Search the VMware Knowledge Base (KB)
View by Article ID

Configuring advanced UEM settings in NoAD mode (2148324)

  • 0 Ratings

Purpose

This article provides steps to configure advanced UEM settings in NoAD mode. This is a new mode to configure the UEM Agent in a new way. VMware User Environment Manager (UEM) has traditionally used a GPO to configure the UEM Agent.

Resolution

Using NoAD Mode with the UEM Agent

The NoAD mode is an alternative to configure User Environment Manager with Active Directory Group Policy. You do not need to create a GPO, login and logoff scripts, or configure Windows Group Policy settings.  

In NoAD mode, all User Environment Manager GPO settings are ignored. If settings from a previous GPO-based deployment are encountered, no actions are performed and a message is logged to the FlexEngine log file.  

Note: The SyncTool does not support the NoAD mode. You must continue using Group Policy configuration for User Environment Manager if you use SyncTool.

Installing UEM with the NoAD Mode

To install User Environment Manager in NoAD mode, specify the path to the Flex configuration files through the NOADCONFIGFILEPATH MSI property at the time of installation and type in:  

msiexec.exe /i "VMware User Environment Manager 9.1 x64.msi" /qn LICENSEFILE="\\filesrv1\share\VMware UEM.lic" /l* InstallUEM.log NOADCONFIGFILEPATH=\\Filesrv\UemConfig$\General  

This command inserts the basic NoAD configuration in the HKLM registry hive and enables the NoAD mode.  

Note: To disable the NoAD mode, uninstall User Environment Manager, and reinstall without the  NOADCONFIGFILEPATH MSI property

Configuring UEM with the NoAD Mode

You can provide the settings for configuring   User Environment Manager   awith the NoAD mode through an XML file on the central configuration share. When a user logs in, FlexEngine reads the settings from the XML file and applies them to the registry.  

The XML file is called NoAD.xml and must reside in the ...\General\FlexRepository\NoAD   subfolder.  

The NoAD.xml is a UTF-8-encoded XML file with an explicit UTF-8 BOM. You can create this file by using notepad and selecting the UTF-8 encoding when saving. The file must have these basic structure:  

<?xml version="1.0" encoding="utf-8"?>
<userEnvironmentSettings>

<setting type="noAD" additionalSetting="..." otherSetting="..." ... />

</userEnvironmentSettings>

Advanced NoAD Settings

This table lists all of the advanced settings:

Setting XML attribute Notes
Symantec Endpoint Protection DirectFlex export fix DirectFlexExportFallback="1" Set to 1 to configure
DirectFlex compatibility fix for BeyondTrust and Avecto DirectFlexRenewHook="0" Set to 0 to configure
Allow processing ADMX-based settings, application blocking, privilege elevation and Horizon Smart Policies configuration during a session AllowAdmxInSession="1" Set to 1 to configure
Remove local profile at logoff RemoveLocalProfileAtLogoff="1" Set to 1 to configure
Remove local profile at logoff - Do not apply to members of the local administrators group SkipRemoveLocalProfileAtLogoffForAdminGroup="1" Set to 1 to configure
Enable verbose logging for ADMX-based settings, application blocking, privilege elevation and Horizon Smart Policies AdmxLogging="1" Set to 1 to configure
Prevent export for failed import SkipExportForFailedImport="1" Set to 1 to configure
Disable DirectFlex - option 1 DisableDirectFlex="1" Set to 1 to 'Disable DirectFlex'; Set to 2 to 'Disable DirectFlex and process DirectFlex config files during logon and logoff'
Pre-execution Command PreExecutionCommand="command.bat" Set to 'command.bat'
Printer mapping - number of retries when mapping MapPrinterRetryCount="20" Set to any number (default 20) (decimal)
Printer mapping - number of retries when unmapping UnmapPrinterRetryCount="20" Set to any number (default 20) (decimal)
Special Drive Mapping Logic SpecialDriveMappingLogic="1" Set to 1 for 'Enabled for administrators with a split token'; Set to 2 for 'Enabled always'
Disable UEM action types - Disable during logon only UEMActionDriveMappingDuringLogon="0" Set to 0 to configure
Disable UEM action types - Disable during logon only UEMActionFileTypeAssociationDuringLogon="0" Set to 0 to configure
Disable UEM action types - Disable during logon only UEMActionPrinterMappingDuringLogon="0" Set to 0 to configure
Disable UEM action types - Disable during logon only UEMActionShortCutDuringLogon="0" Set to 0 to configure
Disable UEM action types- Disable completely UEMActionPrivilegeElevation="0" Set to 0 to configure
Disable UEM action types- Disable completely UemActionAdmx="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionApplicationBlocking="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionDriveMapping="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionEnvVar="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionFileTypeAssociation="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionFolderRedirection="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionHorizonPolicy="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionImport="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionPrinterMapping="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionShortcut="0" Set to 0 to configure
Disable UEM action types - Disable completely UEMActionTask="0" Set to 0 to configure
Disable UEM action types - Disable completely UemActionHideDrive="0" Set to 0 to configure
Disable UEM action types - Disable completely UemActionPolicy="0" Set to 0 to configure
Disable UEM action types - Disable completely UemActionTriggeredTask="0" Set to 0 to configure
Disable UEM action types - Disable completely UemActionMigrate="0" Set to 0 to configure
Environment Variable prefix EnvVarPrefix="anyvalue" Set to "anyvalue" to configure
Validate .REG file ValidateRegFile="1" Set to 1 to configure
Compatibility fix for Sophos EndPoint Protection DirectFlexFollowJMPHook="1" Set to 1 to configure

Compatibility fix for VMware Horizon smartcard redirection

DirectFlexHookLoadLibrary="0" Set to 0 to configure

Additional Information

See Also

Attachments

Request a Product Feature

To request a new product feature or to provide feedback on a VMware product, please visit the Request a Product Feature page.

Feedback

  • 0 Ratings

Did this article help you?
This article resolved my issue.
This article did not resolve my issue.
This article helped but additional information was required to resolve my issue.

What can we do to improve this information? (4000 or fewer characters)




Please enter the Captcha code before clicking Submit.
  • 0 Ratings
Actions
KB: