Hi All,

I am experiencing an issue whereby USB redirection via VMware Horizon UAG 3.6 does not work. All we get is "USB unavailable". This is using various versions of Horizon Client on Windows and Mac. It works fine when client on same network as the VM desktops. Also works fine via the same UAG using a zero-client but have read that Teradici zero-clients do USB over PCoIP so not the same thing as VMware Client USB redirect.

I have traced the issue down to the TCP:32111 packets. These always appear to be direct connection from the client IP to the agent IP, therefore it works when on the same network however when remote and accessing desktops via UAG the 32111 packets are still trying to get to the agent via its direct local IP address which of course in not accessible remotely. When remote the HTTPS/PCOIP/BLAST packets all go via the UAG except the 32111 packets.

I spent 1.5 hrs on the phone to VMware tech support to a guy that kept insisting that it was a firewall issue at our end despite the fact that I showed him in Wireshark that the 32111 packets were not even trying to go over the Internet but a agents local IP address (not accessible) while the rest of the session data was going over the Internet to the UAG. Eventually I gave up and thought I would try ask here instead and might get more sense.

Has anyone successfully got VMware client USB redirection working over the Internet via a UAG.

VMware Horizon 7.7 connection server

VMware UAG 3.6

VMware Horizon Client 5.4.1

VMware Agent 7.7 on VDI desktops.

Any help would be greatly appreciated.

The plans are to move to the lastest build of vCenter 6.7.  To do this, our Windows vCenter 6.0u3 servers will be migrated to VCSA 6.7, but there are a few prereqs that need to be taken care of first.  Namely vSphere replication and SRM.  The plan is first upgrade vSphere replication at HQ, and DR sites, then SRM at HQ and DR sites.  If all is well, regroup and continue moving forward.

I upgraded vSphere replication 6.1.2 to 8.1 at both ends.

Now there is no replication occurring. I'm monitoring bandwidth using two of our internal monitoring tools and I do not see any significant traffic from ESXi servers in the HQ site to the DR site.

All replications are there but have error (RPO violation). Each one complains about a problem occurred with the storage on datastore path '[Tegile02] vmname/hbrdisk-RDID-unique UID.vmdk'.

At the DR vcenter server, the NFS storage path Tegile02 is fully accessible and I can browse and see the vmdk files that are reference in the vSphere replication errors.

I tried "reconfiguring" one of the VM's replication and paged through it (next, next, next) and it still remains in the same error status. I tried restarting the new vSphere replication appliance at both ends and same result.

I registered for a 60 day trial of ESXi 7 but when I try to download the ISO nothing happens. The download never starts. I tried with Edge, Firefox, Chrome, and Brave. Please advise.

Hi,

I am wondering if there is a way to redirect for example horizon.example.com to identity.example.com when a specific path isn't specific like horizon.example.com/portal?

I want to hide the Horizon logon window only when browsing via the web and redirect to Workspace ONE.

I have UAG and NGINX Reverse Proxy in the DMZ along with NSX-T load balancing Workspace ONE, Horizon, UAG, and NGINX Reverse Proxy servers.

I figure with that combination it's probably possible, I just don't know how.

Thanks

Hi, I'm trying to install vmware Horizon client in order to work from home and I can't install it no matter what I do.

What are the best options for still controlling email access and restricting it to only enrolled devices when moving away from Exchange On-Premise to Exchange Online when a SEG server is currently being used to perform this function?

In other words, I need to retain the ability to only allow AirWatch enrolled devices access to corporate email but I do not want to have all the devices contact an on-premise SEG server just to forward to the cloud and Exchange Online. It seems to defeat the purpose of migrating to Exchange Online.

We need the SEG server presently to prevent unenrolled personal devices from gaining access to company email.

What is the best way to continue to have this type of control or conditional access when making this transition?

Thank you in advance.

Hello all,

I am creating a new app stack for an application that requires editing a service by adding a domain account under the logon tab of the service properties. My question here is whether the editing of the service should be done in the provisioning stage of the app stack creation? I have tested editing the service during the provisioning phase but when I enter the logon credentials and attempt to apply I get an "Access denied" error which I am thinking is due to my install machine not being a member of the domain. I am able to search for the domain and the specific account, however. Thanks in advance for any input you can provide.

Welcome to the VMware HCX community! Please ask questions, check the documents section periodically for new content, and submit any ideas you may have in the ideas section. We look forward to engaging with you all. To get started here are a few links:

How do I go about doing things like:
1) Assign this tag if....connected to these portgroups
2) Assign this tag if....within this folder

Had anyone cross with compliance error in vCD 10.0?

Is there any description what would happen when we hit "Make VM Compliant" button?

