Administration

Add Accounts for Clients in Kiosk Mode
You can use the vdmadmin command to add accounts for clients to the conguration of a View Connection
Server group. After you add a client, it is available for use with a View Connection Server instance on which
you have enabled authentication of clients. You can also update the conguration of clients, or remove their
accounts from the system.
You must run the vdmadmin command on one of the View Connection Server instances in the group that
contains the View Connection Server instance that clients will use to connect to their remote desktops.
When you add a client in kiosk mode, View creates a user account for the client in Active Directory. If you
specify a name for a client, this name must start with a recognized prex string, such as "custom-", or with
an alternate prex string that you have dened in ADAM, and it cannot be more than 20 characters long. If
you do not specify a name for a client, View generates a name from the MAC address that you specify for
the client device. For example, if the MAC address is 00:10:db:ee:76:80, the corresponding account name is
cm-00_10_db_ee_76_80. You can only use these accounts with View Connection Server instances that you
enable to authenticate clients.
I Do not use a specied name with more than one client device. Future releases might not
support this conguration.
Procedure
u
Run the vdmadmin command using the -domain and -clientid options to specify the domain and the
name or the MAC address of the client.
vdmadmin -Q -clientauth -add [-b authentication_arguments] -domain domain_name -clientid
client_id [-password "password" | -genpassword] [-ou DN] [-expirepassword |
-noexpirepassword] [-group group_name | -nogroup] [-description "description_text"]
Option Description
-clientid client_id
Species the name or the MAC address of the client.
-description "description_text"
Creates a description of the account for the client device in Active
Directory.
-domain domain_name
Species the domain for the client.
-expirepassword
Species that the expiry time for the password on the client's account is the
same as for the View Connection Server group. If no expiry time is dened
for the group, the password does not expire.
-genpassword
Generates a password for the client's account. This is the default behavior
if you do not specify either -password or -genpassword.
A generated password is 16 characters long, contains at least one
uppercase leer, one lowercase leer, one symbol, and one number, and
can contain repeated characters. If you require a stronger password, use
the -password option to specify the password.
-group group_name
Species the name of the group to which the client's account is added. The
name of the group must be specied as the pre-Windows 2000 group name
from Active Directory. If you previously set a default group, client's
account is added to this group.
-noexpirepassword
Species that the password on the client's account does not expire.
-nogroup
Species that the client's account is not added to the default group.
-ou DN
Species the distinguished name of the organizational unit to which the
client's account is added.
For example: OU=kiosk-ou,DC=myorg,DC=com
-password "password"
Species an explicit password for the client's account.
Chapter 10 Setting Up Clients in Kiosk Mode
VMware, Inc. 185