Administration

You can dene alternate prexes to "custom-" in the pae-ClientAuthPrefix multi-valued aribute under
cn=common,ou=global,ou=properties,dc=vdi,dc=vmware,dc=int in ADAM on a View Connection Server
instance. Avoid using these prexes with ordinary user accounts.
If you do not specify a name for a client, View generates a name from the MAC address that you specify for
the client device. For example, if the MAC address is 00:10:db:ee:76:80, the corresponding account name is
cm-00_10_db_ee_76_80. You can only use these accounts with View Connection Server instances that you
enable to authenticate clients.
Some thin clients allow only account names that start with the characters "custom-" or "cm-" to be used with
kiosk mode.
An automatically generated password is 16 characters long, contains at least one uppercase leer, one
lowercase leer, one symbol, and one number, and can contain repeated characters. If you require a stronger
password, you must use the -password option to specify the password.
If you use the -group option to specify a group or you have previously set a default group, View adds the
client's account to this group. You can specify the -nogroup option to prevent the account being added to
any group.
If you enable a View Connection Server instance to authenticate clients in kiosk mode, you can optionally
specify that clients must provide a password. If you disable authentication, clients cannot connect to their
remote desktops.
Although you enable or disable authentication for an individual View Connection Server instance, all View
Connection Server instances in a group share all other seings for client authentication. You need only add a
client once for all View Connection Server instances in a group to be capable of accepting requests from the
client.
If you specify the -requirepassword option when enabling authentication, the View Connection Server
instance cannot authenticate clients that have automatically generated passwords. If you change the
conguration of a View Connection Server instance to specify this option, such clients cannot authenticate
themselves, and they fail with the error message Unknown username or bad password.
Options
Table 12-16 shows the options that you can specify to congure clients in kiosk mode.
Table 12‑16. Options for Configuring Clients in Kiosk Mode
Option Description
-add
Adds an account for a client in kiosk mode.
-clientauth
Species an operation that congures authentication for a
client in kiosk mode.
-clientid client_id
Species the name or the MAC address of the client.
-description "description_text"
Creates a description of the account for the client device in
Active Directory.
-disable
Disables authentication of clients in kiosk mode on a
specied View Connection Server instance.
-domain domain_name
Species the domain for the account for the client device.
-enable
Enables authentication of clients in kiosk mode on a
specied View Connection Server instance.
-expirepassword
Species that the expiry time for the password on client
accounts is the same as for the View Connection Server
group. If no expiry time is dened for the group,
passwords do not expire.
Chapter 12 Using the vdmadmin Command
VMware, Inc. 229