DEMdev's Accepted Solutions

Hi jordanht, Sorry, that's currently not possible. It has come up before as a feature request, and I'll make note of the fact that you would also be interested
Hi Hocshop, The ADMX templates should be copied to the PolicyDefinitions folder on your SYSVOL share, not the one in the Windows folder. SYSVOL is replicated across DCs.
Hi Metapieman, Welcome to the UEM forum! Thank you for the details you already provided. The DPI settings Windows Common Setting contains that HKCU\Control Panel\Desktop@LogPixels value you... See more...
Hi Metapieman, Welcome to the UEM forum! Thank you for the details you already provided. The DPI settings Windows Common Setting contains that HKCU\Control Panel\Desktop@LogPixels value you mentioned: For Windows 10, the built-in setting is not quite complete (we'll fix that in UEM 9.5), but the above should work fine on Windows 7. Can you post a FlexEngine log file at log level DEBUG, covering a full session from logon till logoff, so we can try and see what exactly is going on?
Hi SummaCollege​, Checking what has changed in the definitions of the built-in settings is a manual process, unfortunately: create a new config file based on a Windows Common Setting or Applic... See more...
Hi SummaCollege​, Checking what has changed in the definitions of the built-in settings is a manual process, unfortunately: create a new config file based on a Windows Common Setting or Application Template, Expand it, and compare it to your own config file... (Which is probably what you had in mind already There's definitely things we can improve in this functionality. The problem, as is so often the case, is that we have limited resources. Compare functionality would be cool, but is most probably not going to happen – too much effort for something with limited value (in that there is not a lot of customer demand for this). I'll keep track of your interest, though. However, it might be feasible to at least keep track of the fact that a Flex config file was originally created based on a built-in setting which was then expanded, and at least notify you in case that setting is subsequently updated. No guarantees as to when or whether this might happen, but I'll definitely give it some thought. Happy to receive feature requests, no worries!
Hi Super6VCA, For UEM itself it doesn't really matter – as long as the GPO with UEM setting applies to all your endpoints and all endpoints can access the configuration and profile archive sha... See more...
Hi Super6VCA, For UEM itself it doesn't really matter – as long as the GPO with UEM setting applies to all your endpoints and all endpoints can access the configuration and profile archive shares, you're good.
Hi sjesse, If you need to make changes in both environments (and persist those at logoff) then the "Import only" approach does indeed not fit the bill. Importing changes just before logoff wou... See more...
Hi sjesse, If you need to make changes in both environments (and persist those at logoff) then the "Import only" approach does indeed not fit the bill. Importing changes just before logoff wouldn't help either (if that were possible, which it isn't, really :-), as you would then still be overwriting settings – just different ones. Having users logging on to multiple sessions concurrently remains a tricky scenario if you want to capture settings from all sessions. DirectFlex helps a bit, but only if the user launches and exits applications, instead of only exiting the apps at logoff. So yeah, if you can somehow ensure that people can only log on once, that would make life a lot easier.
Thank you for the additional info. I just did a quick test with the correct registry settings you provided, and they roam correctly across sessions with a simple [IncludeRegistryTrees] – I did... See more...
Thank you for the additional info. I just did a quick test with the correct registry settings you provided, and they roam correctly across sessions with a simple [IncludeRegistryTrees] – I didn't really expect otherwise, but just wanted to make sure The only way where another UEM setting might interfere with this is if it were to explicitly remove registry settings, but just to rule that out, could you test this in a smaller setup, with just an "OutlookTest.INI" containing only [IncludeRegistryTrees] HKCU\Software\Software\Microsoft\Office\16.0\Common\MailSettings just to make sure?
Hi sjesse, From a very superficial test, it looks like Outlook saves its window positions in HKCU\Software\Microsoft\Office\16.0\Outlook\Office Explorer@Frame. That is, if I close Outlook, ren... See more...
Hi sjesse, From a very superficial test, it looks like Outlook saves its window positions in HKCU\Software\Microsoft\Office\16.0\Outlook\Office Explorer@Frame. That is, if I close Outlook, rename that value, and start Outlook again, it starts maximized. If I then close Outlook, remove the newly created value and rename the old one back, the Outlook window appears the way it was originally. That particular value should be captured if you're using the Outlook application template. Can you check whether the value does indeed make it correctly into the profile archive, and is correctly imported again at logon?
Hi sillej​, It might be the case that Horizon's ThinPrint component is "hijacking" the default printer. Maybe KB2145750 is helpful?
Hi Sven, Indeed, apart from that IE config file and the weird delay near the end of the log (before launching FlexEngine in DirectFlex mode), there's no obvious bottleneck. Are all logons simi... See more...
