VMware DEM – Prepare File Shares and Permissions

Release date: January 10th 2019

Welcome to my VMware Dynamic Environment Manager series. In this session I will describe how I prepared the File shares and permissions for the UemConfig and UemProfiles shares.

After establishing the DFS cluster I can now go ahead with creating the Uem Config and Profiles folders and share them out. I log into one of my file-servers, browse to the replicated folder, in my LAB this is the folder C:\UEM which I created when setting up DFS, posted here: VMware DEM Prepare File Server DFS

I create the two folders here

Config-Share:

I set Share and NTFS Permissions on the UemConfig-folder as follows

Share-permissions:

I give Read Permissions to my End Users, in my LAB this is member of the Domain Users group.

I give Read and Change Permissions to my Administrators, in my LAB this is member of the Domain Admins group.

NTFS-permissions:

I give Full Control Permissions to Domain Admins.

I give Read and Execute Permissions to Domain Users.

Profiles-Share:

Next, I set Share and NTFS Permissions on the UemProfiles-folder as follows

Share-permissions:

I give Read and Change Permissions Domain Users.

I give Read and Change Permissions Domain Admins.

NTFS-permissions:

I configure Advanced Security Settings as follows and give Domain Admins Full Control permissions to “This Folder, subfolders and files”

Next, I select Domain Users as Principal and click “Show Advanced permissions”

I give Domain Users “Travers folder / execute file” and “Create Folders / append data” to “This Folder Only”, in addition to the “Read & execute”, “List folder contents”, “Read”-permissions.

Finally, I give Creator Owner “Full Control” permissions to “Subfolders and files only”

The NTFS permissions for the UEM_Profifiles folder should now look somewhat like this:

My shared folders are now correctly configured and accessible from my DFS-share

I can now proceed with the next logical step: VMware DEM Prepare GPO/Scripts

My VMware DEM LAB Set Up

Official VMware Dynamic Environment Manager Documentation

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.