You should create groups for different types of users in Active Directory. For example, you can create a group called Horizon 7 Users for your end users and another group called Horizon 7 Administrators for users that will administer remote desktops and applications.
