5.2

Table 1-5. Security-Related Settings in the View Agent Configuration Template (Continued)
Setting
Registry Value
Name Description
CommandsToRunOnConnect CommandsToRunOnC
onnect
Specifies a list of commands or command scripts to be run
when a session is connected for the first time.
No list is specified by default.
CommandsToRunOnReconnect CommandsToRunOnR
econnect
Specifies a list of commands or command scripts to be run
when a session is reconnected after a disconnect.
No list is specified by default.
ConnectionTicketTimeout VdmConnectionTic
ketTimeout
Specifies the amount of time in seconds that the View
connection ticket is valid.
If this setting is not configured, the default timeout period
is 120 seconds.
CredentialFilterExceptions CredentialFilter
Exceptions
Specifies the executable files that are not allowed to load
the agent CredentialFilter. Filenames must not include a
path or suffix. Use a semicolon to separate multiple
filenames.
No list is specified by default.
For more information about these settings and their security implications, see the VMware Horizon View
Administration document.
Security Settings in the View Client Configuration Template
Security-related settings are provided in the ADM template file for View Client (vdm_client.adm). Except where
noted, the settings include only a Computer Configuration setting. If a User Configuration setting is available
and you define a value for it, it overrides the equivalent Computer Configuration setting.
Security Settings are stored in the registry on the host machine under HKLM\Software\Policies\VMware,
Inc.\VMware VDM\Client\Security.
Table 1-6. Security Settings in the View Client Configuration Template
Setting Registry Value Name Description
Allow command line credentials AllowCmdLineCreden
tials
Determines whether user credentials can be provided
with View Client command line options. If this setting is
enabled, the smartCardPIN and password options are
not available when users run View Client from the
command line.
This setting is enabled by default.
Brokers Trusted For Delegation BrokersTrustedForD
elegation
Specifies the View Connection Server instances that
accept the user identity and credential information that
is passed when a user selects the Log in as current user
check box. If you do not specify any View Connection
Server instances, all View Connection Server instances
accept this information.
To add a View Connection Server instance, use one of the
following formats:
n
domain\system$
n
system$@domain.com
n
The Service Principal Name (SPN) of the View
Connection Server service.
VMware Horizon View Security
12 VMware, Inc.