Hi, I need some help in kiosk mode setup for VMware View environment. I was reading the documentation - VMware View 5.2 Documentation Library

This statement - "As a best practice, use dedicated View Connection Server instances to handle clients in kiosk mode, and to create dedicated organizational units and groups in Active Directory for the accounts of these clients. This practice not only partitions these systems against unwarranted intrusion, but also makes it easier to configure and administer the clients."  has confused me. Dedicated View connection Server instance means, it should not be part of your view broker environment? You need to use separate sets of connection broker just to follow best practices for Kiosk mode?

Having some random disconnects for some of our VDI zero clients.  We have a small environment that consists of all Wyse PS25 zero clients connecting over WAN links.  Randomly, different users are reporting that they will be working on their client/VM or the client/VM is sitting idle and they will receive a message that their session has been disconnected. The user is forced to log back in all the way through Horizon View and then Windows. The VMware logs on the ViewConnect server states that the client has been disconnected, but does not offer any further details. If I open the Windows event viewer for the VM that was disconnected, every instance of this type of disconnect has the following events in the Windows Application Event Log. The source for all the events is listed as VMware Tools and the Windows Event ID is 1000.

[ warning] [vmusr:hgfsd] Setting HGFS server capability failed!

[ warning]

[vmusr:vmtoolsd] Error sending capability unity: (null)

[ warning] [vmusr:vmtoolsd] Error sending capability unity.taskbar: (null)

[ warning] [vmusr:vmtoolsd] Error sending new-style capabilities: (null)

I have tried to uninstall / reinstall VMware Tools on the VM that gets disconnected, but it does not seem to help. I don't think its the Wyse Client or Horizon View, but maybe the VM machine itself?? Has anyone else ran into this issue?

I recently noticed that users who logged off too quickly from a linked clone pool after their first session would be greeted by white/blank icons for the default pinned applications on the task bar.  The result from the user perspective is similar/identical to:

Broken pinned icons

Re: Windows 7 Quick Launch Error WEIRD

http://vmtoday.com/2013/01/blank-quicklaunch-icons-on-view-desktop/

However, the details are slightly different and the fixes are already in place. 

Brief background on the setup:  I am using Horizon View 5.2 w/ FP2.  The ViewPM.ADM template is attached to the GPO and the "Rom local settings folders" option is enabled.  The Profile upload interval was 10 minutes but was reduced to 5 minutes for testing.  Profile folders are shared/permissioned properly and this seems to be a failure with the persona management software on the pool VM as the data will eventually be uploaded if the user does not log out before the first (possibly second) sync.  The pool is set to refresh immediately after logoff.  Client Side Caching is disabled so KB2016416 should not apply.  The pool was creating using the deployment guide and the provided scripts from VMware, etc.  However, the client firewall was re-enabled so HTML Access in Feature Pack 2 will work. 

To test I used an affected pool and deleted my existing profile on the file server.  After logging in to the pool VM, the username.V2 folder was created in the Persona repository share.  At this point, the folder is blank.  The VM works as expected without problems.  If I examine the local profile in the VM, all of the folders and files affected by this issue exist (C:\users\username\AppData\Roaming\Microsoft\Internet Explorer\Quick launch). 

I let 5 minutes pass and Persona Management does an initial sync creating what looks to be a full sync.  However, if I examine the "\\server\share\username.V2\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\" folder, it only contains desktop.ini and two shortcuts ('Show desktop' and 'Switch between windows').  Missing are the actual shortcuts for the pinned items and a few other folders ("User Pinned" and "User Pinned\TaskBar") including more shortcuts. 

If I let 5 more minutes pass for another sync, the missing files will appear.  At this point if I log off, all is well (unless there are other files that PM fails to copy).  Running "openfiles /query /v" on the file server shows more files being sync'd during logoff. 

If I log off before all of the files are successfully synchronized, the next time I log on I'll be greeted with white icons for the pinned programs. 

Version 5.1.1 claimed to have resolved a problem similar to this when a pool was set to refresh immediately, so perhaps there is yet another related bug?

I have opened a support case but posting here in case anyone else has experienced and resolved this issue. 

Hi,

What Open Scene Graph version is supported in VMware Horizon View 5.3?

In order to run my 3D application I need at least OSG version 2.1.

Hi all,

I am trying to work out which protocol would be better for my remote Branch Office workers connecting back in to VMWare View VDI environment?

There will be 120 users and I am trying to determine the BW of the WAN link based upon deciding which Display protocol I will end up using.  I understand VMWare View has the option of both RDP and PCoIP.

