VMware Horizon 7.10 – Master RDS Host

Last Modified: Sep 30, 2019 @ 7:58 am

Navigation

Use this post to build a Windows Server Remote Desktop Session Host (RDSH) that will be used as the source image for additional cloned Remote Desktop Session Hosts. Or you can build each Remote Desktop Session Host manually using the steps detailed in this post. Virtual Desktop is detailed in a separate article.

This post applies to all VMware Horizon versions 7.0 and newer, including 7.5.2 (ESB), and 7.10 (ESB).

Change Log

Hardware

  • The session host pools will use the same hardware specs (e.g. vCPUs, memory size, network label) specified on the master session host. Adjust accordingly.
  • Windows Server 2019 is supported for Horizon Agents 7.7 and newer.
  • Windows Server 2016 is supported for Horizon View Agents 7.0.3 and newer.
  • For 2012 R2 or newer, set the vCPUs to 8. For 2008 R2, set the vCPUs to 4. Two is the minimum. See VMware whitepaper for more information.
  • Typical memory for an 8 vCPU session host is 24 – 48 GB (e.g. 32 GB).
  • For New Hard disk, consider setting Thin provision. And increase the size so it can store the locally cached profiles (C:\Users).
  • The session host should be configured with a VMXNET 3 network adapter.
  • When building the master session host, you will probably boot from an ISO. When you are ready to create the pool (RDS farm), ensure the CD/DVD drive points to Client Device, and is not Connected. The important part is to make sure ISO file is not configured.
  • There’s no need for the Floppy drive so remove it.
  • If you have any Serial ports, remove them.

NIC Hotplug – Disable

  1. Users could use the systray icon to Eject the Ethernet Controller. Obviously this is bad.
  2. To disable this functionality, power off the virtual machine.
  3. Once powered off, right-click the virtual machine, and click Edit Settings.
  4. On the VM Options tab, expand Advanced, and then click Edit Configuration.
  5. Click Add Row.
  6. On the left, enter devices.hotplug. On the right, enter false.
  7. Then click OK a couple times to close the windows.
  8. The VM can then be powered on.

VMware Tools

See VMware Product Interoperability Matrices for supported versions of VMware Tools with different versions of Horizon Agent.

VMware Tools includes the Shared Folders feature, which prevents roaming profiles from being deleted properly. When installing VMware Tools, make sure you deselect Shared Folders so it is not installed.

After installing VMware Tools, open Registry Editor and go to HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order. Look in the ProviderOrder value on the right, and ensure that vmhgfs is not listed. If it is, remove it.

Windows

Disable Internet Explorer Enhanced Security Config

  1. In Server Manager, switch to the Local Server page.
  2. On the far right, click the link for On next to IE Enhanced Security Configuration.
  3. Click Off for both Administrators and Users. Click OK.

Windows Update

Whenever you deploy a virtual machine from a template and SysPrep is executed during the cloning process, all Windows Update settings are reset. You must reconfigure Windows Update on every new virtual machine (or use group policy).

  1. In Server Manager, click Local Server on the left. Then on the right, click the link for Last checked for updates.
  2. In Windows Server 2012 R2, on the left, click Change settings.
  3. If Windows Server 2016, click Advanced Options.
  4. If Windows Server 2012 R2, check the box next to Give me updates for other Microsoft products when I update Windows, and click OK.
  5. If Windows Server 2016, check the box next to Give me updates for other Microsoft products when I update Windows, and then click the back button. Then click Check for Updates.

  6. Windows Update will automatically start checking for updates.
  7. Install any updates it recommends.

Windows Server 2008 R2 Hotfixes

Local Administrators Group

If the Horizon Administrators and members of the Domain Admins group are the same people, then there is nothing to change. Otherwise, add your Horizon Admins group to the local Administrators group.

  1. In Server Manager, open the Tools menu, and click Computer Management. Or launch it by right-clicking the Start Button.
  2. Add the Horizon Admins group to the local Administrators group.

Remote Desktop Session Host

Role and Features – Windows Server 2012 and newer

If this session host is Windows Server 2008 R2, then skip to the next section.

