6.2

Preparing Active Directory 5
View uses your existing Microsoft Active Directory infrastructure for user authentication and management.
You must perform certain tasks to prepare Active Directory for use with View.
View supports the following Active Directory Domain Services (AD DS) domain functional levels:
n
Windows Server 2003
n
Windows Server 2008
n
Windows Server 2008 R2
n
Windows Server 2012
n
Windows Server 2012 R2
This chapter includes the following topics:
n
“Configuring Domains and Trust Relationships,” on page 27
n
“Creating an OU for Remote Desktops,” on page 29
n
“Creating OUs and Groups for Kiosk Mode Client Accounts,” on page 29
n
“Creating Groups for Users,” on page 29
n
“Creating a User Account for vCenter Server,” on page 29
n
“Creating a User Account for a Standalone View Composer Server,” on page 30
n
“Create a User Account for View Composer AD Operations,” on page 30
n
“Configure the Restricted Groups Policy,” on page 31
n
“Using View Group Policy Administrative Template Files,” on page 31
n
“Prepare Active Directory for Smart Card Authentication,” on page 32
n
“Disable Weak Ciphers in SSL/TLS for View Composer and View Agent Machines,” on page 34
Configuring Domains and Trust Relationships
You must join each View Connection Server host to an Active Directory domain. The host must not be a
domain controller.
Active Directory also manages the View Agent machines, including single-user machines and RDS hosts,
and the users and groups in your Horizon 6 deployment. You can entitle users and groups to remote
desktops and applications, and you can select users and groups to be administrators in View Administrator.
VMware, Inc.
27