I have come across the following which is causing the confusion:

The primary advantage of PCoIP is speed and display quality. The primary advantage of RDP is that common protocol on some restrict network is available. Neither is “better”; they are just different:

1.Use PCoIP if any of the following are true for you: 1.You want to display better quality graphics, video, and sound.
2.If bandwidth is not a problem because you are on a high-speed connection.

2.Use RDP if any of the following are true for you: 1.You don’t know your network quality, set RDP is better than PCoIP
2.If graphics, video, and sound quality are not an issue.
3.If you have limited bandwidth because you are on dial-up or a slow DSL connection.

I have read on a VMWare white paper that you should use Network WAN optimization if you are using RDP due to the overhead on the TCP handshake constantly reoccurring and that built-in RDP compression is 2:1.  But if you chose to use UDP based PCoIP you don’t need WAN optimization as this is built in and includes a compression of 100:1

Seems to me that PCoIP is the better of the two protocols in that you don’t need to install optimization in the network, but at the same time I am reading that PCoIP is best used for 3D graphics and video (non-of which I will have) and should be used when bandwidth is plentiful...... but then if I opt for RDP to keep WAN costs down am I going to need Optimization installed too?
My question is, which do I go with over a WAN and why?

Thanks in advance

David
Humble network engineer got himself involved in VMware

I'm looking into recommending a design for a clearing bank whose customers are other banks and where private IP addresses cannot be shared between the entities.

The customers are using View client and connect to the clearing bank where the View infrastructure is located through a double NAT tunnel. Neither party knows the private IP addresses of the other. The clearing bank does not want to use security servers.

The connection from the View Client should go through the secure gateways of the Connection server.

Can this configuration work ? Has anyone done this ?

Also the clearing bank wants to detect the 'originating IP address' (NATTED) for each user in order to validate the connection request.

Any input is appreciated.

Hey guys,

I've noticed that whenever I use PowerCLI to update a pool in View 5.3 (e.g. Update-AutomaticLinkedCLonePool -pool_id $id -deletepolicy "DeleteOnUse") HTML5 access gets disabled instantly, and the 'HTML Access' checkbox for that pool is cleared.

Two questions that hopefully someone will be able to help with:

1. How should I log this with VMware - Feature request, or Fault/Crash? I'm worried that the latter will just end up being closed with it having a manual workaround, but without ever being fixed in the product.
2. Does anyone know of an automated way to update that checkbox for each pool?

Thanks,

Rorus.

We have roaming users that connect from different remote locations to our Security Servers. Some remote locations using a firewall that blocks the PCoIP (4172) protocol. The firewall on the remote locations does have port 443 open. Has somebody experience and possible solutions with PCoIP over port 443?

Hi guru,

I received an error when I provided a valid license to view connection server.

In the "Edit license" window, I input a valid license, but got an error message saying "Error when loading license library". (The original error message is in Chinese and I translated it to English so I'm not sure the words are exactly the same as in English version.)

It looks something wrong before the connection server verify the licesen. If the license is really invalid, the error message should be like "The license is invalid" instead of "Error when loading license library". I got the "invalid license" error before but never met the "loading error" message.

Any suggestion? Thanks!

The view version is 5.2

Hello.

Today I have done VDI testing.

Devices tested

• Magnetic Stripe Reader
• Barcode Scanner
• Passbook Printer
• Biometric & MyCard Reader (3 brands)
  • IRIS
  • TRICUBE
  • Smartec

Magnetic Stripe Reader & Barcode Scanner can be used as normal.

Biometric & MyCard Reader can be detected by View Client, but still cannot run.

I’ve also tried using vSphere Client to run Biometric & MyCard Reader and it work perfectly fine.

Is there any configuration that I missed?

What is the solution?

Hope some one can guide me to solve this issue.

See Attachment clear view.

Thank you.

I'd like to try out Operations Manager for Horizon View, but I need some clarification and a little help.

1) What do I need for the setup?

     What version of Ops Mgr? 5.7.x or will 5.8 work?

2) Do vCenter or ESXi versions matter?

     I'm still on 5.0 U3 for ESXi and for 5.0 for vCenter.

Thanks,

Mike

We are dealing with IO issues in our environment so what options we have for recompose

I see in View manager where I can set how many happen at one time but is it possible to set a time interval as well.

For example do one recompose every 30 minutes

or 40 recomposes every two hours

stuff like that.  If so where is it, I can seem to find it?

