Author: Rafael Moura

How to create Virtual Machines from CSV with PowerCLI on VMware

Published by Rafael Moura on January 5, 2022

Whenever it’s possible I like to automate whatever I can to release myself for other activities and save a huge time that would be wasted on repeatable or time-consuming tasks.

I have been using pieces of the following script for a long time, in a “manual automation” way, let’s say. Getting blocks and loops of scripts and creating and configuring virtual machines as needed.

In the last month I put together in a way that can be shared, and even if you don’t have much experience with powershell, you can still make use of it. 🙂

Prerequisites

Install PowerCLI Module

Install-Module VMware.PowerCLI

1	Install-Module VMware.PowerCLI

The offline installation is available here.

Virtual Machine Template

Create a virtual machine template to be used as a base image for the deployment. No special requirements here, create accordingly to your environment.

VM Customization Specifications

Create two virtual machine customization specifications on vCenter (Linux and Windows). The only requirement is to set DNS under network section for the Linux, otherwise you might have issues after the deployment within the guest os.

CSV File

That’s the source file with all virtual machine details. There must be certain columns with specific values. These values are shown below:

Name
vCPU
vRAM
vNetwork
vDisk2 ..N
IP
Subnet
Gateway
Datastore
VMFolder
Specs
Template
Notes
OSType
Dns1
Dns2

You can download an example spreadsheet in the link below.

DeployVMs.csv Download

Each line will be specific to a virtual machine. That’s how the loop will read and create/configure accordingly.

vDisks columns can be increased as many required (vDisk2, vDisk3, vDisk4, etc.). For those VMs which doens’t use the additional disks, put “0” where not required. It starts at vDisk2 to be easily identified later, as vDisk1 will be the OSDisk from template. The vDisk format can be also changed, line 63 in the script.

The OSType value should be either “Windows” or “Linux“, that’s just a condition in order to properly run the VM creation per GuestOS.

Running the script it will always prompt for the CSV file, insert the full path location.

The next step will prompt vCenter credentials, once confirmed it won’t be prompted again if you run the script on the same powershell session.

The script then starts to read each value and deploy the VMs accordingly:

After initial deployment, the script will configure the VMs, in that section custom settings are configured, like vCPU, vRAM, vNetwork, etc.

At the end you should see a message of deployment complete and the VMs will be powered on, and probably customization specifications will be running. After that the virtual machines will be ready for use and fully customized.

Check the full script below, save as *.ps1 and use Powershell ISE or Powershell to run.

Enjoy 🙂

<#
.SYNOPSIS
		Create Virtual Machines from a CSV file
.DESCRIPTION
		The scripts create and configure virtual machines based on a CSV file
                The VM is customized and powered on after deployment
            
