The AD service account has been configured in Horizon.ĭuring the configuration of the Desktop Pool, you must specify the correct target OU where Horizon will publish the Instant Clones.
HORIZON DIRECT ACCESS DIRECTORY FULL
Select the Full domain name, then enter Username and Password. In VMware Horizon this configuration is done in the Domains section in the Settings area. Click Add to add the AD service account to use. Once the AD service account has been created, it must be configured in Horizon to create the computer objects in the selected OU. Click Next.Ĭlick Finish to save the configuration and exit the wizard. Enable also options Create selected objects in this folder and Delete selected objects in this folder. Select Only the following objects in the folder option and select Computer objects. Select Create a custom task to delegate then click Next.
This is the user that will be configured in Vmware Horizon. Right click the just created OU and select Delegate Control.Ĭlick Next to proceed with the configuration.Ĭlick Add and select the previously create User. Permissions granted to the user will be restricted to the specific OU only to keep security at highest level. In the example a Horizon OU has been created with some OUs underneath (Instant Clones and Users). From a Domain Controller, open Active Directory Users and Computers and create the requested OUs. Now create the Organizational Units where the Instant Clones will be created. The minimum set of permissions in Active Directory required by the service account used in VMware Horizon are the following:įirst step is the creation of the Active Directory service account (for example vminstantclone). This of course opens serious security concerns in the network. To avoid potentials permissions issues, sometimes some administrators grant the Domain Admin permissions to the account configured in Horizon to publish the machines. When Instant Clones are published, VMware Horizon needs the correct permissions in Active Directory to create the Computer Objects in the target OU.įor security reasons, it is recommended to grant minimum permissions in Active Directory to the account used by Horizon to publish Instant Clones.
StarWind Virtual Tape Library (VTL) OEM.
0 kommentar(er)
