Can someone share experience with Profile migration with Persona management?

What I am trying to achieve is migrating user profiles from XP environment to win7 (V1 to V2). Existing XP profiles are using folder redirection for specific folders like “My documents” and other settings like registry are saved local disk. When I run “migprofile.exe [/s:source_path] [/t:target_path] [/r-:] [/takeownership] [config_file]”, I need to select source path. What should I mention as source path? What I am worried is, if I execute command “migprofile.exe /s:\\devvm-winxp\c$\documents and settings\ts115 /t:\\file01\profiles\ /takeownership “ how does it copies/ migrates profile data which has redirected content like my documents?

I am asking this qn because redirected data is on network share and actual profile is on local drive.

And if I execute with “/t:\\file01\profiles\ “ as target path, does it copy whole profile to this path including my documents content? As you know “My documents” folder is already redirected using group policies.

Not sure if I am missing anything basic in windows group policies to understand this.

Regards..

We have a situation here where I work where internal users will be connecting to virtual desktops that are located inside a DMZ.

I have a scenario in mond and would like to know if this is possible.

My plan was to have normal View Connection Servers in each of our main three global data centers located on the internal network which internal users would connect to initially with the View client.User would then connect directly to any View Desktops that are on the internal network.

If the user then selects a desktop that is inside a DMZ, then the connection to the view desktop should be channeled through another View connection server which would exist at the same location as the DMZ. Effectively all communications with the desktops in the DMZ should originate with this Connection server.

Is this possible.

Craig

Security Server - we purchased a cert, view.victorschools.org, from GoDaddy. External DNS entry for view.victorschools.org points towards 209.68.96.26

• District owned device off campus works fine
• Personal device off campus works fine

Broker - we have an internal Windows CA setup and issued a cert with a name of broker.vcs.local and a Subject Alternative Name (SAN) of view.victorschools.org. Internal DNS entry for broker.vcs.local and view.victorschools.org points toward 10.121.125.107

• District owned laptop or desktop - view client works fine since these machines are setup to trust our Windows CA
• Personal devices such as PC laptops, Mac laptops, or iPads - this is where the issue is. When one of these devices attempts to connect using view.victorschools.org which internally points towards our Broker server, they get a cert mismatch error. Even though the cert has a SAN of view.victorschools.org for whatever reason it picks up on broker.vcs.local.

How is split DNS and certs handled correctly? I want to point clients towards view.victorschools.org whether they are internal/external or district owned/personal and have it just work. I could have them turn off certificate verification in the client but this is one more thing a person would have to do. I am not even sure if cert checking is somethign that can be turned off on the iPad client.

Anyone know what is going on with http://repurpose.vmwarecloud.at/ . It's been down for days.

Hi,

I am trying to download the VMware Horizon View 5.2 Feature Pack as part of the 60 day trial I have signed up for, however on the download page I receive the warning "We are activating your licensing key entitlement, re-try your download soon". I’ve had this message for the past four days now and was wondering if there is a way to resolve this, or if there is an alternative download link that can be used?

Many thanks for any help in advance.

James

I'm having a problem when I connect to a Windows 7 VM via View client (using RDP), I don't get a pass-through login from my View client.

The screen stops at the Windows 7 user login page, prompting me to select my login id or select another user

I already have the use CTRL ALT DEL option enabled in the Windows properties

Any help would be appreciated

View 5.0.0

View 5.0.1 client

I am trying to test upping the Video Ram to 512MB in a W7x64 View Pool.  View is successfully reconfiguring the VM video hardware to 512MB, and I have verified the HW version is vmx-09.

The Windows OS still shows the Adapter Ram at 128MB.  If I run MSINFO32 from within the Guest it shows 128MB under Components->Display

Anything special required to allow the OS to see the 512MB?

Upgraded my view 5.1 environment today to 5.2 and everything is fine except for the fact that I'm having issues talking to View Composer.  In looking @ the Connection Server log I get:

When I look @ the composer log:

Build: 983460

Os Type: win64-x64

API Version: 3.1

Product Version: 5.2.0.7134

2013-03-18 13:20:28,296 | 6             | INFO  | Sim.WebService.SimServer - SVI service is starting.