.INSTRUCTIONS
            Install the VMware PowerCLI Powershell Module (Install-Module VMware.PowerCLI, Internet Connection required)
            Offline Install available on https://developer.vmware.com/web/tool/vmware-powercli
            -> Create the CSV file based on the template provided and enter the required details
            -> Add new vDisks columns as required, the script will create vDisks accordingly
                Put zero where vDisks are not required
            -> Validate if all proper values are correct on the spreadsheet:
                - Specs: vCenter Customization Specifications Name
                - OSType: Windows or Linux (Only for a condition in the script)
                - Folder: If the folder name exists in 2 different locations, you might get errors. No spaces is also helpful.
                All the rest is self-explanatory
            -> Create the Customization Specifications on vCenter Server
                In Linux Specifications add the required DNS Servers in Network section
                There's no specific setting to be configured in the Specifications
                Recommend to create a new one specific for the PS Script, as some values will be overwritten everytime you run the script
            -> Change Disk Format in "#.VM Configuration Details" line 63, if required
            -> Save the spreadsheet as *.csv
            -> Run the script and enter the values as prompted
            -> The script also creates a transcript on users' Documents folder
.AUTHOR
		Rafael Moura @ VirtuallyAnything.net - Dec/2021
.VERSION
		1.0 (Dec/2021)
        1.1 (Fev/2023)
             Added command for the network card to start and stay connected at power on (Suggested/Commented by Gab)
#>
#.#.# Variables #.#.#
Write-Host "- - Setting Variables - -" -ForegroundColor Cyan
#.CSV File
Write-Host "CSV File" -ForegroundColor Green
$CSV = Read-Host -Prompt 'Enter the CSV File Path (i.e. D:\Files\MyVMs.csv)'
$DeployVMs = Import-Csv $CSV
Write-Host "vCenter Server Connection and Credentials" -ForegroundColor Green
#.vCenter Server Details
If($vCenterCreds -eq $null){
    $vCenterConn = Read-Host -Prompt 'Enter the vCenter Server FQDN (i.e. vcs01.lab.vmw)'
    $vCenterCreds = Get-Credential -Message ("Enter the Credentials for vCenter Server "+$vCenterConn)
}
else{
    Write-Host "Credentials for $vCenterConn already acquired" -ForegroundColor Green
}
Write-Host "Connecting to vCenter Server $vCenterConn" -ForegroundColor Green
Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false | Out-Null
Connect-VIServer -Server $vCenterConn -Credential $vCenterCreds | Out-Null
#.VM Configuration Details
$DiskFormat = 'thin' # Options: Thin / Thick / EagerZeroedThick  
#.--------------------------------------------------------------------------------------------------.#
#. Don't change any value below .#
#.--------------------------------------------------------------------------------------------------.#
#.
Start-Transcript
Write-Host "::: Action Phase :::" -ForegroundColor Green
Write-Host "::: Virtual Machines Deployment in Progress :::" -ForegroundColor Green
Start-Sleep 2
#.
foreach($vm in $DeployVMs){
    Write-host "Deploying VM: " -ForegroundColor Green -NoNewline; Write-Host $vm.Name -ForegroundColor Cyan; Write-Host "IP Address: "-ForegroundColor Green -NoNewline; Write-Host $vm.IP -ForegroundColor Cyan; Write-Host "ESXi Host: "-ForegroundColor Green -NoNewline; Write-Host $vm.ESXi -ForegroundColor Cyan; Write-Host "Datastore: "-ForegroundColor Green -NoNewline; Write-Host $vm.Datastore -ForegroundColor Cyan; Write-host "VM Folder: " -ForegroundColor Green -NoNewline; Write-Host $vm.VMFolder -ForegroundColor Cyan; Write-Host "";
        If($vm.OSType -eq "Windows"){
        Get-OSCustomizationSpec $vm.Specs -Server $vCenterConn | Get-OSCustomizationNicMapping | Set-OSCustomizationNicMapping -IpMode UseStaticIP -IpAddress $vm.IP -SubnetMask $vm.Subnet -DefaultGateway $vm.Gateway -Dns $vm.Dns1,$vm.Dns2 | Out-Null
        }
        else 
        {
        Get-OSCustomizationSpec $vm.Specs -Server $vCenterConn | Get-OSCustomizationNicMapping | Set-OSCustomizationNicMapping -IpMode UseStaticIP -IpAddress $vm.IP -SubnetMask $vm.Subnet -DefaultGateway $vm.Gateway | Out-Null
        }
    Get-OSCustomizationSpec $vm.Specs -Server $vCenterConn | Set-OSCustomizationSpec -NamingScheme fixed -NamingPrefix $vm.Name | Out-Null
    New-VM -Name $vm.Name -VMhost $vm.ESXi -Template $vm.Template -OSCustomizationSpec $vm.Specs -confirm:$false -Datastore $vm.Datastore -Location $vm.VMFolder -Notes $vm.Notes | Out-Null
}
#.
foreach($vm in $DeployVMs){
    $VMDisks = ($DeployVMs | Get-Member -MemberType All) | Where-Object {$_.Name -match 'vDisk'}
    $VMCores = ($vm.vCPU/2)
    $VMPg = Get-VDPortgroup -Name $vm.vNetwork
    Write-host "Configuring VM: " -ForegroundColor Green -NoNewline; Write-Host $vm.Name -ForegroundColor Cyan; Write-Host "vCPU: "-ForegroundColor Green -NoNewline; Write-Host $vm.vCPU -ForegroundColor Cyan; Write-Host "vRAM: "-ForegroundColor Green -NoNewline; Write-Host $vm.vRAM -ForegroundColor Cyan; Write-Host "vNetwork: "-ForegroundColor Green -NoNewline; Write-Host $vm.vNetwork -ForegroundColor Cyan; Write-Host "";
    Get-VM $vm.Name | Set-VM -NumCPU $vm.vCPU -MemoryGB $vm.vRAM -CoresPerSocket $VMCores -Confirm:$false | Out-Null
        foreach($vdisk in $VMDisks){
            If($vm.($vdisk.Name) -ne '0'){
            Get-VM $vm.Name | New-HardDisk -CapacityGB $vm.($vdisk.Name) -Datastore $vm.Datastore -StorageFormat $DiskFormat | Out-Null
            }
        }
    Get-VM $vm.Name | Get-NetworkAdapter | Set-NetworkAdapter -Portgroup $VMPg -Confirm:$false | Out-Null

