How to convert a Microsoft VHD to a VMware VMK?

Sometime, you have a Virtual Machine in a Microsoft VHD format and you would like to use it with your VMware Workstation application. So this little guide will explain how to perform this operation.



Step 1


Create a working folder on one of your computer drive and paste your VHD file into it.

Step 2


For the conversion, VMware Converter needs a VMC file. A VMC is the configuration file of the Microsoft Virtual Machine, it’s in this file that you the all the settings of the VM.

So, download the VMC file that is available here (, rename the extension to .vmc and paste it to your working folder:

Open it with notepad and edit the path to your VHD file like below:

Step 3


Start VMware Converter 4 standalone

Click on Convert Machine:

  • Select source type : Backup image or third-party virtual machine
  • Virtual machine file : The path to your VHD file

Click on Next and choose the following parameters:

  • Select destination type : VMware Workstation or other VMware virtual machine
  • Select VMware product : VMware Workstation 7.0.x

Click on Next and choose the following parameters:
Adapt the parameters to your need, but be sure that Install VMware Tools is set to YES

Click on Next and review all the information:

Click on Finish and wait the end of the process:

After a few minutes, the process is complete:

Go to your working folder, enter in the new created folder and double click on the .vmx file.

VMware workstation will now start:

Review your Virtual Machine configuration and start your new VM:

After you’re first Log on, Windows will install the drivers related to VMware Workstation, so let the process continue and restart you virtual machine when it’s done:

When all the drivers have been installed and you virtual machine restarted, you will have to reactive your copy of Windows:

When the activation process ended, you could now enjoy your virtual machine with VMware Workstation:



Post Configuring Folder Redirection in Windows Server 2008

Folder redirection can be used to redirect certain special folders on the end user’s desktop to server shares. Special folders such as the My Documents or Documents, which is the default folder for users to store and access their data, can be redirected to server shares.

The following are some basic rule-of-thumb guidelines when using this Group Policy extension:

1) Allow the system to create the folders: If the folders are created by the administrator, they will not have the correct permissions. But properly configuring the share and NTFS permissions on the server share is essential in providing a functional folder redirection experience.

2) Enable client-side caching or offline file synchronization: This is important for users with portable computers but is not the desired configuration for folder redirection on Terminal Servers. Furthermore, when storing data on end-user workstations, it is not desired or might violate regulatory and/or security requirements.

3) Use fully qualified (UNC) paths or DFS paths for server share locations: For example, use \\\UserProfiles or \\\UserProfiles\ if DFS shares are deployed.

Before folder redirection can be expected to work, share and NTFS (New Technology File System) permissions must be configured appropriately.

For folder redirection to work properly, configure the NTFS as follows:

1) Configure the folder to not inherit permissions and remove all existing permissions.
2) Add the file server’s local Administrators group with Full Control of This Folder, Subfolders, and Files.
3) Add the Domain Admins domain security group with Full Control of This Folder, Subfolders, and Files.
4) Add the System account with Full Control of This Folder, Subfolders, and Files.
5) Add the Creator/Owner with Full Control of Subfolders and Files.
6) Add the Authenticated Users group with both List Folder/Read Data and Create Folders/Append Data – This Folder Only rights. The Authenticated Users group can be replaced with the desired group, but do not choose the Everyone group as a best practice.

The share permissions of the folder can be configured to grant administrators Full Control and authenticated users Change permissions.

To redirect the Documents folder to a network share, follow the steps given below:

