Installation

Installation

Overview of User Environment Manager Installation Steps

The exercises in this Quick-Start Tutorial provide step-by-step guidance on completing each of the tasks outlined here, in the topic Overview of the User Environment Manager Deployment.
(Approximate read time: 2 minutes)

Software Prerequisites

Before you can deploy User Environment Manager, you must verify that the Windows operating system versions and, optionally, the virtualization software you plan to use, meet certain requirements, as described in the following topic, Software Requirements.
(Approximate read time: 2 minutes)

Create and Configure the User Environment Manager Configuration Share

The User Environment Manager configuration share is a central share on a file server. It contains all the configuration files for personalization and application configuration management. The FlexEngine agent on the managed machine reads configuration data from the User Environment Manager configuration share when a user logs in or logs out of the environment, or when the user opens or closes applications that are configured with DirectFlex.

Configuration Share Prerequisites

To complete this exercise, you will need the following.

  • An Active Directory group containing one or more end-user accounts.

In this exercise, the AD group Domain Users is used.

  • An Active Directory group containing one or more IT Administrator accounts.

In this exercise, the AD group Desktop Admins is used.

(Approximate read time: 2 minutes)

1. Create the File Share Folder

  1. On a file server, create a folder titled UEM_Config.
  2. To configure sharing, right-click the UEM_Config folder and select Properties.
  3. On the Sharing tab, select Advanced Sharing.

2. Configure Advanced Sharing

Select Permissions to configure the share permissions.

3. Grant Read Permissions to End Users

Select the Read check box for the Domain Users group, or whichever group you selected in Configuration Share Prerequisites.

4. Grant Read and Change Permissions to Administrators

Select the Read and Change check boxes for the Desktop Admins group, or whichever group you selected in Configuration Share Prerequisites.

5. Configure NTFS Permissions on the UEM_Config Folder

In the UEM_Config Properties dialog box, on the Security tab, select Edit.

6. Grant Full Control for Administrators

  1. In the Group or user names list, select the Desktop Admins group.
  2. In the Permissions for Desktop Admins list, select Full Control.

7. Grant Read & Execute Permissions for End Users

  1. In the Group or user names list, select the Domain Users group.
  2. In the Permissions for Domain Users list, select Read & execute.

After you select Read & execute, the List folder contents and Read check boxes are automatically selected.

The following Config Share video provides a detailed demonstration of the steps outlined in this exercise. If you need additional detail, you can find it here. If you already have a configuration share, feel free to skip the video. This video is 2 minutes.

Create and Configure the Profile Archives Share

The profile archives share stores the personal settings for users. The User Environment Manager agent (FlexEngine) creates a subfolder for each user. The share contains User Environment Manager profile archives, which are ZIP files. FlexEngine reads personal user settings from the profile archives share when a user logs in to the environment or launches a DirectFlex-enabled application. FlexEngine writes the modified settings when the user logs out, or closes a DirectFlex-enabled application.

Profile Archives Share Prerequisites

To complete this exercise, you need the following.

  • An Active Directory group containing one or more end-user accounts.

This should be the same group you used in Configuration Share Prerequisites.

In this exercise, the AD group Domain Users is used.

  • An Active Directory group containing one or more IT Administrator accounts.

This should be the same group you used in Configuration Share Prerequisites.

In this exercise, the AD group Desktop Admins is used.

1. Create the Share Folder

  1. On a file server, create a folder titled UEM_Profiles.
  2. To configure sharing, right-click the UEM_Profiles folder and select Properties.
  3. On the Sharing tab, select Advanced Sharing.

2. Configure Advanced Sharing

Select Permissions to configure the share permissions.

3. Grant Read and Change Permissions to End Users

Select the Read and Change check boxes for the Domain Users group, or whichever group you selected in Profile Archives Share Prerequisites.

4. Grant Read and Change Permissions to Administrators

Select the Read and Change check boxes for the Desktop Admins group, or whichever group you selected in  Profile Archives Share Prerequisites.