    Get-VM $vm.Name | Get-NetworkAdapter -Name "Network adapter 1" |
Set-NetworkAdapter -StartConnected:$true -Confirm:$false | Out-Null

    Get-VM $vm.Name | Start-VM | Out-Null
}
#.
Write-Host "::: Virtual Machines Deployment Complete :::" -ForegroundColor Green
Stop-Transcript

.SYNOPSIS

Create Virtual Machines from a CSV file

.DESCRIPTION

The scripts create and configure virtual machines based on a CSV file

The VM is customized and powered on after deployment

.INSTRUCTIONS

Install the VMware PowerCLI Powershell Module (Install-Module VMware.PowerCLI, Internet Connection required)

Offline Install available on https://developer.vmware.com/web/tool/vmware-powercli

-> Create the CSV file based on the template provided and enter the required details

-> Add new vDisks columns as required, the script will create vDisks accordingly

Put zero where vDisks are not required

-> Validate if all proper values are correct on the spreadsheet:

- Specs: vCenter Customization Specifications Name

- OSType: Windows or Linux (Only for a condition in the script)

- Folder: If the folder name exists in 2 different locations, you might get errors. No spaces is also helpful.

All the rest is self-explanatory

-> Create the Customization Specifications on vCenter Server

In Linux Specifications add the required DNS Servers in Network section

There's no specific setting to be configured in the Specifications

Recommend to create a new one specific for the PS Script, as some values will be overwritten everytime you run the script

-> Change Disk Format in "#.VM Configuration Details" line 63, if required

-> Save the spreadsheet as *.csv

-> Run the script and enter the values as prompted

-> The script also creates a transcript on users' Documents folder

.AUTHOR

Rafael Moura @ VirtuallyAnything.net - Dec/2021

.VERSION

1.0 (Dec/2021)

1.1 (Fev/2023)

Added command for the network card to start and stay connected at power on (Suggested/Commented by Gab)

#.#.# Variables #.#.#

Write-Host "- - Setting Variables - -" -ForegroundColor Cyan

#.CSV File

Write-Host "CSV File" -ForegroundColor Green

$CSV = Read-Host -Prompt 'Enter the CSV File Path (i.e. D:\Files\MyVMs.csv)'

$DeployVMs = Import-Csv $CSV

Write-Host "vCenter Server Connection and Credentials" -ForegroundColor Green

#.vCenter Server Details

If($vCenterCreds -eq $null){

$vCenterConn = Read-Host -Prompt 'Enter the vCenter Server FQDN (i.e. vcs01.lab.vmw)'

$vCenterCreds = Get-Credential -Message ("Enter the Credentials for vCenter Server "+$vCenterConn)

}

else{

Write-Host "Credentials for $vCenterConn already acquired" -ForegroundColor Green

}

Write-Host "Connecting to vCenter Server $vCenterConn" -ForegroundColor Green

Set-PowerCLIConfiguration -InvalidCertificateAction Ignore -Confirm:$false | Out-Null

Connect-VIServer -Server $vCenterConn -Credential $vCenterCreds | Out-Null

#.VM Configuration Details

$DiskFormat = 'thin' # Options: Thin / Thick / EagerZeroedThick

#.--------------------------------------------------------------------------------------------------.#

#. Don't change any value below .#

#.--------------------------------------------------------------------------------------------------.#

Start-Transcript

Write-Host "::: Action Phase :::" -ForegroundColor Green

Write-Host "::: Virtual Machines Deployment in Progress :::" -ForegroundColor Green

Start-Sleep 2

foreach($vm in $DeployVMs){

Write-host "Deploying VM: " -ForegroundColor Green -NoNewline; Write-Host $vm.Name -ForegroundColor Cyan; Write-Host "IP Address: "-ForegroundColor Green -NoNewline; Write-Host $vm.IP -ForegroundColor Cyan; Write-Host "ESXi Host: "-ForegroundColor Green -NoNewline; Write-Host $vm.ESXi -ForegroundColor Cyan; Write-Host "Datastore: "-ForegroundColor Green -NoNewline; Write-Host $vm.Datastore -ForegroundColor Cyan; Write-host "VM Folder: " -ForegroundColor Green -NoNewline; Write-Host $vm.VMFolder -ForegroundColor Cyan; Write-Host "";

If($vm.OSType -eq "Windows"){

Get-OSCustomizationSpec $vm.Specs -Server $vCenterConn | Get-OSCustomizationNicMapping | Set-OSCustomizationNicMapping -IpMode UseStaticIP -IpAddress $vm.IP -SubnetMask $vm.Subnet -DefaultGateway $vm.Gateway -Dns $vm.Dns1,$vm.Dns2 | Out-Null

}

else

{

}

Get-OSCustomizationSpec $vm.Specs -Server $vCenterConn | Set-OSCustomizationSpec -NamingScheme fixed -NamingPrefix $vm.Name | Out-Null

New-VM -Name $vm.Name -VMhost $vm.ESXi -Template $vm.Template -OSCustomizationSpec $vm.Specs -confirm:$false -Datastore $vm.Datastore -Location $vm.VMFolder -Notes $vm.Notes | Out-Null

}

foreach($vm in $DeployVMs){

$VMDisks = ($DeployVMs | Get-Member -MemberType All) | Where-Object {$_.Name -match 'vDisk'}

$VMCores = ($vm.vCPU/2)

$VMPg = Get-VDPortgroup -Name $vm.vNetwork

Write-host "Configuring VM: " -ForegroundColor Green -NoNewline; Write-Host $vm.Name -ForegroundColor Cyan; Write-Host "vCPU: "-ForegroundColor Green -NoNewline; Write-Host $vm.vCPU -ForegroundColor Cyan; Write-Host "vRAM: "-ForegroundColor Green -NoNewline; Write-Host $vm.vRAM -ForegroundColor Cyan; Write-Host "vNetwork: "-ForegroundColor Green -NoNewline; Write-Host $vm.vNetwork -ForegroundColor Cyan; Write-Host "";

Get-VM $vm.Name | Set-VM -NumCPU $vm.vCPU -MemoryGB $vm.vRAM -CoresPerSocket $VMCores -Confirm:$false | Out-Null

foreach($vdisk in $VMDisks){

If($vm.($vdisk.Name) -ne '0'){

Get-VM $vm.Name | New-HardDisk -CapacityGB $vm.($vdisk.Name) -Datastore $vm.Datastore -StorageFormat $DiskFormat | Out-Null

}

Get-VM $vm.Name | Get-NetworkAdapter | Set-NetworkAdapter -Portgroup $VMPg -Confirm:$false | Out-Null

Get-VM $vm.Name | Get-NetworkAdapter -Name "Network adapter 1" |

Set-NetworkAdapter -StartConnected:$true -Confirm:$false | Out-Null

Get-VM $vm.Name | Start-VM | Out-Null

}

Write-Host "::: Virtual Machines Deployment Complete :::" -ForegroundColor Green

Stop-Transcript

9 Comments

Quick-Tip: How to reinstall Windows 10 Calculator after VMware OSOT

Published by Rafael Moura on November 22, 2021

Couple weeks ago I faced an issue with a client where many users from a Horizon dedicated pool were complaining about not being able to open the Calculator in Windows 10.

Well, that’s simple right? VMware OSOT removed it during the optimization process as it wasn’t selected as a exception. It should be easy reinstalling, if you ever worked with Appx Packages in Windows 10 you know that’s not true. 🙂

I knew a couple solutions, like reinstalling from the Microsoft Store, using PowerShell with AppxPackage and AppxProvisionedPackage commands, even with DISM. No luck.

