VMware 2V0-51.23 - VMware Horizon 8.x Professional

For instant-clone operations in Active Directory, the user account used by VMware Horizon needs specific permissions to manage computer objects effectively. These include the ability to create and delete child objects and computer objects, as well as read and write all properties of those objects. These permissions ensure that Horizon can create, modify, and clean up computer accounts associated with instant clones, facilitating seamless desktop provisioning and management.

To deploy a RDS desktop pool with the new standard of Windows Server 2019, the steps should be ordered as follows:

Prepare the Windows Server 2019 golden image. This is the first step because you'll need a prepared OS image to base your RDS desktop pool on.

Add an Automated Farm. Once your golden image is ready, you can set up an automated farm for the RDS desktop pool.

Add a RDS desktop pool. Using the automated farm and the prepared golden image, you can now add the RDS desktop pool.

Entitle AD users and/or groups. With the RDS desktop pool in place, the next step is to give Active Directory (AD) users and groups the necessary entitlements to access the desktops.

Launch Horizon Client and verify access to RDS desktop. As the final verification step, launch the Horizon Client to ensure that you can access the newly created RDS desktop pool and that everything is functioning as expected.

So, the sequential order is: Prepare the Windows Server 2019 golden image -> Add an Automated Farm -> Add a RDS desktop pool -> Entitle AD users and/or groups -> Launch Horizon Client and verify access to RDS desktop.

For a global entitlement to include local desktop pools, the settings and configurations of the global entitlement must be compatible with those of the local pools. If there is a mismatch in settings, such as display protocol, user assignment type (dedicated or floating), or other critical configurations, the local pools will not appear as selectable options when adding them to a global entitlement.

To create an instant-clone desktop pool, you must first create a golden image virtual machine and take a snapshot of it in a powered-down state. This snapshot provides the base image for the clones. You cannot create an instant-clone desktop pool from a VM template or a powered-on VM. Therefore, the administrator must take a snapshot of the VM that is the golden image before creating the new desktop pool. References: Create an Instant-Clone Desktop Pool and Instant Clone Desktop Pools

VMware Horizon's Dynamic Environment Manager (DEM) allows for the creation of Horizon Smart Policies with conditions that can be applied based on various criteria, including time of day. By utilizing DEM, an administrator can create policies that restrict certain actions, such as saving data to client devices, outside of specified business hours (5PM to 9AM in this case), thus achieving the desired control over user activities based on the time of day.

Application Profiler is a tool that analyzes the registry and file system locations where the settings for a particular application are stored, and creates a Flex configuration file for use with Dynamic Environment Manager. Application Profiler is installed using VMware Dynamic Environment Manager Enterprise Setup Wizard and explicitly selecting local drive installation1. This option allows you to install Application Profiler on a separate machine from the Dynamic Environment Manager Agent or Management Console. Alternatively, you can install Application Profiler on the same machine as the Dynamic Environment Manager Agent or Management Console, by selecting network share installation1.

VMware Dynamic Environment Manager Agent and the Application Profiler can be installed on the same machine, but it is not recommended. This is because the Dynamic Environment Manager Agent might interfere with the profiling process by applying settings to the application being profiled1. Therefore, it is best to use a clean system for profiling applications.

Application Profiler is not installed automatically when installing VMware Dynamic Environment Manager FlexEngine or Management Console. FlexEngine is the component that applies the user environment settings during logon, logoff, and session reconnect or disconnect events2. Management Console is the component that allows you to configure and manage the user environment settings2. Neither of these components requires Application Profiler to function. Application Profiler is an optional tool that helps you create Flex configuration files for applications that are not included in the predefined settings library1. References:

VMware Dynamic Environment Manager Overview2

Using Application Profiler1

One of the possible reasons that the administrator is not seeing the printers within his Horizon Desktop session is that printing is disabled in the Horizon Desktop Pool. Printing is a feature that allows users to print from a remote desktop to any local or network printer available on their client device. Printing can be enabled or disabled for each desktop pool by using the VMware Integrated Printing feature.

