VMware UEM – Prepare File Shares and Permissions

Welcome to my VMware User Environment Manager series, how I setup “UEM” in my LAB. In this session I will describe how I prepared the File shares and permissions for the UemConfig and UemProfiles shares.

After establishing the DFS cluster I can now go ahead with creating the Uem Config and Profiles folders and share them out. I log into one of my file-servers, browse to the replicated folder, in my LAB this is the folder C:\UEM which I created when setting up DFS, posted here: VMware UEM Prepare File Server DFS

I create the two folders here


I set Share and NTFS Permissions on the UemConfig-folder as follows




I give Read Permissions to my End Users, in my LAB this is member of the Domain Users group.


I give Read and Change Permissions to my Administrators, in my LAB this is member of the Domain Admins group.



I give Full Control Permissions to Domain Admins.


I give Read and Execute Permissions to Domain Users.


Next, I set Share and NTFS Permissions on the UemProfiles-folder as follows


I give Read and Change Permissions Domain Users.


I give Read and Change Permissions Domain Admins.



I configure Advanced Security Settings as follows and give Domain Admins Full Control permissions to “This Folder, subfolders and files”


Next, I select Domain Users as Principal and click “Show Advanced permissions”.


I give Domain Users “Travers folder / execute file” and “Create Folders / append data” to “This Folder Only”, in addition to the “Read & execute”, “List folder contents”, “Read”-permissions.


Finally, I give Creator Owner “Full Control” permissions to “Subfolders and files only”


The NTFS permissions for the UEM_Profifiles folder should now look somewhat like this:


My shared folders are now correctly configured and accessible from my DFS-share


I can now proceed with the next logical step: VMware UEM Prepare GPO/Scripts


VMware User Environment Manager LAB setup

Vmware User Environment Manager product page

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.