I google it and couldn’t find any solution that works for me in that case. After validating many things and doing some tests, I found a solution. As I didn’t find that around, have made this post.

What happened was the Appx installation files and its dependencies were not present on that desktop anymore. Needing to be registered again and them reinstalled, also some permissions required to do that.

First of all you gonna need a brand new Windows 10, it is better at the same patch level as your problematic desktop, however it works with newer versions.

Navigate to C:\Program Files\ and take the ownership of WindowsApps folder (C:\Program Files\WindowsApps), with an administrative account.
On that WindowsApps folder add the permission “Full Control” to the group “All Application Packages”, also select “Replace all Child Objects”.
Copy the following sub-folders from WindowsApps. The versions might be different as it depends on windows update and patch level.
- Microsoft.WindowsCalculator_10.1812.10048.0_x64__8wekyb3d8bbwe
- Microsoft.WindowsCalculator_10.1812.10048.0_neutral_split.scale-100_8wekyb3d8bbwe
- Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe
- Microsoft.VCLibs.140.00_14.0.29231.0_x64__8wekyb3d8bbwe
Reinstall the dependencies, with the following commands:
- Add-AppxPackage -register “C:\Program Files\WindowsApps\Microsoft.VCLibs.140.00_14.0.29231.0_x64__8wekyb3d8bbwe\AppxManifest.xml” -DisableDevelopmentMode
- Add-AppxPackage -register “C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\AppxManifest.xml” -DisableDevelopmentMode
Reinstall the application, with the following commands:
- Add-AppxPackage -register “C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1812.10048.0_x64__8wekyb3d8bbwe\AppxManifest.xml” -DisableDevelopmentMode
- Add-AppxPackage -register “C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1812.10048.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxManifest.xml” -DisableDevelopmentMode

Try to open the calculator app again, it should work.

That’s it. 🙂

Leave a Comment

How to Fix Horizon View Composer Upgrade error: There was an error identifying the validity of the server

Published by Rafael Moura on September 10, 2021

Working in a client other day I had a task to update an old VMware View environment from 7.0 to 7.12, a major gap indeed. It included the upgrade of vCenter Server, Connection Server and Composer.

After upgrading the View Composer I received the following message, which is expected, as the View Composer installer will re-generate the self-signed certificate and after successfully upgraded it’s just required that you accept and trust the new certificate.

However that was not what happened. Right after I got another error as follows:

There was an error identifying the validity of the server.

At this point I knew that something was wrong/dirty with ADAM database, anyway did my research I found many other issues related with UPN format, wrong Composer URL, NETBIOS/FQDN issues, etc. None of that was related with my issue.

After digging down the ADAM database and validating many settings I found where was it. The issue in this case was related with the certificate thumbprint value in ADAM settings and the connection server trust with the new View Composer certificate.

The value in the composer certificate thumbprint in the ADAM database was not reflecting the new certificate, and also after that, the Connection server started to complain about View Composer certificate not trusted, and not giving any option to proceed into the Horizon Console.

So here’s how I fixed the issue:

Log in to the View Composer Server, open MMC/Certificates/Computer and under Personal, extract the newly generated View Composer certificate.
Log in to the View Connection Server, open MMC/Certificates/Computer and under Trusted Root Certificates, import the extracted View Composer certificate previously.
Now it’s time to enter in the ADAM database, check the following VMware KB to make the connection with ADSI Edit.
Navigate to OU=Properties, OU=VirtualCenter, right-click on the CN=XXXX folder under it and select Properties.
Check the pae-SVISslCertificateThumbprint attribute, change that to reflect the new View Composer self-signed certificate thumbprint.
Restart the Composer and Connection Server services or servers.

At this point, navigate to Horizon Console and check the dashboard, the View Composer should be Green without any issue.

That’s it. It has been a long time since I worked with View Composer, as I couldn’t find the exact solution as my scenario, I made this post. 🙂

Leave a Comment

How to automate VMware DEM shares configuration using PowerShell

Published by Rafael Moura on July 5, 2021

Virtually anything can be done using PowerShell, if you have the proper time to understand the requirements, what you want to achieve and build the script. Whenever I have the opportunity I like to automate some tasks, basically to save some time and let me work on different things.