VMware Integrated Printing is a feature that supports client printer redirection, location-based printing, and persistent print settings. Client printer redirection enables users to print from a remote desktop to any local or network printer available on their client device. Location-based printing enables users to print to network printers that are physically near their client device. Persistent print settings enable users to retain their print settings across sessions.

To enable or disable printing for a desktop pool, the administrator needs to follow these steps:

In Horizon Console, select Inventory > Desktops.

Select the desktop pool and click Edit.

In the Edit Desktop Pool dialog box, select the VMware Integrated Printing tab.

Select or clear the Enable VMware Integrated Printing check box.

Click OK.

If printing is disabled for a desktop pool, users will not see any printers within their Horizon Desktop session, even if they have installed the VMware Integrated Printing feature in the Horizon Agent and the Horizon Client. Therefore, to resolve this issue, the administrator needs to enable printing for the desktop pool by selecting the Enable VMware Integrated Printing check box.

The other options are not likely to be the reason that the administrator is not seeing the printers within his Horizon Desktop session:

Port TCP 9427 is disabled: This port is used by the VMware Integrated Printing feature for communication between the Horizon Agent and the Horizon Client. If this port is disabled, users might experience printing errors or delays, but they should still see the printers within their Horizon Desktop session.

The VMware Integrated Printing feature is not installed in the Horizon Client: This feature is installed by default in the Horizon Client for Windows, Mac, Linux, Chrome, and HTML Access. If this feature is not installed in the Horizon Client, users might not be able to print from their remote desktops, but they should still see the printers within their Horizon Desktop session.

Port TCP 32111 is disabled: This port is used by ThinPrint for communication between the Horizon Agent and the ThinPrint Client. ThinPrint is a legacy printing feature that has been replaced by VMware Integrated Printing. If this port is disabled, users might experience printing errors or delays with ThinPrint, but they should still see the printers within their Horizon Desktop session if they use VMware Integrated Printing.

References: Configuring VMware Integrated Printing, Enable or Disable Printing for a Desktop Pool, and [VMware Horizon 8.x Professional Course]

The minimal level of Horizon Console access that the IT support center would need to help with Horizon desktop user issues is the Help Desk Administrators role. This role allows the IT support center to view and troubleshoot user sessions, reset user passwords, send messages to users, and perform other help desk tasks. The Help Desk Administrators role can be assigned to users or groups on any access group that contains the desktop pools or farms that the IT support center needs to support.

The other options are not the minimal level of Horizon Console access for this scenario:

Local Administrators: This role allows full administration rights on a specific access group and its sub-access groups. This role can perform all the tasks of the Help Desk Administrators role, as well as create, edit, and delete desktop pools, farms, applications, entitlements, and other objects. This role is more than what the IT support center needs to help with user issues.

Global Help Desk Administrators: This role allows full administration rights on all access groups in the Horizon environment. This role can perform all the tasks of the Local Administrators role, as well as create, edit, and delete access groups and global entitlements. This role is more than what the IT support center needs to help with user issues.

Inventory Administrators: This role allows limited administration rights on a specific access group and its sub-access groups. This role can view and manage desktop pools, farms, applications, entitlements, and other objects, but cannot create or delete them. This role can also perform some help desk tasks, such as viewing user sessions and sending messages to users, but cannot reset user passwords or troubleshoot sessions. This role is not sufficient for what the IT support center needs to help with user issues.

Administrators: This role allows full administration rights on all access groups in the Horizon environment, as well as global settings, licensing, roles and permissions, events configuration, and other system-wide settings. This role can perform all the tasks of the other roles, as well as configure and manage the Horizon infrastructure. This role is more than what the IT support center needs to help with user issues.

References: Understanding Permissions and Access Groups and [VMware Horizon 8.x Professional Course]

C:\Users\Waqas Shahid\Desktop\Mudassir\Untitled.jpg