5. Configure NTFS Permissions on the UEM_Profiles Folder

In the UEM_Profiles Properties dialog box, on the Security tab, select Advanced.

6. Add Desktop Admins as a Principal

  1. Select Add.
  2. In the Permission Entry for UEM_Profiles dialog box, click Select a principle, and add the Desktop Admins group as a principal.

7. Configure NTFS Permissions for Administrators

  1. Verify that Desktop Admins is listed as the principal.
  2. Verify that the Applies to drop-down list is set to This folder, subfolders and files.
  3. Select the Full control check box.

8. Add Domain Users as a Principal

  1. Select Add.
  2. In the Permission Entry for UEM_Profiles dialog box, click Select a principle, and add the Domain Users group as a principal.

9. Configure Basic NTFS Permissions for End Users

  1. Verify that Domain Users is listed as the principal.
  2. Select the Read & execute, List folder contents, and Read check boxes.
  3. Select Show advanced permissions.

10. Configure Advanced NTFS Permissions for End Users

  1. Verify that the Applies to drop-down list is set to This folder only.
  2. Select the Traverse folder / execute file, List folder / read data, Read attributes, Read extended attributes, Create folders / append data, and Read permissions check boxes.

11. Add the Creator Owner as a Principal

  1. Select Add.
  2. In the Permission Entry for UEM_Profiles dialog box, click Select a principle, and add the Creator Owner account as a principal.

12. Configure NTFS Permissions for the Creator Owner

  1. Verify that Creator Owner is listed as the principal.
  2. Set the Applies to drop-down list to Subfolders and files only.
  3. Select the Full control check box.

The NTFS permissions for the UEM_Profiles folder should look like this.

The following Profile Share video provides a detailed demonstration of the steps outlined in the previous section. If you already created the configuration share, feel free to skip the video. If you need additional detail, you can find it here. This video is 2 minutes.

Install the User Environment Manager Agent (FlexEngine) on the Desktop or RDSH Server

FlexEngine, the User Environment Manager agent component, applies the policies that the IT administrator creates with the User Environment Manager Management Console. FlexEngine can be installed on physical, virtual, and cloud-based Windows devices. To install this component, you run the same VMware User Environment Manager Setup wizard that you will run later, to install the management console.

If you plan to create pools of virtual desktops or farms of RDSH servers, you can install FlexEngine on the master VM before creating the pool or farm. For example, in the following exercise, FlexEngine is installed on a Windows 10 virtual machine, referred to as the template VM. This template VM is later used to create a pool of Horizon 7 instant-clone desktops.

Prerequisites for FlexEngine Installation

To perform this exercise, you need the following:

  • User account – When you log in to the OS to run the installer, the account you use must have administrative privileges.
  • Installer – If necessary, you can download the installer from the Product Evaluation Center or  the VMware Downloads page. The installer is an architecture-specific (x86 or x64) MSI file.
  • License – The installation wizard prompts for the path to a valid license file unless VMware Horizon Agent is already installed in the VM. (User Environment Manager is included with Horizon 7 Enterprise Edition.) See Licensing Requirements.
  • Windows Registry – The Windows Registry on the VM must be accessible to User Environment Manager so that new entries can be written. See Registry Access Requirements.
  • Internet access – The installation process includes a certificate revocation check to verify the digital signature of the MSI file. This check requires Internet access.
  • Windows OS – The machine must be running a supported Windows version. For the example in this exercise, Windows 10 is used.

Note: For the purposes of this exercise, you can install the agent on a physical or a virtual machine that you want to manage. For details about how to create a VM used for virtual desktops for RDSH hosts in a VMware Horizon 7 setup, see Preparing Virtual Machines for Desktop Pools, part of the Reviewer’s Guide for View in Horizon 7 series.

Following is a list of supported operating systems, taken from Software Requirements.

