GTO455's Posts

Adding my 2 cents as well. We recently upgraded to 2306 and seeing the error as well, but only concerning internal Connection Servers, my UAG's are showing all green. I sent my "LB Guy" the relevant... See more...
Adding my 2 cents as well. We recently upgraded to 2306 and seeing the error as well, but only concerning internal Connection Servers, my UAG's are showing all green. I sent my "LB Guy" the relevant VMware KB's, but he can't find anything wrong. Looking at the debug logs, we see the following lines, but searches haven't turned up anything of value (except this thread). Nothing immediately immediately before or following this entry provides any relevant information either. <MessageFrameWorkDispatch> [MessageFrameWork] KeyVaultWorker::MessageHandler(): KeyVault service got operation=decipherWithDerivedKey, ok=1, msecs=16 <ajp-nio-127.0.0.1-8009-exec-1> [ConnectionServerHandler] Incrementing the warning count : Reason : unrecognized request detected
Yes I did. There doesn't seem to be a config for Brave. The application profiler works OK, but I found the best config for Chrome came from users here in the forums. Since Brave is based on Chrome, ... See more...
Yes I did. There doesn't seem to be a config for Brave. The application profiler works OK, but I found the best config for Chrome came from users here in the forums. Since Brave is based on Chrome, I will just try to reconfigure that for Brave.
Does anyone have a config or config template for Brave Browser, or should I just use create one based on the Google Chrome template and change the paths accordingly? Thanks!
Hello, Has anyone else noticed their logon times on Windows 10 desktops taking longer than expected with the December KB5021233 update installed? With the update installed our logins were taking ov... See more...
Hello, Has anyone else noticed their logon times on Windows 10 desktops taking longer than expected with the December KB5021233 update installed? With the update installed our logins were taking over 2 minutes (2:15). After we removed the update and republished the pool, logins are back down to around 1:30. We ran through the entire gamut of backing out of a 22H2 upgrade, re-running the optimizations, excluding GPO's, deleting ActiveSetup stub paths, etc. Only removing this update resolved the problem. Environment: Horizon 8 2111 Windows 10 21H2 FSLogix (Office Containers) DEM 2209 AppVolumes (Appstacks only) Optimized with Microsoft VDOT Tool. Logon Monitor doesn't really tell much, but we also use Stratusphere and that provides a little bit more information. It seems "Post Logon Activity" has gone up considerably, but we did notice Searchhost taking an abnormal amount of time as well as a couple of line items involving svchost which I cannot decipher. So I streamlined the Indexing options as a result, and defragged the search database, but it is still occurring and Search is still taking a long time according to Stratusphere. If I remove the update, the login times go back to normal (for us anyway). Has anyone else noticed something similar and found a fix? There is no way our security team is going to let us proceed without this update in place.
Thanks, this is almost exactly what I am looking for.
Hello, Our VDI environment is over 3 years old now and we need to perform some housekeeping. We have instances where some users logged into VDI once when it was first brought online, and haven't us... See more...
Hello, Our VDI environment is over 3 years old now and we need to perform some housekeeping. We have instances where some users logged into VDI once when it was first brought online, and haven't used VDI since, so they have a fairly old and stale profile in UEM/DEM. Company policy states profiles 6 months or older can be removed if they haven't been used. Also, some of these older profiles have artifacts that can cause issues (registry settings, old certs, etc.) with our newer, updated images. We would like to clean up/delete these profiles, (including redirected folders and FSLogix profiles), perhaps moving them to another inaccessible area for a period of time before deleting them permanently (after backup). My initial thought was to create some type of PowerShell script to peruse through the UEM Profiles folder for all users, and based on the date of the "logs" file in the users profile folder, move it to another location. Then, based on this information, move the corresponding redirected and FSLogix folders as well. Does this sound like a good strategy? Have others performed a similar cleanup? How did you approach it?    
Hello,  Having an issue with Snip and Sketch and hope someone has seen this before an can help. We were having an issue with Snip and Sketch on our main image, reinstalled the Windows package o... See more...
