Horizon Members topics

Smartcard auth to Horizon Management Console (browser logon)

em4rt — Tue, 31 Oct 2023 17:23:17 GMT

Good afternoon,

Is it not possible to use smartcard when authenticating to the management console in the browser (using version 2111)?

All the information I can find, seems to be for smartcard auth to the server OS (which I have working) instead of the console...

Any advice is appreciated!

Thanks,

Eric

Horizon 7.13.2 support in Windows 10 LTSC 2021 (21H2)

Zdenek2 — Fri, 26 May 2023 11:53:21 GMT

Hello,

we are planning to update OS from Win10 LTSC 2019 (1809) to LTSC 2021 (21H2) for our golden image with Horizon 7 and I'm not sure if Horizon 7.13.2 is already supported on LTSC 21H2.

I have found this article, where is confirmed support for 21H2 GAC, but not specifically for LTSC 21H2 (Long Term Support Channel).

Does it mean that LTSC 21H2 is not supported in Horizon 7 at all or its just not listed?

btw for Horizon 8, i see there is separate support table for LTSC version and its supported only from v2106 (8.3).

Thank you

[ABUSE] By: advancedzz / Board: 2032 (49148)

scott28tt — Fri, 17 Feb 2023 11:46:58 GMT

Please move to the Horizon area.

Link to post: (Bluescreen showing error "Vmwvwebcam.sys" every day on guest OS.)
by advancedzz

https://communities.vmware.com/t5/Virtual-Machine-Guest-OS-and-VM/Bluescreen-showing-error-quot-Vmwvwebcam-sys-quot-every-day-on/m-p/2955093#M49148

Every day, approximately 10 machines must be rebooted because they display the Bluescreen error "Vmwvwebcam.sys." The company has approximately 500 computers, and approximately 10 of them display the problem each day. Uncertain what caused it. Is it possible to fix? Details VSphere Client version 7.0.3.01100 Vmware VMware Horizon : Version 2111 Vmware guest : Windows 10 22h2 (Build 10.0.19045.2486)

This message has 0 replies

Horizon 8 (2212) Pool Configuration Issues

ReGos — Fri, 17 Feb 2023 12:32:07 GMT

Currently migrating to a Horizon 8 environment from a Horizon 7 environment that utilized full linked clones.

This VDI environment is Windows 10 based desktops (soon to add Windows 11)

We have a requirement for several dedicated-assignment pools and a couple of floating-assignment pools. We use Ivanti for patching and we treat our VDI environment similarly to physical desktops due to system uniqueness, scanning, and potential for forensics.

I have successfully created an Instant Clone pool for dedicated users. Thus far, these are working well.

What I am struggling with, is how to create a floating assignment pool of persistent workstations. I have tried full clones from a template but they do not join the domain. The same base image will create a snapshot-based pool for dedicated Instant Clone workstations, which properly join the domain.

The goal is a floating-assignment pool of persistent desktops. Is this possible with Horizon 8?

SSO from Federated Domain to Horizon 2212 Environment

theoldgoat — Sat, 14 Jan 2023 12:41:12 GMT

Hello,

The current version of Horizon in our environment is 2212.

MFA and TrueSSO is going to be implemented soon using Azure AD, this was tested in our test environment and works as expected. What I want to be able to do, is allow SSO from a Federated domain. The domain is not yet federated; we are potentially taking them on as a new client and they have asked for SSO using their own AD credentials and have asked if we can set this up for them. They use Azure AD.

I've had several calls with VMware and have had mixed reports back, most saying this isn't possible without setting up an old school direct trust between our domain and the client's domain - I would prefer to avoid that and use modern authentication, is it possible to use Azure AD FS or Azure AD Authentication?

If I must use something like Workspace ONE Access then fine, I would even consider dropping back to using an on-prem AD FS if I had to.

What options do I have?

Thanks

Cannot do a clean reinstall with custom configurations on MAC

jchanx — Wed, 04 Jan 2023 17:31:28 GMT

I'm having issues correcting wrong configurations while setting up the product initially, specifically the USB Redirection and Log in in as current user options were not de-selected. I've attempted to uninstall and reinstall, but the previous configurations seem to still be in play due to the same redirect to log into client's Microsoft domain. I only see flashes of the error pop up since it redirects to a browser so quickly. I also tried installing an older version with no change.

Can someone please provide guidance on how I can purge this configuration from my computer to do a new clean custom install, so I can perform services for our client, thank you in advance!

