VMware Horizon Community
icloudserv
Enthusiast
Enthusiast

Horizon View 6 Sign On problem

Hello everyone. Maybe this is noob question but How do you enable Hosted Apps in Horizon 6 or Desktops in any Horizon View to Open Up instantly without being asked for windows password?

What I have right now:

1. Horizon View Client - I login and see bunch of Apps and Desktops.

2. I click on app or desktop and instead to open it right away, it opens Windows Server 2008 R2 Window and wants something.

"The User has requested type of Logon that has not been granted" then I click OK button and it shows me User "VMWare SSO User" which I cannot find anywhere not on Domain not on any other Server... When I click on it, nothing happens, but when I click on top of it it asked me for User Name and Password, I enter Granted User and Password and it gives me something like this "To login to this computer, you must be granted the Allow...."

Am I missing something? I just want to click on App and open it up using Login and Pass I entered in View Client. Thanks in advance.Horizon Client.jpg

1.jpg

2.jpg

3.jpg

30 Replies
mpryor
Commander
Commander

You're getting confused with the different VMs I believe. The following machines need to be in the domain:

1. View connection server (your screenshot in comment #16 shows this is ok)

2. View RDSH server (agent log line from my previous comment show it is not in the domain)

The configuration of vCenter itself is unrelated.

Reply
0 Kudos
icloudserv
Enthusiast
Enthusiast

Oh Im sorry I experimented with it and removed from domain that time, now its in Domain. But it still wants to Login twice (1st time in View Client, and 2nd time into RDS Host)

VMHostedApps.jpg

Reply
0 Kudos
mpryor
Commander
Commander

Can you reproduce the problem and attach the agent support bundle now that it's put back? Also, you didn't turn on trace logging on the VM as requested - please do that too.

Reply
0 Kudos
icloudserv
Enthusiast
Enthusiast

Here you go, but how do I turn on trace logging in VM? and Which VM?

Reply
0 Kudos
mpryor
Commander
Commander

On the RDSH VM, where you're generating the support bundle. It was detailed on the original link I gave you (select option 3 - full view logging):

To enable advanced debug logging:

Open a command prompt and run:

"C:\Program Files\VMware\VMware View\Agent\DCT\support.bat" loglevels

Reply
0 Kudos
icloudserv
Enthusiast
Enthusiast

Bundle with full view logging

Reply
0 Kudos
mpryor
Commander
Commander

The debug logs you have show what I was expecting in my first comments, that SSO is attempted but Windows is blocking the logon as it thinks the account does not have permission to login:

2014-07-23T23:37:59.370-07:00 DEBUG (0168-0728) <MessageFrameWorkDispatch> [wsnm_desktop] commandhandler::startSession: Received windows credentials for SSO

2014-07-23T23:37:59.370-07:00 INFO (0168-0728) <MessageFrameWorkDispatch> [wsnm_desktop] StartSession APPLICATION request for user DOMAIN\edward with PCOIP

2014-07-23T23:38:04.908-07:00 DEBUG (0168-0460) <1120> [wsnm_desktop] vmwProtocolCnx::handleConnectionComplete - begin for sessionId=2

2014-07-23T23:38:04.908-07:00 DEBUG (02E0-0368) <872> [LogonUI] credprovider::GetCredentialCount(): Allowing autologon: credentials available from credfilter

2014-07-23T23:38:04.908-07:00 DEBUG (02E0-0368) <872> [LogonUI] cred::GetSerialization: Serializing username/password credentials. <-- we have constructed SSO logon details

2014-07-23T23:38:05.049-07:00 DEBUG (02E0-0368) <872> [LogonUI] cred::ReportResult reported authentication failure. Status=0xc000015b and substatus=0x0. <-- result here is from Windows

You've only turned trace logging on afterwards, it doesn't show anything new - I wouldn't bother attaching a new bundle though, given the above log lines I'm not expecting anything new to be revealed. It still looks to me that you have some Windows configuration or policy setting that is blocking the 'edward' user from logging on, and not something wrong in the View SSO process.

icloudserv
Enthusiast
Enthusiast

So basicly everything is setup properly but needs to be done something in Windows? Could you guide me which settings in group policy to check?

Reply
0 Kudos
icloudserv
Enthusiast
Enthusiast

GPOPolicy.jpg

Should I do anything besides this ?

Reply
0 Kudos
mpryor
Commander
Commander

The only one I'm aware of right now that would cause the message you're seeing is to make sure the user is a member of the Remote Desktop Users group or another group that has similar rights, but you said you'd already checked that.

Reply
0 Kudos
icloudserv
Enthusiast
Enthusiast

I edited few strings added VMApps and Remote Desktop Users everywhere where it could be possible since user I am trying to logon with is in both of there groups. But now I have a problem that I dont even get Second Logon screen at all.. Its just loading and loading in View Client . viewclient1.jpg

Been a while now, I tried to RDP and it opens up desktop. But in View Client its a Loading Loop

Reply
0 Kudos