We have a lot of outside vendors connecting to numerous View pools. Unfortunately the departments they're serving internally are not good at auditing vendor employee turnover. I need a way to audit user logons say for users who have not logged on in the last 90 days. We're playing around with the View SCOM MP, but the report there appears to not be current. The attribute it pulls is "SMS_G_System_SYSTEM_CONSOLE_USER.Time Stamp", but this value on cross check with View admin events appears dated.

Is there an existing report in the SCOM MP that would fill this need? If not, is there a query against the View database tables that would provide this info?

With Horizon 6 there is now the possibility to buy Horizon Advanced per Named user or per concurrent user.

Imagine the following scenario

- 1000 employees

- 1500 desktops are being protected by Mirage.

- 500 users are entitled for Workspace

- 200 users are entitled to use View

- The maximum concurrency for View is 100 VDIs

How many Horizon Advanced Named User licenses are needed in the above situation?

How many Horizon Advanced Concurrent User licenses are needed in the above situation?

Concurrency in Horizon advanced is defined as "concurrent connection".

What is the exact definition of concurrent connection?

How is concurrency exactly being measured in Horizon Advanced?

Hello

I have a problem and hope you can help me.

I have 5 physical Workstations. I want to craete an manual pool and attach a VM to a phsical device.

It is necessary, that whoever login from e.g.  Workstaion1 get the same VM. is it possible to create an Pool and assign:

Workstation1 to VM1

Workstation2 to VM2

and so on

Thanks!

We are setting up our View 5.2 system this week. We are using windows 7 x64 Enterprise. We only have about people on the system right now, but all are experiencing the same issue. Randomly all will drop their connections to their desktops. it happens 3 or 4 times a day. Not enough too be a show stopper, but enough to be seriously annoying.

a few bits of info that might be relevant:

we are using Imprivata OneSign for SSO

trend Micro AV (not deep security, but their standard client with the VDI plugin.)

the connection servers are not tunneling,

all users are currently using Teradici zero clients.

THe ZCs are on a different VLAN Than the View vms, which are on a different VLAN than the conn server.

THe affected users are all on different access switches.

THis is an automated floating pool of linked clones.

ALl are PCoIP

WE honestly don't even know where to start looking.

(Sorry for the weira capitalization, the forums don't like iPads, apparently)

I am trying to configure the View Transfer repository.

The install of the transfer server went fine, added it to View Admin

Went from Pending state to No Repository configured....

So i put TS in maintenance mode and go to configure repository with no luck.

I keep on receiving message: Error: 20507 - Problem verifying image repository:  No transfer server to verify repository information.

I have tried Local drive

network share

tried even giving Everyone group full rights.  Nothing.  I took the transfer server out of maintenance mode and it went back to no repository state so it looks ok.  I can't find any kb on this, any thoughts.

I'm getting a black screen and then eventually times out...time out occured.

I found several KB articles and tried a couple of them and none so far have worked for me.

Suffice to say if i use my connection server that is internal PCOIP and RDP works ; but if I use my security server only RDP works.

Consistently if use my connection server to establish a vdi session internally and externally i get a black screen and it just times out ...

Looking at the PCOIP gateway log on the security server : this is the consistent error that i get:

SSL handshake failure: asio.ssl error (336151576) error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

Does this i mean i have a bad SSL cert associated to my PCOIP gateway? for is this something else.

Full snippet of the log file :

[2014-Apr-07 10:26:54.229100]: header received

[2014-Apr-07 10:26:54.229100]: PCOIP-SG/1.0

[2014-Apr-07 10:26:54.229100]: XML

[2014-Apr-07 10:26:54.229100]: PSGC27-8b5

[2014-Apr-07 10:26:54.229100]: 93

[2014-Apr-07 10:26:54.229100]: xml received 93 93

[2014-Apr-07 10:26:54.229100]: Received command: get-counters

[2014-Apr-07 10:26:54.230100]: get_statistics was called while there are 0 SSL connections working.

[2014-Apr-07 10:26:56.154408]: header received

[2014-Apr-07 10:26:56.154408]: PCOIP-SG/1.0

[2014-Apr-07 10:26:56.154408]: XML

[2014-Apr-07 10:26:56.154408]: 62D4AFE3_A311_4FF2_AEA2_E57E16873E24-0

[2014-Apr-07 10:26:56.155408]: 362

[2014-Apr-07 10:26:56.155408]: xml received 362 362

[2014-Apr-07 10:26:56.155408]: Received command: add-connection

[2014-Apr-07 10:26:56.155408]: Parameter: connection-id Value: 62D4AFE3_A311_4FF2_AEA2_E57E16873E24/port1

[2014-Apr-07 10:26:56.155408]: Parameter: ctag Value(session_id portion): bs/DUiekTfzr