1. Log on to a designated Windows Server 2008 administrative server.
2. Click Start and then All Programs and then Administrative Tools and then select Group Policy Management.
3. Add the necessary domains to the GPMC as required.
4. Expand the Domains node to reveal the Group Policy Objects container.
5. Create a new GPO called UserFolderRedirectGPO and open it for editing.
6. After the UserFolderRedirectGPO is opened for editing in the Group Policy Management Editor, expand the User Configuration node, expand Policies, expand Windows Settings, and select the Folder Redirection node to display the user profile folders that are available for redirection. If Windows 2000, Windows XP, or Windows Server 2003 profiles require folder redirection, configuring even the Documents folder will require additional testing and might not function correctly. For these operating systems, create a folder redirection GPO using the Windows Server 2003 GPMC.
7. In the Settings pane, right-click the Document folder and select Properties.
8. On the Target tab, click the Setting drop-down list arrow, and select Basic – Redirect Everyone’s Folder to the Same Location, which reveals additional options. There is another option to configure folder redirection to different locations based on group membership, but for this example, select the basic redirection option.
9. In the Target Folder Location section, there are several options to choose from and should be reviewed for functionality; for this example, select Create a Folder for Each User Under the Root Path. This is very important if multiple folders will be redirected; more details are explained in the following steps.
10. In Root Path field, type in the server and share name, for example \\Server\UserProfiles. Notice how the end-user name and Document folder will be created below the root share folder. This requires that the end users have at least Change rights on the share permissions and they must also have the Create Folder and Create File NTFS permissions on the root folder that is shared.
11. At the top of the page, select the Settings tab and uncheck the Grant the User Exclusive Rights to Documents check box. Leave the remaining check boxes unchanged.
12. Click OK to complete the folder redirection configuration. A pop-up opens that states that this policy will not display the Folder Redirection node if an administrator or user attempts to configure or view this group policy using policy management tools from Windows 2000, Windows XP, or Windows Server 2003. Click Yes to accept this warning and configure the folder redirection.
13. Back in the Group Policy Management Editor window, close the GPO.
14. In the GPMC, link the new UserFolderRedirectGPO policy to an OU with a user account that can be used to test this policy. This user must log on to a Windows Vista computer to allow proper processing of this policy.
15. Log on to a Windows Vista system with the test user account. After the profile completes loading, click the Start button, and locate and right-click the Documents folder and then select Properties. Select the Location tab and verify the path. For example, for a user named XYZ, the path should be \\Server\UserProfiles\XYZ\Documents.

If the folder is not redirected properly, the Windows Vista system might need to have a domain policy applied that forces Synchronous Foreground Refresh of group policies. Also a very common configuration error is the NTFS and share permissions on the root folder.

Each of the folder redirection folders will automatically be configured to be synchronized with the server and be available offline. When additional server folders need to be configured to be available offline, follow the below steps:

1. Locate the shared network folder that should be made available offline.
2. Right-click the folder and select Always Available Offline

As long as the server share allows offline synchronization and the client workstation also supports this, as they both do by default, which is all that is necessary.



How to Disable/Enable Security Tab


On NTFS volumes, you can set security permissions on files and folders. These permissions grant or deny
access to the files and folders. You can view security permissions for files and folders by completing the
following steps:

– In Windows Explorer, right-click the file or folder you want to work with.
– From the pop-up menu, select Properties, and then in the Properties dialog box click the Security tab.
– In the Name list box, select the user, contact, computer, or group whose permissions you want to view.
If the permissions are dimmed, it means the permissions are inherited from a parent object.

For more information please continue to read the official Microsoft article

Note: In Windows 7 Home you have access to Security tab only from Safe Mode
Please go to Start and choose My Computer

Right click on a partition from Computer and select Properties

In Properties window you can select Security tab

When you open Properties window for a file you observe that the Security tab is missing

Gpedit:Warning Computers running Windows Vista Home do not have access to Group Policy (gpedit.msc)

This method shows you how to Disable/Enable Security Tab from Group Policy
Please perform the following steps:Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

Type gpedit.msc and press ok

In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Windows Components -> Windows Explorer  and open Remove Security tab

The Default state is Not Configured and Security tab is Enable
To Enable Security tab select Disable
To Disable Security tab select EnableTo finish press ok button and close Group Policy window

This method shows you how to Disable/Enable Security Tab from Command Prompt
Please perform the following steps:Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window,
select Paste and press EnterTo Disable Security tab:

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 1 /f

To Enable Security tab:

REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v Nosecuritytab /t REG_DWORD /d 0 /f

To finish please close command prompt window

This method shows you how to Disable/Enable Security Tab from Registry Editor
Please perform the following steps:Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

Type regedit and press ok

Please confirm UAC pop-ups in order to continue

Microsoft official disclaimerWarning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Please navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
\Explorer and locate Nosecuritytab registrykey

Double click on Nosecuritytab and edit the value:To Disable Security tab:

Change the data value with 1

To Enable Security tab:

Change the data value with 0

To finish press ok button and close Registry Editor window