5.2

When you add a client in kiosk mode, View Manager creates a user account for the client in Active Directory.
If
you specify a name for a client, this name must start with the characters "custom-" or with one of the alternate
strings that you can define in ADAM, and it cannot be more than 20 characters long. You should use each
specified name with no more than one client device.
You can define alternate prefixes to "custom-" in the pae-ClientAuthPrefix multi-valued attribute under
cn=common,ou=global,ou=properties,dc=vdi,dc=vmware,dc=int in ADAM on a View Connection Server
instance. Avoid using these prefixes with ordinary user accounts.
If you do not specify a name for a client, View Manager generates a name from the MAC address that you
specify for the client device. For example, if the MAC address is 00:10:db:ee:76:80, the corresponding account
name is cm-00_10_db_ee_76_80. You can only use these accounts with View Connection Server instances that
you enable to authenticate clients.
Some thin clients allow only account names that start with the characters "custom-" or "cm-" to be used with
kiosk mode.
An automatically generated password is 16 characters long, contains at least one uppercase letter, one
lowercase letter, one symbol, and one number, and can contain repeated characters. If you require a stronger
password, you must use the -password option to specify the password.
If you use the -group option to specify a group or you have previously set a default group, View Manager
adds the client's account to this group. You can specify the -nogroup option to prevent the account being
added to any group.
If you enable a View Connection Server instance to authenticate clients in kiosk mode, you can optionally
specify that clients must provide a password. If you disable authentication, clients cannot connect to their
desktops.
Although you enable or disable authentication for an individual View Connection Server instance, all View
Connection Server instances in a group share all other settings for client authentication. You need only add a
client once for all View Connection Server instances in a group to be capable of accepting requests from the
client.
If you specify the -requirepassword option when enabling authentication, the View Connection Server
instance cannot authenticate clients that have automatically generated passwords. If you change the
configuration of a View Connection Server instance to specify this option, such clients cannot authenticate
themselves, and they fail with the error message Unknown username or bad password.
Options
Table 17-16 shows the options that you can specify to configure clients in kiosk mode.
Table 17-16. Options for Configuring Clients in Kiosk Mode
Option Description
-add
Adds an account for a client in kiosk mode.
-clientauth
Specifies an operation that configures authentication for a
client in kiosk mode.
-clientid client_id Specifies the name or the MAC address of the client.
-description "description_text" Creates a description of the account for the client device in
Active Directory.
-disable
Disables authentication of clients in kiosk mode on a
specified View Connection Server instance.
-domain domain_name Specifies the domain for the account for the client device.
-enable
Enables authentication of clients in kiosk mode on a specified
View Connection Server instance.
Chapter 17 Using the vdmadmin Command
VMware, Inc. 429