Horizon Agent 7.10 and newer can install the RDSH Role automatically. 💡

To install the RDSH role manually (required in Horizon Agent 7.9 and older):

  1. In Server Manager, open the Manage menu, and click Add Roles and Features.
  2. On the Installation Type page, leave it set to Role-based or feature-based installation.
  3. Click Next until you get to the Server Roles page.
  4. Check the box next to Remote Desktop Services and click Next.
  5. If Windows Server 2012 R2, expand User Interfaces and Infrastructure, and check the box next to Desktop Experience. This adds a bunch of features like Themes, Windows Media Player, Flash, etc. This feature is already installed in Windows Server 2016.
  6. To verify Remote Desktop Services licensing, in the Features page, expand Remote Server Administration Tools > Role Administration Tools > , expand Remote Desktop Services Tools, and check the box next to Remote Desktop Licensing Diagnoser Tool. Click Next when done.
  7. In the Select role services page, check the box next to Remote Desktop Session Host, and click Next.
  8. Then click Install. Restart is required.

Windows Roles – Windows Server 2008 R2

If this session host is running Windows 2008 R2, then the instructions are slightly different.

  1. In Server Manager, right-click Roles, and click Add Roles.
  2. In the Before You Begin page, click Next.
  3. In the Select Server Roles page, check the box next to Remote Desktop Services, and click Next.
  4. In the Introduction to Remote Desktop Services page, click Next.
  5. In the Select Role Services page, check the box next to Remote Desktop Session Host, and click Next.
  6. In the Uninstall and Reinstall Applications for Compatibility page, click Next.
  7. In the Specify Authentication Method for Remote Desktop Session Host page, select Do not require Network Level Authentication, and click Next.
  8. In the Specify Licensing Mode page, select Per User, and click Next.
  9. In the Select User Groups Allowed Access to this RD Session Host Server page, click Add. Browse for Authenticated Users (on the local machine), and click Next.
  10. In the Configure Client Experience page, check the boxes for Audio and video playback and Desktop composition. This causes Desktop Experience to be installed. Click Next.
  11. In the Confirm Installation Selections page, click Install.
  12. In the Installation Results page, click Close.
  13. Click Yes when you are prompted to restart now.
  14. Login to the server. Then click Close.

Remote Desktop Licensing Configuration

The only way to configure Remote Desktop Licensing in Windows Server 2012 and newer is using group policy (local group policy or domain group policy). This also works for Windows Server 2008 R2.

  1. For local group policy, run gpedit.msc.
  2. Go to Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Licensing.
  3. Double-click Use the specified Remote Desktop license servers. Change it to Enabled, and enter the names of the Remote Desktop Licensing Servers. Click OK.
  4. Double-click Set the Remote Desktop licensing mode. Change it to Enabled, and select Per User. Click OK.
  5. In Server Manager, open the Tools menu, expand Terminal Services (or Remote Desktop Services), and click RD Licensing Diagnoser.
  6. The Diagnoser should find the license server and indicate the licensing mode. It’s OK if there are no licenses installed on the Remote Desktop License Server.

C: Drive Permissions

The default permissions allow users to store files on the C: drive in places other than their profile.

  1. Open the Properties dialog box for C:\.
  2. On the Security tab, click Advanced.
  3. Highlight the line containing Users with Create Folders permission, and click Remove.
  4. Highlight the line containing Users with Create Files permission, and click Remove.
  5. Click OK to close the Advanced Security Settings window.
  6. Click Yes to confirm the permissions change.
  7. If you see any of these Error Applying Security windows, click Continue.
  8. Click OK to close the C: drive properties.

Installs

Install/Upgrade VMware Horizon Agent

View Agent for RDS Hosted Apps Desktops is missing a few features. (source = 2150305 Feature Support Matrix for Horizon Agent)

  • Only Windows 2016 supports Generic USB Redirection. USB Flash Drives and hard drives are supported on 2012 R2.
  • Serial port redirection is available in Horizon Agent 7.6 and newer
  • No Persona. Instead use VMware Dynamic Environment Manager (Horizon Enterprise only), or Microsoft’s roaming profiles, or Microsoft FSLogix Profile Container.
  • Instant-Clones for RDSH was added in Horizon Agent 7.1.
  • Real-time Audio Video is supported on Windows 2016 RDS Hosts. VMware 2148202 Real-Time Audio-Video limitations for remote desktops and apps on Windows Server 2016.

To install View Agent on Remote Desktop Services, do the following:

  1. See VMware Product Interoperability Matrices for supported versions of VMware Tools with different versions of Horizon Agent.
  2. Windows Server 2019 is supported with Horizon 7.7 and newer.
  3. VMware vSphere 6.7 U1 and VMware vSAN 6.7 Update 1 are supported with Horizon 7.7 and newer.
  4. Download  Horizon 7.10.0 View Agent or Horizon 7.5.2 Agent.

  5. Run the downloaded VMware-Horizon-Agent-x86_64-7.10.0.exe or VMware-viewagent-x86_64-7.5.2.exe.

  6. If you want the URL Content Redirection feature, then you must run the Agent installer with the the following switches: /v URL_FILTERING_ENABLED=1
  7. In the Welcome to the Installation Wizard for VMware Horizon Agent page, click Next.
  8. In the License Agreement page, select I accept the terms, and click Next.

    • In Horizon Agent 7.10 and newer, if RDSH is not installed, then the Horizon Agent installer can install it for you. 💡


    • In older versions, if you see a message about Desktop OS Configuration, then you need to cancel the installer, and install the Remote Desktop Session Host role.
  9. In the Network protocol configuration page, select IPv4, and click Next.
  10. In the Custom Setup page, several features are disabled by default. Feel free to enable them.
    1. USB Redirection is an option.
    2. In Horizon Agent 7.1 and newer, VMware Horizon Instant Clone Agent is an option. You can enable either Instant Clone Agent, or Composer Agent, but not both. Or you can leave both deselected so you can add the machine to a Manual RDS Farm. You can’t add this RDS Host to a Manual RDS Farm unless both options are deselected.
    3. Horizon 7.2 and newer have VMware Virtualization Pack for Skype for Business as an option. See Configure Skype for Business at VMware Docs for details.
    4. Scanner Redirection is an option. Note: Scanner Redirection will impact host density.
    5. In Horizon 7.6 and newer, Serial Port Redirection is an option for RDS. This requires Horizon Client 4.9.
    6. Horizon 7.3 through Horizon 7.9 have HTML5 Multimedia Redirection. In Horizon 7.10, HTML5 Browser Redirection seems to be installed automatically (not an optional component). To enable and configure these features, see HTML5 Redirection in Horizon Group Policy.
    7. Horizon 7.6 and newer have an option for Geolocation Redirection. The feature requires a plugin for Internet Explorer 11 and Horizon Client 4.9. No other browsers are supported. See Configuring Geolocation Redirection at VMware Docs.
    8. Horizon 7.5 and newer have an option for Horizon Performance Tracker, which adds a program to the Agent that can show the user performance of the remote session. You can publish the Tracker.

    9. Horizon 7.7 and newer have a Hybrid Logon option.
    10. Horizon 7.7 and newer have a VMware Integrated Printing or VMware Advanced Printing option, which replaces the older ThinPrint technology. VMware Advanced Printing requires Horizon Client 4.10 or newer.
    11. If you enable VMware Integrated Printing, then you must disable Virtual Printing, which is higher in the list.

  11. Click Next when done making selections.
  12. Click OK to acknowledge the USB redirection message.
  13. If you see the Register with Horizon 7 Connection Server page, enter the name of a Horizon Connection Server, and click Next. You only see this page if you deselected both View Composer Agent and Instant Clone Agent features.
  14. In the Ready to Install the Program page, click Install.
  15. In the Installer Completed page, click Finish.
  16. Click Yes to restart the server.
  17. If you want to know what features were selected during installation, look in HKLM\Software\VMware, Inc.\Installer\Features_HorizonAgent. Or look in the installation log files as detailed at Paul Grevink View Agent, what is installed?

  18. To verify installation of the URL Content Redirection feature, check for the presence of C:\Program Files\VMware\VMware View\Agent\bin\UrlRedirection.
  19. There’s also a new IE add-on.
  20. URL Content Redirection is configured using group policy.

Install/Upgrade Dynamic Environment Manager (DEM) Agent

Dynamic Environment Manager (DEM) is the new name for User Environment Manager (UEM).

If you are licensed for Dynamic Environment Manager (Horizon Enterprise Edition), install the Dynamic Environment Manager Agent.

UEM 9.6 and newer are supported on Windows Server 2019.

To install the DEM Agent:

  1. Make sure Prevent access to registry editing tools is not enabled in any GPO. This setting prevents the FlexEngine from operating properly.
  2. Download Dynamic Environment Manager 9.9.0 or User Environment Manager 9.4.1.

  3. Run the extracted VMware Dynamic Environment Manager 9.9 x64.msi or VMware User Environment Manager 9.4 x64.msi (ESB).

  4. In the Welcome to the VMware Dynamic Environment Manager Setup Wizard page, click Next.
  5. In the End-User License Agreement page, check the box next to I accept the terms, and click Next.
  6. In the Destination Folder page, click Next.
  7. The Choose Setup Type page appears. By default, the installer only installs the engine. You can click Custom or Complete to also install the Management Console.

  8. In the Choose License File page, if installing on a Horizon Agent, then no license file is needed. Click Next.
  9. In the Ready to install VMware Dynamic Environment Manager page, click Install.
  10. In the Completed the VMware Dynamic Environment Manager Setup Wizard page, click Finish.
  11. If you have PCoIP Zero Clients that map USB devices (e.g. USB drives), then you might have to set the following registry value: (Source = VMware 2151440 Smart card SSO fails when you use User Environment Manager with a zero client)
    • HKLM\Software\VMware, Inc.\VMware VDM\Agent\USB
      • UemFlags (DWORD) = 1

Horizon Agent Load Balancing Script

If you have multiple identical Remote Desktop Services Hosts in a single RDS Farm, by default, VMware Horizon uses a least connections Load Balancing algorithm.

In Horizon 7.8 and newer, you can edit Load Balancing rules directly in Horizon Administrator. You cannot yet configure these settings in Horizon Console. For existing RDS Farms, edit the RDS Farm to see the new settings. Or when creating a new RDS Farm a new page asks you for these settings.

In Horizon 7.7 and older, you can change the load balancing algorithm to be performance-based by configuring scripts on each RDS Host. See Configuring Load Balancing for RDS Hosts at VMware Docs.

There are only three levels of load: HIGH, MED, and LOW. Within a load level, Horizon selects an RDS server at random.

Do the following to configure the Load Balancing script:

  1. The script must be placed at C:\Program Files\VMware\VMware View\Agent\scripts on every RDS Host. VMware provided a couple sample scripts that you can use. One script only looks at CPU and the other script only looks at Memory. If you write your own script, make sure it exists in this folder on every RDS Host in the RDS Farm.
  2. Open Services, and configure the VMware Horizon View Script Host service to run automatically.

  3. Then start the service.
  4. In regedit, go to HKLM\Software\VMware, Inc.\VMware VDM\ScriptEvents\RdshLoad.
  5. Create a new String Value. It doesn’t matter what you name it but the script name is recommended.
  6. Modify the String Value and enter cscript.exe “PathToScript”. For example: cscript.exe "C:\Program Files\VMware\VMware View\Agent\scripts\cpuutilisation.vbs"
  7. After setting the registry value, restart the VMware Horizon View Agent service.
  8. After you later add this RDS Host to a RDS Farm in Horizon Administrator, click the Dashboard view.
  9. Expand RDS Farms, expand the farm, and click the RDS Host.
  10. Make sure the Server load is reported.

Antivirus

VMware Tech Paper Antivirus Considerations for VMware Horizon 7: exclusions for Horizon View, App Volumes, User Environment Manager, ThinApp

Install antivirus using your normal procedure. Instructions vary for each Antivirus product.

Microsoft’s virus scanning recommendations (e.g. exclude group policy files) – http://support.microsoft.com/kb/822158.

Symantec

Symantec has a document at Citrix and terminal server best practices for Endpoint Protection detailing best practices when deploying Symantec Endpoint Protection to session hosts.

Virtualization best practices for Endpoint Protection 12.1.2 and later

Virtualization best practices for Endpoint Protection 12.1.1 (RU1) and earlier

Install Applications

Install applications that will be executed on these machines.

VMware Tech Paper Best Practices for Delivering Microsoft Office 365 In VMware Horizon 7 with Published Applications describes how to install Office365 ProPlus Click-to-run with Shared Computer Activation.

VMware OS Optimization Tool

  1. See VMware Windows Operating System Optimization Tool Guide Technical Paper for details on this tool.
  2. Download the VMware OS Optimization Tool VMware fling.
  3. Run the extracted VMwareOSOptimizationTool.exe.
  4. On the Analyze tab, choose a template.
  5. Then click Analyze on the bottom of the window.
  6. On the Analyze tab, review the optimizations, and make changes as desired. Then on the bottom left, click Optimize.
  7. The History tab lets you rollback the optimizations.

