Administration

Horizon 7 determines which domains are accessible by traversing trust relationships, starting
with the domain in which a Connection Server instance or security server resides. For a small,
well-connected set of domains, Horizon 7 can quickly determine a full list of domains, but the
time that this operation takes increases as the number of domains increases or as the connectivity
between the domains decreases. Horizon 7 might also include domains in the search results that
you would prefer not to offer to users when they log in to their remote desktops.
If you have previously set the value of the Windows registry key that controls
recursive domain enumeration (HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware
VDM\RecursiveDomainEnum) to false, recursive domain searching is disabled, and the Connection
Server instance uses only the primary domain. To use the domain filtering feature, delete the
registry key or set its value to true, and restart the system. You must do this for every Connection
Server instance on which you have set this key.
The following table shows the types of domain lists that you can specify to configure domain
filtering.
Table 12-13. Types of Domain List
Domain List Type Description
Search exclusion list Specifies the domains that Horizon 7 can traverse during an automated search. The search
ignores domains that are included in the search exclusion list, and does not attempt to
locate domains that the excluded domain trusts. You cannot exclude the primary domain
from the search.
Exclusion list Specifies the domains that Horizon 7 excludes from the results of a domain search. You
cannot exclude the primary domain.
Inclusion list Specifies the domains that Horizon 7 does not exclude from the results of a domain search.
All other domains are removed apart from the primary domain.
The automated domain search retrieves a list of domains, excluding those domains that you
specify in the search exclusion list and domains that are trusted by those excluded domains.
Horizon 7 selects the first non-empty exclusion or inclusion list in this order.
1 Exclusion list configured for the Connection Server instance.
2 Exclusion list configured for the Connection Server group.
3 Inclusion list configured for the Connection Server instance.
4 Inclusion list configured for the Connection Server group
Note the following.
n Horizon 7 applies only the first list that it selects to the search results.
n If you specify a domain for inclusion, and its domain controller is not currently accessible,
Horizon 7 does not include that domain in the list of active domains.
n You cannot exclude the primary domain to which a Connection Server instance or security
server belongs.
Horizon 7 Administration
VMware, Inc. 276