2.0

Table Of Contents
VMware ACE Administrator’s Manual
110 VMware, Inc.
Activation and Authentication for Managed Instances with Active
Directory Service
IfyouareusingamanagedACEmasterwithaserverthatisintegratedwithActive
Directory,usethefollowinginformationtosetactivationandauthenticationpolicies:
TheusermustenterActiveDirectoryusercredentialseachtimetheACEinstanceis
run.
Onlytheuserwhoactivatestheinstancecanauthenticate(run)
theinstance.
TheactivationstepisperformedwheneveranACEpackagehasbeeninstalled.
Inadditiontotheusersinputofthecorrectusercredentials,theserveralsoverifies
theseitemsbeforetheinstancecanbeauthenticatedandrun:
Therevocationflagisnotsetandtheinstanceisnotblockedfromrunningbecause
ofanypolicyerrors.
Theexpirationdatesetfortheinstance,ifany,hasnotbeenreached.
Dynamicchangestotheauthenticationpolicy:Youcanaddorremoveusersfromthe
listofthosewhocanactivateACEpackages.Userlistchangesareeffectiveatthenext
startupofthisinstance.
Activation and Authentication
UnderActivationandauthentication,youcaneditthelistofusersandgroupswhocan
activateandauthenticate(run)theinstance:
ClickAddtoopentheActiveDirectoryusersandgroupsdialogbox.Selectthe
usersandgroupswhocanactivateandauthenticatetheinstance.
Toremoveauserorgroupfromthelist,selecttheentryintheUseror
Group/DomaintableandclickRemove.
NOTEYoucannotchangeactivationandauthenticationpoliciesthatuseActive
DirectorytopoliciesthatdonotuseActiveDirectory,norcanyoumakethereverse
changeof“withoutActiveDirectory”to“withActiveDirectory.
N
OTEEnsurethatyouradministratormachine(theoneonwhichyou’ rerunning
WorkstationACEEdition)isonthesamedomainastheonethattheACE2
ManagementServerisconfiguredtointeroperatewith.Ifitisnot,youwon tbe
abletoaddusers.