Administration

Configuring Policies in Horizon
Administrator and Active Directory 7
You can use Horizon Administrator to set policies for client sessions. You can congure Active Directory
group policy seings to control the behavior of View Connection Server, the PCoIP display protocol, and
Horizon 7 logging and performance alarms.
You can also congure Active Directory group policy seings to control the behavior of Horizon Agent,
Horizon Client for Windows, Horizon Persona Management, and certain features. For information about
these policy seings, see the Conguring Remote Desktop Features in Horizon 7 document.
This chapter includes the following topics:
n
“Seing Policies in Horizon Administrator,” on page 117
n
“Using Horizon 7 Group Policy Administrative Template Files,” on page 119
Setting Policies in Horizon Administrator
You use Horizon Administrator to congure policies for client sessions.
You can set these policies to aect specic users, specic desktop pools, or all client sessions users. Policies
that aect specic users and desktop pools are called user-level policies and desktop pool-level policies.
Policies that aect all sessions and users are called global policies.
User-level policies inherit seings from the equivalent desktop pool-level policy seings. Similarly, desktop
pool-level policies inherit seings from the equivalent global policy seings. A desktop pool-level policy
seing takes precedence over the equivalent global policy seing. A user-level policy seing takes
precedence over the equivalent global and desktop pool-level policy seings.
Lower-level policy seings can be more or less restrictive than the equivalent higher-level seings. For
example, you can set a global policy to Deny and the equivalent desktop pool-level policy to Allow, or vice
versa.
N Only global policies are available for RDS desktop and application pools. You cannot set user-level
policies or pool-level policies for RDS desktop and application pools.
n
Congure Global Policy Seings on page 118
You can congure global policies to control the behavior of all client sessions users.
n
Congure Policies for Desktop Pools on page 118
You can congure desktop-level policies to aect specic desktop pools. Desktop-level policy seings
take precedence over their equivalent global policy seings.
n
Congure Policies for Users on page 118
You can congure user-level policies to aect specic users. User-level policy seings always take
precedence over their equivalent global and desktop pool-level policy seings.
VMware, Inc.
117