VMware UEM – Prepare File Shares and Permissions

Welcome to my VMware User Environment Manager series, how I setup “UEM” in my LAB. In this session I will describe how I prepared the File shares and permissions for the UemConfig and UemProfiles shares.

After establishing the DFS cluster I can now go ahead with creating the Uem Config and Profiles folders and share them out. I log into one of my file-servers, browse to the replicated folder, in my LAB this is the folder C:\UEM which I created when setting up DFS, posted here: VMware UEM Prepare File Server DFS

I create the two folders here

uem_share_perm01

I set Share and NTFS Permissions on the UemConfig-folder as follows

Share-permissions:

uem_share_perm02

uem_share_perm03

I give Read Permissions to my End Users, in my LAB this is member of the Domain Users group.

uem_share_perm04

I give Read and Change Permissions to my Administrators, in my LAB this is member of the Domain Admins group.

uem_share_perm05

NTFS-permissions:

I give Full Control Permissions to Domain Admins.

uem_share_perm06

I give Read and Execute Permissions to Domain Users.

uem_share_perm07

Next, I set Share and NTFS Permissions on the UemProfiles-folder as follows

Share-permissions:

I give Read and Change Permissions Domain Users.

uem_share_perm08

I give Read and Change Permissions Domain Admins.

uem_share_perm09

NTFS-permissions:

I configure Advanced Security Settings as follows and give Domain Admins Full Control permissions to “This Folder, subfolders and files”

uem_share_perm11

Next, I select Domain Users as Principal and click “Show Advanced permissions”.

uem_share_perm12

I give Domain Users “Travers folder / execute file” and “Create Folders / append data” to “This Folder Only”, in addition to the “Read & execute”, “List folder contents”, “Read”-permissions.

uem_share_perm13

Finally, I give Creator Owner “Full Control” permissions to “Subfolders and files only”

uem_share_perm14

The NTFS permissions for the UEM_Profifiles folder should now look somewhat like this:

uem_share_perm15

My shared folders are now correctly configured and accessible from my DFS-share

uem_share_perm16

I can now proceed with the next logical step: VMware UEM Prepare GPO/Scripts

 

VMware User Environment Manager LAB setup

Vmware User Environment Manager product page

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.