I had this script for a while, to easily configure VMware Dynamic Environment Manager during deployments and doing Lab, saving some time which could be spent on tougher and not time-consuming tasks.

I have only put together in a proper format adding some quick features to prompt the requirements.

So just run it and enjoy. 😉

Don’t forget to run the script as Administrator, it can be used in any SMB/CIFS/NFS solution, which your running account has administrative privileges.

<#
.SYNOPSIS
       VMware DEM Shared Folders Setup

.DESCRIPTION
       Automatically create Shared Folders for VMware Dynamic Environment Manager setup with proper permissions by VMware Docs

.INSTRUCTIONS
       Run the Script as Administrator (Required to configure Windows Shares)
       Enter the proper values as the examples

.AUTHOR
       Rafael Moura @ VirtuallyAnything.net - Jun/2021

.VERSION
       1.0

#>

#.#.# Variables #.#.#
Write-Host "Setting Variables" -ForegroundColor Cyan
#.DEM Config Share
#.
Write-Host "DEM Config Folder Settings" -ForegroundColor Yellow
#.Folder Path
$DEMConfFo = Read-Host -Prompt 'Enter the DEM Config Folder Path (i.e. D:\Shares\DEMConfig)'
#.Share Name
$DEMConfSh = Read-Host -Prompt 'Enter the DEM Config Share Name (i.e. DEMConfig$)'
#.

#.DEM Profile Share
#.
Write-Host "DEM Profile Folder Settings" -ForegroundColor Yellow
#.Folder Path
$DEMProfFo = Read-Host -Prompt 'Enter the DEM Profile Folder Path (i.e. D:\Shares\DEMProfile)'
#.Share Name
$DEMProfSh = Read-Host -Prompt 'Enter the DEM Profile Share Name (i.e. DEMProfile$)'
#.

#.DEM Groups:
#.
Write-Host "DEM Permissions Settings" -ForegroundColor Yellow
#.DEM Administrators Group
$DEMAdm = Read-Host -Prompt 'Enter the DEM Admin Group (i.e. Domain\Horizon Admins)'
#.DEM Users Group
$DEMUsr = Read-Host -Prompt 'Enter the DEM Users Group (i.e. Domain\Horizon Users)'

#.-----------------------------------------------------------------.#
#. Don't change any value below .#
#.-----------------------------------------------------------------.#
#.
Write-Host "::: Action Phase :::" -ForegroundColor Green
Write-Host "Getting Permissions" -ForegroundColor Green
#.VMware DEM Permissions
$PConf = ":(OI)(CI)RX"
$PFull = ":(OI)(CI)F"
$PProf = ":(NP)(AD)"
$POwn = "CREATOR OWNER:(OI)(CI)F"

#.ICACLS Variables
$ReplIn = "/inheritance:r"
$Grt = "/grant"
$RemAdm = "Administrators"
$Rem = "/remove"

Write-Host "Creating DEM Config Folder" -ForegroundColor Green
#.VMware DEM Config Share
md $DEMConfFo
Write-Host "Configuring DEM Config Permissions" -ForegroundColor Green
net share $DEMConfSh=$DEMConfFo /GRANT:Everyone,CHANGE
Invoke-Expression -Command ('icacls $DEMConfFo $ReplIn')
Invoke-Expression -Command ('icacls $DEMConfFo $Grt "${DEMUsr}${PConf}"')
Invoke-Expression -Command ('icacls $DEMConfFo $Grt "${DEMAdm}${PFull}"')
Invoke-Expression -Command ('icacls $DEMConfFo $Rem $RemAdm')

Write-Host "Creating DEM Profile Folder" -ForegroundColor Green
#.VMware DEM Profile Share
md $DEMProfFo
Write-Host "Configuring DEM Profile Permissions" -ForegroundColor Green
net share $DEMProfSh=$DEMProfFo /GRANT:Everyone,CHANGE
Invoke-Expression -Command ('icacls $DEMProfFo $ReplIn')
Invoke-Expression -Command ('icacls $DEMProfFo $Grt "${DEMUsr}${PProf}"')
Invoke-Expression -Command ('icacls $DEMProfFo $Grt "${DEMAdm}${PFull}"')
Invoke-Expression -Command ('icacls $DEMProfFo $Grt $POwn')
Invoke-Expression -Command ('icacls $DEMProfFo $Rem $RemAdm')

