6.7

What to do next
You can configure permissions so that users and groups from the joined Active Directory domain can
access the vCenter Server components. For information about managing permissions, see the vSphere
Security documentation.
Leave an Active Directory Domain
After you joined the vCenter Server Appliance, you can log in to the vSphere Web Client and set up the
vCenter Server Appliance to leave the Active Directory domain.
Prerequisites
Verify that the user who logs in to the vCenter Server instance in the vCenter Server Appliance is a
member of the SystemConfiguration.Administrators group in vCenter Single Sign-On.
Procedure
1 Use the vSphere Web Client to log in as administrator@your_domain_name to the vCenter Server
instance in the vCenter Server Appliance.
The address is of the type http://appliance-IP-address-or-FQDN/vsphere-client.
2 On the vSphere Web Client main page, click Home, and select System Configuration.
3 Under System Configuration, click Nodes.
4 Under Nodes, select a node and click the Manage tab.
5 Under Advanced, select Active Directory and click Leave.
6 Type the Active Directory user name and password.
7 Click OK to leave the Active Directory domain.
8 Click the Actions menu, and select Reboot to restart the appliance so that the changes are applied.
Add a User to the
SystemConfiguration.BashShellAdministrators Group
To enable access to the vCenter Server Appliance Bash shell by using the vSphere Web Client, the user
you use to log in must be a member of the SystemConfiguration.BashShellAdministrators group. By
default, this group is empty and you must add a user to the group manually.
Prerequisites
Verify that the user you use to log in to the vCenter Server instance is a member of the
SystemConfiguration.Administrators group in the vCenter Single Sign-On domain.
vCenter Server Appliance Configuration
VMware, Inc. 22