[2014-Apr-07 10:26:56.155408]: Parameter: ip-address Value: 10.233.15.180

[2014-Apr-07 10:26:56.155408]: Parameter: tcp-port Value: 4172

[2014-Apr-07 10:26:56.184410]: Connected to PCoIP server

[2014-Apr-07 10:26:56.238413]: SSL handshake with PCoIP server failed:asio.ssl error

[2014-Apr-07 10:27:03.822847]: SSL handshake failure: asio.ssl error (336151576) error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca

[2014-Apr-07 10:27:59.245821]: header received

[2014-Apr-07 10:27:59.245821]: PCOIP-SG/1.0

[2014-Apr-07 10:27:59.245821]: XML

[2014-Apr-07 10:27:59.245821]: PSGC27-8b6

[2014-Apr-07 10:27:59.245821]: 93

[2014-Apr-07 10:27:59.245821]: xml received 93 93

[2014-Apr-07 10:27:59.245821]: Received command: get-counters

[2014-Apr-07 10:27:59.245821]: get_statistics was called while there are 0 SSL connections working.

Dear All,

Today I bought an external SSL certificate from DigitCert for our security server. I imported the certificates to the Personal certificate store (computer account) on the security server. DigiCert provided three certificate, Root CA, Server CA and one with the name of our domain. I renamed the friendly name vdm of the existing self signed certificate and used the friendly name vdm for the certificate has our domain name. Thereafter I restarted the View services on the security server. They all started except the "View Blast Secure Gateway" service which entered the paused state.

About our setup, we have one connection server and one security server. For the security server we are using a different domain name than for connection server. We have an internal PKI and the connection server is using such a SSL certificate.

connection server = server01.internaldomain.com

security server = server02.externaldomain.com

Why could the certificate not be loaded from the View Blast Secure Gateway? Did I miss something?

Thanks,

Edy

I have a strange Situation where provisioning linked Clones Does not finish Customizing (Horizon View 5.3)

Login to the VM Agent Service is Starting Strange part is all the machines have the Same Name as the Parent Virtual machine

From Composer-ga logs I cannot identify much

013-10-29 15:30:29,302 [1596] INFO  CustomizationPersistentInfoReg  -  [CustomizationPersistentInfoReg.cpp, 98] Opened guest registry key for accessing customization info.

2013-10-29 15:30:29,317 [1596] DEBUG CSvmGaService  -  [svmGaService.cpp, 323] In RunService

2013-10-29 15:30:30,339 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 295] No Policy or SVM disks found

2013-10-29 15:30:30,339 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 347] In the master VM

2013-10-29 15:30:30,339 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 411] Service is in state: 4

2013-10-29 15:30:30,339 [1596] DEBUG WaitableManagerWin32  -  [WaitableManagerWin32.cpp, 87] Updating callback for event SviServiceStopEvent (00000148)

2013-10-29 15:30:30,340 [1596] DEBUG WaitableManagerWin32  -  [WaitableManagerWin32.cpp, 90] adding callback for event SviServiceStopEvent (00000148)

2013-10-29 15:30:30,340 [1596] DEBUG WaitableManagerWin32  -  [WaitableManagerWin32.cpp, 179] Dispatching callback for event WaitableManagerInternal (00000140)

2013-10-29 15:31:23,019 [1568] INFO  CSvmGaService  -  [svmGaService.cpp, 442] user logon.

2013-10-29 15:33:06,813 [1568] INFO  CSvmGaService  -  [svmGaService.cpp, 448] user logoff.

2013-10-29 15:33:12,710 [1596] DEBUG WaitableManagerWin32  -  [WaitableManagerWin32.cpp, 179] Dispatching callback for event SviServiceStopEvent (00000148)

2013-10-29 15:33:12,710 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 391] CSvmGaService::RunService: Stop requested.

2013-10-29 15:33:12,710 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 482] Shutting down the service

2013-10-29 15:33:12,710 [1596] INFO  CSvmGaService  -  [svmGaService.cpp, 487] Stopped the SVM state machine

2013-10-29 15:39:13,983 [1180] INFO  CSvmGaService  -  [svmGaService.cpp, 87] Initialized the Service

2013-10-29 15:39:13,983 [1180] INFO  CustomizationPersistentInfoReg  -  [CustomizationPersistentInfoReg.cpp, 98] Opened guest registry key for accessing customization info.

Panther logs gives me nothing at all . Tried with Quickprep and Sysprep Both No go

I think the netjoindomain is not even running

Any help would be appreciated