Administration

Administrators can use Horizon Client group policy seings to control the availability of the Log in as
current user check box and to specify its default value. Administrators can also use group policy to specify
which View Connection Server instances accept the user identity and credential information that is passed
when users select the Log in as current user check box in Horizon Client.
The Log in as current user feature has the following limitations and requirements:
n
When smart card authentication is set to Required on a View Connection Server instance, authentication
fails for users who select the Log in as current user check box when they connect to the View
Connection Server instance. These users must reauthenticate with their smart card and PIN when they
log in to View Connection Server.
n
The time on the system where the client logs in and the time on the View Connection Server host must
be synchronized.
n
If the default Access this computer from the network user-right assignments are modied on the client
system, they must be modied as described in VMware Knowledge Base (KB) article 1025691.
n
The client machine must be able to communicate with the corporate Active Directory server and not use
cached credentials for authentication. For example, if users log in to their client machines from outside
the corporate network, cached credentials are used for authentication. If the user then aempts to
connect to a security server or a View Connection Server instance without rst establishing a VPN
connection, the user is prompted for credentials, and the Log in as Current User feature does not work.
Saving Credentials in Mobile and Mac OS X Horizon Clients
Administrators can congure View Connection Server to enable mobile and Mac OS X Horizon Clients to
remember a user's user name, password, and domain information.
For Horizon Client for mobile devices, this feature causes the Save password check box to appear on the
login dialog boxes. For Horizon Client Mac OS X, this feature causes the Remember this password check
box to appear on the login dialog box.
If users choose to save their credentials, the credentials are added to the login elds in Horizon Client on
subsequent connections.
To enable this feature, you must set a value in View LDAP to indicate how long to save credential
information in the client. For Horizon Client Mac OS X clients, this feature is supported only in
Horizon Client for Mac OS X 4.1 or later.
N On Windows-based Horizon clients, the feature for logging in as the current user avoids requiring
users to supply credentials multiple times.
Configure a Timeout Limit to Save Horizon Client Credentials
You congure a timeout limit that indicates how long to save Horizon Client credential information on
mobile devices and Mac OS X client systems by seing a value in View LDAP. The timeout limit is set in
minutes. When you change View LDAP on a View Connection Server instance, the change is propagated to
all replicated View Connection Server instances.
Prerequisites
See the Microsoft TechNet Web site for information on how to use the ADSI Edit utility on your Windows
operating system version.
Procedure
1 Start the ADSI Edit utility on your View Connection Server host.
2 In the Connection Seings dialog box, select or connect to DC=vdi,DC=vmware,DC=int.
View Administration
66 VMware, Inc.