2013-03-18 13:20:28,375 | 6             | DEBUG | Sim.WebService.SimServer - SimStart

2013-03-18 13:20:28,375 | 6             | DEBUG | Sim.WebService.SimServer - VMware View Composer Server mutex successfully created.

2013-03-18 13:20:28,406 | 7             | DEBUG | Sim.WebService.SimServer - SimServer.Init

2013-03-18 13:20:37,924 | 6             | DEBUG | Sim.WebService.SimServer - Waiting for subsystems to start: 10 sec...

2013-03-18 13:20:39,674 | 7             | INFO  | CommonLib.UfaSubsystem.UfaSubsystem - UfaSubsystem: contructed with main threads: 24, aux threads: 8, retry no: 3, timeout: 2100000

2013-03-18 13:20:39,690 | 7             | DEBUG | ServiceCore.WorkflowEngine.WorkflowEngine - Initialize workflow engine.

2013-03-18 13:20:39,721 | 7             | INFO  | ServiceCore.WorkflowEngine.WorkflowEngine - Max concurrent tasks is -1. Max VC tasks is -1.  Max UFA tasks is 10. The number of work threads is 20.

2013-03-18 13:20:39,783 | 7             | DEBUG | ServiceCore.Security.AuthorizedUsersManager - Initialize authorized users manager.

2013-03-18 13:20:39,783 | 7             | DEBUG | ServiceCore.Security.AuthorizedUsersManager - Reload users from the persistance layer.

2013-03-18 13:20:39,862 | 7             | DEBUG | ServiceCore.BackupRestore.BackupManager - Initialize BackupManager.

2013-03-18 13:20:39,893 | 7             | INFO  | Sim.ServiceCore.SimServiceApiImpl - PerformInitialCleanup: start performing initial cleanup.

2013-03-18 13:20:40,268 | 7             | INFO  | Sim.ServiceCore.SimServiceApiImpl - PerformInitialCleanup: no incomplete task needs to be cleaned up.

2013-03-18 13:20:40,440 | 7             | DEBUG | ServiceCore.Replication.ReplicationManager - Found unused replica id = baefafb4-40f0-490d-8b64-e25711193db1 state = Deleting goldVM = 4213efbf-0e93-f6be-9666-941d76afbb70 goldSS create time = 1/10/2013 12:55:00 AM vmMoId = vm-7611 bios uuid = 4213c675-34d2-4015-d83c-0f4c86d9f448 ssMoId = snapshot-7612 sourceLcUuid =  sourceLcMoId =

2013-03-18 13:20:40,440 | 7             | DEBUG | ServiceCore.Replication.ReplicationManager - Creating task to remove replica

2013-03-18 13:20:40,643 | 7             | INFO  | ServiceCore.LockManager.LockManager - A lock is requested for VcConfigEntry with id: a9eb0295-df84-49dd-a3fb-e32761b1c032

2013-03-18 13:20:40,799 | 7             | INFO  | CommonLib.Crypto.RSACrypto - Crypto exception occurred while decrypting.

System.Security.Cryptography.CryptographicException: Error occurred while decoding OAEP padding.

   at System.Security.Cryptography.Utils._DecryptPKWin2KEnh(SafeKeyHandle hPubKey, Byte[] key, Boolean fOAEP, Int32& hr)

   at System.Security.Cryptography.RSACryptoServiceProvider.Decrypt(Byte[] rgb, Boolean fOAEP)

   at VMware.Sim.CommonLib.Crypto.RSACrypto.Decrypt(String encryptedMessage)

2013-03-18 13:20:40,846 | 7             | FATAL | ServiceCore.Replication.ReplicationManager - Encounter some error during reomving unused replica. Will continue.

