Administration

n
On the client system, user credentials are encrypted and stored in a table in the Authentication
Package, which is a component of Horizon Client. The credentials are added to the table when the
user logs in and are removed from the table when the user logs out. The table resides in volatile
memory.
Administrators can use Horizon Client group policy settings to control the availability of the Log in as
current user check box and to specify its default value. Administrators can also use group policy to
specify which Connection Server instances accept the user identity and credential information that is
passed when users select the Log in as current user check box in Horizon Client.
The Recursive Unlock feature is enabled after a user logs in to Connection Server with the Log in as
current user feature. The Recursive Unlock feature unlocks all remote sessions after the client machine
has been unlocked. Administrators can control the Recursive Unlock feature with the Unlock remote
sessions when the client machine is unlocked global policy setting in Horizon Client. For more
information about global policy settings for Horizon Client, see the Horizon Client documentation at the
VMware Horizon Clients documentation Web page.
The Log in as current user feature has the following limitations and requirements:
n
When smart card authentication is set to Required on a Connection Server instance, authentication
fails for users who select the Log in as current user check box when they connect to the Connection
Server instance. These users must reauthenticate with their smart card and PIN when they log in to
Connection Server.
n
The time on the system where the client logs in and the time on the Connection Server host must be
synchronized.
n
If the default Access this computer from the network user-right assignments are modified on the
client system, they must be modified as described in VMware Knowledge Base (KB) article 1025691.
n
The client machine must be able to communicate with the corporate Active Directory server and not
use cached credentials for authentication. For example, if users log in to their client machines from
outside the corporate network, cached credentials are used for authentication. If the user then
attempts to connect to a security server or a Connection Server instance without first establishing a
VPN connection, the user is prompted for credentials, and the Log in as Current User feature does
not work.
Saving Credentials in Mobile and Mac Horizon Clients
Administrators can configure View Connection Server to enable mobile and Mac Horizon Clients to
remember a user's user name, password, and domain information.
For Horizon Client for mobile devices, this feature causes the Save password check box to appear on
the login dialog boxes. For Horizon Client for Mac, this feature causes the Remember this password
check box to appear on the login dialog box.
If users choose to save their credentials, the credentials are added to the login fields in Horizon Client on
subsequent connections.
View Administration
VMware, Inc. 84