What hardware settings are being prioritazed vCenter or vCloud Director? What if we have different storage policies onto both of software?

Description of the known issue below:

vCloud Director 10.0 for Service Providers Release Notes

When you change the  reservation guarantee values of a VDC, the existing VMs are not updated accordingly even after a reboot

If you have a flex organization VDC with the system default policy and powered-on virtual machines on that VDC are with the default sizing policy, when you increase the resource guarantee value of the VDC, the resource reservation for the existing VMs is not updated and they are also not marked as non-compliant. The issue occurs also when you convert a legacy VDC allocation model to a flex allocation model and the existing VMs become non-compliant with the new default policy of the flex organization VDC after the conversion.

Workaround:

1. To display the non-compliant VMs in the vCloud Director UI, perform an explicit compliance check against the VMs by using the vCloud API.
2. To reapply the policy and reconfigure the resource reservations, in the vCloud Director Tenant Portal, click Make VM Compliant for a non-compliant VM.

So I have a windows XP vm that I use for older software. I havent used it in a few months, and now I am unable to restore it. I attached the error message.

I am using v.12 Pro.

Hi,

I'm looking for a method to automate the specific setting for HPE iSUT (Integrated ) described here https://support.hpe.com/resource3/docDisplay/pdfjs/web/viewer.html?file=%2Fhpesc%2Fpublic%2Fapi%2Fdocument%2Fa00068223en…

Basically it is inside a SSH or Console shell:

sut -set mode=AutoDeployReboot

As I'm upgrading our ESXi's via a PowerShell script, it would be highly beneficially to issue the above command inside the PowerCLI session, instead accessing the host manually.

Key question: Is there any way inside PowerCLI to execute a custom command on the host side?

Thanks and regards,

Nico

Hi,

we know that we can use VMware Converter to transform a physical server into a file (.vmx and .vmdk) into a USB External, however it only supports to import into VMware Workstation.

What is the option we have to transform a physical server using a USB External to import into an ESXi that is in another physical location?

There is no connectivity between locations.

Thanks.

Hello there,

I am having problems migrating my W10 HP Pavilion laptop to VMware. Here is whats happening:

1. Both PC and Mac are connected to the same modem (Lan 1 and Lan 3 ports respectively)

2. EnableLUA in W10 set to 0 (see attached snap shot)

3. Started PC Migration Agent on PC

4. Started Fusion on iMac (14.2), selected Migrate your PC

5. Entered 4-digit code from PC Migration Agent

6. Provided Administrator credentials from PC

7. Continued with default 'Windows 10 x64' default location (Space needed 231.2 GB, Space Available 884.8 GB)

8. Fusion is preparing migration

9. An Error Occured (Unable to create virtual machine 'Windows 10 x64' for the following reason: 'converter.fault.NetworkShareConnectFault'

10. Finish

I tried uninstalling, rebooting then reinstalling Fusion but that did not help.

Am I doing something wrong?

Best Regards,

Goran

we are trying to use a domain authentication to read a environment variable from the guest vm. the user never logged in guest vm. looks like vmware was calling LoadUserProfile which internally try to create temporary user profiles  folders. we see bunch of folders under C:\user\Temp.* after calling this api couple of times we can't read the env anymore. because windows reaches temporary profiler folder limit i guess. Can some one help to see why vmware is not calling unloaduserprofile all the times?

[2020-04-05T20:32:08.383Z] [ warning] [VCGA] VGAuthImpersonateImpl: failed to load profile for user 'admin\svc_actifiosky2'

[2020-04-05T20:32:08.383Z] [ warning] [vix] VixToolsTranslateVGAuthError: error code 0x1 has no translation

[2020-04-05T20:32:08.383Z] [ warning] [vix] VixToolsImpersonateUser: impersonation failed (1)

[2020-04-05T20:32:08.383Z] [ message] [vix] VixToolsReadEnvVariables: opcode 187 returning 1

[2020-04-06T20:31:58.046Z] [ message] [vix] VixTools_ProcessVixCommand: command 187

[2020-04-06T20:31:58.077Z] [ warning] [VCGA] [function VGAuthLoadUserProfile, file d:/build/ob/bora-10402285/bora-vmsoft/vgauth/lib/impersonateWin32.c, line 114], NetUserGetInfo() failed with error 2221 for user 'admin\svc_actifiosky2'

[2020-04-06T20:31:58.092Z] [ warning] [VCGA] [function VGAuthLoadUserProfile, file d:/build/ob/bora-10402285/bora-vmsoft/vgauth/lib/impersonateWin32.c, line 119], LoadUserProfile() failed for user 'admin\svc_actifiosky2', [Win32 Error = 2] The system cannot find the file specified.

