VMware Horizon Community
CloomIT
Contributor
Contributor

Office 365 is not save activation

Hi guys. We have some problem with sing in office products.

We deploy office in  our Horizon infrastructure (floating ins. clone pool) using App Volumes and DEM. But after first logon at Horizon VM we get message that our need to activate office and that we neet to log in to Teams and OneDrive. We did it and continued work. But next day we connected in Horizon VM and office, Teams, OneDrive asked me to enter the password again. We deploy FsLogix but the problem remained...

Reply
0 Kudos
21 Replies
lansti
Hot Shot
Hot Shot

Are you also using DEM?
We are using these GPO right now:

lansti_0-1697547617623.png

With these settings in DEM:

[IncludeRegistryTrees]
HKCU\Software\Microsoft\Office\16.0\Access
HKCU\Software\Microsoft\Office\16.0\Common
HKCU\Software\Microsoft\Office\16.0\Excel
HKCU\Software\Microsoft\Office\16.0\FirstRun
HKCU\Software\Microsoft\Office\16.0\Groove
HKCU\Software\Microsoft\Office\16.0\Lync
HKCU\Software\Microsoft\Office\16.0\MAPI
HKCU\Software\Microsoft\Office\16.0\Microsoft Office 2016
HKCU\Software\Microsoft\Office\16.0\MS Project
HKCU\Software\Microsoft\Office\16.0\OneNote
HKCU\Software\Microsoft\Office\16.0\Outlook
HKCU\Software\Microsoft\Office\16.0\PowerPoint
HKCU\Software\Microsoft\Office\16.0\Project
HKCU\Software\Microsoft\Office\16.0\Publisher
HKCU\Software\Microsoft\Office\16.0\Registration
HKCU\Software\Microsoft\Office\16.0\SyncCenter
HKCU\Software\Microsoft\Office\16.0\SyncProc
HKCU\Software\Microsoft\Office\16.0\User Settings
HKCU\Software\Microsoft\Office\16.0\Visio
HKCU\Software\Microsoft\Office\16.0\Word
HKCU\Software\Microsoft\Office\16.0\Workspaces
HKCU\Software\Microsoft\Office\Access
HKCU\Software\Microsoft\Office\Common
HKCU\Software\Microsoft\Office\Excel
HKCU\Software\Microsoft\Office\OneNote
HKCU\Software\Microsoft\Office\Outlook
HKCU\Software\Microsoft\Office\PowerPoint
HKCU\Software\Microsoft\Office\Visio
HKCU\Software\Microsoft\Office\Word
HKCU\Software\Microsoft\Shared Tools\Proofing Tools
HKCU\Software\Microsoft\VBA
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles

[IncludeIndividualRegistryValues]
HKCU\Software\Microsoft\Exchange\Client\Options\PickLogonProfile

[IncludeFolderTrees]
<AppData>\Microsoft\Access
<AppData>\Microsoft\AddIns
<AppData>\Microsoft\Bibliography
<AppData>\Microsoft\Excel
<AppData>\Microsoft\MS Project
<AppData>\Microsoft\Office
<AppData>\Microsoft\Office\16.0\Lync
<AppData>\Microsoft\OneNote
<AppData>\Microsoft\Outlook
<AppData>\Microsoft\Powerpoint
<AppData>\Microsoft\Proof
<AppData>\Microsoft\Publisher
<AppData>\Microsoft\Publisher Building Blocks
<AppData>\Microsoft\Signatures
<AppData>\Microsoft\Spelling
<AppData>\Microsoft\Templates
<AppData>\Microsoft\UProof
<AppData>\Microsoft\Visio
<AppData>\Microsoft\Word
<LocalAppData>\Microsoft\Office\ONetConfig

