User settings not applying in some virtual machines from instant clone desktop pools

[Rotoi]

Hi,

We deploy various user and computer settings with GPO in virtual machines created in instant clone desktop pools. The issue is that on some virtual machines, all user settings don't apply like folder redirection.

On virtual machines having the issue, gpresult command gives error "The user does not have RSoP data".

However, with gpresult /r /scope:computer, there's no rsop error and we see that computer settings are applied. The command also shows the security groups in which the virtual machine is, and we noticed that when there is the issue, the computer is not correct but instead is "IT*************$", that is the name of the guest os in the cp-template generated in the provisioning process. On virtual machines with no issue, the computer name is correct in that command.

Is the issue related to a provisioning issue and is there any way to force the application of user settings all the time ?

Thanks

[Tim]

Hi, have you looked at DEM to consistently apply user settings to your virtual desktops?

[Philipp Siebers]

Hi, Please also check the event logs in the Administrative events area and in the Application area to check for GPO errors or Horizon Agent errors. 

You might also check the Horizon agent logs to look for Instant Clone provioning errors, which results in the wrong computer name.
Horizon Agent Log Files on Windows Machines (omnissa.com)

[Rotoi]

I checked the Horizon agent logs debug-2024-xx-xx.txt, log-2024-xx-xx.txt, there are no errors that are specific to the virtual machines with the issue, that do not appear on virtual machines with no issue.

[Rotoi]

On 10/2/2024 at 4:29 AM, Tim said:

Hi, have you looked at DEM to consistently apply user settings to your virtual desktops?

Tim, what are the requirements to use DEM ? Does it require Workspace ONE ?

Edited October 3 by Rotoi

[robryan]

No it is part of the Horizon suite - at a minimum you'll be entitled for DEM Standard, though Enterprise is worth it due to the extra features (and Computer level policies) available.

https://techzone.omnissa.com/dynamic-environment-manager is a good starting point, but really, almost any profile management solution that's not GPOs is going to perform better for you in a dynamic VDI environment.