[2020-04-06T20:31:58.092Z] [ warning] [VCGA] VGAuthImpersonateImpl: failed to load profile for user 'admin\svc_actifiosky2'

[2020-04-06T20:31:58.092Z] [ warning] [vix] VixToolsTranslateVGAuthError: error code 0x1 has no translation

[2020-04-06T20:31:58.092Z] [ warning] [vix] VixToolsImpersonateUser: impersonation failed (1)

[2020-04-06T20:31:58.108Z] [ message] [vix] VixToolsReadEnvVariables: opcode 187 returning 1

I am building a Win10 1909 master. I follow the VMware tech guide to create an optimized image, so I use OSOT. To customize the start menu tile layout I   import it Import-StartLayout -LayoutPath layout.xml -MountPath C:\

It places it in the default user %appdata%\Local\Microsoft\Windows\shell folder.

However  I received a path error in PowerShell and discovered that the shell folder is missing, in fact All the folders except Winx are missing in %appdata%\Local\Microsoft\Windows.

This is the second 1909 image I have built, and this did not happen for the first one. The first one had the shell folder, and others in the Windows folder.

I can only imagine that something in the OSOT process or finalization whacked these folders. Anyone have a clue for me? Can I restore these by copying from another image? I have a few hours into this image and hate the idea of starting over. Thanks

I recently upgraded my VMware Workstation Pro from 13.x to 15.5.2 and I have noticed a dramatic drop in performance of Linux (Centos 7and RHEL 7.x) VMs that I have been building as compare to previous VMware releases. The OS installation goes well, per VMware recommendations I have been using open-vm-tools instead of manually installing the vmware-tools. As part of my job I depend on testing several java applications which run as services, these are very light weight and previously started in a matter of seconds. Now they take 10-15 minutes or more to fully start, I can't even get jboss to finish deploying a war file before timing out (deployment timeout is set to over 10200 seconds). While installing one of the products I have to test it copies numerous XML files from a source directory to an installation directory, this should be extremely fast but is taking over a minute and a half per file. A product install that would normally take under an hour is take 16 plus hours. During any of the above if I use top/atop/htop it shows virtually no load on the system at all. I have tried multiple versions of Java as well to no avail.

The VM has allocated:

2 vCPU Intel i7-6820HQ 2.7GHz

6 GB of RAM

Plenty of disk (SSD) and no swapping is going on. The rest of the workstation resources are idle as well so there should not be any resource contention.

I am at wits end with this issue and I welcome any suggestions! 

We've just updated VRLI in our lab environment from v4.8 to v8.0 but encountered a couple of issues along the way. Am documenting them here for the benefit of others and any input from VMware.

Failure to migrate network adapter gateway configuration

The gateway for the network adapter wasn't correctly migrated during the conversion to Photon OS. This resulted in the upgrade appearing to hang as the appliance was unable to communicate with any system outside of its IP subnet. The issue is alluded to in the Release Notes but they're somewhat vague and lack instructions on how to check if you're affected and any workaround steps:

• When using static IPs (as opposed to IPs obtained via DHCP), ensure that the corresponding SLES network configuration file contains an entry for gateway on all the cluster nodes, before upgrading to vRealize Log Insight 8.0.

The issue is caused by the /etc/sysconfig/network/ifcfg-eth0 file "missing" a GATEWAY='w.x.y.z.' statement. I say "missing" as this doesn't appear to be where SLES typically saves static routes. Those are contained in the /etc/sysconfig/network/routes file, which is what the upgrade process should presumably be looking at. In our case it contained a single line specifying the default route.

As a workaround, you can SSH to the box and add the line the upgrade scripts are expecting before performing the upgrade.

Regression in handling of STARTTLS for SMTP

After upgrading we had to modify the SMTP configuration to not use STARTTLS. This was working fine previously but now sending a test email with STARTTLS enabled fails with the error:

No appropriate protocol (protocol is disabled or cipher suites are inappropriate)

The issue appears to be something in the Java configuration of VRLI. In our configuration we're sending to Office 365 via "Direct Send". Keen to get any input from VMware on this one.

As a workaround you can disable STARTTLS, however, you may wish to do so before starting the upgrade so you don't potentially lose any emails before you can apply the workaround post-upgrade.

Hello Everyone,

We have an in-house software that should be looking at the ViewClient_Machine_Name Value in HKEY_CURRENT_USER\Volatile Environment or if we issue a set view command but unfortunately it is pretty much hit and miss. THe application needs to look a the client name that the user is connecting from as this is the only constant that doesn't change

in our Instant Clones deployment

The developer came up with another idea and is able to program the application to look at the System Variable with much more reliability. However, to achieve that they are  asking us to deploy a VBS script that should be deployed using Horizon View GPO/Agent Settings and be running at logon (CommandsToRunOnConnect) and reconnect to session (CommandsToRunon Reconnect) with the following command:  c:\windows\system32\cscript.exe \\domain.local\netlogon\viewlogin.vbs

Overall the script works when logged in to VM with writable only but as soon as I attach another appstack to it the script breaks and does not run. ALso if I'm fully logged in and go to my Netlogon share and run it then it doesn't work. No errors, nothing in logs, at least I cannot find anything.