Seal and Snapshot

  1. Go to the properties of the C: drive, and run Disk Cleanup.
  2. On the Tools tab, click Optimize to defrag the drive.
  3. Run slmgr.vbs /dlv and make sure it is licensed with KMS and has at least one rearm remaining.
  4. Run Delprof2 to clean up local profiles. Get it from http://helgeklein.com/download/.
  5. Make sure the master session host is configured for DHCP.
  6. Session hosts commonly have DHCP reservations.

  7. Run antivirus sealing tasks:
    1. Symantec: Run a full scan and then run the Virtual Image Exception tool – http://www.symantec.com/business/support/index?page=content&id=TECH173650
    2. Symantec: run the ClientSideClonePrepTool –http://www.symantec.com/business/support/index?page=content&id=HOWTO54706
  8. Base Image Script Framework (BIS-F) automates many image sealing tasks. The script is configurable using Group Policy.
  9. Shutdown the master session host.
  10. Edit the Settings of the master virtual machine, and disconnect the CD-ROM. Make sure no ISO is configured in the virtual machine.
  11. Take a snapshot of the master session host. View Composer and Instant Clone require a snapshot.

  12. Use can now use Horizon View Administrator to create RDS Farms.

Full Clone Post-Cloning Tasks

If you used vCenter to clone the machine instead of using Horizon Composer, then after the machine is cloned, do the following on the cloned machine:

  1. Static IP – Configure a static IP address (or DHCP reservation).
  2. Windows Update – Run Windows Update. SysPrep always disables Windows Update so you must run it at least once to re-enable it.
  3. Join domain – Join the machine to the domain if SysPrep didn’t do it for you.
  4. Active Directory OU – Move the Active Directory computer object to the correct OU.
  5. Horizon Agent – uninstall the Horizon Agent and reinstall it so it registers with a Horizon Connection Server.
  6. Antivirus – Re-configure antivirus. Instructions vary based for each product. Go to the antivirus vendor’s website and search for a cloning procedure.
  7. Firewall rules – Add the new machine to any firewall rules (PCoIP, Blast) between the Horizon Security Server and Horizon Agents.
  8. View Administrator – In View Administrator, add the new machine to a Remote Desktop Services farm.

Related Pages

47 thoughts on “VMware Horizon 7.10 – Master RDS Host”

  1. i pointed the primary connection server during installation of horizon agent and i also have connction server replica. What if the connection server primary goes does down? How will horizon agent communicate to the connection server replica?

      1. No. Im talking about during installation of horizont agent you will ask to input the server name or ip address of the connection server. So if i input the ip address of the primary connection server. What if primary goes down? How will my horizon agent agent will able to communicate to primary? Is my desktop or remote app able to access using connection server replica?

        1. Instead of entering the primary connection server, you enter a FQDN that resolves to a load balancing VIP that load balances the multiple Connection Servers. The load balancer can detect outages of your Connection Servers and stop sending traffic to the failed server.

          1. i currently testing horizon. i have connection server primary and replica. i turn off the connection server primary and i cant access my application of my connection server replica? i thought replica will handle all the session?

          2. Yes, as long as the Horizon Client is pointing to a Connection Server that is still up, it will work. Technically after installation, all Connection Servers are the same.

      2. I thought if my primary is down i will still be able to access published apps and desktop using connection server replica, regardless of what connrction server ip address i input during installation of horizon agent.

        1. Correct. But Horizon Client usually only points to a single DNS name. If that DNS name is only one server, then it won’t fail over automatically. That’s where load balancers come in.

  2. Hi Carl. When installing the Horizion agent, does not “Vmware Horizion View Composer” or “VMware Horizon Instant Clone” options. The ‘register with connection server’ screen does not appear. Whay?
    Windows Server 2016.

    1. If you select Composer or Instant Clone, then there’s no need to register with connection server because Horizon Administrator will push the Connection Server address to the linked clones automatically. If you’re not doing Composer or Instant Clone, then you need to enter the address of a Connection Server so Horizon Agent knows what to connect to.

          1. Thanks for the answers. It turned out that the server was deployed on Hiper-V. After the transfer of the server to vShare everything worked.

