To enhance the effectiveness of Horizon 7 in your organization, you can use several interfaces to integrate Horizon 7 with external applications or to create administration scripts that you can run from the command line or in batch mode.

Integrating with Other Components

VMware Identity Manager
You can integrate VMware Identity Manager with Horizon 7 to provide the following benefits to IT managers and end users:
  • End users have on-demand access to remote desktops and applications through the same user portal on the Web that they use to access SaaS, Web, and Windows applications, with the same single sign-on convenience.

    With the True SSO feature, users who authenticate using smart cards or two-factor authentication can access their remote desktops and applications without supplying Active Directory credentials.

  • End users can access VMware Identity Manager on the Web from inside a remote desktop for applications they need.
  • If you also use HTML Access, end users can open a remote desktop inside a browser, without having to install any client application on the client system or device.
  • IT managers can use the browser-based administration console of VMware Identity Manager to monitor user and group entitlements to remote desktops.
VMware Mirage and Horizon FLEX
You can use Mirage and Horizon FLEX to deploy and update applications on dedicated full-clone remote desktops without overwriting user-installed applications or data.

Mirage provides a better offline virtual desktop solution than the Local Mode feature that was previously included with Horizon 7. Mirage includes the following security and management features for offline desktops:

  • Encrypts the locally installed virtual machine and prevents a user from modifying virtual machine settings that affect the integrity of the secure container.
  • Provides policies, including expiration, available in VMware Fusion™ Professional and VMware® Player Plus™, that are comparable to the polices provided with the previous Local Mode feature. Fusion Pro and Player Plus are included with Mirage.
  • Eliminates the need for users to check in or check out their desktops to receive updates.
  • Enables administrators to utilize the Mirage layering capability, backup features, and file portal.
VMware App Volumes
VMware App Volumes is an integrated and unified application delivery and user management system for Horizon 7 and other virtual environments. Applications and data managed by App Volumes are kept in specialized VMDKs or VHDs called AppStacks, which are attached to each Windows user session at login or reboot. This strategy ensures that the most current applications and data are delivered to the user. App Volumes also provides a different container for persistent user-installed applications and settings called a writable volume, which is also loaded at login or reboot time. User profile and policy settings can also be managed using the App Volumes platform.
VMware User Environment Manager
You can use the Smart Policies feature to create policies that control the behavior of the USB redirection, virtual printing, clipboard redirection, client drive redirection, and PCoIP display protocol features on specific remote desktops. User Environment Manager allows IT to control which settings users are allowed to personalize, and also maps environmental settings such as networks and location-specific printers. With Smart Policies, you can create policies that take effect only if certain conditions are met. For example, you can configure a policy that disables the client drive redirection feature if a user connects to a remote desktop from outside your corporate network.
VMware Unified Access Gateway
Unified Access Gateway functions as a secure gateway for users who want to access remote desktops and applications from outside the corporate firewall. Unified Access Gateway is an appliance that is installed in a demilitarized zone (DMZ). Use Unified Access Gateway to ensure that the only traffic entering the corporate data center is traffic on behalf of a strongly authenticated remote user. You can use Unified Access Gateway appliances instead of Horizon 7 security servers. For more information, see the Unified Access Gateway documentation.

Integrating with Popular Video Conferencing Software

Flash URL Redirection
Streaming Flash content directly from Adobe Media Server to client endpoints lowers the load on the datacenter ESXi host, removes the extra routing through the datacenter, and reduces the bandwidth required to simultaneously stream live video events to multiple client endpoints.

The Flash URL redirection feature uses a JavaScript that is embedded inside a Web page by the Web page administrator. Whenever a virtual desktop user clicks on the designated URL link from within a Web page, the JavaScript intercepts and redirects the ShockWave File (SWF) from the virtual desktop session to the client endpoint. The endpoint then opens a local VMware Flash Projector outside of the virtual desktop session and plays the media stream locally.

Note: With Flash URL Redirection, the multicast or unicast stream is redirected to client devices that might be outside your organization's firewall. Your clients must have access to the Adobe Web server that hosts the ShockWave Flash (SWF) file that initiates the multicast or unicast streaming. If needed, configure your firewall to open the appropriate ports to allow client devices to access this server.

