You must complete the configuration by registering Active Directory, completing the domain join, and adding the Super Administrator.
- You must complete the entire Active Directory registration process before you can work with any other services. All services are locked until you complete these tasks.
- When you have completed the domain registration, do not move any groups from one organizational unit (OU) to another. Doing so will cause login failures for users.
If you click Cancel before you complete the registration, you can click Edit at any time from the Getting Started page to continue with registration.
- The Active Directory infrastructure must be synchronized to an accurate time source.
- If you have external or forest trusts, root domains must be registered. For more information, see External and Forest Trusts.
- The LDAP bind account is treated by the system as a Super Admin user, so this account should not be shared with any user that does not have Super Admin privileges. For example, if there is another product that also needs an LDAP bind account, a new LDAP account should be created for this purpose so whoever has the new account cannot log in as Super Admin.
- Domain Bind and Domain Join accounts must meet requirements as described in Service Accounts That Horizon Cloud Requires for Its Operations.
- On the Getting Started page, select General Setup and then click Configure next to Active Directory.
- In the Register Active Directory dialog box, provide the requested registration information.
Option Description NETBIOS Name Active Directory domain name DNS Domain Name Fully qualified Active Directory domain name Protocol Not editable; LDAP is the only choice Bind Username Domain administrator Bind Password Domain administrator password
- Enter information for Auxiliary Account #1.
Option Description Bind Username Domain administrator Bind Password Domain administrator passwordNote: Username and password must exist in the Active Directory or the account will not be added successfully.
- Click Advanced Properties.
- Enter information the Advanced Properties fields.
Option Description Port The default for this field is 389. You should not need to modify this field unless you are using a non-standard port. Domain Controller IP (Optional) Specify a single preferred domain controller IP address if you want AD traffic to use a specific domain controller. Context This option is auto-populated based on the DNS Domain Name information provided earlier.
- Click Domain Bind.
Note: If you see an error stating that the auxiliary account information you entered is invalid, then after completing the Domain Join process below you will need to add a valid auxiliary account by editing the Domain Bind information. See Edit an Active Directory Domain.
- In the Domain Join dialog, provide the required domain join information.
Option Description Primary DNS Server IP IP address of primary DNS Server Secondary DNS Server IP (Optional) IP of secondary DNS Server Default OU Default organizational unit Join Username Domain administrator Join Password Domain administrator password
- If desired, create an auxiliary domain join account by entering the information below.
Option Description Auxiliary join Username Domain administrator for auxiliary account Auxiliary join Password Domain administrator password for auxiliary account
- If you do not choose to add an auxiliary domain join account now, you can do so later.
- You can edit or delete this account later.
- You can add only one auxiliary domain join account for each Active Directory.
- Click Save.
- In the Add Super Administrator dialog box, use the Active Directory search function to select the AD administrator group to administer the application.
- Click Save.
- If the domain bind or domain join process fail, you must restart the registration process.
- Restart the browser.
- Log in first using your My VMware account.
- Log in to the Active Directory account using the domain service (bind) account login and password.
- Continue with the domain join process.
What to do next
If desired, you can set up True SSO (single sign-on). See Complete Configuring True SSO for your Horizon Cloud Environment.