You should create groups for different types of users in Active Directory. For example, you can create a group called VMware HorizonUsers for your end users and another group called VMware Horizon Administrators for users that will administer remote desktops and applications.