May 11 2016

VMware User Environment Manager 9.0 – Setup Instructions


Create Active Directory groups

  • gg-euc-admins ==> Contains all EUC Administrators
  • gg-euc-users ==> Contains all EUC Users

Create UEM Configuration Share

Execute the following script on your FILESERVER (Run as administrator)

Create UEM Configuration Share
md D:\VDI\VDI_UEMConfig
net share VDI_UEMConfig$=D:\VDI\VDI_UEMConfig /grant:YOURDOMAIN\gg-euc-users,READ /grant:YOURDOMAIN\gg-euc-admins,CHANGE
icacls D:\VDI\VDI_UEMConfig /inheritance:r
icacls D:\VDI\VDI_UEMConfig /grant YOURDOMAIN\gg-euc-users:(OI)(CI)RX
icacls D:\VDI\VDI_UEMConfig /grant YOURDOMAIN\gg-euc-admins:(OI)(CI)F
icacls D:\VDI\VDI_UEMConfig /remove Administrators

Create UEM Profile Archive Share

Executed the following script on your FILESERVER (Run as administrator)

Create UEM Profile Archive Share
md D:\VDI\VDI_UEMProfiles
net share VDI_UEMProfiles$=D:\VDI\VDI_UEMProfiles /grant:YOURDOMAIN\gg-euc-users,CHANGE /grant:YOURDOMAIN\gg-euc-admins,CHANGE
icacls D:\VDI\VDI_UEMProfiles /inheritance:r
icacls D:\VDI\VDI_UEMProfiles /grant YOURDOMAIN\gg-euc-users:(NP)(RX,AD)
icacls D:\VDI\VDI_UEMProfiles /grant YOURDOMAIN\gg-euc-admins:(OI)(CI)F
icacls D:\VDI\VDI_UEMProfiles /grant "CREATOR OWNER":(OI)(CI)F
icacls D:\VDI\VDI_UEMProfiles /remove Administrators 


Install VMware UEM FlexEngine on the Client Desktops

Install VMware UEM FlexEngine on Client Desktop
msiexec.exe /i "VMware User Environment Manager 9.0 x64.msi" /qn INSTALLDIR="%ProgramFiles%\UEM\Flex Profiles" ADDLOCAL="FlexEngine" LICENSEFILE="VMware-UEM-9.0-GA.lic"

Install VMware UEM Management Console on the Admin Desktop

Install VMware UEM Management Console
msiexec.exe /i "VMware User Environment Manager 9.0 x64.msi" /qn INSTALLDIR="%ProgramFiles%\UEM\Flex Profiles" ADDLOCAL="FlexManagementConsole" LICENSEFILE="VMware-UEM-9.0-GA.lic"

Install VMware UEM Application Profiler on the reference Desktop (preferably a VDI)

Install VMware UEM Application Profiler
msiexec.exe /i "VMware User Environment Manager 9.0 x64.msi"/qn INSTALLDIR="%ProgramFiles%\UEM\Application Profiler"


Configure VMware UEM Management Console

Execute C:\Program Files\UEM\Flex Profiles\Flex+ Management Console.exe

  • Location UEM configuration share: \\FILESERVER\VDI_UEMConfig$
  • Personalisation Features: Select all
  • Additional Features: Select all






















