There are several ways to discover which machines are on a Forensic hold.
Only those Administrators with Forensic Administrator privileges can see machines on Forensic hold.
Note: If you have Inventory Access, features are enabled for a held VM. Select More Commands to perform actions on Held machines such as enter maintenance mode, reset or restart a session, delete a held user, recover, restart or reset a machine, archive a held machine and obtain a summary view. Note that even though buttons are enabled, not all actions can be performed on Held Machines.
Option 1: From Inventory > Machines
- Select Inventory > Machines.
- Select the vCenter tab, then select Held Machine from the Machine dropdown to display all Held machines. In the Held Machine column, the machine will be flagged with On Hold, meaning that the machine is under investigation because one or more of the assigned users are on a forensic hold.
Option 2: From Inventory > Desktops
- For single pool details, select Inventory > Desktops and click the Machines tab. Check the Held Machine column for machines On Hold.
- For Instant Clone details, select Inventory > Desktops and click the Machines (Instant Clone Details) tab. Check the Held Machine column for machines On Hold.
Option 3: From the Summary Page
You can also view Held machines from the machine Summary page.
Was this page helpful?