.SYNOPSIS

VMware DEM Shared Folders Setup

.DESCRIPTION

Automatically create Shared Folders for VMware Dynamic Environment Manager setup with proper permissions by VMware Docs

.INSTRUCTIONS

Run the Script as Administrator (Required to configure Windows Shares)

Enter the proper values as the examples

.AUTHOR

Rafael Moura @ VirtuallyAnything.net - Jun/2021

.VERSION

1.0

#.#.# Variables #.#.#

Write-Host "Setting Variables" -ForegroundColor Cyan

#.DEM Config Share

Write-Host "DEM Config Folder Settings" -ForegroundColor Yellow

#.Folder Path

$DEMConfFo = Read-Host -Prompt 'Enter the DEM Config Folder Path (i.e. D:\Shares\DEMConfig)'

#.Share Name

$DEMConfSh = Read-Host -Prompt 'Enter the DEM Config Share Name (i.e. DEMConfig$)'

#.DEM Profile Share

Write-Host "DEM Profile Folder Settings" -ForegroundColor Yellow

#.Folder Path

$DEMProfFo = Read-Host -Prompt 'Enter the DEM Profile Folder Path (i.e. D:\Shares\DEMProfile)'

#.Share Name

$DEMProfSh = Read-Host -Prompt 'Enter the DEM Profile Share Name (i.e. DEMProfile$)'

#.DEM Groups:

Write-Host "DEM Permissions Settings" -ForegroundColor Yellow

#.DEM Administrators Group

$DEMAdm = Read-Host -Prompt 'Enter the DEM Admin Group (i.e. Domain\Horizon Admins)'

#.DEM Users Group

$DEMUsr = Read-Host -Prompt 'Enter the DEM Users Group (i.e. Domain\Horizon Users)'

#.-----------------------------------------------------------------.#

#. Don't change any value below .#

#.-----------------------------------------------------------------.#

Write-Host "::: Action Phase :::" -ForegroundColor Green

Write-Host "Getting Permissions" -ForegroundColor Green

#.VMware DEM Permissions

$PConf = ":(OI)(CI)RX"

$PFull = ":(OI)(CI)F"

$PProf = ":(NP)(AD)"

$POwn = "CREATOR OWNER:(OI)(CI)F"

#.ICACLS Variables

$ReplIn = "/inheritance:r"

$Grt = "/grant"

$RemAdm = "Administrators"

$Rem = "/remove"

Write-Host "Creating DEM Config Folder" -ForegroundColor Green

#.VMware DEM Config Share

md $DEMConfFo

Write-Host "Configuring DEM Config Permissions" -ForegroundColor Green

net share $DEMConfSh=$DEMConfFo /GRANT:Everyone,CHANGE

Invoke-Expression -Command ('icacls $DEMConfFo $ReplIn')

Invoke-Expression -Command ('icacls $DEMConfFo $Grt "${DEMUsr}${PConf}"')

Invoke-Expression -Command ('icacls $DEMConfFo $Grt "${DEMAdm}${PFull}"')

Invoke-Expression -Command ('icacls $DEMConfFo $Rem $RemAdm')

Write-Host "Creating DEM Profile Folder" -ForegroundColor Green

#.VMware DEM Profile Share

md $DEMProfFo

Write-Host "Configuring DEM Profile Permissions" -ForegroundColor Green

net share $DEMProfSh=$DEMProfFo /GRANT:Everyone,CHANGE

Invoke-Expression -Command ('icacls $DEMProfFo $ReplIn')

Invoke-Expression -Command ('icacls $DEMProfFo $Grt "${DEMUsr}${PProf}"')

Invoke-Expression -Command ('icacls $DEMProfFo $Grt "${DEMAdm}${PFull}"')

Invoke-Expression -Command ('icacls $DEMProfFo $Grt $POwn')

Invoke-Expression -Command ('icacls $DEMProfFo $Rem $RemAdm')

Leave a Comment

Quick-Tip: How to set root expiration in Workspace ONE Access (VMware IDM)

Published by Rafael Moura on June 28, 2021

On all VMware appliances the accounts have a 60-day password expiration, that could meet security and operation standards in a production environment. However when doing Lab or just testing for a long-term some VMware Virtual Appliance, this tip may be usefull.

