Digital Employee Experience Management (DEEM) helps organizations gain insights into the employee experiences with their digital workspace. DEEM provides insights about apps, operating system stability, and performance. It also displays analytics for key performance indicators that impact employee experiences such as start time, shutdown time, logon, and logout events.

What is DEEM?

DEEM harvests telemetry from desktop devices and provides insights to take predictive actions. The Workspace ONE Intelligent Hub gets the data from devices and sends it to Workspace ONE Intelligence for display and interaction on the Devices and Apps dashboards. To harvest data, the Workspace ONE Intelligent Hub for Windows Desktop now includes an agent built on the osquery framework.

Note: Find DEEM data definitions in the Workdpace ONE Intelligence Product Data Definitions section, DEEM Data Definitions.

What is the DEEM Solution

A solution in Workspace ONE Intelligence is an area where all the dashboards, automations, and reports reside for a specific feature. For example, all the dashboards and widgets for DEEM exist in the Solutions area. Select Solutions from the main navigation and then select the Digital Employee Experience Management card.

What are the requirements to use DEEM?

  • Use Workspace ONE UEM console v2010 or later.
  • Use the Workspace ONE Intelligent Hub for Windows Desktop v20.10 or later.
  • Use the Workspace ONE Intelligence service.
  • Use Windows 10 devices that are managed in Workspace ONE UEM.
  • Use corporate-owned and corporate-shared devices.

What can you do with DEEM telemetry?

You can view and manipulate the data in modules. Focus your analysis to predict issues and to mitigate and fix problems. In the Desktop Device Dashboard module, find three tabs; Overview, Performance, and Errors.

  • Overview - This tab has general data for enrolled devices that are active and inactive. The Total OS Crashes analytic reports failures specifically for Windows Desktop devices fed from the Workspace ONE Intelligent Hub.
  • Performance - This tab displays statistics for Boot Time and Shutdown Time variables for your Windows Desktop devices. It uses bubble charts to visualize Critical and Warning thresholds for these variables. Select a bubble to get specific metadata. With this information, you can instantly see the devices that might need replacing or that need attention due to aged form factors and software. Configure the Performance tab to display data that aligns with your organization's definition of the Critical and Warning thresholds. To edit the thresholds, select the ellipses (…) in the bottom right of the Performance tab.
  • Errors - This tab displays statistics for Crashes and Crash Rate of your Windows Desktop devices. It uses line graphs to visualize the events. Select a point on the line graph to focus your troubleshooting. With this information, you can quickly find problem devices, get the error codes for the failures, and fix the issue. In any module, you can use the Edit Columns setting to customize the data displayed on dashboards. View the data that is most helpful for your situation.

Where can you access DEEM telemetry data?

Access your DEEM telemetry data in dashboards and in Solutions.

Dashboards

You can view and interact with DEEM telemetry data through dashboards in Workspace ONE Intelligence.

  • Devices dashboard - Go to the Desktop Device Dashboard module using the View Dashboard setting to get performance and error data fed from devices through the Workspace ONE Intelligent Hub.
  • Apps dashboard - Use several modules on this dashboard to view DEEM telemetry.
    • MAU for Top 10 Windows Apps - This module displays your most popular apps by the number of monthly active users. Perhaps an app you thought was helpful is not in this module? Then, there might be a problem with the app like it is hard to use, it does not install correctly, or users do not find it helpful with their work.
    • Windows Apps Errors - This module displays data for native, Windows apps except web apps. You can look at Crashes or Hangs data for these apps to identify apps that are not working or are constantly having problems.

Solutions

You can also interact with DEEM telemetry data using Solutions. This area of the console consolidates all Workspace ONE Intelligence components into a single space.

What data does DEEM provide?

The DEEM system provides various telemetry.

  • Organization Experience Score
  • User Experience Score
  • Desktop Apps Experience Score
  • Mobile Apps Experience Score (For Intelligence SDK apps)
  • Device Health
  • Application Performance and Stability
  • OS Crashes
  • Login, and Logout
  • Boot and Shutdown events and duration
  • Windows Services Status
  • Windows Performance Monitor Data

What is the DEEM footprint on your Windows 10 devices?

The footprint is comparatively small. The tested configurations for DEEM suggest a periodic impact of up to 5% CPU usage for a typical 4 core CPU. Tested configurations also suggest 10 to 40 Mb of memory usage on each Windows 10 device. The Workspace ONE Intelligent Hub for Windows itself sends between 4K to 10K of data on randomized 10 minute intervals.

