Installation guide

Trust Relationships and Domain Filtering
To determine which domains it can access, a View Connection Server instance traverses trust relationships
beginning with its own domain.
For a small, well-connected set of domains, View Connection Server can quickly determine the full list of
domains, but the time that it takes increases as the number of domains increases or as the connectivity between
the domains decreases. The list might also include domains that you would prefer not to offer to users when
they log in to their View desktops.
You can use the vdmadmin command to configure domain filtering to limit the domains that a View Connection
Server instance searches and that it displays to users. See the VMware View Administrator's Guide for more
information.
Creating an OU for View Desktops
You should create an organizational unit (OU) specifically for your View desktops. An OU is a subdivision in
Active Directory that contains users, groups, computers, or other OUs.
To prevent group policy settings from being applied to other Windows servers or workstations in the same
domain as your desktops, you can create a GPO for your View group policies and link it to the OU that contains
your View desktops. You can also delegate control of the OU to subordinate groups, such as server operators
or individual users.
If you use View Composer, you should create a separate Active Directory container for linked-clone desktops
that is based on the OU for your View desktops. View administrators that have OU administrator privileges
in Active Directory can provision linked-clone desktops without domain administrator privileges. If you
change administrator credentials in Active Directory, you must also update the credential information in View
Composer.
See the VMware View Administrator's Guide for more information.
Creating OUs and Groups for Kiosk Mode Client Accounts
A client in kiosk mode is a thin client or a lock-down PC that runs View Client to connect to a View Connection
Server instance and launch a remote desktop session. If you configure clients in kiosk mode, you should create
dedicated OUs and groups in Active Directory for kiosk mode client accounts.
Creating dedicated OUs and groups for kiosk mode client accounts partitions client systems against
unwarranted intrusion and simplifies client configuration and administration.
See the VMware View Administrator's Guide for more information.
Creating Groups for View Users
You should create groups for different types of View users in Active Directory. For example, you can create a
group called VMware View Users for your View desktop users and another group called VMware View
Administrators for users that will administer View desktops.
Creating a User Account for vCenter Server
You must create a user account in Active Directory to use with vCenter Server. You specify this user account
when you add a vCenter Server instance in View Administrator.
The user account must be in the same domain as your View Connection Server host or in a trusted domain. If
you use View Composer, you must add the user account to the local Administrators group on the vCenter
Server computer.
VMware View Installation Guide
24 VMware, Inc.