Release date: January 10th 2019
Welcome to my VMware Dynamic Environment Manager series. In this session I will describe how I prepared the File shares and permissions for the UemConfig and UemProfiles shares.
After establishing the DFS cluster I can now go ahead with creating the Uem Config and Profiles folders and share them out. I log into one of my file-servers, browse to the replicated folder, in my LAB this is the folder C:\UEM which I created when setting up DFS, posted here: VMware DEM Prepare File Server DFS
I create the two folders here
I set Share and NTFS Permissions on the UemConfig-folder as follows
I give Read Permissions to my End Users, in my LAB this is member of the Domain Users group.
I give Read and Change Permissions to my Administrators, in my LAB this is member of the Domain Admins group.
I give Full Control Permissions to Domain Admins.
I give Read and Execute Permissions to Domain Users.
Next, I set Share and NTFS Permissions on the UemProfiles-folder as follows
I give Read and Change Permissions Domain Users.
I give Read and Change Permissions Domain Admins.
I configure Advanced Security Settings as follows and give Domain Admins Full Control permissions to “This Folder, subfolders and files”
Next, I select Domain Users as Principal and click “Show Advanced permissions”
I give Domain Users “Travers folder / execute file” and “Create Folders / append data” to “This Folder Only”, in addition to the “Read & execute”, “List folder contents”, “Read”-permissions.
Finally, I give Creator Owner “Full Control” permissions to “Subfolders and files only”
The NTFS permissions for the UEM_Profifiles folder should now look somewhat like this:
My shared folders are now correctly configured and accessible from my DFS-share
I can now proceed with the next logical step: VMware DEM Prepare GPO/Scripts
Official VMware Dynamic Environment Manager Documentation
Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.