UEM GPO on Users OU or Computers OU ??

[ahmad090]

hi,

i want to implement Horizon 7 with UEM.

Does UEM GPO have to be applied on OU containing VDI Users and computers ? or can users OU not be under UEM GPO ?

[sjesse]

Computers, thats where I had them prior to using the noAD mode, and everything worked as expected.

[sjesse]

Here is information on noad mode if your not familar

https://kb.vmware.com/s/article/2148324

basically instead of a gpo controlling uem, you point UEM to a config file. For enviornments with multiple domains I'm pretty sure this is a requirement,

[ArnoM · Accepted solution]

Create the UEM GPO (although this contains user settings) and apply them on the Computer OU.

Enable Loopback processing mode and configure this to Replace.

https://techzone.vmware.com/sites/default/files/vmware-user-environment-manager-deployment-considera...​

https://blogs.vmware.com/euc/2015/04/vmware-user-environment-management-solution-deploy-60-minutes.h...

[balagbm2017]

For example, If I create the OU Structure as below,

Horizon (Main OU)

----->Horizon Computers(Sub OU)- Put all the Virtual desktops , Connection server, composer, UEM servers etc..  -- Apply UEM GPO *** only here, including loopback processing also

----->Horizon Users ( Sub OU)- Horizon local users, Domain user Group(security groups)--

will be the right approach???

[sjesse]

Yes that would work. I also have a horizon specific ou but place ad objects outside of that for special cases. Basically wherever the computer object is is where the gpo needs to be, and in that gpo you can enable the loopback processing.