[IncludeFiles]
<LocalAppData>\Microsoft\Office\Access.officeUI
<LocalAppData>\Microsoft\Office\Excel.officeUI
<LocalAppData>\Microsoft\Office\MSProject.officeUI
<LocalAppData>\Microsoft\Office\olkaddritem.officeUI
<LocalAppData>\Microsoft\Office\olkapptitem.officeUI
<LocalAppData>\Microsoft\Office\olkdlstitem.officeUI
<LocalAppData>\Microsoft\Office\olkexplorer.officeUI
<LocalAppData>\Microsoft\Office\olklogitem.officeUI
<LocalAppData>\Microsoft\Office\olkmailitem.officeUI
<LocalAppData>\Microsoft\Office\olkmailread.officeUI
<LocalAppData>\Microsoft\Office\olkmmsedit.officeUI
<LocalAppData>\Microsoft\Office\olkmmsread.officeUI
<LocalAppData>\Microsoft\Office\olkmreqread.officeUI
<LocalAppData>\Microsoft\Office\olkmreqsend.officeUI
<LocalAppData>\Microsoft\Office\olkpostitem.officeUI
<LocalAppData>\Microsoft\Office\olkpostread.officeUI
<LocalAppData>\Microsoft\Office\olkreportitem.officeUI
<LocalAppData>\Microsoft\Office\olkresenditem.officeUI
<LocalAppData>\Microsoft\Office\olkrespcounter.officeUI
<LocalAppData>\Microsoft\Office\olkresponseread.officeUI
<LocalAppData>\Microsoft\Office\olkresponsesend.officeUI
<LocalAppData>\Microsoft\Office\olkrssitem.officeUI
<LocalAppData>\Microsoft\Office\olkshareitem.officeUI
<LocalAppData>\Microsoft\Office\olkshareread.officeUI
<LocalAppData>\Microsoft\Office\olksmsedit.officeUI
<LocalAppData>\Microsoft\Office\olksmsread.officeUI
<LocalAppData>\Microsoft\Office\olktaskitem.officeUI
<LocalAppData>\Microsoft\Office\OneNote.officeUI
<LocalAppData>\Microsoft\Office\Powerpoint.officeUI
<LocalAppData>\Microsoft\Office\Publisher.officeUI
<LocalAppData>\Microsoft\Office\Visio.officeUI
<LocalAppData>\Microsoft\Office\Word.officeUI

[ExcludeFolderTrees]
<AppData>\Microsoft\Templates\LiveContent
<LocalAppData>\Microsoft\Office\16.0\Licensing

 

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

Do I understand correctly that I need to add registry keys here?

CloomIT_0-1697603611111.png

 

 

 

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

No, it seems that you are located in User Environment, and Registry Settings...
That section will ingest registry settings to your users, so for your office installation thats not correct.

You will need to go to Personalization meny in the top, "Create a Config file" and this config file will collect everything you want.

lansti_0-1697606389870.png

In this config, you can collect registry settings, users changes, appdata/localappdata etc folders...

But be selective, because the profiles can grow pretty large if you collect too much.

EDIT
If you create a new registry settings you mentioned in your last post, you can create this setting
[HKEY_CURRENT_USER\TEST]
"DEMConfig"="Test"
 

When you log on a windows desktop, you'll see in registry that you now have created a TEST Key with Reg_SZ DEMConfig with value Test

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

Ok. I will try but how about Teams and OneDrive setting?

I just added setting for DEM

 

CloomIT_2-1697608742478.png

 

 

but after reconnect to my VM it reguest password again(((

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

I assume you DON NOT use fslogix...
if thats correct, please go to the config and change this line in the [ExcludeFolderTrees]:
<LocalAppData>\Microsoft\Office\16.0\Licensing
to:
#<LocalAppData>\Microsoft\Office\16.0\Licensing

Save and try login and out a couple of times

# = DEM will not read whats behind...

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

We using FsLogix...

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

Configure your GPO as I mentioned above, and I think you'll need this settings afterall.
[ExcludeFolderTrees]
<AppData>\Microsoft\Templates\LiveContent
<LocalAppData>\Microsoft\Office\16.0\Licensing

in DEM, do you have several environments? Or just one?
Can you send me GPO config for FS Logix and Horizon?

