I have faced this issue many times when customers complained about the failure of any specific application customisations to the DEM profile archive share. It needs a lot much of effort to go through the loop of login and logoff to test that specific application. Here, I am going to explain how you can leverage FlexEngine agent to export the application-specific changes to the DEM Profile archive and troubleshoot faster. VMware docs mention those switches, adding to that I am going to provide further explanation on how you can leverage those commands. Let’s suppose for a user Tom, application ..read more

Recently, I encountered the issue related to AppCapture process. After following the normal process of capture, I didn’t see the App Volumes Packaging process in the capture VM. There could be different issues in different environments but we need to investigate step by step and recheck everything. It took me two days to rectify I was ignoring the driver thing assuming that the OS disk is discovered, It could be an issue with the template disk and uploaded the template disk Installed the AppVolume drivers. Started the packaging process on the App Volume console I see the VM in vCenter was r ..read more

VMware Horizon with Dynamic Environment Manager (DEM) provides session persistence with non-persistent desktops. All the users’ profile data and application configurations are maintained across sessions irrespective of changes in virtual desktops. This is controlled by DEM. But with this solution, there are two most common challenges which are based on Windows Search service which is generally disabled during optimisation as it will create a huge load on the network for pulling “.OST” file and on CPU and Disk for creating a search index and these always gets flushed on subsequent logoff. Now c ..read more

VMware EUC portfolio provides two products which can do user profile management in VDI solution. These two solutions are: Writable Volume (WV) by App Volume Profile by Dynamic Environment Manager (DEM) The AppVolume WV provides a virtualised storage location for the user profile where it captures the user’s profile data as well as application customisations. WV are independent of each user and admins don’t have any direct control over these volumes in order to manage the user’s profile. Let’s take an example here: User has a VDI with AppVOL WV launched the XYZ application and did certain cha ..read more

With the release of Horizon 2212, VMware provides a way to integrate and manage the assignment of app packages directly from the Horizon console. While exploring the same, I encountered an error of invalid certificate configured for App Volumes Manager. This is known issue if you are using AppVolume with self-signed certificate and can be mitigated by adding the AppVolume Manager’s Self-signed SSL certificate into all Horizon Connection servers into local machine’s Trusted root authorities store In my case, it was not a self-signed SSL certificate, it was Enterprise CA-signed certificate and ..read more

VMware Dynamic Environment Manager (DEM) can do wonders for Windows OS as well as for User Profile and there is huge content available on VMware Docs as well as Internet world for various use cases and issues around it When we look at DEM for Linux, then there is a limited feature available at Create a Horizon Smart Policy in User Environment Manager in VMware Docs and there is a twist to the story here. DEM in Horizon for Linux doesn’t use DEM FlexEngine agent instead it relies on Horizon Agent itself. It leads to lot more changes in the configuration which is not highlighted in the documents ..read more

I have been working with multiple customers and there has been a concern to block admin access to local admin user as well as domain users for administration console from Internet. As of now there is no native feature to block this from WS One Access console and requires the implementation of Reverse proxy for such solution. In case, customer doesn’t have Reverse Proxy solution they can leverage on VMware Unified Access gateway as RP for WS One Access. This article talks about the generic configuration where in Proxy patterns doesn’t block admin URL from internet which i have defined in this b ..read more

In this article, I will talk about on-boarding Horizon 7 pod to Horizon Cloud tenant environment. This is basically done to achieve two primary use cases: Apply subscription based license Use cloud-hosted services like Cloud Monitoring service, System Health Below are the requirements for doing the integration and high level architecture from VMware itself. You can refer to article. Horizon 7 Pod on-premises Horizon Cloud Tenant Horizon Cloud Connector High Level Architecture Let’s start with the on-boarding process Login to Horizon Cloud Tenant portal using your myvmware credentials and ..read more

In this blog, I am going to walk you through the deployment of Horizon Pod on Azure Cloud from scratch. For this setup, I am deploying Active Directory in the same subscription in different Virtual network. There are many requirements for Horizon Pod on Azure which you can find on official docs. I am listing high level of what all we need to deploy pod on Azure. Below are must requirements and rest we can carry out during the provisioning. Azure Tenant with Valid Subscription Horizon Cloud Control Plane Active Directory Domain Services On-premises AD AD in Azure Cloud Azure AD Domain Service ..read more

Further in this series after Azure & OKTA SAML integration, I will be discussing about SAML integration of UAG with Ping IdP. This can be achieved by following the below three steps which are explained in detail below: Ping IdP configuration UAG details as per your organization Upload SAML Metadata from IDP to UAG Configure Horizon Settings on UAG for SAML Integration Setup Details:Horizon 7.11 or higher configured with UAG 3.8 or higher. Portal ID: https://<PublicIP/DomainName>/portal Portal SSO URL: https://<PublicIP/DomainName>/portal/samlsso Ping integrated with with same ..read more