Before end users can connect to a server in a Horizon 8 deployment and access a remote desktop or published application, an administrator must configure certain Connection Server settings.

Unified Access Gateway

If your deployment includes a Unified Access Gateway appliance, configure Connection Server to work with Unified Access Gateway. See the Deploying and Configuring VMware Unified Access Gateway document.

Note: If your deployment includes a security server, verify that you are using the latest maintenance releases of Connection Server 7.13 and Security Server 7.13. For more information, see the Horizon 7 Installation guide.

Security servers are not supported in Horizon 8 version 2006 and later.

Secure Tunnel Connection

If you plan to use a secure tunnel connection for client devices, and if the secure connection is configured with a DNS host name for a Connection Server instance, verify that the client device can resolve this DNS name.

Desktop and Application Pools

Use the following check list when configuring desktop and application pools.

  • Verify that a desktop or application pool has been created and that the user account that you plan to use is entitled to access the pool. For more information, see the Desktops and Applications in Horizon 8 document.
  • If end users have a high-resolution display and use the High Resolution Mode client setting while viewing their remote desktops in full-screen mode, verify that sufficient vRAM is allocated for each Windows remote desktop. The amount of vRAM depends on the display resolution and the number of monitors configured for end users.

User Authentication

Use the following check list when setting up user authentication.

  • To activate end users to save their passwords with Horizon Client, so that they do not have to supply credentials when they connect to a Connection Server instance, configure Horizon LDAP for this feature in Connection Server.

    Users can save their passwords if Horizon LDAP is configured to allow it, if the Horizon Client certificate verification mode is set to Warn before connecting to untrusted servers or Never connect to untrusted servers, and if Horizon Client can fully verify the server certificate that Connection Server presents. For more information, see the Horizon 8 Administration document.

  • To use two-factor authentication, such as RSA SecurID or RADIUS authentication, with Horizon Client, you must activate the two-factor authentication feature for the Connection Server instance. You can customize the labels on the RADIUS authentication login page and configure two-factor authentication to occur after a remote session times out. For more information, see the topics about two-factor authentication in the Horizon 8 Administration document.
  • To hide the server URL in Horizon Client, activate the Hide server information in client user interface global setting. For more information, see the Horizon 8 Administration document.
  • To hide the Domain drop-down menu in Horizon Client, activate the Hide domain list in client user interface global setting. This setting is activated by default. For more information, see the Horizon 8 Administration document.
  • To send the domain list to Horizon Client, activate the Send domain list global setting in Horizon Console. This setting is deactivated by default. For more information, see the Horizon 8 Administration document.

The following table shows how the Send domain list and Hide domain list in client user interface global settings determine how users can log in to the server.

Send domain list setting Hide domain list in client user interface setting How users log in
Deactivated (default) Activated (default) The Domain drop-down menu is hidden. Users must enter one of the following values in the User name text box.
  • User name
  • domain\username
  • username@domain.com
Deactivated Deactivated If a default domain is configured on the client, the default domain appears in the Domain drop-down menu. If the client does not know a default domain, *DefaultDomain* appears in the Domain drop-down menu. Users must enter one of the following values in the User name text box.
  • User name
  • domain\username
  • username@domain.com
Activated Activated The Domain drop-down menu is hidden. Users must enter one of the following values in the User name text box.
  • User name (not allowed for multiple domains)
  • domain\username
  • username@domain.com
Activated Deactivated Users can enter a user name in the User name text box and then select a domain from the Domain drop-down menu. Alternatively, users can enter one of the following values in the User name text box.
  • domain\username
  • username@domain.com