VMware UEM Easy Start Configuration

  • Click Easy Start button
  • Select Desired Office versions

Configure VMware UEM Group Policy Configuration

  • Copy VMware UEM.admx and VMware UEM FlexEngine.admx templates to %systemroot%\policyDefinitions on your Active Directory Server
  • Open Group Policy Management Console on your Active Directory Server
  • Create a new GPO on the OU where users are located for which you want to configure FlexEngine
  • Go to “User Configuration – Policies – Windows Settings – Scripts” and configure the following settings
    • Logoff:
      • Script Name: C:\Program Files\UEM\Flex Profiles\FlexEngine.exe
      • Script Parameters: -s
  • Go to “User Configuration – Administrative Templates – VMware UEM – FlexEngine” and configure the following settings
    • RunFlex config files
      • Enable
      • Central location of flex Config files: \\FILESERVER\UEMConfig$\General
      • Process folders recursively: YES
    • Run FlexEngine as Group Polcy Extension (strongly recommended to enable this setting. If you choose not to do so, you must configure FlexEngine to run from a logon script)
      • Enable
      • On a GPO applied to all computer objects
        • Go to Computer Configuration – Policies – Administrative Templates – System – Logon
        • Enable “Always wait for the network at computer startup and logon”
    • FlexEngine logging
      • Enabled
      • Path and name of logfile: \\FILESERVER\UEMProfiles$\%username%.%domainname%\logs\flexengine.log
      • Log level: Warn
      • Maximum log file size in Kb: 512
      • Log total size of profile archive and profile archive backup folders: YES
    • Profile archive backups
      • Enable
      • Location for storing user profile archive backups: \\FILESERVER\UEMProfiles$\%username%.%domainname%\backups
      • Hide backup folder: NO
      • Number of backups per profile archive: 5
      • Create single backup per day: YES
    • Profile archives
      • Location for storing user profile archives: \\FILESERVER\UEMProfiles$\%username%.%domainname%\archives
      • Hide profile archive folder: NO
      • Compress profile archives: YES
      • Retain file modification dates: YES
    • Show VMware UEM logon and logoff progress information
      • Enable



Permanent link to this article:

Mar 18 2016

VMware vRealize Business – Watch Out When Upgrading from 7.0.0 to 7.0.1

At Nubera, we are in the process of designing and implementing a solution at a Service Provider with vRealize Automation and vRealize Business Standard. The versions we are using are vRealize Automation version 7.0.0 and vRealize Business Standard version 7.0.0.

After all the vRealize Automation work was done (design, installation, configuration, blueprint creations, workflow development), we started with the vRealize Business setup. One of the first steps to do after deploying the vRealize Business appliance is to register it with vRealize Automation. After registering vRealize Business with vRealize Automation we experienced however an error when we tried to provision a new blueprint. The provisioning failed with the error “Request failed while fetching item metadata: Error communication with Pricing Service“.

Three days ago however vRealize Business Standard 7.0.1 was released (now rebranded to vRealize Business for Cloud) and we noticed in the release notes that one of the known issues was exactly the error we experienced. There was however a very easy workaround described:

  • Unregister vRealize Business for Cloud with vRealize Automation.
  • Generate the self-generated certificate for vRealize Business for Cloud.
  • Re-register vRealize Business for Cloud with vRealize Automation.
  • Wait for 10 minutes for all services start.
  • Start provisioning vRealize Automation.

So we tried the workaround on our vRealize Business Standard 7.0.0 setup, but unfortunately, the error was not resolved.

Read the rest of this entry »

Permanent link to this article:

Feb 01 2016

VMware Horizon View – USB Smart Card Reader Redirection

USB Smart Card Readers can be redirected from the end-users device to a VMware Horizon View Virtual Desktop, however this is blocked by default.

To allow USB Smart Card reader redirection s it is necessary to set a few settings in the VMware Horizon View Group Policy applied to the Horizon View Desktops. The settings are depicted in the below screenshot:
On top of the above settings TCP port 32111 needs to be opened:
Applicable in this Design
VMware Horizon View Security Server * View Desktop 32111 TCP USB Redirection YES
VMware Horizon View Client * View Desktop 32111 TCP USB redirection if direct connections are used instead of tunnel connections NO
VMware Horizon View Connection Server * View Desktop 32111 TCP USB redirection if tunnel connections via the View Connection Server are used NO

Permanent link to this article:

Jan 29 2016

VMware vRealize Operations Manager – Scaling up a 2-node HA enabled vROps cluster

This blog post describes the steps to follow to scale up a 2-node HA enabled VMware vROps cluster:

Start Situation:

  • SMALL1 and SMALL2 are deployed and are configured in HA mode
  • SMALL1 is the Master node
  • SMALL2 is the Master Replica node

Process to scale-up 2 HA enabled nodes

  • Deploy 2 additional nodes (MEDIUM1 and MEDIUM2)
  • Add MEDIUM1 and MEDIUM2 to the HA cluster as additional data nodes.
  • Take the master replica node (SMALL2) offline
  • Remove the master replica node (SMALL2) from the HA cluster
  • Select one of the newly added nodes (MEDIUM1) as the new master replica
  • Take the master node (SMALL1) offline
  • Remove the master node (SMALL1) from the cluster
  • vROps will promote node MEDIUM1 as its master node
  • Select the second new node (MEDIUM2) as the new replica node.


