You should create groups for different types of users in Microsoft Active Directory. For example, you can create a group called VMware Horizon Users for end users and another group called VMware Horizon Administrators for users that will administer remote desktops and applications.