Administration

Table Of Contents

Table 6‑15 shows the privileges that are required to perform general administration tasks and run

command line utilities.

Table 6‑15. Privileges for General Administration Tasks and Commands

Task Required Privileges

Add or delete an access group Must have the Administrators role on the root access group.

Manage ThinApp applications and settings in View Administrator Must have the Administrators role on the root access group.

Install Horizon Agent on an unmanaged machine, such as a

physical system, standalone virtual machine, or RDS host

View or modify configuration settings (except for administrators)

in View Administrator

Manage Global Configuration and Policies

Run all PowerShell commands and command line utilities except

for vdmadmin and vdmimport.

Direct Interaction

Use the vdmadmin and vdmimport commands Must have the Administrators role on the root access group.

Use the vdmexport command Must have the Administrators role or the Administrators (Read

only) role on the root access group.

Best Practices for Administrator Users and Groups

To increase the security and manageability of your View environment, you should follow best practices

when managing administrator users and groups.

Create new user groups in Active Directory and assign View administrative roles to these groups.

Avoid using Windows built-in groups or other existing groups that might contain users who do not

need or should not have View privileges.

Keep the number of users with View administrative privileges to a minimum.

Because the Administrators role has every privilege, it should not be used for day-to-day

administration.

Because it is highly visible and easily guessed, avoid using the name Administrator when creating

administrator users and groups.

Create access groups to segregate sensitive desktops and farms. Delegate the administration of

those access groups to a limited set of users.

Create separate administrators that can modify global policies and View configuration settings.

View Administration

VMware, Inc. 133