DEMdev's Accepted Solutions

Hi Marc, You can control this through the Configure file transfer Group Policy setting. Or, if you're also using Dynamic Environment Manager, through the Web and Chrome file transfer setting i... See more...
Hi Marc, You can control this through the Configure file transfer Group Policy setting. Or, if you're also using Dynamic Environment Manager, through the Web and Chrome file transfer setting in Horizon Smart Policies.
Hi sjesse, Unfortunalty I need them on the first logon, Yeah, that's what I expected but maybe I'll play around a bit if or think of a way I can make them logon and off again. Sure ... See more...
Hi sjesse, Unfortunalty I need them on the first logon, Yeah, that's what I expected but maybe I'll play around a bit if or think of a way I can make them logon and off again. Sure Where C:\Flex\sjesse.cmd contains the following: C:\Windows\System32\net.exe localgroup "Demo Group" "%username%" /ADD "C:\Program Files\Immidio\Flex Profiles\FlexEngine.exe" -m "NOTE:" "You'll be logged off" C:\Windows\System32\logoff.exe User logs on: 2019-12-06 12:46:42.069 [INFO ] Performing path-based import ... 2019-12-06 12:46:42.099 [INFO ] Collected argument-based privilege elevation settings to apply for elevated applications ('Local Group Test.xml') ... 2019-12-06 12:46:42.122 [DEBUG] Conditions: Check for user membership of group 'Demo Group' = false 2019-12-06 12:46:42.175 [INFO ] Successfully created shortcut in programs menu ('sjesse.xml') User is automatically logged off (after clicking away the message box): 2019-12-06 12:51:39.059 [INFO ] Performing path-based export ... 2019-12-06 12:51:39.132 [DEBUG] Successfully removed shortcut 'C:\Users\testuser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sjesse.lnk' ('sjesse.xml') ... 2019-12-06 12:51:39.139 [INFO ] Privilege elevation statistics: 2019-12-06 12:51:39.139 [INFO ]    Elevated C:\Windows\System32\net.exe 1 time (argument-based). User logs on again: 2019-12-06 12:51:48.507 [INFO ] Performing path-based import ... 2019-12-06 12:51:48.571 [DEBUG] Conditions: Check for user membership of group 'Demo Group' = true 2019-12-06 12:51:48.571 [INFO ] Skipping shortcut due to conditions ('sjesse.xml')
Hi cbaptiste, Once you enable application blocking through the Global Configuration button, it's on and only applications from the Windows folder, C:\Program Files, and C:\Program Files (x86) ... See more...
Hi cbaptiste, Once you enable application blocking through the Global Configuration button, it's on and only applications from the Windows folder, C:\Program Files, and C:\Program Files (x86) are allowed to run. Having said that, that global configuration has its own conditions support, so you can have it behave differently for different pools.
Hi Dempseyy93, Makes sense. There's a definite overlap between some of the DEM functionality and Group Policy, so it's good to have clearly defined who's responsible for what. There are als... See more...
Hi Dempseyy93, Makes sense. There's a definite overlap between some of the DEM functionality and Group Policy, so it's good to have clearly defined who's responsible for what. There are also quite some things that Group Policy can do (computer settings, security configuration, software installation, for instance) that DEM does not – some of that might change over time, but we're definitely not looking to get feature parity with Group Policy. On the other hand, DEM allows you to do all kinds of things that Group Policy does not support. Maybe some other forum users can shed some more light on this, by describing how they've implemented this in their environments.
Hi Gunther, I understand. Maybe the easiest way to do this (without depending on timer hacks) would be to perform a shortcut refresh once File Explorer has started, and also postpone setting t... See more...