  • During this process the cluster will restart several times, so dataloss is to be expected.
  • This migration process is not officially documented by VMware, but is currently the only way to scale-up a VMware vROps environment. VMware advises a well-thought sizing before deploying any VMware vROps nodes.
  • Having a cluster with mixed node sizes is not recommended and should only occur during a scale-up process
  • In order to make an accurate sizing estimation of your environment, VMware designed a spreadsheet to calculate the vROps environment size. The link to download the spreadsheet can be found in VMware KB 2140551

Permanent link to this article:

Jan 28 2016

VMware Horizon View – Windows 10 Golden Image Creation

In this blog post I describe the steps required to create a Virtual Machine template using Windows 10 from scratch.

Only optimizations of the core OS are described, the impact of installed applications within the guest will also need to be evaluated.

Below are the steps to follow to create an optimized Golden Image for VDI

STEP 1: VMware Template Configuration

Create a new Virtual Machine using the vSphere Web client

  • Name: depending on naming convention standards (Note: use a name of less then 15 characters)
  • Location: depending on the environment
  • Compute Resource: depending on the environment
  • Storage: depending on the environment
  • Compatibility (=Hardware version): ESXi 6.0 and later (=Hardware version 11)
  • Reference:
  • Guest OS Family: Windows
  • Guest OS Version: Microsoft Windows 10 (64-bit)
  • Customise Hardware – Virtual Hardware Tab
  • vCPUs: 2
  • Memory: 3072 MB
  • Reserve all guest memory
  • HDD: 32 GB (disk size depends on the number of expected locally installed applications)
  • SCSI Controller: LSI Logic SAS
  • Network:
  • VLAN depending on the environment
  • Connect at Power On: YES
  • Adapter Type: VMXNET3
  • CD/DVD Drive:
  • Select “Datastore ISO File”
  • browse to the appropriate OS iso file
  • Connect at Power On: YES
  • Floppy Drive: Remove
  • Video Card:
  • Select “Specify Custom Settings”
  • Number of displays: 4
  • Total Video Memory: 128 MB
  • Enable 3D support: YES
  • 3D renderer: Automatic
  • 3D Memory: 256 MB
  • Customise Hardware – VM Options tab
  • Boot options:
  • Force BIOS setup: Enable “The next time the virtual machine boots, force entry into the BIOS setup screen”
  • Advanced:
  • Settings:
  • Ensure “Enable logging” is unchecked
  • Configuration Parameters:
  • Edit Configuration Parameters
  • Add Row
  • Name: devices.hotplug
  • Value: false
  • Reference: See VMware KB 1012225
  • Click Finish

Power on the newly created VM and open the console from within the vSphere client to change the BIOS settings

  • Go to the Advanced tab – I/O Device Configuration and disable Serial Ports, Parallel Ports and Floppy Disk Controllers
  • Go to the Boot tab and change the boot order so the CD-ROM drive is the first boot device
  • Save and exit (F10)

STEP 2: Win10 OS Installation

Boot the VM from the Win10 iso file

Ensure the language, time/currency format and keyboard/input method selections are correct

Click  “Install Windows”

Accept License terms and click “Next”

Read the rest of this entry »

Permanent link to this article:

Oct 16 2015

VMware Horizon View – Authenticate with your fingerprint

Since VMware Horizon 6.2 a new functionality has been introduced to be able to log in to your VDIs and RDSH applications using the Touch ID on iPhones and iPads.

This feature is only supported with Horizon 6.2 when using Horizon Client 3.5.  The mobile device must also be running IOS 8 or later and obviously have the Touch ID hardware present.

TouchID_01 TouchID_02 TouchID_03

This functionality is however not enabled by default, but it is very easy to enable the functionality:

  • Open ADSI Edit on any connection server
  • Connect to the View ADAM database (See VMware KB 2012377)
  • Open the object DC=vdi, DC=vmware, DC=int
  • Go to Properties – Global – Common
  • Edit Attribute “pae-ClientConfig” attribute
  • Add the value “BioMetricsTimeout=-1”

There is no need to restart the connection server. The settings are active immediately.TouchID_04

See also VMware Horizon View 6.2 Documentation

Also added as an item in my blog post VMware Horizon View – Settings I should not forget


Permanent link to this article:

Sep 20 2015

Nutanix – Installation of Nutanix Community Edition on VMware Fusion (VIDEO)

This post shows the steps to take to download and install the free Nutanix Community Edition on VMware Fusion.


Go to, register, check the “Community Edition” section and follow the link to download the software.