This feature is available only on some types of clients. To find out whether this feature is supported on a particular type of client, see the feature support matrix included in the "Using VMware Horizon Client" document for the specific type of desktop or mobile client device. Go to

Microsoft Lync 2013
You can use a Microsoft Lync 2013 client on remote desktops to participate in Unified Communications (UC) VoIP (voice over IP) and video chat calls with Lync certified USB audio and video devices. A dedicated IP phone is no longer required.

This architecture requires the installation of a Microsoft Lync 2013 client on the remote desktop and a Microsoft Lync VDI plug-in on the Windows 7 or 8 client endpoint. Customers can use the Microsoft Lync 2013 client for presence, instant messaging, Web conferencing, and Microsoft Office functionality.

Whenever a Lync VoIP or video chat call occurs, the Lync VDI plug-in offloads all the media processing from the datacenter server to the client endpoint, and encodes all media into Lync-optimized audio and video codecs. This optimized architecture is highly scalable, results in lower network bandwidth used, and provides point-to-point media delivery with support for high-quality real-time VoIP and video. For more information, see the white paper about VMware Horizon 6 and Microsoft Lync 2013, at

Note: Recording audio is not yet supported. This integration is supported only with the PCoIP or Blast Extreme display protocol.

Integrating Horizon 7 with Business Intelligence Software

You can configure Horizon Connection Server to record events to a Microsoft SQL Server or Oracle database.

  • End-user actions such as logging in and starting a desktop session.
  • Administrator actions such as adding entitlements and creating desktop pools.
  • Alerts that report system failures and errors.
  • Statistical sampling such as recording the maximum number of users over a 24-hour period.

You can use business intelligence reporting engines such as Crystal Reports, IBM Cognos, MicroStrategy 9, and Oracle Enterprise Performance Management System to access and analyze the event database.

For more information, see the View Integration document.

You can alternatively generate Horizon 7 events in Syslog format so that the event data can be accessible to analytics software. If you enable file-based logging of events, events are accumulated in a local log file. If you specify a file share, the log files are moved to that share. For more information, see the View Installation document.

Using Horizon PowerCLI to Create Administration Scripts

Windows PowerShell is a command-line and scripting environment that is designed for Microsoft Windows. PowerShell uses the .NET object model and provides administrators with management and automation capabilities. As with any other console environment, you work with PowerShell by running commands, which are called cmdlets in PowerShell.

The Horizon PowerCLI provides an easy-to-use PowerShell interface to Horizon 7. You can use the Horizon PowerCLI cmdlets to perform various administration tasks on Horizon 7 components.

  • Create and update desktop pools.
  • Configure multiple network labels to greatly expand the number of IP addresses assigned to virtual machines in a pool.
  • Add datacenter resources to a full virtual machine or linked-clone pool.
  • Perform rebalance, refresh, or recompose operations on linked-clone desktops.
  • Sample the usage of specific desktops or desktop pools over time.
  • Query the event database.
  • Query the state of services.

You can use the cmdlets in conjunction with the vSphere PowerCLI cmdlets, which provide an administrative interface to the VMware vSphere product.

For more information, see the View Integration document.

Modifying LDAP Configuration Data in Horizon 7

When you use Horizon Administrator to modify the configuration of Horizon 7, the appropriate LDAP data in the repository is updated. Horizon Connection Server stores its configuration information in an LDAP compatible repository. For example, if you add a desktop pool, Connection Server stores information about users, user groups, and entitlements in LDAP.

You can use VMware and Microsoft command-line tools to export and import LDAP configuration data in LDAP Data Interchange Format (LDIF) files from and into Horizon 7. These commands are for advanced administrators who want to use scripts to update configuration data without using Horizon Administrator or Horizon PowerCLI.

You can use LDIF files to perform a number of tasks.

  • Transfer configuration data between Connection Server instances.
  • Define a large number of Horizon 7 objects, such as desktop pools, and add these to your Connection Server instances without using Horizon Administrator or Horizon PowerCLI.
  • Back up a configuration so that you can restore the state of a Connection Server instance.

For more information, see the View Integration document.

Using SCOM to Monitor Horizon 7 Components

You can use Microsoft System Center Operations Manager (SCOM) to monitor the state and performance of Horizon 7 components, including Connection Server instances and security servers and the services running on these hosts.

For more information, see the View Integration document.

Using the vdmadmin Command

You can use the vdmadmin command line interface to perform a variety of administration tasks on a Connection Server instance. You can use vdmadmin to perform administration tasks that are not possible from within the Horizon Administrator user interface or that need to run automatically from scripts.

For more information, see the View Administration document.