  3. Carl,

    Thank you, for this information.
    my question is : if i have 10 RDS servers , in Microsoft configuration i should have brokers server who control the communication between client and servers , when we use this with Horizon for publish apps , who will play the role of broker server,
    should i configure my servers as Microsoft configuration, broker and servers. ?
    Or horizon connection server will play the role brokers for the farm pool of servers . ?

    Thank

  4. Hi Carl,

    I test a Linux thin client with Windows Server RDS (Agent 7.8). In Blast session and Windows Server 2008 R2, the session only last for a very short period (1-2 seconds) and then withdraw from the session.

    In Blast session and Windows Server 2012 R2, the session work normally.
    In PCoIP session and Windows Server 2008 R2 (or 2012 R2), the session work normally.

    I’ve also tested Horizon Client for Windows. All session (PCoIP or Blast, same connection server, Windows Server 2008R2 or Windows Server 2012R2 desktp/app) work normally.

    I’ve performed full Windows updates on Windows Server 2008R2, but the problem remains the same. Also, this problem only happen in ESXi 6.7 + Agent 7.8 combinations:

    – ESXi 6.0 + Agent 7.8 -> Result: Pass
    – ESXi 6.7 + Agent 7.7 -> Result: Pass
    – ESXi 6.7 + Agent 7.8 -> Result: Fail

    Any idea where might go wrong?

    Thanks,
    Owen

    1. I am experiencing the exact same thing as you Owen. Did you or anyone else find a solution to this?

      Currently we are running ESXi 6.7 + Agent 7.10. When launching an app that’s hosted on a Server 2008 machine, the user session logs in for about 1-3 seconds, much like you saw and then the session disconnects.

      It doesn’t do it for all users which is weird. I was able to log in using a Windows 10 Horizon client and on HTML access but on mac horizon client, it fails. Other users varies.

      Any suggestions?

  5. Hi Carl. I congratulate you for your blog. It’s done really well and has helped me a lot for the realization of my infrastructure. I have a farm with 6 physical RDS servers and 2 brockers in cluster. Everything works perfectly. I recently followed your guide to create an automatic farm with view composers and it also seems to work fine. The rsd servers are cloned, joined to domain and viewed from the horizon as functioning. When I try to deploy a new app on this new farm, a strange thing happens. Not all applications appear from the list of installed applications. If I choose one from the list I can complete the wizard but then I get the “Fail to get information.” Error. Do you have any suggestions? Thanks in advance.

  6. Cannot thank you enough for the time and effort you’ve put into helping the virtualization janitors of the world. Recently, I stood up a new pool using RDSH and everything went exactly according to the information you presented above. EXCEPT that I couldn’t get usb scanners to redirect. The view horizon client indicates that the usb scanner link is passed through, but the scanner never appears to the RDSH session. Ran an SR w/ vmware, the engineer informed me that scanner redirect isn’t supported with RDSH. If that is the reality, I have to start from scratch. Is this the reality?

  7. Hey Carl,
    My biggest complaint about RDS instant clone farms is that you cannot see the status of an image maintenance operation. You get a very generic “Publishing” status on the summary page of the farm, but you cannot see the pending image on each RDS host, and you cannot tell for certain that the host has been replaced by the new image.

    Do you know any way to get a better status on RDS farms for instant clone operations? Often we find that the summary page for the farm will update saying that the operation has been completed, but it becomes obvious that it just timed out for some hosts where users were logged in for too long.

    It would be nice if it looked the same as the Desktop Pools for instant clones.

  8. Hi Carl,
    I have followed the steps & published the app & HSD.
    Able to launch application successfully. But Desktop not launching

    Error
    “Client is not allowed to user this desktop. Please contact your system administrator”

  9. Hi Carl,

    First off, thanks a bunch for your website!

    I have multiple RDS servers for my application pool. Is it possible for a user to always get the same RDS server or always get a specific application on a specific RDS server? I have one difficult user who wants to be able to access their frequently accessed files in MS Access from the drop down list.

    Thanks.

  10. Hi Carl, I have a weird issue. Can’t find answer anywhere. I have a 7.5 Horizon environment with 2 Microsoft RDSH 2012 R2 Servers. I have published many RDP connections because my workplace has need for remote users to get back into their physical desktops. Also, have published certain applications. What sometimes happens, users land on the RDSH server itself instead of the application launching for them. I opened a case with VMware and they told me their is a known bug with server 2012 R2 and they recommend going to 2016.

