How to virtual-is Active Directory?

[Sravan_k]

Hi,

How can we virtual-is AD in VDI environment?

Thank you,

Vkmr.

[Ray_handels]

You wanna do what?? .

I guess that you are trying to virtualize RSAT tools on VDI??

The problem with RSAT is that you need to have Windows Updates enabled to install it so make sure that your Packaging machine has all patches installed, otherwise you could end up with patches within your appstack.

Otherwise it is just downloading the RSAT tools and installing it and after that enabling it in Programs and Features. We have it working for over a few years now and works like a charm.

[jahegyi]

We wound up just installing this on the gold image and utilizing UEM to configure who can and can't easily see it.

[Sravan_k]

Hi Jahegyi,

How can we do that in UEM?

Thank you,

Vkmr.

[Sravan_k]

Hi Ray,

I am trying to deliver Active Directory feature to VDI users, I am using common image for all types of users.

what is the proper way to deliver AD feature to Administrators thous who had access to AD on floating pool VDI?

Thank you,

Vkmr.

[Ray_handels]

As said. Make sure that your packaging machine is up-to-date before starting sequencing. Then start sequencing, start teh RSAT installer (download it before startiong your sequence off course and then make sure to select the proper administrative tools you want to provide. You could use DISM to install or better yet activate these tools (sse this thread on how to do this).

RSAT Unattended Install

Also make sure that you enable Windows Update service before starting the installation, otherwise it simply won't install as you are installing the Windows Update file (i thought it was an MSU file).

After you sequenced it you can simply assign the appstack. Make sure that your admin users select to show administrative tools on your start menu.

[solgaeDK]

What I do is install the RSAT tools msu for Windows 10 on the image itself, but disable it thru the Programs and Features Control Panel -> Turn Windows features on or off -> uncheck Remote Server Administration Tools.

Then I create an appstack, fire the provisioning, and go back to the Programs and Features Control Panel -> Turn Windows features on or off and check all the items (or selected items) from Remote Server Administration Tools.

Works fine enough for me. That way, user can't enable it themselves without having an administrative permissions to the desktop.

You can achieve the same thing with the Windows Features with appstack this way, such as enabling Telnet Client feature.