Hi Sven, Indeed, apart from that IE config file and the weird delay near the end of the log (before launching FlexEngine in DirectFlex mode), there's no obvious bottleneck. Are all logons similar to this one? And just to make sure: UEM was taking about 18 seconds at logon (according to the FlexEngine log file), with the overall logon time being nearly 79 seconds (according to the VMLM log). Maybe you can improve anything in those "other" 61 seconds? I think flash storage (and good connectivity) might be able to shave a bit off the UEM run, but maybe Pim_van_de_Vis or ijdemes has some additional ideas? As for your "msg" call at logon not working: UEM logon tasks (and logoff tasks) run "invisibly" so they cannot be used to start applications and do not support user interaction, which is probably why you didn't see your message. If you want to launch an interactive application, you can do that by creating a shortcut in the startup folder, or by using File Explorer's "Run" key.
Hi Dominik, But those *.bat, *.cmd, *.lnk files in turn will call *.exe files, right? Can't you just configure those executables for DirectFlex?
Hi gpenunuri, There are no UEM-specific settings for this – it's just Windows configuration that controls this. Just to make sure: both NTFS permissions and share permissions have been configu... See more...
Hi gpenunuri, There are no UEM-specific settings for this – it's just Windows configuration that controls this. Just to make sure: both NTFS permissions and share permissions have been configured to grant this other team access?
Hi fieldsc, There is no functionality in the product that covers this scenario. Hearing your use case it makes total sense to me, but this has never come up previously. The only approach th... See more...
Hi fieldsc, There is no functionality in the product that covers this scenario. Hearing your use case it makes total sense to me, but this has never come up previously. The only approach that comes to mind is a bit of a hack, but not that bad... If there are no Flex config files in the root of the General folder, you could get away with just having an additional GPO apply to your kiosk-esque user population, with just the Flex config files policy setting configured – specify the same Central location of Flex config files path, but uncheck Process folder recursively. So your kiosk users would get the same GPO as the others, but with Process folder recursively being overridden by a separate GPO. Not proud of it, but the best I can come up with right now At least you won't need to touch all your config files or duplicate and prune your config share...
Hi JHBPJF, This policy setting is in fact defined in Outlk15.admx:
Hi AlexLSx7, With UEM's Horizon Smart Policies feature you can pick a bandwidth profile. You can use the standard UEM conditions to ensure that those settings apply to whomever you want.
Hi Dominik, hi Ivan, I'm not too sure, to be honest. Nothing changed on UEM's side, but I think Windows 8 or 10 changed how/when exactly the logoff script runs... Does Administrative Templa... See more...
Hi Dominik, hi Ivan, I'm not too sure, to be honest. Nothing changed on UEM's side, but I think Windows 8 or 10 changed how/when exactly the logoff script runs... Does Administrative Templates\System\Scripts|Display instructions in logoff scripts as they run maybe help for this? You might see an additional command prompt window, but maybe that also results in our splash screen actually being visible?
Hi Super6VCA, IP Address is the IP of the system the UEM agent is installed on. Endpoint IP Address is the IP address of the system you're using some kind of remote access client on to connect... See more...
Hi Super6VCA, IP Address is the IP of the system the UEM agent is installed on. Endpoint IP Address is the IP address of the system you're using some kind of remote access client on to connect to the system that UEM is running on. So, in your example, IP address would be 10.0.15.22, and endpoint IP address would be 172.20.1.116. This particular endpoint IP address would match the conditions shown in the screenshot you included. Can you post a FlexEngine log file (at log level DEBUG) so we can see what exactly is going on?
Hi JohnTwilley, Glad to hear you like the built-in UEM message box It's not officially documented, but I'm not planning on changing it, so: FlexEngine.exe -m "Your title" "First line" "S... See more...
Hi JohnTwilley, Glad to hear you like the built-in UEM message box It's not officially documented, but I'm not planning on changing it, so: FlexEngine.exe -m "Your title" "First line" "Second line" "Third line" You can add more lines by adding more arguments. If you want an empty line, specify   as the argument: FlexEngine.exe -m "Now with an empty line" "First line" "" "Second (well, third line"
Hi VMvvol, del is a built-in command of cmd.exe – you can't just call it like that. To call built-in commands, you need to prefix them with cmd.exe /c , so in your case something like cmd.e... See more...
Hi VMvvol, del is a built-in command of cmd.exe – you can't just call it like that. To call built-in commands, you need to prefix them with cmd.exe /c , so in your case something like cmd.exe /c del \\fileshare\path /q.
Hi iforbes, In the Value field of an environment variable setting you can reference (other) environment variables: