Administration

You can define alternate prefixes to "custom-" in the pae-ClientAuthPrefix multi-valued
attribute under cn=common,ou=global,ou=properties,dc=vdi,dc=vmware,dc=int in ADAM
on a Connection Server instance. Avoid using these prefixes with ordinary user accounts.
If you do not specify a name for a client, Horizon 7 generates a name from the MAC address
that you specify for the client device. For example, if the MAC address is 00:10:db:ee:76:80, the
corresponding account name is cm-00_10_db_ee_76_80. You can only use these accounts with
Connection Server instances that you enable to authenticate clients.
Some thin clients allow only account names that start with the characters "custom-" or "cm-" to be
used with kiosk mode.
An automatically generated password is 16 characters long, contains at least one uppercase letter,
one lowercase letter, one symbol, and one number, and can contain repeated characters. If you
require a stronger password, you must use the -password option to specify the password.
If you use the -group option to specify a group or you have previously set a default group, Horizon
7 adds the client's account to this group. You can specify the -nogroup option to prevent the
account being added to any group.
If you enable a Connection Server instance to authenticate clients in kiosk mode, you can
optionally specify that clients must provide a password. If you disable authentication, clients
cannot connect to their remote desktops.
Although you enable or disable authentication for an individual Connection Server instance, all
Connection Server instances in a group share all other settings for client authentication. You need
only add a client once for all Connection Server instances in a group to be capable of accepting
requests from the client.
If you specify the -requirepassword option when enabling authentication, the Connection Server
instance cannot authenticate clients that have automatically generated passwords. If you change
the configuration of a Connection Server instance to specify this option, such clients cannot
authenticate themselves, and they fail with the error message Unknown username or bad
password.
Options
The following table shows the options that you can specify to configure clients in kiosk mode.
Table 12-16. Options for Configuring Clients in Kiosk Mode
Option Description
-add Adds an account for a client in kiosk mode.
-clientauth Specifies an operation that configures authentication for a
client in kiosk mode.
-clientid client_id Specifies the name or the MAC address of the client.
-description " description_text " Creates a description of the account for the client device in
Active Directory.
Horizon 7 Administration
VMware, Inc. 283