Solved

Modifying Internet Explorer security settings for all users on a golden master image for Horizon View

Posted on 2014-12-05
4
258 Views
Last Modified: 2014-12-16
I have just deployed a VDI environment with Horizon View.  I need to modify IE settings like security levels and trusted sites for every user that logs onto the snapshot through the WYSE clients.

I am having trouble finding a way to successfully do this.

Since I am recycling the image to where it does not save user settings upon log out, some group policies do not work unless they are run on the master VM itself before creating the snapshot.  What would be the best way to control this and make absolute certain it will make the changes on all users profiles?
0
Comment
Question by:ProactionTech
  • 2
  • 2
4 Comments
 
LVL 117
ID: 40483808
We apply Group Policies to an AD OU Group for Users and Machines.

All our VMs are in a AD OU Container/Group.

This works for us.
0
 

Author Comment

by:ProactionTech
ID: 40483816
Yea I am working on doing this right now actually..  I had tried this before but it didnt work and I think it is because I was counting on the group policy to run AFTER the snapshot was created and it doesnt save changes at that point so I am going to try running it before creating the snapshot.

I will let you know how that goes, but it should work.

Thanks for your reply Andrew.
0
 
LVL 117

Accepted Solution

by:
Andrew Hancock (VMware vExpert / EE MVE) earned 500 total points
ID: 40483917
Group Policies are applied to Users and Machines, when they are started up in the domain.

Group Polices are part of Active Directory, do you use them currently ?

It does not matter, whether these are physical or virtual machines. (and snapshots!).

So move your VMs into an OU, Define a Group Policy for users and machines, and then Start your VMs.
0
 

Author Comment

by:ProactionTech
ID: 40503016
I copied the GP to users in addition to leaving it in Computers and everything worked BUT I had to run the GP update on the golden master before taking the snapshot.  When I tried to run gpupdate on the thin clients it did not work.  

Thanks for your help Andrew
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

David Varnum recently wrote up his impressions of PRTG, based on a presentation by my colleague Christian at Tech Field Day at VMworld in Barcelona. Thanks David, for your detailed and honest evaluation!
Veeam Backup & Replication has added a new integration – Veeam Backup for Microsoft Office 365.  In this blog, we will discuss how you can benefit from Office 365 email backup with the Veeam’s new product and try to shed some light on the needs and …
Teach the user how to configure vSphere clusters to support the VMware FT feature Open vSphere Web Client: Verify vSphere HA is enabled: Verify netowrking for vMotion and FT Logging is in place or create it: Turn On FT for a virtual machine: Verify …
Teach the user how to join ESXi hosts to Active Directory domains Open vSphere Client: Join ESXi host to AD domain: Verify ESXi computer account in AD: Configure permissions for domain user in ESXi: Test domain user login to ESXi host:

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now