In this part of “Let’s JMP” I will guide you through the steps for installing and configuring a basic User Environment Manager (UEM) environment.
Overview
The component with a red square is installed and configured in this part. As you can see, I will be installing the UEM Management Console and the configuration and profile archives share on INFRA01, which is my domain controller.
Configuring the UEM Configuration & Profile Archives Share
| Go to any folder where you want to create the UEM Configuration and Profile Archives share I have created a folder called C:\Shares in which I will create the folders for both shares I will name the folders UEM_Config and UEM_ProfileArchives | 
|
| Create a folder with the name UEM_Config Right click the folder and click Properties |
|
| Click on the tab Sharing |
|
| Click Advanced Sharing |
|
| Enable Share this folder and click Permissions For a full overview of the recommended share and NTFS permissions see [this document](http://pubs.vmware.com/uem-91/topic/com.vmware.ICbase/PDF/user-environment-manager91-install-config.pdf) |
|
| Select Everyone and select Change and click OK |
|
| Click OK |
|
| Click Close |
|
| Create a folder with the name UEM_ProfileArchives Right click the folder and click Properties |
|
| Click the tab Sharing |
|
| Click Advanced Sharing |
|
| Select Share this folder and click Permissions For a full overview of the recommended share and NTFS permissions see [this document](http://pubs.vmware.com/uem-91/topic/com.vmware.ICbase/PDF/user-environment-manager91-install-config.pdf) |
|
| Select Everyone and select Change and click OK |
|
| Click OK |
|
| Click the tab Security |
|
| Select Users (LAB\Users) and click Advanced |
|
| Click Disable inheritance |
|
| Click Convert inherited permissions into explicit permissions on this object |
|
| Select Users (Read & Execute) and click Remove Select Users (Special) and click Remove Click Add |
|
| Click Select a principal |
|
| Type Users and click OK |
|
| Click Show advanced permissions |
|
| Select This folder only for Applies to: |
|
| Remove all Advanced permissions except Create folders / append data and click OK |
|
| Click OK |
|
| Click Close |
|
Installing the UEM Management Console
| Double click VMware User Environment Manager 9.1 x64.msi (or the x86 version if you are on that architecture) |
|
| Click Run if you receive an Open File – Security Warning screen |
|
| Click Next |
|
| Select I accept the terms in the License Agreement and click Next |
|
| Click Next |
|
| Click Custom |
|
| Disable VMware UEM FlexEngine and all sub components (this is installed in the Windows 10 image later on) and enable VMware UEM Management Console and click Next |
|
| Click Install |
|
| If you receive the User Account Control windows, click Yes |
|
| Click Finish |
|
Configuring UEM
| Double click Management Console |
|
| Type \\INFRA01.lab.local\UEM_Config and click OK |
|
| For the purpose of this blog post, we are going to use Easy Start, which creates a sample configuration in UEM Click Easy Start |
|
| I am not going to use Office in this blog post, so I don’t select an Office version and just click OK |
|
| Click OK |
|
| As you can see, Easy Start has created an example configuration for Personalization, User Environment and Condition Sets |
|
Copying ADMX & Configuring GPO
| Copy the files displayed to C:\Windows\PolicyDefinitions |
|
| Open Group Policy Management |
|
| In my environment I already created an OU called VDI, under LAB Right click LAB and click Create a GPO in this domain, and Link it here |
|
| Create a GPO called C_LAB_VDI, which will be a GPO with computer settings only Click OK |
|
| Select the GPO C_LAB_VDI and click the tab Details and select User configuration settings disabled |
|
| Click OK |
|
| Right click LAB and click Create a GPO in this domain, and Link it here |
|
| Create a GPO called U_LAB_VDI, which will be a GPO with user settings only Click OK |
|
| Select the GPO U_LAB_VDI and click the tab Details and select Computer configuration settings disabled |
|
| Click OK |
|
| Right click C_LAB_VDI and click Edit |
|
| Open Computer Configuration --> Policies --> Administrative Templates --> System --> Group Policy and double click Configure user Group Policy loopback processing mode |
|
| Select Enabled and select Replace for Mode: and click OK |
|
| Open Computer Configuration --> Policies --> Administrative Templates --> System --> Logon and double click Show first sign-in animation |
|
| Select Enabled and click OK |
|
| Open Computer Configuration --> Policies --> Administrative Templates --> Windows Components --> Search and double click Allow Cortana |
|
| Select Disabled and click OK |
|
| Open Computer Configuration --> Policies --> Administrative Templates --> Windows Components --> Cloud Content and double click Turn off Microsoft consumer experiences |
|
| Select Enabled and click OK |
|
| Right click U_LAB_VDI and click Edit |
|
| Open User Configuration --> Policies --> Administrative Templates --> VMware UEM --> FlexEngine and double click Flex config files |
|
| Select Enabled and type \\INFRA01.lab.local\UEM_Config\General for Central location of Flex config files and click OK |
|
| Double click Run FlexEngine as Group Policy Extension |
|
| Select Enabled and click OK |
|
| Double click Profile archives |
|
| Select Enabled and type \\INFRA01.lab.local\UEM_ProfileArchives\%username% for Location for storing user profile archives: and click OK |
|
| Open User Configuration --> Policies --> Windows Settings --> Scripts (Logon/Logoff) and double click Logoff |
|
| Click Add |
|
| Type %programfiles%\Immidio\Flex Profiles\FlexEngine.exe for Script Name Type -s for Script Parameters and click OK |
|
| Click OK |
|
NextUp » Let’s JMP – Part 6: Windows 10 Image