I am looking for a script that will automatically add VM to pool when number of vms are less than the users entitled to pool.
Currently users are entitled thru a security group. Admins don't know if enough VMS are available in pool unless we manually go and check the pool size and free vms available.
We provision VM's in advance and not on demand as it usually takes 15 to 20 mins to provision a vm.
Visan.
Thanks Magneet and TechGuy129
I'm a little hesitant to change the permissions on the registry entry only because I want to easily be able to turn the service back on in the master image when I want to install updates on my terms (but if I have to I'll take that route!).
I checked today and unfortunately the service started up again on the master image and on the clone. Here is the list of scheduled tasks I disabled in the master image without luck (the list comes from the VMware Optimization Tool)
schtasks /Change /TN "\Microsoft\Windows\Defrag\ScheduledDefrag" /Disable
schtasks /Change /TN "\Microsoft\Windows\AppID\SmartScreenSpecific" /Disable
schtasks /Change /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable
schtasks /Change /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable
schtasks /Change /TN "\Microsoft\Windows\Application Experience\StartupAppTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Autochk\Proxy" /Disable
schtasks /Change /TN "\Microsoft\Windows\Bluetooth\UninstallDeviceTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Chkdsk\ProactiveScan" /Disable
schtasks /Change /TN "\Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable
schtasks /Change /TN "\Microsoft\Windows\Diagnosis\Scheduled" /Disable
schtasks /Change /TN "\Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable
schtasks /Change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable
schtasks /Change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" /Disable
schtasks /Change /TN "\Microsoft\Windows\Feedback\Siuf\DmClient" /Disable
schtasks /Change /TN "\Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable
schtasks /Change /TN "\Microsoft\Windows\Location\Notifications" /Disable
schtasks /Change /TN "\Microsoft\Windows\Maintenance\WinSAT" /Disable
schtasks /Change /TN "\Microsoft\Windows\Maps\MapsToastTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Maps\MapsUpdateTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /Disable
schtasks /Change /TN "\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /Disable
schtasks /Change /TN "\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable
schtasks /Change /TN "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable
schtasks /Change /TN "\Microsoft\Windows\RAS\MobilityManager" /Disable
schtasks /Change /TN "\Microsoft\Windows\Registry\RegIdleBackup" /Disable
schtasks /Change /TN "\Microsoft\Windows\Servicing\StartComponentCleanup" /Disable
schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable
schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyRefreshTask" /Disable
schtasks /Change /TN "\Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable
schtasks /Change /TN "\Microsoft\Windows\SystemRestore\SR" /Disable
schtasks /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
schtasks /Change /TN "\Microsoft\Windows\UPnP\UPnPHostConfig" /Disable
schtasks /Change /TN "\Microsoft\Windows\WDI\ResolutionHost" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Filtering Platform\BfeonServiceStartTypeChange" /Disable
schtasks /Change /TN "\Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable
schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Management" /Disable
schtasks /Change /TN "\Microsoft\Windows\WOF\WIM-Hash-Validation" /Disable
There are 4 scheduled tasks having to do with Windows Updates that are not listed above, I am going to add them to my lists of scheduled tasks to disable and see how I make out.
They are....
\Microsoft\Windows\WindowsUpdate\Automatic App Update
\Microsoft\Windows\WindowsUpdate\Scheduled Start
\Microsoft\Windows\WindowsUpdate\sih
\Microsoft\Windows\WindowsUpdate\sihboot
I would think a ton of other people are dealing with this, no?!?!?!
Thanks!
Sadly, at the moment, HTML5 MMR seems broken. Linking to my thread: HTML5 Multimedia Redirection feature doesn't work when Chrome is installed on App Volumes writable volume
What you're seeing is the workings of KB4023057 patch. In Microsoft's infinite wisdom, they decided to push out an update that has a process running on the background which will attempt to find and, well, "fix" any issues that will cause Windows Update to not work. In all fairness, that's probably in their best interest and would probably allow regular user's desktops to receive updates normally, except it wasn't supposed to be pushed out to the LTSB build, but it did anyway. And obviously, this isn't going to work out if you have non-persistent desktops and disabled Windows Update service for a reason.
You can find the KB4023057 from the Control Panel -> Add/Remove programs (don't use the app & features list on the settings app) and uninstall it. Then, ensure the scheduled tasks listed in one of the replies are all disabled. Namely, you want to disable the ones listed under Microsoft\Windows\UpdateOrchestrator and Microsoft\Windows\Windows Update.
You can then use the wushowhide diagnostic tool to hide that update (https://support.microsoft.com/en-us/help/3073930/how-to-temporarily-prevent-a-driver-update-from-reinstalling-in-window) so you can prevent it from being installed. Just bear in mind that Windows Update service and Windows Modular Installer service has to be enabled and running before running the wushowhide tool. Also, Microsoft often pushes out a new version of the KB4023057 patch occasionally, so you probably want to run the wushowhide tool every time you need to update the image with the new Windows patches. I may also add that there has been reports that even with Windows Update service disabled, the patch can get pushed out and get installed, so you may want to check your list of installed patches from Add/Remove Programs too.
