If you plan to deploy shared device licenses in multiple labs to your institution, you can map each lab to a different product profile on the Admin Console.
For example, you can create a product profile for labs to be unrestricted, so that anyone can use Adobe apps, even users without a school account. Additionally, you can create product profiles for other labs where access to the installed applications needs to be restricted to users with a school account. Also, you can restrict access to the applications installed in these labs based on the access policies defined on the corresponding product profiles.
In the Admin Console, navigate to the Products tab and create a new profile or select an existing profile to edit.
As a product admin, you can create or edit product profiles and assign product profile admins to these profiles. In addition, as a product admin or a product profile admin, you can manage the product profiles for which you are the administrator.
If you are creating product profiles for named user licenses, follow this procedure.
After the product profile is created, you are taken to the Configure profile screen. In this screen, you manage the following device configurations:
User Access Policy: Decide who, in your institution, can access Adobe apps and services on the device.
Egress IP addresses: Decide which devices can access Adobe apps and services based on the institution's Egress IP addresses.
Associated Machines: Decide which devices can access Adobe apps and services based on their organizational unit, IP address range, or the package deployed.
You can choose Open Access to enable anyone to access the apps on a shared device. All they need is valid credentials. Users can even sign up for a free Adobe ID and use that to access the apps. Use this option for open labs where general public, visiting students and staff, and our students access the labs and the apps. For example, shared machines in your public library or if you use the lab to provide continuing education after hours.
Use Organization user only to limit access to users you have added to the Admin Console. These users could be Adobe ID, Enterprise ID, or Federated ID users. This option is useful if you want to provide limited access to approved students and staff only. For example, a lab at a higher education institution, where users may have either Adobe IDs, Enterprise IDs, or Federated IDs.
Use Enterprise/Federated users only, to restrict access to Enterprise users only. Signing in with Adobe IDs does not enable access to the apps. This option is useful to restrict access to Enterprise users only. For example, in a K-12 lab use this option to authorize minor students to access the apps and services.
Go to the Egress IPs tab and specify IP addresses or IP ranges.
For multiple addresses and / or ranges, specify each on a separate line.
Computers connecting to Adobe from outside the defined ranges will not allow the use of shared device licenses.
Egress IPs are the public IP addresses with which the institution connects to the internet, that are assigned by their ISP or by an IP allocation authority.
Now, say a user included in this product profile, launches a Creative Cloud app on a device running Shared Device licensing. In this case, the egress IP of that device is verified against the egress IPs that you have specified above.
Choose By Microsoft Active Directory organizational units to ensure all machines that belong to a listed organizational unit are associated with a product profile. If, for example, your institution has created organizational units based on department, you can create product profiles for each department. Machines that belong to a department will be associated to a specific product profile.
Choose By LAN IP address range to ensure that all machines within the listed LAN IP address ranges are associated with a product profile. For example, choose this option if your computer labs or shared computers in a library are organized by defined LAN IP ranges.
If an associated machine has both Ethernet and Wi-Fi IP addresses, the product profile uses the Ethernet IP address.
Choose By installed package to ensure that all machines with the selected package(s) are associated with a product profile.
The associated machine options are applied in the listed order of priority.
Say profile A is configured with Active Directory OU = Library and profile B is configured with Package = Video apps. A machine in the Library OU and with the Video apps package, will be associated with profile A and not with profile B.
A maximum of 10 packages can be added to a single profile.
The Create Report option allows you to download a report of the devices in your institution that are currently activated with shared device licenses.
This report contains the following details:
- Licensed on: Date on which the device was licensed.
- Activation Status: SUCCESSFUL: Device activation was successful. UNSUCCESSFUL: Device activation failed. On activation, the device is associated with the default product profile profile. AUTO_ACTIVATED: An older version of shared device license packages is installed on the device. On activation, the device is associated with the default product profile.
- Machine DNS Name: DNS name of the machine
- IP Address: IP address of the machine
- Package ID: ID of shared device license package installed on the machine.
- Package Name: Name of shared device license package installed on the machine.
- Active Directory OU: Name of organizational unit that the machine belongs to, if any.
- Egress IP Address: Egress IP address of the network that the machine belongs to.
Follow these steps to download the report: