All Horizon Members posts

Smartcard auth to Horizon Management Console (browser logon)

em4rt — Tue, 31 Oct 2023 17:23:17 GMT

Good afternoon,

Is it not possible to use smartcard when authenticating to the management console in the browser (using version 2111)?

All the information I can find, seems to be for smartcard auth to the server OS (which I have working) instead of the console...

Any advice is appreciated!

Thanks,

Eric

Re: latency requirement between POD

jaipraksh — Wed, 11 Oct 2023 10:12:57 GMT

Latency between the data center where the existing Horizon pod with the Connection Servers are deployed and every single remote location where the Horizon Agents are deployed must be 120 milliseconds or less. Networking connections between private data centers and cloud data centers vary depending on the cloud provider, we recommend that you work with your VMware technical team as well as your cloud provider for optimal configuration.

Re: latency requirement between POD

agalliasis_VS — Wed, 21 Jun 2023 21:33:18 GMT

Search for Latency here:
Horizon Architecture | VMware

Horizon 7.13.2 support in Windows 10 LTSC 2021 (21H2)

Zdenek2 — Fri, 26 May 2023 11:53:21 GMT

Hello,

we are planning to update OS from Win10 LTSC 2019 (1809) to LTSC 2021 (21H2) for our golden image with Horizon 7 and I'm not sure if Horizon 7.13.2 is already supported on LTSC 21H2.

I have found this article, where is confirmed support for 21H2 GAC, but not specifically for LTSC 21H2 (Long Term Support Channel).

Does it mean that LTSC 21H2 is not supported in Horizon 7 at all or its just not listed?

btw for Horizon 8, i see there is separate support table for LTSC version and its supported only from v2106 (8.3).

Thank you

Re: Horizon 8 (2212) Pool Configuration Issues

Geogee — Wed, 01 Mar 2023 22:22:13 GMT

Hello,

if you are using the same Image, then there is that problem. For Instant Clones there is in use the ClonePrep, but for full clones you need to use the Sysprep. There can be also problem with the Agent. For Instant Clone you need to have the option of InstantClone Agent enabled, but for Full Clones not.

For Full Clones you are using a template and customization Specs which is in the vCenter Database prepared. Try to create manualy in vCenter new VM with the same template and CustomSpecs as you will be using in the Horizon.

Mainly are the following problems:

1) Windows Licence Key for different Edition

2) DHCP is not assigning IP address to the VM

3) Bad username/password for joining to the domain.

Re: Horizon 8 (2212) Pool Configuration Issues

DaveG_QVC — Tue, 28 Feb 2023 20:53:19 GMT

I might be misconstruing what you are trying to do but floating assignments are limited to instant clones (non-persistent). What is possible is dedicated, persistent VMs in which you create a automated full clone pool. You create an AD group that is entitled to the pool and as each person logs in they get automatically assigned and entitled to the next full clone(persistent) that is available in the pool.

When you build these style of pools at the end you simply pick a customization script (like when creating traditional full clones) that has commands like joining the domain etc.

What you want to select when creating such a pool is:

At the 2nd screen (vCenter Server) select Full Virtual Machines.
At the 3rd screen (User Assignment) select Dedicated and check the box for Enable Automatic Assignment
At the 11th screen (Guest Customization) you will need to select one of your pre-built customization scripts.

This will then build a pool (you can manage how many VMs max, how many spare (for when 5-10 first sign in to get their new VMs). One each person signs in they will be automatically be assigned to that next VM in order.

Re: Horizon 8 (2212) Pool Configuration Issues

yukiafronia — Sat, 25 Feb 2023 20:23:47 GMT

Why don't you join the domain with the template VM Windows and then try the full clone deployment again?

I do not use sysprep when verifying.
Because if the clone fails with sysprep I need to consult with Microsoft.

Maybe it's the full clone flow allocation setup you want to make, is that correct?

[ABUSE] By: advancedzz / Board: 2032 (49148)

scott28tt — Fri, 17 Feb 2023 11:46:58 GMT

Please move to the Horizon area.

Link to post: (Bluescreen showing error "Vmwvwebcam.sys" every day on guest OS.)
by advancedzz

https://communities.vmware.com/t5/Virtual-Machine-Guest-OS-and-VM/Bluescreen-showing-error-quot-Vmwvwebcam-sys-quot-every-day-on/m-p/2955093#M49148

Every day, approximately 10 machines must be rebooted because they display the Bluescreen error "Vmwvwebcam.sys." The company has approximately 500 computers, and approximately 10 of them display the problem each day. Uncertain what caused it. Is it possible to fix? Details VSphere Client version 7.0.3.01100 Vmware VMware Horizon : Version 2111 Vmware guest : Windows 10 22h2 (Build 10.0.19045.2486)

This message has 0 replies

Horizon 8 (2212) Pool Configuration Issues

ReGos — Fri, 17 Feb 2023 12:32:07 GMT

Currently migrating to a Horizon 8 environment from a Horizon 7 environment that utilized full linked clones.

This VDI environment is Windows 10 based desktops (soon to add Windows 11)

We have a requirement for several dedicated-assignment pools and a couple of floating-assignment pools. We use Ivanti for patching and we treat our VDI environment similarly to physical desktops due to system uniqueness, scanning, and potential for forensics.

I have successfully created an Instant Clone pool for dedicated users. Thus far, these are working well.

What I am struggling with, is how to create a floating assignment pool of persistent workstations. I have tried full clones from a template but they do not join the domain. The same base image will create a snapshot-based pool for dedicated Instant Clone workstations, which properly join the domain.

