1.0

CHAPTER 14 Understanding Policies
223
If end users forget their passwords, they can create hot fix requests and send them to
a designated administrator. The administrator can reset the password using VMware
ACE Manager and provide the hot fix to the end user. The end user double-clicks the
hot fix file to apply it, then runs VMware ACE and sets a new password. For more
information on hot fixes, see Responding to Hot Fix Requests on page 150.
Authentication for Active Directory Users and Groups
If you select authentication based on Active Directory users and groups, VMware ACE
ensures that the user currently logged on to the host computer is authorized to run
the virtual machine. If not, VMware ACE does not start.
Authentication for users and groups is appropriate only if end users are logged on to
an Active Directory domain, generally on a LAN.
If you select this means of authentication, you can change the list of authorized users
for any virtual machine at any time. To do so, run VMware ACE Manager, open the
appropriate project and use the policy editor to change the list of authorized users.
VMware ACE Manager saves the updated list to your Active Directory service.
Authentication Determined by a Plug-In Script
To apply your own tests for authentication, you may write a custom plug-in, using any
scripting language that can run on the end user’s host computer. For more
information, see Writing Plug-In Policy Scripts on page 244.