We are using VDI Horizon VIEW 6.2.2 and the users get this error. "error: client disconnected due to lack of activity". In the Global Settings, we have the option for "View Administrator Session Timeout" but not the View Client's session timeout.

  Any help is appreciated.

I found some problem with view along with one-way trust domains. It seem problem is occurred when I added the domain (client1.lab) to domain exclude. But, no error when I remove the domain from domain exclude list.

My setup is two domains; HQ.lab and client1.lab;

One-way Trust

HQ.lab -> client1.lab

(outgoing)-->--(incoming)

View Connection is member of HQ.lab.

Client1-VM-01 is member of client1.lab.

Here is the error log when I entered "vdmadmin -N -domains -exclude -domain CLIENT1 -add" for hide the domain on the Domain list in View client; So the user will need to enter UPN.

2015-09-19T02:31:22.841-05:00 INFO  (09A0-08A0) <ajp-nio-8009-exec-1> [UserContext] (SESSION:95eb_***_0b70 user1@client1.lab) UPN Login: User with the UPN user1@client1.lab is the user CLIENT1\user1

2015-09-19T02:31:22.879-05:00 INFO  (09A0-08A0) <ajp-nio-8009-exec-1> [AuthorizationFilter] (SESSION:95eb_***_0b70) User CLIENT1\user1 has successfully authenticated to VDM

2015-09-19T02:31:22.880-05:00 INFO  (09A0-08A0) <ajp-nio-8009-exec-1> [PAEContext] (SESSION:95eb_***_0b70) Client supports idle session handling. User idle timeout set to: never. Desktop SSO: enabled. Application SSO: enabled.

2015-09-19T02:31:22.885-05:00 INFO  (09A0-08A0) <ajp-nio-8009-exec-1> [Audit] (SESSION:95eb_***_0b70) BROKER_LOGON:USER:CLIENT1\user1;USERSID:S-1-5-21-1754858777-1199020022-3019864467-1106;USERDN:CN=S-1-5-21-1754858777-1199020022-3019864467-1106,CN=ForeignSecurityPrincipals,DC=vdi,DC=vmware,DC=int;

2015-09-19T02:31:23.207-05:00 INFO  (02C0-0A80) <Thread-33> [g] (Request2) User user1 connected to the Secure Gateway Server - session ID: 04A6_***_00B4

2015-09-19T02:31:24.619-05:00 ERROR (0B80-1640) <MessageFrameWorkDispatch> [ws_winauth] Failed to bind to LDAP://client1.lab (The user name or password is incorrect.) {SESSION:95eb_***_0b70}

2015-09-19T02:31:24.619-05:00 ERROR (0B80-1640) <MessageFrameWorkDispatch> [ws_winauth] Failed to bind for SID=S-1-5-21-1754858777-1199020022-3019864467-1106, domain name=client1.lab {SESSION:95eb_***_0b70}

2015-09-19T02:31:24.624-05:00 ERROR (09A0-1004) <ajp-nio-8009-exec-6> [PAEContext] (SESSION:95eb_***_0b70) Could not determine if user account (user1) is valid for logon from AD, assuming disabled.

Also, the user (user1) will see an error after selecting the pool (c1-pool). "Your user account is disabled". I checked the account and it is still enabled.

When I entered "vdmadmin -N -domains -exclude -domain CLIENT1 -remove" to expose the domain to Domain list in View client. The user can enter either UPN or enter username and select the domain.

It works perfectly. No error appears on the log.

Bizarre thing. I already tried bind LDAP with UPN and without. It is working fine. Any idea why it failed to LDAP bind when domain is on exclude? And it works fine while domain is not on exclude.

Is it bug?

Client will disconnect several times a day. Happens a lot more for  heavy users of CAD....(solidworks)

I have 3 view pools currently in a POC environment. 2 of them use the same parent VM and snapshot, and 1 uses it's own parent VM and snap. Am I wrong to assume the 2 that share the parent would also share a replica? I expected to see 2 replicas: 1 for the 2 pools that share the parent, and 1 for the unique guy. In actuality, I see 3 in vCenter. When I ran the sviconfig steps to look for an orphan replica (see the link below), none were found, meaning Composer believes there to be 3 it needs. Am I wrong, does a unique view pool create its own replica, even when it's using the identical parent/snap that another is?

Thanks in advance.

https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2009844

Dear All,

Today I upgraded my View environment from View 6.02 to View 6.2. The upgrade went fine without any problem. I had to upgrade View Composer, a connection server and a security server.

However I have issues with the View Administrator console.

When I log in I receive this error

com.vmware.vim.vmomi.client.common.UnexpectedStatusCodeException: Unexpected status code: 404

However I can refresh the page and View logs me in. All appears to be working, but before the upgrade I disabled my pools. I wanted to re-enable it, but I'm getting this error.

java.lang.IllegalStateException: View API connection not initialized

There are some settings in the View Administrator console I can change. There is no error in the event viewer on the connection server.

Do you have any idea what the problem is? It seems like a Java issue. With View 6.02 I have had no issue with the View Administrator console.

Thanks,

Edy

Hi,

I was wondering if there was a way to create multiple pools, all referencing the same Parent VM, but automatically adjusting the compute resource of the VMs within the target Pool as part of the compose/recompose process (on the assumption that any compute change wouldn't be drastic enough to invoke a HAL change or prompt to restart the OS)?

For example, to keep master images down to one to reduce administrative overhead for patching etc, is there any way to specify the following three pools to all use Parent VM X but with slight variations to CPU/RAM:

Pool (Small) - 2GB RAM, 1vCPU

Pool (Medium) - 4GB RAM, 2vCPU

Pool (Large) - 8GB RAM, 4vCPU

I realise you could quite easily patch Parent VM X and clone it to Y and Z and adjust the specification of X, Y and Z as the new Parent VMs to meet the compute requirements of the pools, but this seems just another unnecessary administrative overhead as would need to be done at each patch cycle. I was considering leveraging the post-synchronization script as a task that shuts down the VM, sends the VM name as a variable to a PowerCLI command, adjusts the compute as dictated by the script called by the pool and subsequently powers it back on?

Has anyone done anything similar, or is there a feature in the product I've simply overlooked.

(VMware Horizon View 5.3.4)

Thanks

With the development of the Blast/Blast Extreme protocol, is PCoIP protocol going to start to phased out?  I remember when RDP was no longer the option you wanted to use and had to buy new thin clients for PCoIP support. The Tera 2 have been out a number of years, still work great but at some point they replaced by something.  Does anyone know of some of zero model thin clients that will support Blast Extreme protocols? 

Will blast extreme work on a desktop? I would like to avoid the Pcoip host card requirement.

I am getting a constant blast of tasks in vcenter for Recomputer virtual disk digest.

I looked into this kb

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2095188

but I did not find the error in my view composer logs.

Also connecting to my ADAM database and running the query did not find any thing

any idea what this is?

We are developing a Windows 10 Enterprise 1511 virtual desktop image in a local domain, with the Store disabled, without Azure sync or Microsoft accounts, and without OneDrive. All the applications and %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs for all the non persistent VM's will be identical.

Initial testing of these VM's reveals that when a user logs off of one VM and logs into another, their Start Tiles to not roam with them. I read alot of people are a little dismayed and imply that Microsoft is trying to kill the Roaming Profile.

Using Persona Management and roaming %localappdata%, after a logoff, at the next logon there are quite a few issues. The Start menu often fails to open or is blank.

Id like to think that Microsoft will provide guidance on how to use UE-V to accomplish roaming of Start tiles or implement this as a feature in an upcoming OS release.

Perhaps someone at VMware can advise on how to accomplsh roaming of Start Tiles using Persona Management.

In the meantime, I have developed a powershell script that runs as a combined computer startup script, user login script, event triggered task and logoff script to export the current users StartLayout and impose it as an enforced StartLayout on next login only to relax that enforcement so that the user can then customize their StartLayout once again. Initial testing seems to function properly as a proof of concept yet there must be a better way to accomplish this.

param (    [switch]$startup = $false,    [switch]$logon = $false,    [switch]$task = $false,    [switch]$logoff = $false
)


$RoamStartTilesXMLPath = "$env:APPDATA\RoamStartTiles.xml"


$logRoamStartTiles = Get-EventLog -LogName Application -Source RoamStartTiles
if (! $logRoamStartTiles) {
  New-EventLog –LogName Application –Source “RoamStartTiles”
}


if ($startup) {
New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Explorer -Force
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer -Name LockedStartLayout -Value "1"
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer -Name StartLayoutFile -Value $RoamStartTilesXMLPath
write-eventlog -logname Application -source RoamStartTiles -eventID 1 -entrytype Information -message "The RoamStartTiles powershell script has run as a computer login script." -category 1
}