Hello,  Having an issue with Snip and Sketch and hope someone has seen this before an can help. We were having an issue with Snip and Sketch on our main image, reinstalled the Windows package on the main image and all is working fine now. However, now S&S it will only work for a user logging into the desktop pool if we delete their Windows Settings folder in their UEM Profile first. Once we do that, S&S works.  Once they log out and back into VDI, S&S fails to launch again stating "You'll need a new app to open this ms-screenclip link" and we have to repeat the process. All other UWP apps (calculator, Sticky Notes, etc.) seem to work fine. Has anyone else seen this? Windows 10 21H2 Horizon 8-2111 UEM 9.11 FSlogix Default FTA profile       [IncludeFolderTrees] <LocalAppData>\Packages\ #Edge Config File already captures theses settings. [ExcludeFolderTrees] <LocalAppData>\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe [IncludeRegistryTrees] HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FileExts HKCU\SOFTWARE\Microsoft\Windows\Shell\Associations HKCU\Software\Microsoft\Windows\CurrentVersion\ApplicationAssociationToasts #From VMware KB60282 https://kb.vmware.com/s/article/60282 HKCU\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore HKCU\Software\Classes\ActivatableClasses\Package HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel HKCU\Software\Classes\Extensions\ContractId\Windows.Protocol\PackageId [IncludeIndividualRegistryValues] HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\UserSignedIn      
Deleted (Posted in DEM Community)
I probably should have added my Chrome DEM config in my initial post. It contains most of the same settings as yours (and then some). I found this config here. [IncludeRegistryTrees] HKCU\Software\G... See more...
I probably should have added my Chrome DEM config in my initial post. It contains most of the same settings as yours (and then some). I found this config here. [IncludeRegistryTrees] HKCU\Software\Google\Chrome [IncludeFiles] <LocalAppData>\Google\Chrome\User Data\First Run <LocalAppData>\Google\Chrome\User Data\Local State [IncludeFolderTrees] <LocalAppData>\Google\Chrome\User Data\Default <LocalAppData>\Google\Chrome\User Data\Profile 1 [ExcludeFolderTrees] <LocalAppData>\Google\Chrome\Default\Cache <LocalAppData>\Google\Chrome\User Data\Default\Application Cache <LocalAppData>\Google\Chrome\User Data\Default\Cache <LocalAppData>\Google\Chrome\User Data\Default\GPUCache <LocalAppData>\Google\Chrome\User Data\Default\IndexedDB #<LocalAppData>\Google\Chrome\User Data\Default\Local Storage (this is where Google Earth Settings are saved) <LocalAppData>\Google\Chrome\User Data\Default\Media Cache <LocalAppData>\Google\Chrome\User Data\Default\Session Storage <LocalAppData>\Google\Chrome\User Data\Default\Storage <LocalAppData>\Google\Chrome\User Data\Default\Sync Data <LocalAppData>\Google\Chrome\User Data\Default\Sync Data Backup <LocalAppData>\Google\Chrome\User Data\Default\Web Applications #These settings were added to reduce Chrome Profile size. Undo them if you run into any issues <LocalAppData>\Google\Chrome\User Data\Default\blob_storage <LocalAppData>\Google\Chrome\User Data\Default\BudgetDatabase <LocalAppData>\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb <LocalAppData>\Google\Chrome\User Data\Default\Feature Engagement Tracker <LocalAppData>\Google\Chrome\User Data\Default\Pepper Data <LocalAppData>\Google\Chrome\User Data\Default\Platform Notifications <LocalAppData>\Google\Chrome\User Data\Default\Service Worker <LocalAppData>\Google\Chrome\User Data\Default\Sync Extension Settings <LocalAppData>\Google\Chrome\User Data\Default\VideoDecodeStats <LocalAppData>\Google\Chrome\User Data\Default\webrtc_event_logs <LocalAppData>\Google\Chrome\User Data\Default\databases <LocalAppData>\Google\Chrome\User Data\Default\Download Service <LocalAppData>\Google\Chrome\User Data\Default\File System <LocalAppData>\Google\Chrome\User Data\Default\GCM Store <LocalAppData>\Google\Chrome\User Data\Default\Thumbnails <LocalAppData>\Google\Chrome\User Data\Default\Code Cache [ExcludeFiles] <LocalAppData>\Google\Chrome\User Data\Default\Network Action Predictor <LocalAppData>\Google\Chrome\User Data\Default\Network Action Predictor-journal <LocalAppData>\Google\Chrome\User Data\Profile 1\Network Action Predictor <LocalAppData>\Google\Chrome\User Data\Profile 1\Network Action Predictor-journal *.tmp
I'll add my own fix to this. It appears that either a Windows update, a Chrome update, (or both) caused the original issue. A full restore of the host to a date prior to the Windows update was perf... See more...
I'll add my own fix to this. It appears that either a Windows update, a Chrome update, (or both) caused the original issue. A full restore of the host to a date prior to the Windows update was performed. The system was booted, VMware Tools, VMware agents and Chrome uninstalled. Then we performed a manual update of Windows patches, and a reinstallation of Chrome, VMware Tools and Agents and everything returned to a normal state. 
Hello, We have an RDS host set up to provide the Google Chrome app to our users in Horizon. Most of our users use Chrome to check their personal gmail accounts and have Two-Step (aka Two-Factor) au... See more...
Hello, We have an RDS host set up to provide the Google Chrome app to our users in Horizon. Most of our users use Chrome to check their personal gmail accounts and have Two-Step (aka Two-Factor) authentication enabled.  Some users are complaining that every time they close the Chrome app and re-open it, they have to authenticate with Two-Factor Authentication again in gmail. It doesn't matter if it is one hour, one day, or whatever, gmail wants them to re-authenticate, and I have confirmed this behavior. This is something they didn't have to do on their personal desktops where Chrome would "remember" them.  Is their any way to prevent this 2FA from re-occurring every time they launch Chrome? Maybe a setting in DEM or on the configuration on the RDS host? We are using Horizon 8 with DEM and we can see that DEM is working because Chrome profiles are loading history, bookmarks, etc when the Chrome app is launched on the RDS host. Any insight to this would be appreciated.
We're having a strange issue and hope someone has seen this before and can help. We've been using Chrome as a published app in Horizon 8 for a couple of months. It was working fine until the beginni... See more...
We're having a strange issue and hope someone has seen this before and can help. We've been using Chrome as a published app in Horizon 8 for a couple of months. It was working fine until the beginning of this week where, when launched, opens up in its usual application window, but now has a black screen behind it taking up the full screen. The full black screen cannot be changed, however, I can move the Chrome window around within the black screen. The only thing I can see that has changed is that Microsoft Updates and Chrome were updated at the beginning of the week on the host server. Removing some of the Windows updates did not resolve the issue.  Has anyone seen something like this before with Horizon RDS?
When we are testing configs in DEM, we usually create a condition set. Usually in the condition set we just apply the config to a specific user or group and test. If testing is successful, we remove ... See more...
When we are testing configs in DEM, we usually create a condition set. Usually in the condition set we just apply the config to a specific user or group and test. If testing is successful, we remove the condition set and apply it to all users
Thanks for replying and the suggestion, but for some reason it stopped happening shortly after posting, and the issue has not returned, but I'm not exactly sure why. And I cannot make it reoccur. FW... See more...
Thanks for replying and the suggestion, but for some reason it stopped happening shortly after posting, and the issue has not returned, but I'm not exactly sure why. And I cannot make it reoccur. FWIW, when the issue was present, I had 6 different ost/nst files in my %localappdata%\Microsoft\Outlook folder. A new one would get created every time I launched Outlook at a new login. All had the same filename with the traditional Windows (1), (2), (3) at the end of the filename.
Are you also deleting the computer accounts in AD when you delete the VM's and have them recreate? 
Is your template VM in the same OU as your pool? We ran into something similar recently when we switched the network for our master image. We switched the network, created a new snap and provisioned... See more...
Is your template VM in the same OU as your pool? We ran into something similar recently when we switched the network for our master image. We switched the network, created a new snap and provisioned the pool. The VM's came up on the right network, but none could get IP's. I had to actually power on the master, let it register with the host, get an IP, seal the image again, take a new snap and republish the pool.
Did you try running a gpupdate /force before sealing your image? I don't know if its required, but I have recently added that to my cleanup script. I haven't really seen a difference in my case (my ... See more...
Did you try running a gpupdate /force before sealing your image? I don't know if its required, but I have recently added that to my cleanup script. I haven't really seen a difference in my case (my master image is not in the domain) but it I guess it can't hurt.
Hello, We recently started having issues with FSLogix and Outlook and hope someone has seen this before and can offer some assistance. We have been using FSLogix Office Containers in our VDI enviro... See more...
Hello, We recently started having issues with FSLogix and Outlook and hope someone has seen this before and can offer some assistance. We have been using FSLogix Office Containers in our VDI environment for a couple of years now without any major issues. However, we recently started having issues with Outlook creating a new OST file every time a user launches Outlook in a new session. This is mainly happening to new users in the VDI environment, and I confirmed this by deleting my profile and logging into VDI as a new user. If I log into a VDI session and launch Outlook, it will start and say "Preparing Outlook for first use." every time I log in. If I mount my VHDX file and browse to the ODFC folder, (or go to %localappdata%\Microsoft\Outlook in the VDI session) I can see multiple OST files of the same size on the drive. I have checked the registry keys for FSLogix in the VDI session and can see they are being mapped correctly. I can put the path of my FSLogix container in file explorer and it maps without issue FSLogix logs do not show any errors, and redirections are mapping correctly. We are also seeing similar issues with OneDrive where it requires a login and re-syncs every time it is started.   Environment Horizon 7.13.1 DEM 9.11 FSLogix Windows 10 21H2 Office 2019 (Outlook with cached mode enabled) Recent Upgrades Windows 21H2 (Updated to latest patch levels) MS Office 2019 (Latest Patch levels) SentinelOne FSLogix latest drivers (to try to resolve this issue)  
The Citrix registry key has nothing to do with Citrix. It was an error that I got while trying to install Teams. I Googled the error and found the resolution here. (Look under the Installation with ... See more...
The Citrix registry key has nothing to do with Citrix. It was an error that I got while trying to install Teams. I Googled the error and found the resolution here. (Look under the Installation with AppLayering section). However, if the key remains after Teams is installed, you will find that Teams will not be optimized for VMware Horizon. More on that here. The MDM keys I found while searching for issues with auto enrollment on this site. I quickly searched for the post, but couldn't find it. The CloudType registry key is based on your tenancy. It can be found on this page, (it's the same page I linked in my earlier post with the links to the Teams downloads) I normally don't use the GPU setting-only in cases where users are complaining about video performance in Teams. Since it is a json file, I couldn't find  way to set it for all users on the master image. Info on the GPU setting is also in the reddit post I linked above. For DEM & Teams, I just did some testing and found that since we were using FSLogix, and it kept the users' information when they logged out, there was no need for a separate profile in DEM. It was (in this case) redundant.
Ahhhh Teams... Good times... The language it is written in is Electron, and it is garbage. Supposedly it is being rewritten. We will see.  Yes, we got it to work, but with every new version released... See more...
Ahhhh Teams... Good times... The language it is written in is Electron, and it is garbage. Supposedly it is being rewritten. We will see.  Yes, we got it to work, but with every new version released, it's always fun to see what works, and what used to work is now broken. We use FSLogix instead of writables so there is no need to create profile for it in UEM, (and if you do, it will create huge profiles that aren't necessary). Here are the notes I have for my installation on my master image. We have a different tenancy than most, so take the following with a grain of salt. Download the latest .msi installer from Microsoft. https://docs.microsoft.com/en-us/microsoftteams/msi-deployment Install it using the following switches: msiexec /i <path-to-teams-msi> OPTIONS="noAutoStart=True" ALLUSER=1 ALLUSERS=1 This is for a non-persistent (instant clone) setup, the Teams desktop app must be installed "per-machine" on the golden image. Note 1: When installing on Windows 10 using ALLUSER=1 property, MSI will return error: Installation has failed. “Cannot install for all users when a VDI environment is not detected.” To resolve this, the Teams installer needs ”HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\PortICA” registry key to be created on a target and then the install will complete successfully. Remove it after installation or Teams will not be optimized for VMware Horizon Note 2: Add the following keys to block the reoccurring MDM enrollment. HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin\autoWorkplaceJoin=dword:00000000 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin\BlockAADWorkplaceJoin=dword:00000001 Note 3: When troubleshooting Teams, close Teams and delete everything under "C:\Users\%USERNAME%\AppData\Roaming\Microsoft\Teams" and have the user restart Teams   Note 4: If Teams fails to start, verify this key is not in the master image. If it is, remove it. This was a suggested setting from Microsoft, but it does not work and causes connection failures. [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Office\16.0\Teams] "CloudType"=dword:3 Note 5: Disable HWA in Teams User settings for Teams are saved in a JSON file desktop-config.json: %APPDATA%\Microsoft\Teams\desktop-config.json Search for DisableGPU in the file, and change the setting from “disableGpu”:false to “disableGpu”:true.