Phase 2 — Custom Setup

With the platform validated, build your own configuration: review the bootstrapped defaults, clone and tailor a policy, publish your applications, create workspaces, and grant access through groups.

1. Review the pre-configured defaults

The system bootstraps with:

• A Default Organization.
• Four built-in policy sets: notrust, lowtrust, fulltrust, and disposable.
• Two built-in groups: everyone and webstream_administrators.
• The Desktop(Admin) workspace.

The organization's default policy is notrust (most restrictive). For a PoC, clone the lowtrust or fulltrust policy and customise it rather than editing the built-in templates. Policies control clipboard access, file-system trust, printing, network isolation, child-process rules, dialog control, session isolation and timeouts, recording, resolution, and resource limits. See Policies.

2. Publish applications

Go to Applications › Add. Use a built-in preset (Notepad, Paint, WordPad, Explorer, PowerShell) or specify a custom executable path. Key fields are name, executable path, arguments, icon path, status, and published. At least one published application is required for App Collection workspaces. See Publish an Application.

3. Create a workspace

Go to Workspaces › Add and choose a type: App Collection (grouped apps), Virtual Desktop (full desktop), or Remote Desktop. Assign your published applications and select a policy set. See Workspaces.

4. Create users and assign access

Go to Users › Add to create a test user, then use Groups to add the user to a group and assign the workspace to that group. Groups are the entitlement mechanism: they link users to the workspaces and applications they can access. The built-in everyone group already has access to the default workspace. See Groups.

5. Verify with the entitlement viewer

Open Entitlements, select your test user, and confirm the expected groups, workspaces, applications, and policies appear. This is the fastest way to confirm access is wired up correctly before handing the workspace to a real user. See Entitlements.