In the user environment /  Shortcuts create a shortcut with name 0_Test

lansti_0-1697610333863.png


Log on and verify that this shortcut appears.

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

We have configured FsLogix in local policies on the golden image

CloomIT_0-1697612336115.png

CloomIT_1-1697612356403.png

 

 

 

But in my VM have not the folder c:\temp

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

It do not matter, you can create a shortcut to c:\test.exe, because the shortcut is just a easy way to see what environment you are connecting to, and to see that DEM is working.
I do not understand your language here, are these settings enabled?

My settings:

lansti_0-1697614409111.pnglansti_1-1697614425246.png

 

Container and Directory Naming:

lansti_2-1697614477816.png

 

Set your "include Outlook Personalization" to not configured this is captured by the DEM setting.
Verify that you are using your DEM settings, with the shortcut i mentioned...
Or, just see in your log files that DEM is working

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

Yes, these settings enabled. I created hortcut  c:\test.exe but it is not created on VM. But DEM create data on network folder as was configure before.

CloomIT_0-1697618720554.png

 

So it works correctly?

I think that we did`t configure our DEM correctly...GPO DEM

CloomIT_0-1697619143207.png

Do you mean this Log file-FlexEngine?

2023-10-18 12:25:35.037 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0
2023-10-18 13:04:11.239 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 13:04:11.590 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 13:04:13.315 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0
2023-10-18 13:06:27.171 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 13:06:27.500 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 13:06:29.180 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0
2023-10-18 13:08:42.785 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 13:08:43.087 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 13:08:44.690 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0
2023-10-18 14:36:30.336 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 14:36:30.669 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 14:36:32.321 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0

 

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

to verify that your shortcut is deployed, click on windows flag and see if it appears in the top of your menu:

lansti_0-1697621096609.png

Logfiles are located where you configured them in the GPO

lansti_1-1697621304548.png

\\server\share\%username%\logs...
And you also must configure where the archives are... as you can see in the picture.
These settings are located in User Configuration\administrativ templates\Vmware DEM(UEM)\FlexEngine...

Best regards
Lansti
CloomIT
Contributor
Contributor

The shortcut was  deployed 

CloomIT_0-1697621678126.png

Logfiles are located where you configured them in the GPO - yes that is

In log only this information now:

2023-10-18 15:22:41.393 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 15:22:41.704 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 15:32:36.069 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-18 15:32:36.390 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-18 15:32:37.925 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

You have created some ADMX-based settings as well for office?

Can you share your settings please?

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

You have created some ADMX-based settings as well for offic - no we didnt config it

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

Ok, is it working for you now, or..?
If you see in your logs, try to disable these things in DEM that you get a FATAL message on, delete your logs and log on.
Post fully logs here.
You might go into the log files and replace SERVERNAMES, username, dekstopnames with other vaules...

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

Unfortunaly i have only these log files

CloomIT_0-1697686033925.png

 

and two of them empty and file FlexEngine has only this inside

2023-10-19 09:23:46.192 [FATAL] FlexUtils::ExecuteCommand: '"C:\Program Files (x86)\VMware\Flings\Desktop Watermark\vdimark.exe"' timed out
2023-10-19 09:23:46.526 [WARN ] ADMX-based settings were not (fully) processed successfully ('User Office Configuration.xml')
2023-10-19 09:23:48.221 [WARN ] Default application settings might not apply correctly unless registry value StartupDelayInMSec in key HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize is set to 0

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

Can you send me these logs?

Best regards
Lansti
Reply
0 Kudos
CloomIT
Contributor
Contributor

Of course

Reply
0 Kudos
lansti
Hot Shot
Hot Shot

Edit: Removed my last post...

I do not quite understand your configuration here?
have you created GPOs for Computer and USER?

Best regards
Lansti
Reply
0 Kudos