User manual

Table 3‑4. VMware Horizon Client Configuration Template: Scripting Definitions (Continued)
Setting Description
Enable Unauthenticated Access to the
server
Determines whether users are required to enter credentials to access
their applications when using Horizon Client.
When this seing is enabled, the Log in anonymously using
Unauthenticated Access seing in Horizon Client is visible, disabled,
and selected. The client may fall back to another authentication method
if Unauthenticated Access is not available.
When this seing is disabled, users are always required to enter their
credentials to log in and access their applications. The Log in
anonymously using Unauthenticated Access seing in Horizon Client
is hidden and deselected.
When this seing is not congured (the default), users can enable
Unauthenticated Access in Horizon Client. The Log in anonymously
using Unauthenticated Access seing is visible, enabled, and
deselected.
Account to use for Unauthenticated
Access
Species the Unauthenticated Access user account that Horizon Client
uses to log in anonymously to the server if the Enable
Unauthenticated Access to the server group policy seing is
enabled or if a user enables Unauthenticated Access by selecting Log in
anonymously using Unauthenticated Access in Horizon Client.
If Unauthenticated Access is not used for a specic connection to a
server, this seing is ignored. When this seing is not congured, users
can choose an account. This seing is not congured by default.
Security Settings for Client GPOs
Security seings include options regarding security certicate, login credentials, and the single sign-on
feature.
The following table describes the security seings in the Horizon Client Conguration ADM and ADMX
template les. This table shows whether the seings include both Computer Conguration and User
Conguration seings or Computer Conguration seings only. For the security seings that include both
types, the User Conguration seing overrides the equivalent Computer Conguration seing.
Table 3‑5. Horizon Client Configuration Template: Security Settings
Setting Description
Allow command line credentials
(Computer Conguration seing)
Determines whether user credentials can be provided with Horizon Client
command line options. If this seing is disabled, the smartCardPIN and
password options are not available when users run Horizon Client from the
command line.
This seing is enabled by default.
The equivalent Windows Registry value is AllowCmdLineCredentials.
Servers Trusted For Delegation
(Computer Conguration seing)
Species the Connection Server instances that accept the user identity and
credential information that is passed when a user selects the Log in as current
user check box. If you do not specify any Connection Server instances, all
Connection Server instances accept this information.
To add a Connection Server instance, use one of the following formats:
n
domain\system$
n
system$@domain.com
n
The Service Principal Name (SPN) of the Connection Server service.
The equivalent Windows Registry value is BrokersTrustedForDelegation.
Chapter 3 Configuring Horizon Client for End Users
VMware, Inc. 47