After you create a
VMware Dynamic Environment Manager GPO, you must configure its settings. These settings are required to configure the location of the VMware Dynamic Environment Manager configuration and profile archives shares, and configure FlexEngine to start automatically during login.
You must at least configure the following settings:
Flex configuration files.
Run FlexEngine as Group Policy Extension.
If you do not configure Run FlexEngine as Group Policy Extension, you must configure FlexEngine to run using a logon script. See
Configure FlexEngine to Run from a Logon Script.
The rest of the
VMware Dynamic Environment Manager GPO settings are optional and enabling them depends on your infrastructure and requirements.
Many of the FlexEngine settings that you configure through a GPO can be overridden by command-line arguments. Command-line arguments have higher priority than GPO settings. See
FlexEngine Command-Line Arguments
Open the VMware Dynamic Environment Manager Group Policy Object To configure VMware Dynamic Environment Manager, you must edit the settings of the VMware Dynamic Environment Manager GPO that you created. Open the settings of the GPO from the Group Policy Management Editor. The VMware Dynamic Environment Manager GPO configures FlexEngine with the correct VMware Dynamic Environment Manager share locations and is therefore a required step.
Configure the Flex Configuration Files Setting You configure the location of the central share that stores the Flex configuration files in the Flex config files setting. Flex configuration files contain VMware Dynamic Environment Manager data that FlexEngine uses to read and store user settings. FlexEngine runs with the user's credentials, and processes each Flex configuration file for which the user has NTFS read access.
Configure FlexEngine to Run as Group Policy Extension Setting You can enable FlexEngine to run automatically during logon by running as a Group Policy client-side extension.
Configure FlexEngine Logging Setting You can configure the location and file name of the FlexEngine log file, the level of logging detail, and the maximum size of the log file.
Configure Profile Archives Setting Configure the location of the profile archives share from where FlexEngine reads and stores user profile archives and other settings that are related to the profile archives.
Configure Profile Archive Backups Setting Use the Profile Archive Backups setting to configure the location where FlexEngine stores the backups of profile archives.
Configure Application Blocking Logging to the Windows Event Log Setting You can enable Application blocking logging to the Windows event log to have the details on blocked application launches logged to the Windows event log.
Configure Privilege Elevation Logging to the Windows Event Log Setting You can configure VMware Dynamic Environment Manager to log the details of elevated application launches and, if desired, de-elevated child processes.
Configure Certificate Support for Mandatory Profiles Setting You can enable the use of personal certificates in a mandatory profile. In addition to enabling this support, you also must create a Flex configuration file with the Personal Certificates Windows Common Setting.
Configure DirectFlex - Advanced Settings You can configure advanced DirectFlex settings for more fine-grained control over DirectFlex export settings and visual feedback.
Configure FlexEngine Logging to the Windows Event Log Setting Use FlexEngine logging to the Windows Event Log to configure the events that FlexEngine logs to the Windows event log. When this setting is enabled, FlexEngine logs informational messages to the event log indicating the start and finish of path-based import and export actions.
Configure Paths Unavailable at Logon Setting You can configure Paths Unavailable at Logon to determine the behavior if the Flex configuration files path or profile archives path is unavailable at login.
Configure Access to VMware DEM Self-Support for End Users You can control whether users have access to VMware Dynamic Environment Manager Self-Support.
Configure VMware Dynamic Environment Manager Logon and Logoff Progress Information You can configure Show VMware DEM logon and logoff progress information to show a splash screen with progress bar when FlexEngine runs.