How do you configure the DEEM Solution and view Experience Scores?

You can configure DEEM in the Solutions area of Workspace ONE Intelligence. You must have Administrator and Analyst permissions for Roles Based Access Control (RBAC).

  1. In Workspace ONE Intelligence, select Solutions > Digital Employee Experience Management > Get Started > Set Up.

  2. Select Start to configure the Connect Data Sources tab.

    • Workspace ONE UEM Connection: Often this item is already enabled. Workspace ONE UEM manages your Windows 10 devices and deploys the Workspace ONE Intelligent Hub on to your Windows 10 devices. Access topics on how to configure the Workspace ONE UEM connection.
      • Meet the requirements to use Workspace ONE Intelligence.
      • Register Workspace ONE UEM in Workspace ONE Intelligence.
    • Desktop Advanced Telemetry: Enable this menu item to collect telemetry data for your Windows 10 devices managed in Workspace ONE UEM.
    • Mobile App Telemetry: If you do not use the Workspace ONE Intelligence SDK, you do not need to configure this item. Add applications that use the Workspace ONE Intelligence SDK to collect their telemetry data.
  3. Select Start to Review Experience Scores Thresholds. On this tab, you can view experience scores for desktop apps, mobile apps, device health, and organizations. You can customize the experience scores thresholds by entering values directly in the value boxes above the green, yellow, and red threshold bars. However, editing the values is optional. You can return to the Experience Scores tab and edit values later.

  4. Select Next for each Experience Scores group.

  5. Select View Dashboard to launch DEEM.
    Note: Data does not immediately display because it can take up to 24 hours for the system to calculate experience scores.

How do you enable DEEM using the Integrations section?

You can enable DEEM using the Integrations section of Workspace ONE Intelligence at Integrations > Desktop Advanced Telemetry > Set Up. Select Enable to start collecting telemetry data for your Windows Desktop devices managed in Workspace ONE UEM.

Note: You do not need to enable DEEM in the Integrations section if you already configured the feature in Solutions.

How do I find all the data attributes DEEM uses for Experience Scores?

For the latest list of attributes, which can change often, use Workspace ONE Intelligence. Viewing the attributes in the console ensures you see the most current list of attributes.

  1. Go to Solutions > Digital Employee Experience Management > View Dashboard > Settings (gear icon) and select the Experience Scores tab.
  2. Select any of the scores to see the contributing attribute. For example, select Device Health Experience Score and view the attributes for OS Crashes, which are frequency and date range.

How do you quickly find specific apps and devices and their corresponding Experience Scores?

Use the global search feature in the header of the console.

  1. In the header of the console, select Apps or Devices from the drop-down menu item.
  2. Start to enter the name of the device or app in the text field next to the drop-down menu and select the app or device from the displayed list.
  3. Workspace ONE Intelligence displays that object's unique dashboard with its DEEM telemetry data.

Enable GPOs for DEEM (Optional)

To use the Digital Employee Experience Management (DEEM) feature fully, enable specific Group Policy Objects (GPOs) for Windows 10 devices. Enabling the GPOs, allows Workspace ONE Intelligence to report them in dashboards. You can do this action in SCCM or you can use product provisioning in Workspace ONE UEM.

You need to enable specific GPOs for a few performance indicators so DEEM can capture the associated data.

  • Login Failure
  • Lock
  • Unlock
  • Screen On
  • Screen Off

Using SCCM

Enable the listed events in SCCM.

Event GPO
Login Failure SecuritySettings > Advanced Audit Policy Config SystemAuditPolicies > Logon/Logoff > Audit Logoff SystemAuditPolicies > AuditLogon, Other Logon/Logoff events
Lock SecuritySettings > Advanced Audit Policy Config SystemAuditPolicies > Logon/Logoff > Audit Logoff SystemAuditPolicies > AuditLogon, Other Logon/Logoff events
Unlock SecuritySettings > Advanced Audit Policy Config SystemAuditPolicies > Logon/Logoff > Audit Logoff SystemAuditPolicies > AuditLogon, Other Logon/Logoff events
Screen On SecuritySettings > Advanced Audit Policy Config SystemAuditPolicies > Logon/Logoff > Audit Logoff SystemAuditPolicies > AuditLogon, Other Logon/Logoff events
Screen Off SecuritySettings > Advanced Audit Policy Config SystemAuditPolicies > Logon/Logoff > Audit Logoff SystemAuditPolicies > AuditLogon, Other Logon/Logoff events

Using Workspace ONE UEM

To use product provisioning in Workspace ONE UEM, create a File/Action to run the script on Windows 10 devices and deploy the script with a Product.

