When documenting an Omnissa Horizon environment, tools like AsBuilt Report cover the infrastructure layer beautifully — Connection Servers, App Volumes, UAG, vSphere. But Dynamic Environment Manager has always been a gap. The configuration lives partly in the DEM console, partly in file share ACLs, and partly in GPO settings scattered across the environment. There is no equivalent AsBuilt module for DEM, so documentation typically ends up being done manually and going out of date quickly.
To address at least part of this, I wrote Get-DEMShareReport.ps1 — a PowerShell script that enumerates the DEM file shares and generates a styled HTML documentation report. It covers SMB share permissions, NTFS ACLs, folder ownership, per-pool subfolder structure and folder sizes for the config share, profile archive share and folder redirection share. The output opens automatically in the browser and includes a Print / Save as PDF button.
What the report covers
For each share the script documents:
- SMB share-level permissions (via
Get-SmbShareAccess— requires running locally on the Windows file server) - NTFS ACL on the share root — identity, rights, Allow/Deny, Inherited vs Explicit, inheritance flags
- Folder owner on the root and each subfolder
- Per-pool subfolders with full NTFS ACL and folder size
- Summary table at the top covering all shares at a glance
The HTML output uses a styled layout with colour-coded share cards, badge indicators for Allow/Deny and Inherited/Explicit ACEs, and alternating row colours for readability. It works as a standalone file you can save alongside your other as-built documentation.
Requirements
- PowerShell 5.1 or later
- Run as Administrator on the Windows file server hosting the DEM shares for full SMB + NTFS output
- No external modules or dependencies required
A note on SMB permissions: Get-SmbShareAccess only works for shares hosted locally on the Windows machine running the script. If you point the script at a remote UNC path — including a Linux/Samba server — the SMB section will show an informational message instead. NTFS ACLs and subfolder enumeration work over UNC paths regardless. The recommendation is to copy the script to the Windows DEM file server and run it locally as Administrator.
How to run it
Download the script from GitHub and run it as Administrator on the DEM file server. The two mandatory parameters are the config share path and the profile share path. The folder redirection share and a custom report title are optional:
# Run locally on the DEM file server - full SMB + NTFS output.\Get-DEMShareReport.ps1 ` -ConfigSharePath "C:\DEM\demcfg" ` -ProfileSharePath "C:\DEM\demprf" ` -RedirSharePath "C:\DEM\hzredir" ` -Title "My DEM Environment"
The report is saved as a timestamped HTML file in the current directory and opens automatically in the default browser when complete.
Download
The script is published on GitHub with a full README covering all parameters, usage examples and notes on the SMB permission limitation:
This is the first script published in the tech-iot-it public GitHub repository. More tools covering the Omnissa Horizon stack will follow as they are finished and anonymized.
Omnissa Documentation:
Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different IT-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.