Drive mapping not working with User Environment Manager (UEM)

During a Horizon View implementation with User Environment Manager (UEM) 9.1 the drive mappings don’t show up for some with a Windows 10 VDI. The flexEngine log shows the drive mapping was successfully.

2016-12-16 15:18:45.084 [INFO ] Successfully mapped drive ‘G:’ to ‘\\filesrv-01\apps$’ (‘Applicaties.xml’)

When opening an elevated command prompt and type the command “net use“, the drive mappings where displayed and accessible. The users that didn’t get the drive mappings where local administrator in the Windows 10 VDI desktop.

There is a  known limitation with drive mappings if the user is:

  • Local Admin
    • and
  • User Account Control (UAC) is enabled

Changing one of them results in displaying the drive mapping in the Windows 10 VDI desktop. More information about this issue can be found here, link.

Update: December 22, 2016: Pim van de Vis (@pimvandevis) pointed me to the following setting to solve this issue. The VMware UEM FlexEngine Advanced ADMX template has an advanced setting that is called ‘Special Drive Mapping Logic’. Enabling the ‘Special Drive Mapping Logic’ setting solves this issues. More information can be found here, link.

What to know about Horizon Instant Clones

Horizon 7 introduced the Instant Clone feature leverages the vmFork technology introduced in vSphere 6.0 U1. With Instant Clone technology it is possible to clone and deploy a VDI desktop VMs in seconds. This is called the Just-In-Time Desktop.

Below is an overview how an Instant Clone VM is created:

Instant Clone

  1. Master Image. The Master Image or Golden Image is a Windows 7 or 10 optimized image that contains installed software such as the Horizon Agent for example.
  2. Snapshot. A snapshot is taken of the master image.
  3. Template. Per snapshot a linked clone template is created of the master image.
  4. Replica. The replica is a full clone of the Template that is thin provisioned. The replica uses Content Based Read Cache (CBRC) and can be place on a specific datastore. This is the shared read disk for the desktop VMs.
  5. Parent. Per ESXi host a parent VM is created. The parent  is powered on. From this Parent Instant Clones are created using vmFork.
  6. Instant Clone. In a couple of seconds the the Instant Clone is created.  The Instant Clone will grow depending on the change rate but at logoff the Instant Clone is deleted and a new Instant Clone is created.

In the vCenter Server the following VM conventions are created:

  • Template: cp-template-xxx
  • Replica: cp-replica-xxx
  • Parent: cp-parent-xxxx

What to know about Instant Clones

  • vSphere 6.0 U1 or higher is needed for Instant Clones.
  • For the Instant Clone feature Horizon Enterprise or Horizon Air in Hybrid-mode is needed.
  • The Horizon View Storage Accelerator must be enabled.
  • Instant clones VMs are always powered-on.
  • Each time a user logs out of an Instant Clone, the desktop is deleted and a new desktop is provisioned and powered on.
  • The Master image must be installed with Hardware Version 11.
  • Uses ClonePrep for customization specification. All the Instant Clones uses a Single SID.
  • Parent VMs are tied to VMware ESXi host they are on and cannot be migrated or powered off through the vSphere (web) Client. This prevents an ESXi host from entering maintenance mode. Follow KB2144808 to put an ESXi host in maintenance mode.

Maintenance Mode

  • In the Horizon Agent, the Instant Clone feature must be enabled and the Composer must be disabled. It is not possible to enable both the View Composer and Instant Clone in the same Horizon Agent.
  • Instant Clones is part of the Horizon Connection Server. So no additional infrastructure component is needed. If the Horizon Connection Server fails another Horizon Connection Server takes over.
  • A Instant Clone Domain Admin is needed to add the Instant Clone to the Active Directory.
  • Deploy applications and System updates by updating the parent image and create a new snapshot. With the new push image feature you can point to the new snapshot.

Push1

What is supported:

  • Only Single-user desktops
  • Only floating pools
  • 1 vCenter Server maximum
  • 1 VLAN only
  • Windows 10 (32-64 bit) and Windows 7 SP1 (32-64 bit) as desktop Operating Systems
  • Maximum number of 2 monitors with a resolution up to 2560×1600
  • VMFS and Virtual SAN (VSAN) storage
  • Scales up to 2000 Instant Clones per pool
  • vMotion, DRS and HA

What is not supported

  • Persona Management
  • RDSH
  • 3D Graphics (NVIDIA GRID), only limited SVGA support
  • Virtual Volumes, VAAI, NFS or local datastores
  • Disposable disk
  • Dedicated pools
  • Sysprep
  • PowerCLI
  • Persistent disks. If you need persistency use for example App Volumes with a writable disk and User Environment Manager (UEM).
  • Storage vMotion of the Instant Clone

Conclusion

Horizon 7 includes a great new enhancement called “Instant Clones”. Within seconds VDI desktop VMs can be deployed. There is no extra infrastructure components needed such as a Composer service. With this version of Instant Clones there are some caveats you need aware off before implementing in production. Further versions of VMware Horizon will improve Instant Clones to add more support.

Horizon View Administrator displays a blank error window

After upgrading to VMware Horizon View 7, the administrator webpage displays a blank error window when trying to connect using the IP address of the Connection Server.

blank

Horizon View 7 adds new security features that checks for the original URL for the web request. If not, it rejects the request and display the blank error window.

Steps to resolve this:

  • Use https://FQDN/admin

or

  • On every Connection Server create a locked.properties text file in c:\Program Files\VMware\VMware View\Server\sslgateway\conf
  • Add the following line:
    • checkOrigin=false

locked

  • Save the file
  • Restart the “VMware Horizon View Connection Server” service

After the modification you’re able to connect to the View Administrator URL using the IP address of the Connection Server.

4