After you create a User Environment Manager GPO, you must configure its settings. These settings are required to configure the location of the User Environment Manager configuration and profile archives shares, and configure FlexEngine to start automatically during login.

You must at least configure the following settings:

Flex configuration files.

Profile archives.

Run FlexEngine as Group Policy Extension.

If you do not configure Run FlexEngine as Group Policy Extension, you must configure FlexEngine to run using a logon script. See Configure FlexEngine to Run from a Logon Script.

The rest of the User Environment Manager GPO settings are optional and enabling them depends on your infrastructure and requirements.


Many of the FlexEngine settings that you configure through a GPO can be overridden by command-line arguments. Command-line arguments have higher priority than GPO settings. See FlexEngine Command-Line Arguments.


To configure User Environment Manager, you must edit the settings of the User Environment Manager GPO that you created. Open the settings of the GPO from the Group Policy Management Editor. The User Environment Manager GPO configures FlexEngine with the correct User Environment Manager share locations and is therefore a required step.


You configure the location of the central share that stores the Flex configuration files in the Flex config files setting. Flex configuration files contain User Environment Manager data that FlexEngine uses to read and store user settings. FlexEngine runs with the user's credentials, and processes each Flex configuration file for which the user has NTFS read access.


You can enable FlexEngine to run automatically during logon by running as a Group Policy client-side extension.


You can configure the location and file name of the FlexEngine log file, the level of logging detail, and the maximum size of the log file.


Configure the location of the profile archives share from where FlexEngine reads and stores user profile archives and other settings that are related to the profile archives.


Use the Profile Archive Backups setting to configure the location where FlexEngine stores the backups of profile archives.


You can enable Application blocking logging to the Windows event log to have the details on blocked application launches logged to the Windows event log.


You can enable the use of personal certificates in a mandatory profile. In addition to enabling this support, you also must create a Flex configuration file with the Personal Certificates Windows Common Setting.


You can configure advanced DirectFlex settings for more fine-grained control over DirectFlex export settings and visual feedback.


Use FlexEngine logging to the Windows Event Log to configure the events that FlexEngine logs to the Windows event log. When this setting is enabled, FlexEngine logs informational messages to the event log indicating the start and finish of path-based import and export actions.


You can configure Paths Unavailable at Logon to determine the behavior if the Flex configuration files path or profile archives path is unavailable at login.


Use FlexEngine Refresh Settings when you run FlexEngine from a logon script. When you run FlexEngine as Group Policy extension, this setting is ignored.


You can control whether users have access to VMware User Environment Manager Self-Support.


You can configure Show VMware UEM logon and logoff progress information to show a splash screen with progress bar when FlexEngine runs.


Use the Silo-Specific Flex Config Files setting to specify an additional, silo-specific path with Flex configuration files that is processed in addition to the ones configured through the Flex config files setting.