The following steps will provide instructions on the configuration of the computer GPOs needed to enable UEM:
- Create and link a GPO object to the Horizon - Computers OU. In the example provided, we will name the GPO UEM_Computers.
- While logged in as a user who has privileges to create and edit GPOs in the AD domain, open the AD GPMC.
The policy we create here would need to be applied to all UEM client computers.
- Edit the UEM_Computers GPO object, and navigate to Computer Configuration | Policies | Windows Settings | Scripts | Logon/Logoff, as shown in the following screenshot:
- Double-click on Logoff to open the Logoff Properties window, and then click Add... to open the Add a Script window.
- In the Add a Script window Script Name: field, type the full path to the FlexEngine.exe executable and, in the Script Parameters field, type -s as shown in the following screenshot. Click OK when finished, and OK again to close the Logoff Properties window:
You may run the FlexEngine.exe -s command at logoff using other techniques if you wish; this isn't your only option for doing so.
- Navigate to Computer Configuration | Policies | Administrative Templates | System-Logon.
- Edit the Always wait for the network at computer startup and logon policy, and click the Enabled radio button, as shown in the following screenshot. Click OK when finished:
The UEM computer GPOs have now been created and, assuming the previous steps were completed successfully, UEM will now be activated within the client computers. In the next section, we will redirect some of the user profile directories.