VMware.Sim.CommonLib.Exception.SimCryptoException: Error occurred while decoding OAEP padding.

   at VMware.Sim.CommonLib.Crypto.RSACrypto.Decrypt(String encryptedMessage)

   at VMware.Sim.CommonLib.VcSubsystem.VimClientConfig.get_Username()

   at VMware.Sim.CommonLib.VcSubsystem.VcSubsystemFactory.GetVcSubsystemNoLock(VimClientConfig vimClientConfig)

   at VMware.Sim.CommonLib.VcSubsystem.VcSubsystemFactory.GetVcSubsystem(VimClientConfig vimClientConfig)

   at VMware.Sim.ServiceCore.Replication.ReplicationManager.CleanupAllUnusedReplicas(Boolean blocking, Boolean cleanupOnStart), Machine Name: CH3VIEWICS01, Timestamp: 3/18/2013 6:20:40 PM, App Domain Name: SviWebService.exe, Thread Identity: , Windows Identity: NT AUTHORITY\SYSTEM, OS Version: Microsoft Windows NT 6.1.7601 Service Pack 1

2013-03-18 13:20:40,846 | 7             | INFO  | ServiceCore.LockManager.LockManager - A release is requested for VcConfigEntry with id: a9eb0295-df84-49dd-a3fb-e32761b1c032

2013-03-18 13:20:41,237 | 6             | INFO  | Sim.WebService.SimServer - SVI service started successfully.

After completing the installation and configuration of the new feature pack all is running fine except we are having a issue when some users are unable to select their chosen domain.

The issues seems to be with the HTML code and our staff are unable to select their correct domain and the web browser will lock up when they click on their domain, see picture below.

The HTML connection is for internal access only.

The web browsers we have tested are IE 9 & 10, Firefox 19.02 and Chrome 25 which all are the supported releases as per VMware documentation.

Just wondering if anyone is having similar issues with selecting the correct fields?

Any ideas would be appreciated which maybe lead me in the right direction.

Cheers.

I'm working on a Windows client which uses the Windows Data Protection APIs (CryptProtectData & CryptUnprotectData). These APIs encrypt & decrypt a credentials file by tying a session key to the Windows User Profile. This allows the user to securely choose to "remember" usernames & passwords. i.e. The user does not need to re-enter when the client restarts.

The credentials file is stored in the Roaming directory (C:\Users\<user>\AppData\Roaming). Assuming the Roaming Profile is enabled, if a user logs onto another machine, with the same username/password, the credentials file is automatically downloaded. CryptUnprotectData supports roaming so this means the file can be decrypted. Hence when the user starts the client, on another machine, he/she does not need to enter a username or password.

If the Roaming Profile is disabled the file cannot be decrypted. e.g. If manually copied to another machine. It is tied to the machine upon which it was encrypted & can only be decrypted on that machine.

This has worked for two releases of our client. But recently a larger customer exposed a hole with this approach.

They have a subset of users who have been provisioned with virtual environments. Every time one of these users signs in a "new" machine is provided. The Windows Roaming Profile is disabled. So to keep the users settings they are using View Persona Management.

This poses a problem for our client. The credentials file is downloaded by View Persona Management. But since the file was encrypted on "another" machine, & because roaming is disabled, it cannot be decrypted by CryptUnprotectData. From the Windows point of view this is very deliberate. But it means that every time a user logs into a VM a username/password is required by our client.

We asked the customer if they would be willing to enable the Windows Roaming Profile (since it works in conjunction with View Persona Management). But they believe this is a step backwards and are unwilling to proceed.

This seems like a common requirement. Hence my questions are:

• Does VMWare provide an alternative to the Windows Data Protection APIs in deployments where the Windows Roaming Profile is disabled?

• Are there any additional steps the customer can carry out to get CryptProtectData to work nicely with View Persona Management?

• Have VMWare an official stance on CryptProtectData & View Persona Management working together?

Hi, does anybody know how you can automate the removal of Assigned Users from Available Sessions?  Wehn a users uses a session it assigns them to the desktop.  When they logoff the Session becomes available but leaves there name as an assigned user to the desktop?