if ($logon) {
write-eventlog -logname Application -source RoamStartTiles -eventID 2 -entrytype Information -message "The RoamStartTiles powershell script has run as a user login script. If setup correctly, an attached task will be run against this event." -category 1
Stop-Process -Name explorer
if (-not (Get-Process explorer))
{
    Start-Process explorer
}
}


if ($task) {
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer -Name LockedStartLayout -Value "0"
write-eventlog -logname Application -source RoamStartTiles -eventID 3 -entrytype Information -message "The RoamStartTiles powershell script has run as an event attached task script." -category 1
}


if ($logoff) {
Export-StartLayout -Path "$RoamStartTilesXMLPath"
write-eventlog -logname Application -source RoamStartTiles -eventID 4 -entrytype Information -message "The RoamStartTiles powershell script has run as a user logoff script." -category 1
}

<?xml version="1.0" encoding="UTF-16"?><Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">  <RegistrationInfo>    <Date>2016-02-27T12:38:42.3226166</Date>    <Author>This-PC\havealoha</Author>    <URI>\Event Viewer Tasks\RoamStartTiles</URI>  </RegistrationInfo>  <Triggers>    <EventTrigger>      <Enabled>true</Enabled>      <Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="Application"&gt;&lt;Select Path="Application"&gt;*[System[Provider[@Name='RoamStartTiles'] and EventID=2]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>    </EventTrigger>  </Triggers>  <Principals>    <Principal id="Author">      <UserId>S-1-5-18</UserId>      <RunLevel>HighestAvailable</RunLevel>    </Principal>  </Principals>  <Settings>    <MultipleInstancesPolicy>StopExisting</MultipleInstancesPolicy>    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>    <StopIfGoingOnBatteries>true</StopIfGoingOnBatteries>    <AllowHardTerminate>true</AllowHardTerminate>    <StartWhenAvailable>false</StartWhenAvailable>    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>    <IdleSettings>      <StopOnIdleEnd>true</StopOnIdleEnd>      <RestartOnIdle>false</RestartOnIdle>    </IdleSettings>    <AllowStartOnDemand>true</AllowStartOnDemand>    <Enabled>true</Enabled>    <Hidden>false</Hidden>    <RunOnlyIfIdle>false</RunOnlyIfIdle>    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>    <UseUnifiedSchedulingEngine>false</UseUnifiedSchedulingEngine>    <WakeToRun>false</WakeToRun>    <ExecutionTimeLimit>PT72H</ExecutionTimeLimit>    <Priority>7</Priority>  </Settings>  <Actions Context="Author">    <Exec>      <Command>C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe</Command>      <Arguments>-file C:\Windows\System32\GroupPolicy\RoamStartTiles.ps1 -task</Arguments>    </Exec>  </Actions></Task>

, what i know that we can  create vmware view , as cluster using replica,

bbut how to create composer server cluster (redundant server )

This is more of a sanity-check question!

Our automated link-clones are set to REFRESH ON LOGOFF.

However, we are keen to recreate the linked clones each night so that the quickprep script runs (as the script performs a few special actions we want each day).

What command would effectively delete a desktop if nobody is logged on? Once deleted, the pool would automatically create a new desktop to bring it back to the desired level, and this new desktop would run quickprep.

Is the Send-LinkedCloneRecompose command the best way to go about what I want?

$POOLID=MYPOOLNAME

$parentVMPath=Get-Pool -Pool_id $POOLID | select -expand parentVMPath

$parentVMSnapshotPath=Get-Pool -Pool_id $POOLID | select -expand parentVMSnapshotPath

Get-Pool -Pool_id $POOLID | Get-DesktopVM | Send-LinkedCloneRecompose -ParentVMPath $parentVMPath -ParentSnapshotPath $parentVMSnapshotPath -schedule ((Get-Date).AddHours(1)) -forceLogoff$false -stopOnError$true

Our desktops are accessible 24hrs and, although quieter at night, still need to set the task on logoff and ensure that X number of machines are still available at any time.

I am trying to install VMware-Horizon-Client-3.5.0-2999900.x64.bundle on RHEL 6. The script runs, extracts the installer and then immediately quits. Can someone help me figure out what is wrong? TIA.

bash-4.1$ bash VMware-Horizon-Client-3.5.0-2999900.x64.bundle

Extracting VMware Installer...done.

bash-4.1$

Moving  Composer and vCenter  from Windows 2008 to Windows 2012R2 . IPs and host names will change.

I don't know how to re-point the Connector servers so they point at the new vCenter and Composer server without losing my link clone pools?

5.30 pool . VM's are set to refresh on logoff.