Is it possible to use UAG with Microsoft Authenticator but to force users to enter code?

electricd7 — Fri, 09 Sep 2022 16:08:22 GMT

Hello-

We have a Horizon 2111 environment setup that uses a Unified Access Gateway Appliance v21.06.2 coupled with a connection broker for users to get external access. I would like to be able to use 2FA on the Microsoft Authenticator app (we are O365 environment) but instead of PUSH for the second factor, I would rather the users have to enter the rolling code for 2nd factor. Is there a way to configure UAG/Horizon coupled with MS Auth to force this? It currently works with PUSH, but management is asking for code entry enforcement as a way to bypass a user accidentally acknowledging a push and not paying attention to what they are doing. Anyone doing this? I know I can do with DUO but we use the MS app for literally every other service, so I would rather not involve a second vendor if there is a way to do it. Thanks!

Running Horizon Client on Surface Go 3

Michael_Fatley — Fri, 15 Jul 2022 08:10:54 GMT

Hi all,

I am deciding on purchasing a Surface Go 3 and wanted to know if Horizon Client works on it? I use Windows 11 on my own desktop for remotely connecting into work via Horizon Client and want to also do the same from a tablet but not sure if the software will work on a Surface Go 3.

Thanks in advance

Server's certificate subject name does not match the server's External URL.

stevan44 — Fri, 08 Jul 2022 15:18:27 GMT

I'm at a loss as to why this message is still showing up. I've generated a self signed cert and root CA using makecert.exe.

Image sure that the subject in the cert is using DukeServer2019B.Sun.com, verified this by looking at the details tab. Reload Horizon Server. While on the Horizon server, I've brought up the Horizon Console and the cert not secure shows up. After login in to horizon i can see that the domain is set and working to Sun.com. Go to Settings\Server\Connection Server to check the external url which is set to https://DukeServer2019B.Sun.com:443.

From what I can see it should be working, Server's certificate subject name does match the server's External URL

I was hoping that someone can tell me what's the best way to troubleshoot this issue?

latency requirement between POD

Christos_vv — Thu, 23 Jun 2022 16:46:44 GMT

What is the network latency requirement between horizon pods\sites in CPA

Customizing the Horizon Client Error Messages

Kraucer — Mon, 14 Mar 2022 16:00:36 GMT

Anyone managed to apply these customizations?

https://docs.vmware.com/en/VMware-Horizon-Client-for-Windows/2111/horizon-client-windows-installation/GUID-0597A283-E902-483F-A2B0-93518C8E3A14.html

https://admx.help/?Category=VMware_Horizon_7&Policy=VMware.Policies.vdm_client::ErrorFooterTextFile

Ubuntu 18.04 bound to AD using Realmd always results in Error state for VMs after creating the pool

sicnarf — Sun, 10 Oct 2021 04:14:38 GMT

Hi,

We have an issue wherein deploying an Ubuntu 18.04 VM bound to AD using the Realmd method (https://docs.vmware.com/en/VMware-Horizon-7/7.13/linux-desktops-setup/GUID-93F4CA16-5F47-47BE-B28C-E8A7901E0391.html) always results in an a generic error message and the VM's are note available.

Now, using PBISO, its successful but we can't use that since it's not mapping the AD UIDs to the created Ubuntu user (maybe if you also know how to resolve this, we can use this route).

Anyone has the same experience or can share how to troubleshoot the issue and resolve it?

Regards,

Francis

I can't automate full clone desktop pool deployment for Horizon View Connection Server 7.2

SyenceLabb — Sat, 24 Apr 2021 17:05:24 GMT

I have a connection server with a vCenter connection in place and now would like to automate deploying a full clone desktop pool using PowerCLI/Hv.Helper and nothing seems to work. Here is the New-HVPool command I am attempting to run:

$datastore = @('datastore') $host_or_cluster = "cluster" $resource_pool = "cluster" $parent_folder = "/Datacenter/vm" $template = "template" $global_entitlement = "DOMAIN\Domain Users" $user_assignment = "FLOATING" $enable = $false $enable_provisioning = $false $stop_provisioning_on_error = $false $naming_method = "PATTERN" $maximum_count = 2 $cust_type = "NONE" $pool_name = "jumpbox" $pool_display_name = "jumpbox" $naming_pattern = "vm{n:fixed=3}" Connect-HVServer -server cs.domain.local -User user@domain.local -Domain domain.local -Password password New-HVPool -FullClone ` -PoolName $pool_name ` -PoolDisplayName $pool_display_name ` -UserAssignment $user_assignment ` -Enable $enable ` -Template $template ` -VmFolder $parent_folder ` -HostOrCluster $host_or_cluster ` -ResourcePool $resource_pool ` -Datastores $datastore ` -EnableProvisioning $enable_provisioning ` -StopProvisioningOnError $stop_provisioning_on_error ` -NamingMethod $naming_method ` -NamingPattern $naming_pattern ` -MaximumCount $maximum_count ` -CustType SYS_PREP ` -SysPrepName "sysprep-spec" New-HVEntitlement -ResourceName $pool_name -Type Group -User "DOMAIN\Domain Users" Set-HVPool -PoolName $pool_display_name -key "desktopSettings.displayProtocolSettings.defaultDisplayProtocol" -Value "BLAST" Set-HVPool -PoolName $pool_name -Key 'automatedDesktopData.customizationSettings.reusePreExistingAccounts' -Value $true Set-HVPool -PoolName $pool_name -Key 'automatedDesktopData.customizationSettings.reusePreExistingAccounts' -Value $true Set-HVPool -PoolName $pool_name -Enable -Key 'automatedDesktopData.virtualCenterProvisioningSettings.enableProvisioning' -Value $true Disconnect-HVserver -server cs.domain.local -force -confirm:$false -erroraction:silentlycontinue