What To Do First

Copy the listed code and save it in an app like Notepad ++ as a CMD file (batch file). Title it so you can recognize it for this procedure. Perhaps title it Enable_Windows_Audit_Events.cmd.

This code updates the applicable GPOs.

@echo off
echo "Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting,Setting Value" >audit_policy.csv
echo ",System,Audit Logoff,{0cce9216-69ae-11d9-bed3-505054503030},Success and Failure,,3" >>audit_policy.csv
echo ",System,Audit Logon,{0cce9215-69ae-11d9-bed3-505054503030},Success and Failure,,3" >>audit_policy.csv
echo ",System,Audit Other Logon/Logoff Events,{0cce921c-69ae-11d9-bed3-505054503030},Success and Failure,,3" >>audit_policy.csv

auditpol.exe /restore /file:audit_policy.csv
del /f audit_policy.csv

Procedure

  1. In the Workspace ONE UEM console, create a File/Action to run the script. Go to Devices > Provisioning > Components > Files/Action > Add Files/Actions > Windows > Windows Desktop.
  2. On the General tab, enter a descriptive name for the Files/Action. You can enter GPO Update for DEEM. You want to recognize this action to add it to the product later in this task.
  3. On the Files tab, select Add Files and upload the script. Enter the file path where you want the product to install the script on devices in Download Path. The Version setting is for your record keeping. You can enter 1.0 or any version number that makes sense for your situation.
  4. Save the file.
  5. On the Manifest tab, in the Install Manifest section, select Add Action and complete the settings.
    • Action(s) To Perform: Select Run.
    • Execution Context: Select System.
    • Command Line and Arguments to run: Enter the file path of the script. For example, enter C:\ Enable_Windows_Audit_Events.cmd.
    • TimeOut (-1 for infinite): Enter 0.
  6. Save the action.
  7. In the Workspace ONE UEM console, create a Product to deploy the script to devices. Go to Devices > Provisioning > Product List View > Add Product > Windows > Windows Desktop.
  8. On the General tab, enter a name (like GPO Update Product for DEEM) and select the group in Smart Group that contains the devices you want to deploy the script to.
  9. On the Manifest tab, select Add, and select Install Files/Actions for Action(s) To Perform.
  10. For Files/Actions, enter the name of the Files/Actions created earlier and select it from the list. Save this manifest. Saving the manifest displays an Activate setting.
  11. Select Activate for the manifest to assign to devices.
  12. On the View Device Assignment page, select Activate to deploy the product to devices.

Troubleshooting DEEM

If your Windows 10 devices are not sending telemetry data to Workspace ONE Intelligence for Digital Employee Experience Management (DEEM), you can troubleshoot the system by checking the status of the Workspace ONE Intelligent Hub and reviewing its log files.

How do you check that the Workspace ONE Intelligent Hub is running?

One way to troubleshoot issues with sending data to Workspace ONE Intelligence is to ensure the Workspace ONE Intelligent Hub or the Agent for Windows is running on the Windows 10 device. Start the Windows Command Prompt app as an administrator and run sc query vmwosqext. This command displays the status of the DEEM agent service VMWOSQEXT. You can also look for the service displayed as VMware Digital Experience Telemetry with the service name VMWOSQEXT.

How do you enable logging for the DEEM agent on the device?

You can enable logging for DEEM by updating the listed registry entry. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VMWOSQEXT\ImagePath = “"C:\Program Files (x86)\AirWatch\AgentUI\Telemetry\vmwosqext.exe" –service—logger_min_status=0 –vmw_windows_log_verbose”

After the registry changes, restart the service. The logs are then written to the folder C:\ProgramData\VMWOSQEXT.

What are the registry settings DEEM uses?

DEEM creates registry entries under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VMWOSQEXT on the Windows 10 device. This registry works for both the Workspace ONE Intelligent Hub and the Agent for Windows.

check-circle-line exclamation-circle-line close-line
Scroll to top icon