I’m a fan of NoAD mode, it’s easy to configure and i don’t have to depend on any AD configurations. Just a short write up on steps, as i couldn’t find the specific steps which we need to ensure for NoAD mode to work.
UEM Server
- Ensure you have the shares created for UEM config & Profile share. I prefer to use admin($) shares, so that it’s hidden for the users unless they know the exact path.
- Config Share
- Share Permission
- Administrators – Full Control
- User group – Read
- Security Permissions (I like to disable inheritance and apply what’s just required)
- Administrators – Full control
- User group – Read
- Share Permission
- Profile Share
- Share Permission
- Administrators – Full Control
- User group – Modify
- Security Permissions (I like to disable inheritance and apply what’s just required)
- Administrators – Full Control (This folder Only)
- User group – Read & Create folders (This folder only)
- Creator Owner – Full control (Subfolder & files)
- Share Permission
- Config Share
- Install UEM management console using the standard install in the UEM/File server
- Open the Management console and point to config share (\\fs01\config$\)
- This should create the folder structure in the config share, next step is the important one in the NoAD mode
- Create a folder named “NoAD” in the following path \\fs01\config$\general\FlexRepository\
- Copy NoAD.xml file to the above folder and you can configure it as you need. I generally use the below settings, you can change it as needed & if you need to use any advanced setting use the link here
<?xml version=”1.0″ encoding=”utf-8″?>
<userEnvironmentSettings><setting type=”noAD”ProfileArchivePath=”\\fs01\UEMProfile$\%username%\Archives”LogFileName=”\\fs01\UEMProfile$\%username%\Logs\FlexEngine.log”BackupPath=”\\fs01\UEMProfile$\%username%\Backups”BackupDaily=”1″LogLevel=”1″ConfigPathMissingAction=”0″ArchivePathMissingAction=”1″AppBlockingEventLog=”1″EventLog=”1″EventLogAsync=”1″EventLogDirectFlexRefresh=”1″EventLogUEMRefresh=”1″DirectFlexNotification=”1″SelfSupportDisallowed=”1″/></userEnvironmentSettings>
UEM Client
- Install UEM agent in command line as you need to point to the config directory
- Open command prompt (Run as Administrator)
msiexec /i “VMware User Environment Manager 9.3 x64.msi” LICENSEFILE=”VMware-UEM-9.3.0-GA.lic” /l* c:\work\Installuem.log NOADCONFIGFILEPATH=\\fs01\config$\general
- You can add /qn for quite and no retstart
- You don’t need the license file if you’re installing it in a VM which has Horizon Agent installed in it.
Hope this helps!