1. Place the Installer in a Suitable Location

For this example, we downloaded the installer to a template VM hosted on a VMware ESXi™ server. To connect to this VM, called Win10-template_JMP, you would select the VM in the inventory list and select Launch Remote Console.

If you are performing this exercise in your own lab, you can download and extract the User Environment Manager installer file, and copy the file to the system where it will run or to a location accessible to the system.

2. Run the Installer

  1. Browse to the location of the User Environment Manager installation package.
  2. Double-click the installer file to start the wizard, and follow the prompts.

3. Choose the Setup Type

Select Custom to review the installation options. The VMware UEM FlexEngine agent component is selected, along with the optional components: Application Migration and Self-Support.

4. Complete the Wizard

Select Next and follow the rest of the prompts to complete the wizard.

5. Verify Installation

  1. Navigate to the Programs and Features control panel.
  2. Verify the VMware User Environment Manager agent was successfully installed.

The following Install FlexEngine video provides a detailed demonstration of the steps outlined in this section. If you need additional detail, you can find it here. If you already installed FlexEngine, feel free to skip the video. This video is 2 minutes.

Install the User Environment Manager Management Console

You use this administration console to configure User Environment Manager and to manage personalization and application configuration settings for end users. You can install the User Environment Manager Management Console on any supported Windows desktop or server that you want to use for managing User Environment Manager.

To install this component, you run the same VMware User Environment Manager Setup wizard that you ran to install the User Environment Manager agent (FlexEngine).

Prerequisites for Management Console Installation

To perform this exercise, you will need the following:

  • User account - When you log in to the OS to run the installer, the account you use must have administrative privileges.
  • Installer - If necessary, you can download the installer from the Product Evaluation Center. The installer is an architecture-specific (x86 or x64) MSI file.
  • Windows OS - The system must be running a supported Windows version. See Software Requirements.
  • Internet access - The installation process includes a certificate revocation check to verify the digital signature of the MSI file. This check requires Internet access.

1. Run the Installer

  1. Download and extract the User Environment Manager installer file, and copy the file to the system where it will run or to a location accessible to the system.
  2. Double-click the installer file to start the wizard, and follow the prompts.

2. Choose the Setup Type

Select Custom.

3. Complete the Wizard

  1. Disable the VMware UEM FlexEngine components and enable the VMware UEM Management Console component.
  2. Follow the rest of the prompts to complete the wizard.

A VMware UEM Management Console shortcut appears on the Start screen.

The following Install Management Console video provides a detailed demonstration of the steps outlined in this section. If you need additional detail, you can find it here. If you already installed the User Environment Manager console, feel free to skip the video. This video is 1 minute.

Configure the User Environment Manager Management Console

The first time you start the User Environment Manager Management Console, you are prompted to supply the path to the file share you set up in Create and Configure the User Environment Manager Configuration Share. Configuring the console consists of entering this file path and either accepting the default configuration or making changes by selecting or deselecting check boxes.

1. Start User Environment Manager

From the Start screen, start the User Environment Manager Management Console.

2. Enter the UNC Path to the Configuration Share

When the console opens, in the Location text box, browse to or enter the UNC path to the configuration share; for example, \\file\UEM_Config is the path if the name of the file server is file and the name of the share folder is UEM_Config.

If you have not already set up a configuration share, see Create and Configure the User Environment Manager Configuration Share.

3. Verify the Configuration File Has Been Created

Browse to the UEM_Config folder on the file share and verify that the management console configuration file has been created. The next time you open the console, this configuration file is read. You are not prompted to supply the path again.

4. Configure General Settings

Accept the default general configuration settings or use the check boxes to enable the desired features. To learn more about these features, see the VMware User Environment Manager Administration Guide. The App-V and SWV tabs contain settings for Microsoft Application Virtualization support and Symantec Workspace Virtualization support, respectively.

The following Management Console Config video provides a detailed demonstration of the steps outlined in this section. If you need additional detail, you can find it here. This video is 1 minute.