Afshin_Lak's Posts

Do you have Compliance Policy "Device Last Seen" in place?
Maybe this helps: https://afshinlak.com/vmware/certificateauthorityuem/  
In Access look at the Monitor - Reports - Audit Events. Make sure the user has the right Domain Name. If you see the onmicrosoft.com instead of your actual domain then the user email adres or UPN in ... See more...
In Access look at the Monitor - Reports - Audit Events. Make sure the user has the right Domain Name. If you see the onmicrosoft.com instead of your actual domain then the user email adres or UPN in Azure AD is wrong. It also can be a misconfiguration Access Policy.  
Are you using the Option Prevent Re-Enrollment?
Hi,   What is the best method to upgrade Horizon Client on Windows 10/11 using VMware WSO UEM? The big problem is that you cannot upgrade when the Horizon Client is in use. This is especially dif... See more...
Hi,   What is the best method to upgrade Horizon Client on Windows 10/11 using VMware WSO UEM? The big problem is that you cannot upgrade when the Horizon Client is in use. This is especially difficult for laptop users. Does anyone have a good idea?   Thanks!
Workspace ONE UEM.
  https://kb.vmware.com/s/article/50101945  
And what about this setting? In Android Profile under Restrictions - Allow removing the Android Work Account.    
Don't you have this option? On the device, tap Settings and then Accounts. If you don't see Accounts, tap Users & accounts. At the top, tap Remove work profile and then Delete. If you don't see R... See more...
Don't you have this option? On the device, tap Settings and then Accounts. If you don't see Accounts, tap Users & accounts. At the top, tap Remove work profile and then Delete. If you don't see Remove work profile, tap the account that you want to remove and then Remove account and then OK. If needed, enter your phone's pattern, PIN, or password.
In UEM under System - Enterprise Integration - Directory Services - Advanced look at this config (Object Identifier Data Type). If it is STRING change it to BINARY and try again.
https://docs.vmware.com/en/VMware-Workspace-ONE-UEM/2302/UEM_Recommended_Architecture/GUID-AWT-HA-OVERVIEW.html  
Hi, Is dat a SaaS or On-prem UEM environment? Is your APNS certificate still valid? If you look at Profiles and Compliance is everything pushed correctly? Did you look at Troubleshoot tab? 
I recommend to move SEG to VMware UAG.
Hi, And if you unenroll your device still not working? (just to test it) Maybe this helps: https://www.imyfone.com/iphone-issues/screenshot-not-working-on-iphone/#:~:text=If%20you%20are%20not%20ab... See more...
Hi, And if you unenroll your device still not working? (just to test it) Maybe this helps: https://www.imyfone.com/iphone-issues/screenshot-not-working-on-iphone/#:~:text=If%20you%20are%20not%20able,on%20Customize%20Top%20Level%20Menu.  
You can check with tools like iNETTools the reachability from the client to tunnel...sso.com:8443.
Thank you Phil. We are looking for never expire password for a specific UEM and Access basic/system(local) admin account. I believe you script is about the windows admin account.   
Hi, Customer has an "emergency" local admin account in each UEM and Access tenant which has a 128bit password. However, they are looking for an option to disable the expiration of the password for t... See more...
Hi, Customer has an "emergency" local admin account in each UEM and Access tenant which has a 128bit password. However, they are looking for an option to disable the expiration of the password for this specific account. How can we best arrange this? As far as I can see it is not possible but maybe you have an idea?
Custom Settings - keepalive_timeout under the Tunnel Configuration seems to solve the problem.
Hi, Does anyone have a solution for the following issue? The customer has VMware Tunnel on Windows 10 for using Outlook On-prem. When the user works in an application other than Outlook, for exampl... See more...
Hi, Does anyone have a solution for the following issue? The customer has VMware Tunnel on Windows 10 for using Outlook On-prem. When the user works in an application other than Outlook, for example MS Word, the Tunnel disconnects and Outlook has no connection until he starts using Outlook again and after a few seconds the Tunnel starts again and Outlook becomes online. Is there any workaround to keep Tunnel and therefore the Outlook connected? Thanks!
You must have rights to the Access Console. If you don't see this then find out who has the admin console rights?