Problem:
How to enable ProfileDisk with Secondary Logon Disabled
Resolution
Prerequisites –
- Recommend creating a dedicated share for ProfileDisks
- Grant "Domain Computers" group create/read/modify on the share/folder that will contain the ProfileDisk VHDX files.
- Recommend creating an AD group for assigning users to ProfileDisk
ProfileUnity Server
- Download the latest client-tools.zip from this KB ProfileUnity Hot-fix List – Liquidware Customer Support (zendesk.com)
- On the server running ProfileUnity Console, navigate to C:\Program Files (x86)\Liquidware Labs\ProfileUnity and replace the client-tools.zip with the one download in step 1.
- On the ProfileUnity console, go to the Administration page and Deploy the client tools. Be sure to select the check box to overwrite the existing files.
- On the ProfileUnity console, go to the Administration page and navigate to "Add ProfileDisk Group" and set the following:
- Active Directory Groups
- Storage Type
- Virtual Disk Path (ie. \\server\share\ProfileDisk\%username%.vhdx)
- Size in GB
- Disk Type
- Save Assignments
- Click Update
- Ensure that the Communication Type to Broker Messages is set to “VHDX ProfileDisk”, click Update if changed.
- Click “Download or Deploy Client Settings”. Make sure the clientsettings.xml file is updated on the network share.
Master Image
- Add a new reg DWORD value named "pdusecomputerperms" set to 1 in HKLM\Software\Liquidware Labs\ProfileUnity
- Run Lwl.ProfileUntity.Client.Startup.exe on the master image (make sure downloaded ClientSettings.xml resides there. unless path is otherwise specified via GPO). This will update the ProfileDisk path which can be verified in the C:\Program Files\ProfileUnity\FlexAppLwlLogonNotifier.exe.config file.
Product: ProfileUnity-FlexApp
Product Version: 6.8.4 >