Below is the script:

'************************************************************************************************************************

'The following will create applications and printers based on the following variables:

'vMachine = View Client Machine Name

'vIP = View Client IP Address

'vMAC = View Client MAC Address

'This section sets the variables mentioned above based on registry keys set by VMware View Agent

'***********************************************************************************************************************

On Error Resume Next

Const HKEY_CURRENT_USER = &H80000001

Set wmiLocator=CreateObject("WbemScripting.SWbemLocator")

Set wmiNameSpace = wmiLocator.ConnectServer(".", "root\default")

Set objRegistry = wmiNameSpace.Get("StdRegProv")

sPath = "Volatile Environment"

lRC = objRegistry.GetStringValue(HKEY_CURRENT_USER, sPath, "ViewClient_Machine_Name", vMachine)

lRC = objRegistry.GetStringValue(HKEY_CURRENT_USER, sPath, "ViewClient_IP_Address", vIP)

lRC = objRegistry.GetStringValue(HKEY_CURRENT_USER, sPath, "ViewClient_MAC_Address", vMAC)

'msgbox "The Remote Device Name is " & vMachine & " @ " & vIP & " (" & vMAC & ") "

Dim WSHShell

Dim Shortcut, Desktop, DesktopPath

Set WSHShell = WScript.CreateObject("WScript.Shell")

DesktopPath = WSHShell.SpecialFolders("Desktop")

Set fso = CreateObject("Scripting.FileSystemObject")

'Sets ViewClient_Machine_Name as a system variable Dim SysVarReg, Value Set SysVarReg = WScript.CreateObject("WScript.Shell") value = SysVarReg.RegRead("HKCU\Volatile Environment\ViewClient_Machine_Name") SysVarReg.RegWrite "HKCU\Volatile Environment\1\CLIENTNAME", value WshShell.Environment.Item("ViewClient_Machine_Name") = vMachine

We did give Users Modify permissions to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment

It seems to be very inconsistent too as it seems to work with some appstacks attached but not all which is majority but it always works fine on Vm with no appstacks and writable only.

I have also attempted to do the same with Powershell Script but that doesn't seem to work at all, not even on appstack free machines.

$userVariables= (Get-ItemProperty -Path 'Registry::HKEY_CURRENT_USER\Volatile Environment')

Set-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment' -Name ViewClient_Machine_Name -Value $userVariables.ViewClient_Machine_Name

Also tried UEM Logon task just to see if the PS script would work and even though in logs I see it processed it does not work. When logged in to the machine I can run it just fine. UEM was more for test as it wil lneed to work through Horizon GPO due to reconnect option.

Envronment: AppVoloumes 2.16, Horizon 7.8, vCenter 6.7 U3, Windows 1809 LTSC

Any advise would be very appreciated.

I'm running ESXi 6.0u2 free.  I've got a 54TB datastore on DAS to an LSI SAS3 controller (9380-4i4e).  After setting everything up, including a Server 2012 R2 standard VM, I was able to create a 30TB VMDK for the server, though I had to use the web client to do it (the fat client seems to only allow 16TB max). 

At some point I lost the ability to edit ANY settings on that VM (memory, CPU, disk, etc) and it throws the error in the subject line.  Again, even if I'm trying to change a non-disk-related setting.  I removed (and deleted) the entire datastore and recreated it from scratch and I'm having the same issue.  In the web client it even shows it has 54TB free/available.

I've also got a Windows 7 x64 pro and a Windows 10 x64 pro VM running and I'm having the same problem with editing their settings in the web client as well.  I was having no issues earlier today however.  I did find that I was able to create a new virtual disk of 16TB on the Windows 7 VM using the vSphere client, even though it appeared to throw an error it still worked.  Problem is it appears you need the web client to do anything over 16TB which is what I need to do and its basically unusable at this point.

Note that I can still edit VM settings using the vSphere client as normal.  I just can't edit settings on ANY VMs using the web client?  I already tried the "Reset client settings" in the web client; didn't help.

I've seen only a couple other folks online that have run in to this and I see no fix.  I'm trying to backtrack my steps and the last thing I was doing was messing around with MTU settings on my vSwitch in the web client.  This definitely feels like a bug but I'm not sure how to proceed!  Maybe there's some way to completely reset/reinstall the web client?