Version 2015.06.08:

Version 2015.07.16:

Unpack the downloaded gzip file

Rename the unoacked *.img file to ce-flat.vmdk

Download the disk descriptor file from here or here

Rename the disk descriptor file to ce.vmdk


Installation Video


Permanent link to this article:

Jul 20 2015

VMware Horizon View – Using ZEN Loadbalancer to loadbalance Connection Server Traffic


Zen loadbalancer (ZLB) is as simple and easy to use open source loadbalancer. It can be used to loadbalance a variety for solutions, but here I describe how to configure it to load balance VMware Horizon View connection servers.

The Zen Loadbalancer can also be configred in an HA pair as described here, but I am limiting this article to a single load-balancer appliance.

Software Links and Versions

Server Names and IP addresses

  • Load balancer:
    • Name: ZLB01
    • IP:
  • Horizon View load balancing address:
    • URL:
    • IP:
  • Horizon View Connection servers:
    • HVCS01:
    • HVCS02:

Step-by-Step installation guide

Follow the below instructions to install the Zen Load Balancer 3.0.5

  • Create a DNS record for ZLB01 pointing to
  • Create a new zone “” and add an A-Host record pointing to
  • Download the ZEN Load Balancer ISO image from the download link mentioned above
  • Upload the downloaded iso image to one of the available vSphere datastores
  • Create a new virtual machine

Permanent link to this article:

Jun 05 2015

VMware Horizon View – Upgrade Order

Today VMware Horizon 6.1.1 was released. The upgrade procedure is described in length at

Important is that you must complete the upgrade process in a specific order.

Below a summary of the steps to take to upgrade your Horizon View environment to 6.1.1

  • Stop/halt all View scheduled tasks
  • Disable provisioning of all linked-clone desktop pools
  • Edit Desktop/pools settings: set “Refresh OS disk on logoff” to never
  • Upgrade View composer server
  • Upgrade View Connection Server
  • Upgrade View Security Server
    • Specify a security server pairing password on the Connection server that will be paired with the security server you are upgrading
    • Select “prepare for upgrade of reinstallation” to remove the existing IPsec rules
  • Upgrade GPOs
  • Upgrade View Agent on parent virtual machines
  • Edit Desktop/pools settings: set “Refresh OS disk on logoff” to “Refresh immediately” (or whatever setting you had before)
  • Enable provisioning of all linked-clone desktop pools
  • Recompose linked clone Pools
  • Upgrade View Clients

The upgrade is fairly simple and does not take too much time. I upgraded my demo environment which consists of 1 composer server, 2 connection servers, 1 security server and 1 rdsh host within 1 hour.


Permanent link to this article:

Jun 03 2015

VMware Horizon View – Script to enable the Windows Aero Interface

The other day I got a request from a customer to enable the Windows Aero interface on their linked clone VDIs. Personally I do not see any benefit in doing this (on the contrary), but apparently some users really like it, they even say they “need” it.

Due to the optimizations I do on the golden image, the necessary services to enable Windows Aero are not enabled by default. Windows Aero also requires that the Windows Experience Index score has been determined.

To enable Windows aero, run the below commands on your non-aero golden image with an elevated command prompt:

sc config uxsms start= auto
sc start uxsms
sc config themes start= auto
sc start themes
winsat formal -restart
REG LOAD "hku\temp" "%USERPROFILE%\..\Default User\NTUSER.DAT"
REG DELETE "hku\temp\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v Wallpaper /f
REG ADD "HKU\Temp\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects" /v VisualFXSettings /t REG_DWORD /d 1 /f
REG UNLOAD "hku\temp
REG ADD "HKCR\Directory\Background\shell\Aero OFF \command" /ve /t REG_SZ /d "sc stop uxsms" /f
REG ADD "HKCR\Directory\Background\shell\Aero ON \command" /ve /t REG_SZ /d "sc start uxsms" /f

The first two lines will enable and start the “Desktop Window Manager Session Manager” service

The next two lines will enable and start the “Themes” service

The fifth line established the Windows Experience Index score and runs a full set of assessments (this takes a couple of minutes)


The next four lines enables back the wallpaper and sets the visual effects to “Best performance” for the default profile.

The last two lines are optional and will add two context menus when right-clicking the desktop so you can easily enable/disable the Windows aero interface



Permanent link to this article:

Older posts «

Fetch more items

%d bloggers like this: