pchapman's Posts

The RDS host itself would be vulnerable, but the desktops running the Horizon client should be safe as the only traffic they are seeing is the remote display protocol traffic (assuming you have t... See more...
The RDS host itself would be vulnerable, but the desktops running the Horizon client should be safe as the only traffic they are seeing is the remote display protocol traffic (assuming you have things like USB redirection, client drive redirection, copy/paste, etc disabled).. 
It sounds like your problems are related to writable volumes.  They are an absolute nightmare to use in practice. "But the Adobe appstack - COME ON. What is going on here? It's like it will w... See more...
It sounds like your problems are related to writable volumes.  They are an absolute nightmare to use in practice. "But the Adobe appstack - COME ON. What is going on here? It's like it will work one day, and then the next day, for no reason at all, filed go missing from C:\Programdata\Adobe. Why would files remove themselves with no instigation? It works for the first time on provisioning and then I'll notice that in another session some files disappear or maybe the permissions on the folders becomes corrupt." This sounds to me like something is getting corrupted on the writable volume.  Have you mounted the writable volume on a machine without the appvol agent on it to investigate? I think you really need to consider getting rid of writable volumes, even if it means changing the architecture
VMware support told me to use the built in appstack update process to accomplish this (same as if you were updating an appstack with new software version etc.)  They told me it automatically repl... See more...
VMware support told me to use the built in appstack update process to accomplish this (same as if you were updating an appstack with new software version etc.)  They told me it automatically replaces those with the latest version during this process.  I haven't tested yet. IMO the only way to fully bring an application up to date is to re-build it from scratch.  For example the 2.10 snapvol.cfg may or may not have had certain exclusions in that version, so files you want might not have been captures, and files you don't want may not have been excluded.  Not going to fix that without a complete re-capture.
Based on the way you say "farm" that makes me think you are trying to make an RDS farm (which requires Windows Server with the RDSH role) vs a desktop pool.  You want to create an instant clone d... See more...
Based on the way you say "farm" that makes me think you are trying to make an RDS farm (which requires Windows Server with the RDSH role) vs a desktop pool.  You want to create an instant clone desktop pool, not a farm.  Different section of the interface.
I am curious if anyone has any information on this KB article.  I came across it while troubleshooting another issue, and found that it makes sense to implement on a new environment I'm building.... See more...
I am curious if anyone has any information on this KB article.  I came across it while troubleshooting another issue, and found that it makes sense to implement on a new environment I'm building.  The new environment is a VXRail 4.5.212, Horizon 7.5.1 with GRID M10 cards all using the M10-1B Profile. I enabled the feature per the article, but it broke provisioning in a spectacular fashion.  I have some screenshots at home I can attach later, but I found it very odd.  After disabling the feature per the article, I ended up having to manually reboot ESX hosts before instant clone provisioning would start working again. Can anyone explain what exactly this feature does to enable "max performance mode"?  I thought that setting the VM's to distribute VM's across GPU's in vSphere was all that was needed?
Do you have a security server or unified access gateway pointing to this specific view connection server for external access?
nah, i just deployed horizon 7.5 instant clones with latest vcenter 6.7 and esxi 6.7 fully patched and they are still there.
This could be due to the way your Horizon administrator has the pool setup.  Perhaps they only configured it with enough video memory for one screen.  Try starting there?
Hmm, I don't really have any non-domain users to test with, aside from the local admin (which I've never seen the error on) Could it be because these desktops exist in one domain, but the user... See more...
Hmm, I don't really have any non-domain users to test with, aside from the local admin (which I've never seen the error on) Could it be because these desktops exist in one domain, but the users exist in a different domain? (There is a two-way trust between them) Example: Desktops computer accounts exist in Domain A, but users from Domain B login to the desktops in Domain A.  Both domains are configured in AppVolumes manager. It happens very infrequently but it is enough to be worried.
Hi, I am working on a new implementation of AppVol 2.14 on an instant clone desktop pool. Occasionally while logging in, I get the following message: Invalid session cookie: Can anyon... See more...
Hi, I am working on a new implementation of AppVol 2.14 on an instant clone desktop pool. Occasionally while logging in, I get the following message: Invalid session cookie: Can anyone tell me what this means?  It is a fairly simple setup.  floating instant clone pool with the 2.14 agent on it.  There are two AppVolumes managers on the network, which are not load balanced.  Instead, for this environment multiple AppVolumes managers are defined in the registry under Manager1 and Manager2 reg keys. Is this related to the instant clone refresh process?  Is there any way to fix it?
Good point... I don't know why I didn't think of that.  Thanks!