    I will have to plan and schedule that but have you run into instances where unity does not seem to work and users log into an RDSH server instead of their application launching? Thanks much in advance. Rgds,

  11. Hi Carl,

    Many thanks for the he great post. My questions, can i create multiple RDS hosts with similar applications and settings and add the same connection server for all of them and create one application pool.

    please reply in brief what i need to do to achieve this?

    BR

    Adil

  12. hello,

    i was wondering if anyone has tested MS project on an RDS host and could successfully open files from the local disk on a Mac. or if anyone can test it.
    I just run into this weird one.

    thanks
    ioannis

  13. Carl,
    have to say first thanks for this blog, you have saved me many times.
    I have had RDSH working for a long time, when i update the agent from 7.2. to 7.3 all of my RDSH machines come up with configuration error after the image push. If i snap back to 7.2 and rebuild everything works.
    Any ideas?

    Thanks

  14. Hi Carl – had a question about recomposing these RDS hosts after adding a few more applications and updates. I see there is a warning because it will get a new SID is there any issues you forsee with this? I can only think if an app was tied to a SID but I don’t have anything like this as far as I know.

    1. Linked clones usually share the same local machine SID. Domain SIDs are different for each machine account. I don’t think pool creation or recompose changes the SID unless SysPrep is used. QuickPrep and Instant Clone shouldn’t affect SIDs.

  15. in Remote Desktop Licensing Configuration section, under point 3, you have added the license servers to use. Can you please explain those license servers? Did u configure them previously or are they just some names that you have used?

  16. Hi Carl – thanks for the great guide. Quick question. When installing the Horizion agent, I find that if I choose either of the “Vmware Horizion View Composer” or “VMware Horizon Instant Clone” options, the ‘register with connection server’ screen does not appear. If I go back and remove either of those choices and click next, the registration window appears again.

    I’ve been having trouble getting Horizon to deploy Automated RDSH hosts. It seems to create the parent but them bombs with the following error. I’ve tried deploying using both the Instant Clone and Composer options in the Agent (though obviously not simultaneously) with no luck.

      1. Same issue here, seen in 7.0.x as well as with 7.3.1 now – “When installing the Horizion agent, I find that if I choose either of the “Vmware Horizion View Composer” or “VMware Horizon Instant Clone” options, the ‘register with connection server’ screen does not appear. If I go back and remove either of those choices and click next, the registration window appears again.”
        Scratching my head currently if this a classic Layer 8 or something else?

        1. That’s expected. With Composer or Instant Clone, Connection Server will push the VCS address to the Agent. Without Composer or Instant Clone, you must manually enter the VCS address.

          1. Thanks Carl! Didnt find this information in the docs. Confusing stuff. If you do choose one of those 2 options, you cannot use this RDSH host for a manual farm though, as it wont show up as a registered RDSH host. Spooky stuff 🙂

  17. i have a problem when i tried to deploy RDS Farm, my RDS server is 2012R2 standard. After i installed RDS, it worked fine and can access RDS server from external as well. However, when i installed the Hoziron Agent to connect to Horizon Connection Server, my RDS server is not able to remote desktop from external, all application which i published also can’t launch from external ( either internet or local but network from other subnet). From local and same subnet, everything still works fine, no firewall block ( i tried to filter from my checkpoint but can’t find any useful log).

    1. You’re trying to do a direct RDP connection instead of using Horizon Client to use PCoIP, Blast, or RDP?

      1. Thanks, i solved the issue in local. Due to the horizon client will disable your tls1.0 and win 7 and win 2008r2 only support 1.0 if you haven’t installed the kb. However, from internet, I already nat port 443, 80 and 4172(udp and tcp) but when i used client to connect from internet, only port 443 and 80 was seen on firewall, can’t see 4172

  18. Carl,
    Great blog btw. It has been a lifesaver on many excursions. I am having an issue with the IE Enhanced Security Configuration setting not taking effect for users (non-administrators). I’m using Windows Server 2012 R2 Standard. I turned IE ESC “off” as you describe using Server Manager for both admins and users. When I log in as a regular user, the IE ESC is still enabled. Am I missing something?

Leave a Reply to Gianluca Cancel reply