Hi all,

I want to add more CPU/memory to the desktops in a linked clone composer pool but I want to build a test pool off the changes first while the production pool is still up. Can you screw with virtual hardware in the master image then take a snapshot and build the test pool off of it without it effecting the linked clones in the production pool?

I would think the process would be as follows.....

1. Edit the hardware settings on the Win7 master image

2. Fire up the master image and let it recognize the additional CPU and memory (probably requires a reboot for the CPU I would think)

3. Shut down the master image and take a snapshot

4. Build a new test pool off that new snapshot

Thanks!

Hi all,

We have setup a floating pool with the policy of refreshing the desktop immediately after disconnect.  However users are not always being logged off properly and are still showing as an active session after disconnect. 

This causes issues when the user tries to log on to a new session, we have to force log off from the admin console. 

Also a setting to forcibly disconnect users after 12 hours is set, but we can have sessions connected for up to 2 days, this should not happen?

Thanks,

James.

Hi all,

We'd like to upgrade the View Agents on our VMs by using the following View Agent builds which according to VMware are supported during the upgrade:

VMware-viewagent-x86_64-6.2.2-3508800

VMware-viewagent-6.2.2-3526061

All works fine with these agents however HTML Access/Blast doesn't.

The browser will throw the following error message after selecting a desktop to connect to: (while other desktops with old agents work fine)

ERR:p:bad method / HTTP 405 Method not allowed

Thanks,

James.

Hi all,

I cannot delete a replica for some reason as it is greyed out.

I connected to the host and deleted it from there but now it shows in vCenter as orphaned

Is there another way to remove this?

Thanks,

James

Dear community,

Since about 2 weeks I am experiencing a certificate revocation check error in our Horizon View 6.2 environment. The strange thing is that within about 12 hours both (replicating) connection servers and the vCenter server / Composer server (on the same machine) are considered to have invalid certificates, though, in fact, they have valid ones (CA certificates). We do not use security servers.

The view administrator console shows the following for the connection servers:

Server's certificate is not trusted.

Server's certificate cannot be checked.

For the vCenter it says (as I manually validated the certificate):

No problem detected.

Certificate is untrusted but the thumbprint for the certificate is accepted.

With logging set to "full" the connection server logs show the following for the vCenter server:

TRACE (17B0-0E98) <VCHealthUpdate> [NativeKeyVault] validateCertificateChain response: { Result=FAIL, EndEntityReasons=cantCheckRevoked, ChainReasons=invalid, SelfSigned=false, EndErrorCode=16777280, EndInfoCode=258, ChainErrorCode=16777280, ChainInfoCode=256, PolicyErrorCode=-2146885613 }

As far as I can see there are no similar entries for the connection server certificates in the log.

At the moment I am running the environment with manually validated Composer and vCenter certificates and invalid (red) connection server certificates (as View clients and browsers do not consider them to be invalid).

I already checked that I am able to make everything "green" again via setting the registry key "CertificateRevocationCheckType" to 2 (as described here Configuring Certificate Revocation Checking on Server Certificates). This leads me to the conclusion that one of the intermediate certificates cannot be validated. As well, I got the information that one "version" of an intermediary certificate (of an intermediary ca) has been revoked. It seems to be no coincidence - as the point of time fits as well, but this particular version seems not be in use in my connection servers.

However, even with full logging activated, I cannot get the information which (intermediary) certificate cannot be validated and why. I would have expected to see something like "checking OCSP" or "checking CRL" but I cannot find it in the logs. Though, I noticed that one of the intermediary certificates was missing the OCSP URL (though the "Authority Information Access" field existed). Of course I updated the certificate with a version containing the OCSP URL but it did not change anything.

Additionally I manually checked all the certificates in the chain with openssl (for OCSP) and the CRL lists as well, but everything seems to be OK (all URLs are reachable and no used certificate has been revoked). In fact, as well, I do not interpret the error as "that the connection server does consider a certificate as invalid because it has been revoked", but "that it cannot check if it has been revoked". The servers do not need a proxy and there is none configured, as well (I checked proxy settings system context, too).

For the moment the problem is not critical, as the "red" status of the connection servers does not have an effect on our customers and as well I could turn off the certificate revocation checking (or switch it to only check the server certificate (2)). But of course I would like to really fix the problem.

Is there anyone who can give me a hint about what to check, e.g. how to find out which certificate cannot be checked and why? Has anyone had the same or a similar problem? VMware support works on the problem as well, but they seem to do not know the problem, neither.

I appreciate any thoughts and replies! Thanks!

Best regards,

Fabian