Overview
The Base Image must be properly configured before deploying a desktop pool. This document contains the steps that must be completed to ensure it is set up correctly and in accordance with vendor best practices.
Delegate Active Directory Permissions
Horizon View requires Active Directory (AD) permissions to an Organizational Unit (OU) in order to perform essential functions. These permissions must be delegated to the service account vdi-computerjoiner on your group's OU:
- Create an OU where the desktops will be stored in the Active Directory Users and Computers console (or choose an existing one)
- Right-click the OU folder and select Properties
- Click the Security tab and click Add
- Enter vdi-computerjoiner, click Check Names, and click OK
- Click Advanced, select vdi-computerjoiner, and click Edit
- Select the following permissions:
- List Contents
- Read All Properties
- Write All Properties
- Read Permissions
- Reset Password
- Create Computer Objects
- Delete Computer Objects
- You will be prompted to click OK three times. Click OK each time.
Install the Operating System (for Blank Images ONLY)
- Follow steps in Accessing vCenter to Manage Base Images
- Click the base image, and then click the Summary tab
- Click Launch Remote Console and power on the VM
- Click the VMRC menu > Removable Devices > CD/DVD drive 1 > Connect to Disk Image File (ISO), load the ISO
- Issue a CTRL + ALT + DEL on the VMRC console to restart the VM and boot to the ISO to load the OS
Log in to the Base Image and Change Admin Password (for MiDesktop-Provided Images)
- MiDesktop will provide a local admin password for the base image
- Follow steps in Accessing vCenter to Manage Base Images
- Click the base image, and then click Summary tab
- Click Launch Remote Console and power on the VM
- Select Send Ctrl+Alt+Del from the VMRC drop-down list
- Log in as admin (you will be prompted to change the password)
Change the Computer Name (Optional)
Warning: Do not change the name of the computer and add the computer to the domain at the same time. Instead, change the name and then reboot the computer before joining the machine to the domain.
- Log in to the base image as admin
- Open System Settings and click the Computer Name tab, and click Change
- Enter the name you would like for the computer, click Change to rename it, and click OK
- Click OK on the restart warning box and click Close on the Systems Properties box
- Click Restart Now to restart the computer
Join the Computer to the Domain (Optional)
- Log in to the base image as admin
- Open System Settings and click the Computer Name tab, and click Change
- Select Domain under Member of
- Enter adsroot.itcs.umich.edu and click OK
- Enter credentials and click OK
Note: Only accounts with the appropriate permissions in Active Directory can join machines to the domain. - Click OK in the welcome to the domain box
- Click OK, click Close, and then click Restart Now
Grant Remote Desktop Access
Add the mcomm-admingroup to the Local Administrators group to allow RDP access to the base image.
- Open Computer Management
- Expand Local Users and Groups, click Groups, and double-click Administrators
- Click Add, enter <mcomm group>, click Check Names
- You will be prompted to click OK twice. Click OK each time.
Important: For desktop pools to function properly, the following items must be installed in the order listed below.
Install VMWare Tools
Note: Skip this section if the base image already has the current version of VMware Tools installed.
- Follow steps in Accessing vCenter to Manage Base Images
- Power on the base image
- Once the base image is powered on, click the Summary tab and click Upgrade VMWare Tools on the yellow banner
- Select Automatic Upgrade to install the default options
- The base image will restart automatically upon completion. To check the status:
- Click the Monitor tab on the base image
- Click Tasks under Tasks and Events
- Check the task Initiated VMware Tools install or upgrade
Install the OS Optimizer
- Log in to the base image as admin.
- Navigate to the MiDesktop Downloads folder and download the file VMware OS Optimization Tool.
- Double-click the tool to run it.
- Click Yes, click Analyze, and then click Optimize.
Install the View Agent
- Verify the base image is joined to the domain.
- Log in to the base image as admin.
- Navigate to the MiDesktop Downloads folder and download the latest version of the View Agent.
- Install the View Agent, accept all defaults.
- Restart the base image.
Install the NVIDIA GPU Driver (for GPU Base Images ONLY)
- Log in to the base image as admin.
- Navigate to MiDesktop Downloads and download the entire NVIDIA folder. The folder contains the NVIDIA vGPU driver file, client token file, and license query batch file.
- Run the NVIDIA vGPU Driver .exe file - accept all defaults then restart the machine.
Note: After the installation, the base image will not be accessible using the Launch Remote Console within the vCenter since it will result in a black screen. Use Remote Desktop Connection instead.
- Configure NVIDIA license:
- RDP and log in to the base image.
- Copy client_configuration_token_07-21-2022-16-11-57.tok to %SystemDrive%\Program Files\NVIDIA Corporation\vGPU Licensing\ClientConfigToken folder in your base image
- Open the Services app and restart the NVIDIA Display Container LS service
- Run LicenseQuery.bat. This queries whether the desktop has acquired an NVIDIA license. Verify License Status is Licensed
Install the Crowdstrike agent
- Verify your group has a unique Crowdstrike Customer ID. If not, please see CrowdStrike Falcon for Units for more information before continuing.
- Log in to the base image as admin
- Download the Crowdstrike installer from MiDesktop Downloads onto the base image, or copy it there
- Open an elevated command prompt and navigate to the installer directory
- Run
WindowsSensor-installer.exe /install CID='your customer ID' VDI=1
Release IP
- Log in to the base image as admin.
- Open a command prompt using Run as administrator.
- Type ipconfig /release.
- Shut down the machine.
Take a Snapshot
Once the base image is configured, take a snapshot for use later in the new VDI pool creation process to create the virtual desktops.
- Follow steps in Accessing vCenter to Manage Base Images
- Shut down the base image
- Click the Snapshots tab, click Take Snapshot.
- Name the snapshot, enter a description, and click Create.
Note: Remember the snapshot name. This is used to create the desktop machine pool later.