Currently it is possible to hide the Profile Archive folder and Profile Archive Backups folder via the UEM FlexEngine GPO.  However, there is no such option to hide the logs.  Is this possible? ... See more...
Currently it is possible to hide the Profile Archive folder and Profile Archive Backups folder via the UEM FlexEngine GPO.  However, there is no such option to hide the logs.  Is this possible? I know that it is preferred to host the UEM files on their own file server that the user doesn't normally access, however many smaller customers are OK with just putting the files on the users existing home drives.  It would be nice to be able to hide them in this case.
I am curious about this as well, I have a customer asking.  They are on 1703 now but since Horizon 7.5 supports 1709, do you think it will be easier to upgrade to 1709?
The release notes, KB and interoperability matrix for vCenter/vSphere 6.7 around Horizon 7.4 compatibility are confusing. The blog article states: At vSphere 6.7 general availability, compati... See more...
The release notes, KB and interoperability matrix for vCenter/vSphere 6.7 around Horizon 7.4 compatibility are confusing. The blog article states: At vSphere 6.7 general availability, compatible versions of VMware NSX, VMware Integrated OpenStack and VMware vSphere Integrated Containers will not be available. Moreover, VMware Horizon 7.4 is not compatible with the Instant Clone API used in vSphere 6.7.  Instant Clone support for vSphere 6.7 will be available in an upcoming Horizon release. This sounds like it is compatible, as long as you are not using instant clones. The interoperability matrix shows vSphere (esxi) 6.7 as compatible with Horizon 7.4, with the note that instant clones are not yet supported. However, the interoperability matrix only lists 6.5u1 as the latest vCenter compatible with Horizon 7.4.  Considering that your vSphere version has to match or be lower than your vCenter version. I'm confused.  Is the info in the interoperability matrix wrong, does Horizon 7.4 support vCenter 6.7?
You left out a very important detail.  What type of network connection are you testing this on?  Are you applying any display protocol group policies or UEM smart policies other than the defaults... See more...
You left out a very important detail.  What type of network connection are you testing this on?  Are you applying any display protocol group policies or UEM smart policies other than the defaults? Are you testing in full screen, or windowed mode?  I've found 2vCPU's to be adequate for watching videos within the browser window, not maximized, and have had good performance with 720/1080 when the machine has 4vCPU.  This was with no other apps running, just a base Win7 or Win10 optimized install.  This is on a local, 1GB LAN connection with no display protocol GPO's in place (such as bandwidth limiting, quality settings, etc)
I would size it based on the total # of desktops/hosts it is expected to support.  If you're not sure that you will expand beyond 1,000, it is possible to resize the VCSA in the future.  There ar... See more...
I would size it based on the total # of desktops/hosts it is expected to support.  If you're not sure that you will expand beyond 1,000, it is possible to resize the VCSA in the future.  There are blog articles on how to do it, but I'd clear it with support first.
Yes, it will get applied to everything, even after the update. I suggest the following: Evaluate the differences in the new snapvol.cfg and determine if the changes truly warrant upgrading ... See more...
Yes, it will get applied to everything, even after the update. I suggest the following: Evaluate the differences in the new snapvol.cfg and determine if the changes truly warrant upgrading the existing writables. If they do, either delete all writables and re-create them with the new template, or manually replace the snapvol.cfg/related files in your existing template.  That option is much more labor intensive but could definitely be automated with a script of some sort... It is not an elegant solution, but I'm open to hearing other ideas.  I did use the "update writables" option in one environment but it is not ideal.  For example, I'd like to maintain a different writable template with a test snapvol.cfg that has changes to it, but I can't anymore, because ALL writables get overwritten by whatever's in the zip file.
I suggest being extremely careful in your decision to enable that feature.  Once you start using it there is no way to turn it off.  You also can't choose to update only certain writables - this ... See more...
I suggest being extremely careful in your decision to enable that feature.  Once you start using it there is no way to turn it off.  You also can't choose to update only certain writables - this setting applies to all.
Nevermind, I found it mentioned in this video that Skype for Business must be installed. https://www.youtube.com/watch?v=TsGDcTHcoc8
I'm playing with the Horizon 7.4 session collab feature and I see in the documentation it's supposed to allow you to send link via IM in addition to e-mail and copy/paste.  I do not get the optio... See more...
I'm playing with the Horizon 7.4 session collab feature and I see in the documentation it's supposed to allow you to send link via IM in addition to e-mail and copy/paste.  I do not get the option to send via IM (Cisco Jabber is installed.)  Is this only permitted with certain IM clients, and if so, is there a list of supported clients? Thanks