Set up Parallels Desktop for ChromeOS

1. Set up the organizational unit or group for your ChromeOS Parallels users including the admin user. For details, see Add an organizational unit or Add or invite users to a group.
   1. Enable the Parallels Desktop license for the organizational unit or group. For details, see Manage app licenses.
   2. Enable Parallels Desktop for the organizational unit or group. For details, see the Parallels Desktop setting.
2. Enroll the admin ChromeOS device where you will create a Windows image to be deployed to devices in your organization. For details, see Enroll ChromeOS devices.

Download the Windows ISO image and create a virtual machine.

1. Go to Download Windows 10 Disc Image (ISO File).
2. On the admin device, download the image to the Downloads folder.
3. Open a Chrome browser and press Ctrl+Alt+T to open the crosh terminal.

4. Enter the command vmc create -p PvmDefault <filename.iso>.
   PvmDefault is the default image name. <filename.iso> is the name of the Windows ISO disk image file. Both are case-sensitive and must be entered as shown. The ISO disk image file must be saved in the Downloads folder.
   For example, vmc create -p PvmDefault Win10_English_x64.iso.

Use the shared profile feature, configured by default, to map user folders in a Windows virtual machine to ChromeOS folders. Windows folders like Desktop or Documents can be accessed from the ChromeOS Files app.

When you restart Windows after installing Parallels Tools, Parallels Desktop automatically creates the folder structure in the ChromeOS Files app. Each folder is mapped to the corresponding folder in Windows.

Users can then use the files in ChromeOS apps and backup using ChromeOS tools, even when Windows is not running.

However, if solutions like Roaming User Profiles or FSLogix are used in Windows, you can disable the shared profile.

1. Press Ctrl+Alt+T to open the crosh terminal.
2. Enter vmc adjust <Vmname> pvm.shared-profile off.
   <Vmname> is the name of the virtual machine. To list the existing virtual machines, use the vmc list command.

1. Press Ctrl+Alt+T to open the crosh terminal.
2. Enter vmc start <vm-name> where <vm-name> is the virtual machine name that you specified in the previous step. For example, vmc start Windows.
3. Follow the Windows setup instructions to install Windows.

1. When Windows is started for the first time, click File Explorer on the Windows taskbar.
2. Click This PCLocate Parallels Tools CD drive.
3. Double-click to launch the Parallels Tools installer.
4. (Optional) If the installer doesn't start:
   1. Right-click Parallels Tools CD.
   2. Click Open and scroll to the autorun.exe file.
   3. Double-click autorun.exe.
5. Restart Windows to complete the installation.
   You can now install the Windows applications required by your organization. Make sure you set up a volume license for Windows and other third-party software.
   Note: If you are having problems installing Parallels Tools, click MoreTroubleshooting and select Install Parallels Tools or Reinstall Parallels Tools.
6. (Optional) To generalize your Windows image, run Sysprep before exporting your image. This removes unique information from the image so that you can safely reuse it on a different computer

You must export the virtual machine as an image file and make it available to users to download.

1. Open a Chrome browser and press Ctrl+Alt+T to open the crosh terminal.
2. Enter vmc export -d <VMname> <ImageName.zip>.
   For example: vmc export -d Windows Windows.zip

<VMname> is the virtual machine name and <ImageName.zip> is the name of the target image file. The -d option creates an SHA-256 hash (checksum) file in the same folder. You need the SHA-256 checksum when you enable the windows image in the Google Admin console.

The image is exported to the Downloads folder on the device. The downloaded file is a zip file containing a .pvm file. The SHA-256 checksum file is named in this example, Windows.zip.sha256.txt. It's a text file containing the SHA-256 hash string.

To upload the Windows image, copy the .zip image file that you created in Step 6 to a storage server with HTTP or HTTPS download access. You might have data transfer limits associated with your storage server. Make sure the server has sufficient space before copying over the Windows image. We recommend you use content delivery networks (CDN) for very large deployments.

Before users can download the Windows image to their devices, you must specify the URL from which the image is downloaded and the SHA-256 hash of the Windows image file in the Admin console.

Note: If you don't specify the VM image URL or the SHA-256 hash, device users will get an error code 4. If this happens, verify that the URL and the checksum are correct.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. The User & browser settings page opens by default.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserSettings.

3. (Optional) To apply the setting only to some users and enrolled browsers, at the side, select an organizational unit (often used for departments) or configuration group (advanced). Show me how

   Group settings override organizational units. Learn more

4. Go to Parallels Desktop.
5. Click Parallels Desktop Windows image.
6. Enter the following:
   • URL—The URL from which the Windows image is downloaded. For example, http://storage.enterprise.net/VMs/Windows.zip.
     Note: The protocol HTTP or HTTPS and the .zip virtual machine image file must be included in the URL.
   • SHA-256 hash—The SHA-256 hash of the Windows image file. The vmc export command used to export an image includes an option to generate the SHA-256 hash for the exported image. The hash is exported to a file name.sha256.txt to the same destination folder. See Step 6: Export the Virtual Machine.
7. Click Save. Or, you might click Override for an organizational unit.

   To later restore the inherited value, click Inherit (or Unset for a group).

You can enable or disable the command line functionality for virtual machine users by setting the Chrome policy for users and browsers. If the command line is enabled, users can use command line tools to manage the virtual machine, for example to start or stop it.

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeSettings. The User & browser settings page opens by default.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserSettings.

3. On the left, select the organizational unit containing the device users.
4. Go to Virtual machines (VMs) and developers.
5. Click Command line access.
6. Select Enable VM command line access or Disable VM command line access.
7. Click Save.

After you apply any Chrome policies, users need to restart their devices for the settings to take effect.

If you performed all configuration steps, but the Parallels Desktop icon doesn't appear on a device or Parallels Desktop doesn't start as intended, check users’ devices to make sure the policy was applied correctly.

1. On a managed device, go to chrome://policy.
2. Click Reload policies.
3. Check the Show policies with no value set box.
4. For the policies that you set, make sure that Status is set to OK and that the policy values match what you set in the policy:
   • PluginVmAllowed—true. This policy is set by Google. If it is missing or set to false, the Parallels Desktop hasn't been enabled for the organizational unit containing devices. For help, contact customer support.
   • PluginVmImage—If this policy is missing or doesn't contain a valid URL and checksum, the Windows VM image specifications are missing. For details, see Step 7: Upload and enable the Windows image.
   • PluginVmUserId—If this policy is missing, the license is not enabled for the user in this organizational unit. For details, see Manage app licenses.
   • UserPluginVmAllowed—true. If this policy is missing or set to false, verify that users are allowed to use Parallels Desktop. For details, see the Parallels Desktop setting.

You might encounter the error codes and messages when setting up Parallels. The following table details possible errors and the suggested resolutions: