I'm trying to leverage the new DEM Computer Smart Policies to apply the new "Idle time until disconnect" value on some VMs used in an Operating Room.
For some reason, I cannot get it to work.
The EventLogs in the VM state: Event ID 24601 -- "Both Horizon Smart Policies computer settings and ADMX-based computer settings are disabled via configuration, so computer environment settings are disabled."
I have already manually applied the registry keys to allow Computer Policies, and recomposed the pool.
the ConfigFilePath attribute is pointing to the DEM Config share. I'm wondering if there are Share Permission changes required for access by the computer object?! Normal DEM accesses via the logged in user, and I'm assuming this is happening BEFORE user login, so maybe the Authenticated Computer needs read access?
The documentation does not mention permissions, so I was wondering if anyone has actually got this working. I'd just add it, but it requires a Change Form, and having a Storage Team process the Change.
John
Here are my settings. I've added Domain Computer (Read) to the share, but still cannot get this to work properly.
Where would I find additional logging for the Computer policies?
I guess I'll add a couple more variables to capture the logs as found here: FlexEngine Configuration for Computer Environment Settings (vmware.com)
I was kinda hoping that Computer Logging would be available via Group Policy, as it is for the User Flex Engine Logging...
I added Debug Logging via the following Registry variables...but still no logging.
I don't really see much discussion in the forums about the new Computer-Based policies.
Is anyone using it yet?
My Event Log still states that DEM Computer Policies are "disabled via configuration".
I'm hoping that in the next release, there will be ADMX files to manage the Computer Policies for DEM...because this is a mess.
If I manually run the FlexEngine.exe -UemRefreshHorizonComputerPolicy
I still get EventID 24601 -- "Both Horizon Smart Policies computer settings and ADMX-based computer settings are disabled via configuration, so computer environment settings are disabled."
UPDATE:
The Online Guide states the following:
"To configure VMware Dynamic Environment Manager to apply computer environment settings, edit the Windows registry settings in the HKLM\SOFTWARE\VMware, Inc.\VMware UEM\Agent\Computer Configuration key as necessary until they comply with the descriptions that follow."
UPDATE2:
Turns out it was some strange hidden character (or something) in my Group Policy that added the Computer Configuration key and values.
I deleted them and recreated them locally and it worked fine. Very odd, as the Reg keys looked perfect.
Hello guys, I am still unable to make this working in our env. 😞 , i am getting the same message about
when i do flexengine refresh
I have this deployed by GPO
What I am doing wrong?
Update: When i recreate that key as John, it looks it did something and showed this in log, which seems working
But how can i deliver that change for our VDIs by GPO then? I think most of the settings need to happen on the start of the logging otherwise not applied, so could advise how to fix this?
Update 2
Now I am getting this after I have added that Enabled=1 key into the image instead of ot deploy by GPO
But the problem about to deliver settings still persist 😞 ... we also have domain computers added as read and execute as security for the share plus as read permission directly set on the share, how come its still not working and not applying anythin?
Thanks @DEMdev for reply!
Correct after I have added those reg keys into an image instead of deliver by GPO, it started to deliver some settings for computer indeed.
What I am still missing though is that log for computer part created, see my screen about reg keys added into an image, that ComputerFlex.log file isn't created at all, so I can't trace whats wrong with the rest of the settings I want to deliver and those are not applied by DEM 😞
So I would like to make that logging working first to see what happens behind 🙂
Hello @DEMdev ,
My apologize for later response, its me again as re-named @Skocza , trying to resolve the with enabling Computer environment within DEM (version 2006 currently).
I have checked those event logs where I have found this for the issue, see the screenshots:
Then this when refresh flexengine
Could be there some guide with better described "how to" for computer permissions adding for the specific folders? Should it be as domain computers added as follows?:
- for config folders (where also general folder contained) see on screenshot below
+ that for sharing permissions
- for Profile folder
Those above seetings plus all those in registry of course to have comp emv enabled, which flexengine logs says its enabled, but I cant deliver any settings or have that log file (for comp env.) created at all.
Thanks for any advise!
