After you create a
User Environment Manager GPO, you must configure its settings. These settings are required to configure the location of the User Environment Manager configuration and profile archives shares, and configure FlexEngine to start automatically during login.
You must at least configure the following settings:
Flex configuration files.
Run FlexEngine as Group Policy Extension.
If you do not configure Run FlexEngine as Group Policy Extension, you must configure FlexEngine to run using a logon script. See
Configure FlexEngine to Run from a Logon Script.
The rest of the
User Environment Manager GPO settings are optional and enabling them depends on your infrastructure and requirements.
Many of the FlexEngine settings that you configure through a GPO can be overridden by command-line arguments. Command-line arguments have higher priority than GPO settings. See
FlexEngine Command-Line Arguments
Open the User Environment Manager Group Policy Object To configure User Environment Manager, you must edit the settings of the User Environment Manager GPO that you created. Open the settings of the GPO from the Group Policy Management Editor. The User Environment Manager GPO configures FlexEngine with the correct User Environment Manager share locations and is therefore a required step.
Configure the Flex Configuration Files Setting You configure the location of the central share that stores the Flex configuration files in the Flex config files setting. Flex configuration files contain User Environment Manager data that FlexEngine uses to read and store user settings. FlexEngine runs with the user's credentials, and processes each Flex configuration file for which the user has NTFS read access.
Configure FlexEngine to Run as Group Policy Extension Setting You can enable FlexEngine to run automatically during logon by running as a Group Policy client-side extension.
Configure FlexEngine Logging Setting You can configure the location and file name of the FlexEngine log file, the level of logging detail, and the maximum size of the log file.
Configure Profile Archives Setting Configure the location of the profile archives share from where FlexEngine reads and stores user profile archives and other settings that are related to the profile archives.
Configure Profile Archive Backups Setting Use the Profile Archive Backups setting to configure the location where FlexEngine stores the backups of profile archives.
Configure Application Blocking Logging to the Windows Event Log Setting You can enable Application blocking logging to the Windows event log to have the details on blocked application launches logged to the Windows event log.
Configure Privilege Elevation Logging to the Windows Event Log Setting You can configure User Environment Manager to log the details of elevated application launches and, if desired, de-elevated child processes.
Configure Certificate Support for Mandatory Profiles Setting You can enable the use of personal certificates in a mandatory profile. In addition to enabling this support, you also must create a Flex configuration file with the Personal Certificates Windows Common Setting.
Configure DirectFlex - Advanced Settings You can configure advanced DirectFlex settings for more fine-grained control over DirectFlex export settings and visual feedback.
Configure FlexEngine Logging to the Windows Event Log Setting Use FlexEngine logging to the Windows Event Log to configure the events that FlexEngine logs to the Windows event log. When this setting is enabled, FlexEngine logs informational messages to the event log indicating the start and finish of path-based import and export actions.
Configure Paths Unavailable at Logon Setting You can configure Paths Unavailable at Logon to determine the behavior if the Flex configuration files path or profile archives path is unavailable at login.
Configure FlexEngine Refresh Settings Use FlexEngine Refresh Settings when you run FlexEngine from a logon script. When you run FlexEngine as Group Policy extension, this setting is ignored.
Configure Access to VMware UEM Self-Support for End Users You can control whether users have access to VMware User Environment Manager Self-Support.
Configure User Environment Manager Logon and Logoff Progress Information You can configure Show VMware UEM logon and logoff progress information to show a splash screen with progress bar when FlexEngine runs.
Configure Silo-Specific Flex Configuration Files Settings Use the Silo-Specific Flex Config Files setting to specify an additional, silo-specific path with Flex configuration files that is processed in addition to the ones configured through the Flex config files setting.