Hi Gunther, I understand. Maybe the easiest way to do this (without depending on timer hacks) would be to perform a shortcut refresh once File Explorer has started, and also postpone setting that environment variable until that time. So, rather than creating that logon task, you could create a batch file with something like the following content (note the change from using SETX to SET FOR /F "tokens=2*" %A IN ('REG QUERY "HKCU\Control Panel\Desktop" /v PreferredUILanguages') DO SET PrefLang=%B "C:\Program Files\Immidio\Flex Profiles\FlexEngine.exe" -UEMRefreshShortcuts You can then use File Explorer's Run key to have Explorer launch your batch file shortly after it starts. If you have many shortcuts defined in UEM and want to prevent having them always be processed twice (once at logon, only to have them immediately refreshed afterwards), you can disable shortcut processing at logon. The advanced ADMX template allows you to configure the Disable UEM action types policy setting, which has a Disable UEM Shortcuts during logon option (if you're using NoAD, the equivalent XML setting would be UEMActionShortCutDuringLogon="0".) With that configuration, the UEM agent won't process any shortcuts at logon.
Hi PavelV9, As a quick test: does it help if you create a personalization config file with the Active Setup Windows Common Template? That might prevent some (re-)initialization by File Explore... See more...
Hi PavelV9, As a quick test: does it help if you create a personalization config file with the Active Setup Windows Common Template? That might prevent some (re-)initialization by File Explorer in subsequent logons.
Hi burgerking68, That makes sense: if you redirect the Desktop folder, File Explorer (and any well-written application) no longer looks at the default %UserProfile%\Desktop folder, but only at... See more...
Hi burgerking68, That makes sense: if you redirect the Desktop folder, File Explorer (and any well-written application) no longer looks at the default %UserProfile%\Desktop folder, but only at the redirected location. In the non-working example, I'm sure that Robocopy does indeed copy "TestFolder" correctly – it's just that File Explorer no longer looks at that "physical" location. One way to solve this, would be to look up the "effective" location of the Desktop folder in the registry. I did a very quick experiment (so please carefully validate in your environment), but the following command seems to do the trick: FOR /F "tokens=2*" %%A IN ('REG QUERY "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /v Desktop') DO SET DesktopFolder=%%B Alternatively, you might be able to use DEM's Predefined Settings or Files and Folders feature to put the files on the user's desktop? And maybe even manage them via a personalization config file (possibly in combination with a default predefined setting) in case you want to persist a user's changes? (Which I gather is something you'd like to do, given that /MIR argument in your examples...)
Hi sjesse, You can use Orca.exe to remove the CA.ProfilerInstalled action from the InstallUISequence and InstallExecuteSequence tables in the "main" MSI. Then you can install the Management Co... See more...
Hi sjesse, You can use Orca.exe to remove the CA.ProfilerInstalled action from the InstallUISequence and InstallExecuteSequence tables in the "main" MSI. Then you can install the Management Console side by side with the Application Profiler. It's not officially supported (nor officially tested), though (as is probably obvious from the default "cannot be installed" error message .)
Hi Dominik, DEM 9.10 will be the first "normal" release with support for Windows 10 Version 1909, but we also support the UEM 9.4.1 and DEM 9.9 ESB releases on 1909.
Hi epa80, The Short time and Long time formats seem to be kept in HKCU\Control Panel\International as sShortTime and sTimeFormat, respectively. I did a quick test with manually tweaking those ... See more...
Hi epa80, The Short time and Long time formats seem to be kept in HKCU\Control Panel\International as sShortTime and sTimeFormat, respectively. I did a quick test with manually tweaking those values, logging off, and logging on again, and the clock in the system notification used the time format I had configured. The built-in Regional settings Windows Common Setting captures everything under that key, so you could create a personalization config file based on that setting, log on with a test user, configure the time format (and possibly some other regional settings) to your users' liking, log off, and import the resulting profile archive as a (default) predefined setting, either directly, or after a small edit to remove irrelevant settings.
Hi Ray, DirectFlex pre-import tasks can definitely be used to run scripts – that's exactly what they're meant for! Something like this, for instance: What DEM/UEM tasks are not meant fo... See more...
Hi Ray, DirectFlex pre-import tasks can definitely be used to run scripts – that's exactly what they're meant for! Something like this, for instance: What DEM/UEM tasks are not meant for, is launching interactive applications like Notepad... Tasks are launched "invisibly", so you cannot interact with them. That's why you don't see the Notepad window, even though it's running as the normal user. Also, pre-import tasks run synchronously, "blocking" the launch of the real DirectFlex app until they finish. Notepad, however, won't just finish by itself, which is why Wordpad does not launch immediately.
