicking on a mailto link in a locally installed application such as WordPad will also launch the mail client:
So imagine we didn’t want Mozilla Thunderbird taking over the mailto protocol handler how would we change it? Easy! Simply change the extension to false in the Dynamic Configuration file:
Once we publish using the amended settings neither virtualised Word Viewer nor locally installed WordPad can find a mail client to handle the mailto link:
Glad you found it useful Parvez!
If this is possible, then how about Context Menu's?
Could you please provide more details on it.
Good question and one that I have heard a few times. I have spoken to the product team around this and unfortunately context menus/shell extensions were out of scope for App-V 5.0. The team do appreciate the demand for this capability however.
Very nice and very informative Thamim - thanks! I'm having a hard time finding where I can disable/hide appv (v5.0) icon in systray. Any ideas? Thanks in advance.
Hi Amir, there's no setting for this at present but the demand for restricting the GUI elements has been noted.
Wondering to know.. Is there any option either in App-v 4.6 SP1 or 5.0 versions that to give a link such a way that the native/local package can reach the bubble to access the Virtual package.. Please let me know.. I am clear that I am not talking about the DSC.
There is a feature called run virtual which may interest you. It allows us to monitor for a local native process to be spawned at which point we will then start a virtual application with it. Check this blog post out: blog.stealthpuppy.com/.../app-v-5-0-delivers-internet-explorer-plugin-nirvana
Thanks for the info.. Please let me know is this is possible in App-v4.6 SP2, Actually my question is... suppose I have applicatin A [Native Package] whcvih is already installed on the machine, Application B [Virtual Package] installing upon Application A I want to access some files from A to B. Please suggest.
For application A to have access to the virtual environment for application B you will need to load it within the bubble in some way. This can be done by publishing a shortcut to the native application or maybe by calling it from a script within application B.
Seems like having the virtual application package extensions being registered in the OS can solve many application isolation issues. How is that different from Client Connection groups?
Hi there, virtual application extensions are more geared around hooks into the OS and locally available apps, connections groups cater for virtual app to virtual app visibility, check this post out for more on connection groups: blogs.technet.com/.../connection-groups-dsc-improved-for-app-v-5-0.aspx