Team Computers

Team computers give administrators control over managing computers that people use at your company. Team computers operate in host only mode (i.e. you cannot connect from them to another computer). These computers can be assigned to a member of your team, to a group of people on your team, or to Guest Access. You can manage and re-assign these computers from here.

Configuring Team Computers

Team Computers are provisioned by an administrator using the team's Computer Key. Once provisioned they are fully controlled by the teams administrators and can be reassigned remotely. Team Computers can only act as hosts, that means you can make connections to them but not from them.

computers.png

When a member of your team installs Parsec and signs in using email and password or SAML directly without using the team's Computer Key, administrators can still limit access to their computer by putting restrictions on the user's account through groups, but the administrator cannot reassign the computer or see it in the admin dashboard. 

Assigning Team Computers

Team computers can be assigned to a team member, to a group, or they can be unassigned.

Unassigned computers

Computers in this state have not yet been assigned or they have been explicitly unassigned. They are ready to be assigned but no one can connect to them unless they are used for Guest Access.

User assignment

A computer can be assigned to a single team member. The assigned person will be able to connect to the computer as if they had logged in on it themselves, they can however not use it as a client to connect to other computers. The assigned person can invite others to connect to the computer using either share links or the friend system. The group restrictions of the assigned person still apply and nobody outside of the team can connect (unless the computer is also used for Guest Access).

Group assignment

Computers assigned to a group are considered Shared Computers, multiple people may have access to them. It's important to note that assigning a computer to a group doesn't always mean that members of that group can connect to it, and it's also possible that members of other groups can connect to it. This is controlled through group connections. See Shared Computers for details.

Provisioning and Installing Team Computers

Team Computers are provisioned using your team id and your team's Computer Key. Each team has only one Computer Key but it can be regenerated at any time. When regenerating your Computer Key your old key becomes invalid. The newly generated Computer Key is only ever shown once so store it somewhere safe. It should be treated as a secret and not widely shared.

computers.png

To provision a computer you run a PowerShell script (available to download from the Team Computers page), passing in the team id and your team's Computer Key. As Team Computers can only act as hosts you can only use the Computer Key on Windows. When provisioning a computer you can also immediately assign it by passing additional command line arguments. A previously provisioned computer can also be reassigned by re-running the script.

Provisioning without assignment

A PowerShell script (available to download from the admin dashboard) will allow you to write the authentication file.  This script must be run as the Windows user you have previously installed Parsec to, and will overwrite the existing Parsec authentication.

To run this script, download the file and open a PowerShell window in the same directory as the file was downloaded to.  Then use the below example replacing the my_team_id with your real Parsec Team ID [not alias], and replacing teams_computer_key with your team's Computer Key.  

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key

If the computer throws an error relating to execution policy, you must configure the systems execution policy to allow running of scripts.  Here is an example that lets any script run.   This may not be the best policy for your organization, so you may want to research a policy that suits your organization.

Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope CurrentUser

On completion of the ./team-computer-setup.ps1 script running, a user.bin file will be written to:

C:\Users\%username%\Appdata\Roaming\Parsec

The script will attempt to restart Parsec if it is currently running. 

If the Team Computer successfully authenticated, it will show the hostname of the computer on the top right followed by #0

mceclip0.png

Installing Parsec

You can use optional argument "-installParsec" to install Parsec to the Windows user you are running the script as.  The below example configures the Team machine and installs Parsec to the Windows user running the script.

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -installParsec

Start Parsec at Windows system start (Machine Level User)

You can use optional argument "-machineLevelUser" to set Parsec to start at system start.  The example below configures the Team machine, installs Parsec and sets Machine Level User to the Windows user running the script.

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -installParsec -machineLevelUser

Assigning to a user

You can assign a computer to a user using their email. If the email does not match an existing team member the computer becomes reserved and once a user with a matching email joins the team the computer is automatically assigned to them. You can revoke reservations through the admin dashboard.

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -email user_email

or

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -UserId user_id

You can verify if the computer was assigned to an existing team member by viewing the username at the top right of the Parsec app. 

mceclip1.png

If the computer is reserved for a user it will show the hostname of the computer on the top right followed by #0.

mceclip0.png

 

Assigning to a group

To assign to a group you need the groups id. The group id can be found under Groups & Members in the admin dashboard. Select the group, then click Edit Group. The group id is shown under the group name.

mceclip0.png

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -groupId group_id

If the machine successfully authenticated, it will show the hostname of the computer on the top right followed by #0

mceclip0.png

Enabling Guest Access

When you enable a computer for guest access you can later schedule guest access invites to it through the admin dashboard.

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -guestAccess 1 

A computer can both be assigned to a group or user and used for guest access. 

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -email user_email -guestAccess 1 

or

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -groupId group_id -guestAccess 1 

Setting computer name

When configuring the computer you can also set it's name. If none is provided the computer's name will be grabbed from Windows. Note that when providing a name no whitespace is allowed.

./team-computer-setup.ps1 -teamId my_team_id -key teams_computer_key -name MyComputerName 
Team Computers and Guest Access

Team Computers can be enabled for Guest Access either through the Computers tab in the admin dashboard or when provisioning the computer. Once enabled the computer will show in the Guest Access tab for all admins and guest access coordinators. A Team Computer can both be assigned to a user or group and have Guest Access enabled at the same time.