VMware DEM – Prepare File Shares and Permissions

Release date: January 10th 2019

Welcome to my VMware Dynamic Environment Manager series. In this session I will describe how I prepared the File shares and permissions for the UemConfig and UemProfiles shares.

After establishing the DFS cluster I can now go ahead with creating the Uem Config and Profiles folders and share them out. I log into one of my file-servers, browse to the replicated folder, in my LAB this is the folder C:\UEM which I created when setting up DFS, posted here: VMware DEM Prepare File Server DFS

I create the two folders here

uem_share_perm01

 

Config-Share:

I set Share and NTFS Permissions on the UemConfig-folder as follows

Share-permissions:

uem_share_perm02

uem_share_perm03

 

I give Read Permissions to my End Users, in my LAB this is member of the Domain Users group.

uem_share_perm04

 

I give Read and Change Permissions to my Administrators, in my LAB this is member of the Domain Admins group.

uem_share_perm05

 

NTFS-permissions:

I give Full Control Permissions to Domain Admins.

uem_share_perm06

 

I give Read and Execute Permissions to Domain Users.

uem_share_perm07

 

Profiles-Share:

Next, I set Share and NTFS Permissions on the UemProfiles-folder as follows

Share-permissions:

I give Read and Change Permissions Domain Users.

uem_share_perm08

 

I give Read and Change Permissions Domain Admins.

uem_share_perm09

 

NTFS-permissions:

I configure Advanced Security Settings as follows and give Domain Admins Full Control permissions to “This Folder, subfolders and files”

uem_share_perm11

 

Next, I select Domain Users as Principal and click “Show Advanced permissions”

uem_share_perm12

 

I give Domain Users “Travers folder / execute file” and “Create Folders / append data” to “This Folder Only”, in addition to the “Read & execute”, “List folder contents”, “Read”-permissions.

uem_share_perm13.png

 

Finally, I give Creator Owner “Full Control” permissions to “Subfolders and files only”

uem_share_perm14

 

The NTFS permissions for the UEM_Profifiles folder should now look somewhat like this:

uem_share_perm15.png

 

My shared folders are now correctly configured and accessible from my DFS-share

uem_share_perm16

I can now proceed with the next logical step: VMware DEM Prepare GPO/Scripts

 

VMware Dynamic Environment Manager LAB setup

Vmware Dynamic Environment Manager product page

Disclaimer: Every tips/tricks/posting I have published here, is tried and tested in different it-solutions. It is not guaranteed to work everywhere, but is meant as a tip for other users out there. Remember, Google is your friend and don’t be afraid to steal with pride! Feel free to comment below as needed.