The following procedure shows how to set a different password policy for the Workspace ONE Access (formely VMware Identity Manager), but it can be used for most of VMware Appliances.

Login to your appliance, in this case WS1 Access (VMware IDM) and check the root account password policy set, running the following command:

<strong>cat /etc/shadow</strong>

1	<strong>cat /etc/shadow</strong>

Check the current expiration policy validating the number before last on that line, in this case 60-days:

The expiration status can also be checked, just navigate to WS1 Dashboard:

To change the expiration policy on root account for 365-days use the following command:

<strong>passwd -x 365 root</strong>

1	<strong>passwd -x 365 root</strong>

Check again, it should be changed for the root account and the Status on WS1 Dashboard should be green now.

That’s it! 🙂

Leave a Comment

Delivering great User Experience in an EUC Project

Published by Rafael Moura on June 11, 2021

Do it right on the first time

When an organization chooses to transition from common end-point physical computers, to Virtual Desktop Infrastructure (VDI), either on-premises or cloud-based, the IT department must do everything to minimize the risks and common issues that might happen. It is really common to architect the best possible design with an amazing hardware, a secure and reliable infrastructure, however all EUC projects at the end comes to the same point: “Are the users able to use it?” If you don’t know the answer you might not know how is the User eXperience for your clients.

The definition of User Experience (UX) is “A person’s emotions and attitudes about using a particular product, system or service. It includes the practical, experiential, affective, meaningful, and valuable aspects of human–computer interaction and product ownership”, which is basically how we interact with anything nowadays. When we open any application on a smartphone, when we use an ATM, while driving or watching YouTube, we’re interacting with many systems and each of them having a different user interface (UI) and also user experience (UX). The goal is to provide the best experience so that we, as users, enjoy using and without even realizing it, having them as good and reliable products.

It is not different than any EUC project, a successful project comes with a great user experience, the users will always define the project accomplishment, it doesn’t matter how amazing it looks like in the datacentre if the user experience is bad the users won’t buy it. To achieve a good user experience in this case, many steps and phases has to be planned, below I will list some key points to be taken in consideration in any project.

Proof of Concept

This phase is for IT department be able to test how the product and solution works, how would be integrated with the current environment, prerequisites and compatibility, and also possible to map use cases which was not yet defined. That phase usually is done as pre-sales activities.

Assessment

Every EUC project should start with a good assessment, it will give us an insight of end-user activity, to be better incorporated in the final approach. The assessment will also shows how many applications and what are most used, how is the performance of end users’ machine, which can be useful to set a virtual hardware for a Pilot, and many other performance metrics to help size and design the solution.

Latency, Quality and Usability

In order to deliver the best experience for the users, the virtual desktop should have an optimized image, there are a couple tools and procedures to achieve a good result on that, VMware and Citrix have good documented steps for optimization. After that we can monitor and test the usability and quality of that image, and also not least, be very cautious with latency, which can be a huge problem and affect the user experience, if it is not right sized. Many design approaches can be used to mitigate the latency, as cloud-based VDI, geolocation access on the nearest on-premises datacentre, virtual apps, etc. It will only depend on what the use cases should be achieved.

Pilot

In this phase an approach has been set, and the use cases are known, and many tests have been performed during the POC, now it’s time to see how everything works together and how end-users will utilize the newly solution. Usually a few users from different areas and expertise are selected to test and use the solution.

User Expectations and Feedback

That phase is highly important, as it will dictate whatever has to be fixed, changed or aligned in order to achieve users’ and project expectations. The feedback is also a great resource for the final production environment, a questionnaire should be sent together for each user, with questions regarding accessibility, usability, easiness, performance, etc.

At the end of the path we should have a good understanding of all aspects that must be considered during a EUC project, and the environment should be ready for production. It is not a difficult way, with the right tools and process everything is achievable. Always keep in mind that the user experience will dictate the value and reliability of the project and combining these key points will make the journey easier and satisfactory.

Leave a Comment