And I get the following output/error:

ServiceUri : https://cs.domain.local/view-vlsi/sdk RefCount : 4 User : administrator Domain : domain.local Id : /ViewServer=administrator@cs.domain.local/ SessionSecret : fb61757f-5266-4f21-aa5d-0c4b03022a9a IsConnected : True ExtensionData : VMware.Hv.Services Name : cs.domain.local Uid : /ViewServer=administrator@cs.domain.local/ Client : VMware.VimAutomation.HorizonView.Impl.V1.ViewServerClientImpl Exception calling "Desktop_Create" with "2" argument(s): "ExceptionType : VMware.Hv.InvalidRequest ErrorMessage : VmTemplate has an unsupported OS" At C:\windows\system32\windowspowershell\v1.0\Modules\VMware.Hv.Helper\VMware.HV.Helper.psm1:4983 char:7 + $id = $desktop_helper.Desktop_create($services,$desktopSpecObj) + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : VimException

I must note that I can manually create the full clone desktop pool with the exact configuration from GUI, which led me to try to first manually create the desktop pool, export the json file, then point to the same json file using New-HVPool, but then I receive another error when exporting seen below:

S C:\Windows\system32> get-hvpool | Get-HVPoolSpec | out-file C:\json2.json Exception calling "VmTemplate_List" with "1" argument(s): "There is an error in the XML document." At C:\windows\system32\windowspowershell\v1.0\Modules\VMware.Hv.Helper\VMware.HV.Helper.psm1:8112 char:10 + $info = $services.VmTemplate.VmTemplate_List($VcId) | Where-Object { $_ ... + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [], MethodInvocationException + FullyQualifiedErrorId : InvalidOperationException

I'm basically at a hard stop with no clue what I should try next. Here are my versions for my environment:

vCenter: 6.7.0.47000 Horizon View Connection Server: 7.2.0 build-5735293 Connection Server OS: Windows Server 2012 R2 Template: CentOS 7/VM version 13 compatibility Powershell version: 4.0 VMware.Hv.Helper Manifest 1.3.1 VMware.PowerCLI Manifest 12.2.0.... VMware.Vim Script 7.0.1.1... VMware.VimAutomation.Cis.Core Script 12.2.0.... VMware.VimAutomation.Cloud Script 12.0.0.... VMware.VimAutomation.Common Script 12.2.0.... VMware.VimAutomation.Core Script 12.2.0.... VMware.VimAutomation.Hcx Script 12.2.0.... VMware.VimAutomation.HorizonView Script 12.2.0.... VMware.VimAutomation.License Script 12.0.0.... VMware.VimAutomation.Nsxt Script 12.2.0.... VMware.VimAutomation.Sdk Script 12.2.0.... VMware.VimAutomation.Security Script 12.1.0.... VMware.VimAutomation.Srm Script 12.2.0.... VMware.VimAutomation.Storage Script 12.2.0.... VMware.VimAutomation.StorageUtility Script 1.6.0.0 VMware.VimAutomation.Vds Script 12.2.0.... VMware.VimAutomation.Vmc Script 12.2.0.... VMware.VimAutomation.vROps Script 12.2.0.... VMware.VimAutomation.WorkloadMan... Script 12.2.0....

Do I have any other options on automating this outside of using a newer version of Horizon View? I see some issues being noted about -FullClone problems here;

https://github.com/vmware/PowerCLI-Example-Scripts/issues

But none of them seem to touch on my exact issue.

Any assistance greatly appreciated.

Horizon 7 Upgrade required to 7.13

raleysm — Sat, 06 Feb 2021 17:15:53 GMT

Currently I have to upgrade to the 7.13 version to get rid of the javascript components on the Horizon web interface. Trying to go through the document but want to know if those who have already done this, are there other components on any other server that need to be upgraded with it too ? How how this "upgrade" gone ? Thank you.