Installation

Creating a User Account for a Standalone View Composer Server
If you install View Composer on a dierent machine than vCenter Server, you must create a domain user
account in Active Directory that View can use to authenticate to the View Composer service on the
standalone machine.
The user account must be in the same domain as your View Connection Server host or in a trusted domain.
You must add the user account to the local Administrators group on the standalone View Composer
machine.
You specify this user account when you congure View Composer seings in View Administrator and select
Standalone View Composer Server. See “Congure View Composer Seings,” on page 104.
Create a User Account for View Composer AD Operations
If you use View Composer, you must create a user account in Active Directory that allows View Composer
to perform certain operations in Active Directory. View Composer requires this account to join linked-clone
virtual machines to your Active Directory domain.
To ensure security, you should create a separate user account to use with View Composer. By creating a
separate account, you can guarantee that it does not have additional privileges that are dened for another
purpose. You can give the account the minimum privileges that it needs to create and remove computer
objects in a specied Active Directory container. For example, the View Composer account does not require
domain administrator privileges.
Procedure
1 In Active Directory, create a user account in the same domain as your View Connection Server host or in
a trusted domain.
2 Add the Create Computer Objects, Delete Computer Objects, and Write All Properties permissions to
the account in the Active Directory container in which the linked-clone computer accounts are created
or to which the linked-clone computer accounts are moved.
The following list shows all the required permissions for the user account, including permissions that
are assigned by default:
n
List Contents
n
Read All Properties
n
Write All Properties
n
Read Permissions
n
Reset Password
n
Create Computer Objects
n
Delete Computer Objects
N Fewer permissions are required if you select the Allow reuse of pre-existing computer accounts
seing for a desktop pool. Make sure that the following permissions are assigned to the user account:
n
List Contents
n
Read All Properties
n
Read Permissions
n
Reset Password
3 Make sure that the user account's permissions apply to the Active Directory container and to all child
objects of the container.
View Installation
30 VMware, Inc.