1.0

CHAPTER 5 Setting Policies and Customizing VMware ACE
71
Setting Policies for a Project
Policies give you control over many aspects of the virtual machines you distribute to
your end users. You can, for example
• Permit the virtual machine to be used only by certain users and groups defined
in your Active Directory domains.
• Specify which network resources your users may access from the virtual
machine.
• Permit users to connect and disconnect certain removable devices configured
for the virtual machine.
• Control the lifetime of the virtual machine.
For many policy categories, you can write your own plug-ins to determine what
permissions and restrictions to apply.
For additional information on policies, see Understanding Policies on page 219.
Using the Policy Editor
You set policies using the policy editor. You may continue directly from the Add
Virtual Machine Wizard to the policy editor. Or you may start the policy editor from
any summary display. To start the policy editor from the project summary display,
select the name of a virtual machine, then click Policies.
You may set default policies for all virtual machines, policies that apply to a particular
virtual machine and policies that apply to VMware ACE, the application included in
the project.
Before you can set policies based on users and groups in your Active Directory service,
you must choose an Active Directory domain. You must also choose an Active
Directory domain if you want to use the Active Directory service to store dynamic
network quarantine settings.
Note: If you store policies on your Active Directory server, you must be sure end
users’ host computers have been added to the domain where the policies are stored,
and end users must log on to that domain so VMware ACE has access to the policies.
Similarly if you set policies based on users and groups in your Active Directory
domain, end users’ host computers must log on to a domain where those users and
groups are defined.