Hi robsisk1972, Just to make sure: you posted this question in the DEM forum...
Hi acruzb, There's no way to suppress those error dialogs (well, apart from killing Explorer.exe, but that might be a bit overkill .) For laptop scenarios, customers typically use the Syn... See more...
Hi acruzb, There's no way to suppress those error dialogs (well, apart from killing Explorer.exe, but that might be a bit overkill .) For laptop scenarios, customers typically use the SyncTool. Would that be an option for you?
Hi JohnTwilley, There's no really convenient way to do this, at the moment. "Re-importing" settings mid-session has the risk of overwriting settings that have changed since logon. For this ... See more...
Hi JohnTwilley, There's no really convenient way to do this, at the moment. "Re-importing" settings mid-session has the risk of overwriting settings that have changed since logon. For this particular case, you could do something like the following: Create a new Flex config file; let's call it Test.ini for this discussion. On the Advanced tab, uncheck the Process during logon and logoff checkbox. Add two (or more) predefined settings definitions, of type Fully Enforced Settings. Put conditions on each (based on the endpoint name, for instance) so that each applies to a particular case you want to target. FlexEngine.exe -r DoesNotMatter.zip -i "%UEMConfigShare%\Test.ini" can be used to process just that particular config file. As we're only interested in the predefined settings (i.e. we're not importing any profile archive), the profile archive name (the -r argument) really does not matter. You can then run this as a custom command from a triggered task.
Hi grahamp1981, Can you double-check the configuration of your logoff script as per the Configure FlexEngine to Run From a Logoff Script topic in the docs?
Hi gneville1985, That is indeed the correct upgrade order, and there's no need to configure your Group Policy settings again. Enjoy all the new functionality!
The conversation with Microsoft is still ongoing, but it looks like we've found the root cause. That has led to us finally being able to reproduce the delays, also without any UEM components in p... See more...
The conversation with Microsoft is still ongoing, but it looks like we've found the root cause. That has led to us finally being able to reproduce the delays, also without any UEM components in play. If you're encountering this "delay when reading files from the configuration share" issue and are using non-persistent VDI, it would be great if you could test the following workaround: stop the Workstation service before the VM is deleted, for instance by configuring a shutdown script through Group Policy to run C:\Windows\System32\net.exe stop /y workstation A few of you who have cases open with VMware support already received this request through that channel, but I'd love to get a bit more feedback. Thanks!
Hi Scott, The VMLM log provides a nice overview of how time is spent overall during logon, but to see in more detail where UEM spends its time, you'd have to take a look at UEM's own log file​... See more...
Hi Scott, The VMLM log provides a nice overview of how time is spent overall during logon, but to see in more detail where UEM spends its time, you'd have to take a look at UEM's own log file​.
Hi vBritinUSA, Sorry for being unclear. The path is not case-sensitive; it's just that you've spelled it "LMMIDIO" (starting with an "L" as in "Lima") instead of "IMMIDIO" (with an "I" as in "... See more...
Hi vBritinUSA, Sorry for being unclear. The path is not case-sensitive; it's just that you've spelled it "LMMIDIO" (starting with an "L" as in "Lima") instead of "IMMIDIO" (with an "I" as in "India").
Hi rmunson95, For integration with UEM's DirectFlex feature, we require ThinApp 5.2 packages. In such a scenario, UEM performs it actions within the ThinApp virtual environment. That means tha... See more...
Hi rmunson95, For integration with UEM's DirectFlex feature, we require ThinApp 5.2 packages. In such a scenario, UEM performs it actions within the ThinApp virtual environment. That means that you can reference "real" profile locations like <LocalAppData>\YourApp\Something.json and HKCU\SOFTWARE\YourApp\SomethingElse, and UEM will read those from (and restore them back into) ThinApp's bubble. Without upgrading your packages, I think you can still use UEM to persist your users' ThinApp settings (but I definitely don't have much ThinApp experience...) In that case, you would be working with the ThinApp settings "from the outside", i.e. where they live in the "physical" profile. I think that's in %APPDATA%\Thinstall\ApplicationName? In that case, you would create Flex config files in UEM for your packages, each just capturing the corresponding "real" <AppData>\Thinstall\ApplicationName folder.