The goal is a floating-assignment pool of persistent desktops. Is this possible with Horizon 8?

Re: Cannot do a clean reinstall with custom configurations on MAC

TheSica — Mon, 30 Jan 2023 17:07:23 GMT

I'm not sure of the specifics when it comes to MAC but for Windows there is a cleaner utility that VMware has, they might have one for MAC as well. It would be worth opening an SR with them to inquire.

SSO from Federated Domain to Horizon 2212 Environment

theoldgoat — Sat, 14 Jan 2023 12:41:12 GMT

Hello,

The current version of Horizon in our environment is 2212.

MFA and TrueSSO is going to be implemented soon using Azure AD, this was tested in our test environment and works as expected. What I want to be able to do, is allow SSO from a Federated domain. The domain is not yet federated; we are potentially taking them on as a new client and they have asked for SSO using their own AD credentials and have asked if we can set this up for them. They use Azure AD.

I've had several calls with VMware and have had mixed reports back, most saying this isn't possible without setting up an old school direct trust between our domain and the client's domain - I would prefer to avoid that and use modern authentication, is it possible to use Azure AD FS or Azure AD Authentication?

If I must use something like Workspace ONE Access then fine, I would even consider dropping back to using an on-prem AD FS if I had to.

What options do I have?

Thanks

Cannot do a clean reinstall with custom configurations on MAC

jchanx — Wed, 04 Jan 2023 17:31:28 GMT

I'm having issues correcting wrong configurations while setting up the product initially, specifically the USB Redirection and Log in in as current user options were not de-selected. I've attempted to uninstall and reinstall, but the previous configurations seem to still be in play due to the same redirect to log into client's Microsoft domain. I only see flashes of the error pop up since it redirects to a browser so quickly. I also tried installing an older version with no change.

Can someone please provide guidance on how I can purge this configuration from my computer to do a new clean custom install, so I can perform services for our client, thank you in advance!

Re: Is it possible to use UAG with Microsoft Authenticator but to force users to enter code?

Mickeybyte — Wed, 14 Sep 2022 13:30:32 GMT

@electricd7

The easiest way is to create a SAML application in AzureAD and configure that as an IDP on your UAG. Every user that arrives on the UAG is automatically redirected to the MS login page and once authenticated, the user is redirected back to the Horizon infrastructure.

To ensure an SSO experience for the user, configure TrueSSO (part of Horizon) otherwise users will have to enter their AD credentials again before accessing their VDI or published application. (I've written a blog post on how to setup this up with AzureAD: VMware Horizon authentication using AzureAD (with multifactor) – MickeyByte IT Pro Blog)

Re: Is it possible to use UAG with Microsoft Authenticator but to force users to enter code?

electricd7 — Tue, 13 Sep 2022 17:30:36 GMT

OK, I can look into that. Does UAG support the "ask for code" method such that on 2FA it asks for the code rather than making the user enter username@domain.com,123456 (where 123456 is the 2FA rolling code?)

Re: Is it possible to use UAG with Microsoft Authenticator but to force users to enter code?

Mickeybyte — Mon, 12 Sep 2022 05:53:14 GMT

Hi, @electricd7

The 2FA options for the MS Authenticator will probably have to be configured on the MS side. You only link the UAG to the MS Logon process but how MS handles this is out of hands of the UAG. I don't know enough about the possible options of the MS Authenticator to tell you were exactly you have to do this, but it will be on the MS side.

Is it possible to use UAG with Microsoft Authenticator but to force users to enter code?

electricd7 — Fri, 09 Sep 2022 16:08:22 GMT

Hello-

We have a Horizon 2111 environment setup that uses a Unified Access Gateway Appliance v21.06.2 coupled with a connection broker for users to get external access. I would like to be able to use 2FA on the Microsoft Authenticator app (we are O365 environment) but instead of PUSH for the second factor, I would rather the users have to enter the rolling code for 2nd factor. Is there a way to configure UAG/Horizon coupled with MS Auth to force this? It currently works with PUSH, but management is asking for code entry enforcement as a way to bypass a user accidentally acknowledging a push and not paying attention to what they are doing. Anyone doing this? I know I can do with DUO but we use the MS app for literally every other service, so I would rather not involve a second vendor if there is a way to do it. Thanks!

Re: Running Horizon Client on Surface Go 3

Monir_H_Prodhan — Tue, 06 Sep 2022 07:53:05 GMT

any screenshot from scratch

Re: Running Horizon Client on Surface Go 3

vBritinUSA — Fri, 15 Jul 2022 13:41:49 GMT

Hi, If its running Windows 11 and you have admin right to the box then yes it will be fine. You could always use HTML client like Chrome to attach to the desktop too assuming work has this configured.

Hardware and Software Requirements for Windows Client Systems (vmware.com)

This is a link to the requirments

Good luck

Running Horizon Client on Surface Go 3

Michael_Fatley — Fri, 15 Jul 2022 08:10:54 GMT

Hi all,

I am deciding on purchasing a Surface Go 3 and wanted to know if Horizon Client works on it? I use Windows 11 on my own desktop for remotely connecting into work via Horizon Client and want to also do the same from a tablet but not sure if the software will work on a Surface Go 3.

Thanks in advance

Re: Server's certificate subject name does not match the server's External URL.

stevan44 — Tue, 12 Jul 2022 00:38:49 GMT

Turns out it was Windows Server defaulting to use IP6. I changed the default to IP4 and it started working. Changes had to be made via a admin level command window. I never would have found it until I discovered ping trying to use IP6.