Thanks

Chris

Hi Guys,

we're setting up a new internal domain to migrate to, and as most of our user's have a Thin Client box connecting to a vm desktop via VMware View Client, i need to understand how we go about offering the option to select a different domain in the View Client connection window.

i've taken a look in the settings (gruop settings, global settings, individual vm settings) on our view connection server's VMware View Administrator web portal admin, but can not find if the setting is there to allow a log in to another domain.

the new domain is already available and on a seperate network with full forest trusts between existing and new.  as a test, i have remove one of the existing vms from the current domain and joined it to the new domain and logged in successfully to the new domain from an rdp session.  however trying to see how to do it via the view client

cheers

Ben

I don't quite understand what I am gaining with this functionality.   I know that it can only be established when creating a new pool, and accorinding to the built-in description, will redirect non-persistent files to a disposable disk that is deleted at the end of the user session.  Is this an altnerative to refreshing the desktop immediately following the end of the session?   Further, you can specifcy a size for this file... what happesn when you exceed the capacity. i have not been able to find out much information in the interwebs.  Perhaps more conflicting information about this feature.

Hi,

I have a problem with video playback over WAN using PCoIP. My netwok is 100Mb of bandwith and RRT is 15ms , and for VDI, i use Samsung NS 190 zero client but i have suffered bad video performance (Video do not smooth, it playback choppy and slow in full screen mode ). what is the main reason of this problem? cause of Network, PCoIP protocol , zero client or others? Please help and explain why for me (a technical explanation). Thanks in advance!

What is the best practice for sizing the VM swap file? When i create a VM with 2 GB of memory, a 2 GB swap file is created. When creating a memory reservation the swap file reduced in size.  When sizing enough memory for the VM what are the pros and cons for using an 100% memory reservation so no swap file is used?

Evening all!

So recently upgraded Vcenter to 5.1 and also View to 5.2, with upgrades of both our viewSecurity and viewComposer servers.

All went well and builds are correctly listed.

In a test pool creation of our first linked-clone Master image, I followed the Windows 7 Optimisation guide from VMware here:

http://www.vmware.com/files/pdf/VMware-View-OptimizationGuideWindows7-EN.pdf.

After running the 'nopersonacommands.bat' on my master image, I can no longer connect via the HTML access portal, I.e through a browser (blast in view 5.2). The blast log is below:

I noiced on first check of my master image that windows

firewall service was off and turned the service back on, making it an auto-start. On recomposing the image in View 5.2, the pool was rebuilt, but

nothing!

The error statements don't really make sense above, any ideas??

My thoughts are that the Windows 7 optimisation guide commands have stopped a potential dependency?

Thanks in advance

Athemiya

Hi all,

I'm going through the optimization guide for deploying windows 7 in View using Microsoft Deployment Toolkit pg 10 of the guide says I can find the NIC & storage drivers for virtual machines in C:\Program Files\VMware\VMWare Tools\Drivers but any windows 7 or windows 2008 vm I have which is running vmtools doesn't have a Drivers folder

Did they change location because there is C:\Program Files\Common Files\VMware\\Drivers

I changed the folder options to show system files etc but that didn't change much or show up a "Drivers" folder

I also tried extracting them from VMTools by mounting the tools iso and using this kb article to extract them that did give me a Drivers folder but that doesn't have separate folders for vmxnic or scsi

Browsing the vmtools cd does get me an SCSI folder but no sign of others.

1. Am I missing something that the drivers folder isn't where the guide says it should be on either Win 7 or 2008 vm's or whats the best way to report this documentation error?

Michael

Hello,

Thanks

Hi.  I'm having a bit of trouble getting one of my security servers upgraded.  I'm working on going from 5.1.1 to 5.1.2.  I have 2 connection servers and 2 security servers.  The connection servers and first security server upgraded fine, however, when I select the second security server in View Administrator,  "Prepare for upgrade or reinstallation..."  is greyed out.  I've read through the documentation and looked at the KB, and can't seem to find any reason why that mighthappen.  Any thoughts?

We're going to try to consolidate as much of a remote VDI deployment as possible into a single chassis. Anybody have any common choking points to be concerned with? Ideally, I'm trying to support between 30-50 stateless zero clients.