topic Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain in Horizon Desktops and Apps

Instant Clone gold image snapshot prep & Losing trust relationship with domain

enso_ — Wed, 13 Apr 2022 15:47:42 GMT

Hello,

I'm looking for some information about best practices regarding instant clone gold image preparation before taking a snapshot.

Things like 'ipconfig /release'

And secondly, and this might be because I'm not doing something that should be done in preparation to taking snapshots... The gold image constantly loses trust relationship to the domain. This doesn't affect the Horizon end users, but it's a bit annoying having to rejoin the domain every time in order to do a 'gpupdate /force' or even for FSLogix rules editor to find user and group objects in our AD.

Thanks!

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Wed, 13 Apr 2022 18:15:31 GMT

The master image / Golden image is not supposed to join the domain.

For more info, please refer to https://techzone.vmware.com/manually-creating-optimized-windows-images-vmware-horizon-vms

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

enso_ — Wed, 13 Apr 2022 18:37:55 GMT

Not sure if I like that option.

FSLogix Apps RuleEditor requires access to the domain when creating/modifying rules.

Also with InstantClones, the actual clones i.e. the user VM's do not pull any computer group policies, user policies only. Computer group policies are all pulled/applied to the gold image. - This is my understanding anyways.

However, this is the first time I'm dealing with InstantClones, so I'm happy to be proven wrong :).

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Wed, 13 Apr 2022 18:44:28 GMT

While provisioning Instant Clone machine, ClonePrep will customize the Agent machine which will add the VDI desktops to the Domain / OU defined at the time of creating pool.

The GPO policies which will be linked to the OU will get applied to the VDI machines

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

enso_ — Wed, 13 Apr 2022 18:51:01 GMT

I will try this now.

So in order for the 'Computer Configuration' policies to be applied (not only the 'User Configuratoin') defined in the GPO, no additional script needs to be run? ClonePrep will do that as well?

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Wed, 13 Apr 2022 18:53:27 GMT

Yes.

Please try and let me know if it works.

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

enso_ — Wed, 13 Apr 2022 19:50:00 GMT

Works like a charm.

Thanks!

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Thu, 14 Apr 2022 03:39:29 GMT

Great!