Thanks ,
I'll look into this ;-)
Hi solgaeDK,
I actually do not see KB4023057 installed. We are running "Windows 10 Enterprise 2016 LTSB" The ISO we installed from is named "SW_DVD5_WIN10_ENT_LTSB_2016_64BIT_English_MLF_X21-07421.ISO".
I only see these Windows Updates listed under control panel -> Programs & Features -> View Installed Updates
I don't have a script to offer but instead a suggestion if you get one. I'd add some type of verification to the process before increasing the pool size. Just in case someone mistakenly adds a large amount of users to a AD group that could overwhelm your cluster and impact the performance of your users.
you may be on to something there sjesse, I do not have any options in customization specification to select.
Thanks, I will try and figure out where I can create these customizations and see if it helps.
The patch, if installed, is listed as part of the regular app list under Programs and Features, instead of being listed the "view installed updates" list as you would expect. Go figure why.
I believe it's usually named as: Update for Windows 10 (KB4023057).
Good advice BenFB
My script takes this into account and has a $threshold variable to set the limit of new machines that can be created.
So I couldn't find a way to do this via the Horizon API so we'll do it old school. I wrote a script that does what you need.
You'll need to run this from a server that has RSAT installed with the PowerShell AD modules. It creates an implicit connection to the View Server and imports the commands necessary to run.
https://get-cj.com/2018/04/02/auto-add-machines-to-vmware-horizon-pool-based-on-entitled-users/
The variables you need to change are at the top. $viewserver, $pooldisplayname, $machinebuffer, and $threshold. Here's the top section for reference.
#Change these settings to match your environment ###########################################################
$viewserver="NAME_OF_SERVER"
$poolDisplayName='DISPLAY_NAME_OF_POOL'
#Buffer number of machines to increase pool by. Change this based on your estimated needs.
#The script will increase the max number of machines by (Total Amount of entitled users - The difference of Total Machines in pool) + $machineBuffer
#So if the total amount of machines is 3 and the total number of entitled users is 5. We need 2 machines right? So the script will add 2 machines + $machineBuffer.
$machineBuffer=1
#If totla machines to add is greater or equal to 50 don't do it. This is a precautionary measure in case someone adds too many users to the entitled AD group.
$threshold=50
############################################################################################################
Hi ArnoM, thank you for your answer! I will follow the migration scenario. And I would like to ask for one question yet. Because we didn't note the sqlpassword for user (fault), can I change the password in sql studio and than to change on composer server in ODBC connection without any corruption or interruption of real traffic?
Thank you!
so embarrassing, it was right in front of me where you said it is!
I'll work to remove it, block it, then reply with my results.
Thanks!
I will try your script. It seems to do what I am looking for. Is it possible to include below conditions in the script:
1. I have around 18 full and linked clone pools. I like to query all the pools at same time once in a day and expand pool size if their are no VMS available.
2. In addition to entitling the pool to the AD groups their are some pools that have individual users entitled to it.
How can we modify script to include these 2 conditions?
Visan.
You basically installing a new composer service and pointing to the database, so resetting the dsn user password shouldn't be problem. This is from what was previously was shared.
Install the VMware Horizon View Composer service on the new machine.
During the installation, specify the DSN of the database that was used by the original VMware Horizon View Composer service. Also specify the domain administrator user name and password that were provided for the ODBC data source for that database.
If you migrated the database, the DSN and data source information must point to the new location of the database. Whether or not you migrated the database, the new VMware Horizon View Composer service must have access to the original database information about the linked clones.
Just an update, I uninstalled KB4023057 and rebooted the parent image then downloaded wushowhide to try and hide KB4023057 from future updates but the tool wouldn't list KB4023057 as available. I'll leave the master image up and see if a.) the Windows Update service gets re-enabled and if it does, b.) I'll run wushowhide periodically to see if KB4023057 appears in the list for me to hide.
Fingers crossed.
we are still facing this issues even though I have enabled "Reuse of existing computer account" in the pool settings. Any thoughts to have permanent fixes.
I think that's what we're going to do tomorrow, review the iApp. One line that keeps sticking out to me, that may or may not be the issue, is this one, found on page 21 of the PDF:
In the Virtual Servers and Pools section, complete the following. a. Type the IP address for the virtual server. b. Type the FQDN to which external clients will connect with the Horizon Client.
Item B. in particular. Right now our F5 admin has the DC2 LTM FQDN in there for the DC2 iApp, instead of the GTM. The users will actually use the GTM to connect, but, I guess he went with the LTM FQDN upon creation. He did the same on the DC1 iApp. For that entry, he has the DC1 LTM FQDN, instead of the GTM. I can see where he's going with that thought process, but, might have him switch to the GTM and test.
before you shutdown on the parent run ipconfig /flushdns and ipconfig /release. I saw the same thing with windows 7 desktops
I do ipconfig/release always but didn't do the ipconfig /flushdns will try this and update you.
