Horizon View 6.2 introduced a new feature for the Active Directory One-way trust. If you have installed and configured Connection Server (CS) and at the time of performing entitlements under ‘Users & Groups’ or browsing the ‘AD Container’ under the (Guest Customization) during the pool creation you will encounter the following error message in View Administrator console:
Follow these steps in order to fix the issue by adding the Secondary Credentials on the CS using vdmadmin command.
- Go to the CS server and open the Command prompt using the Admin privileges
- Change the directory path to C:\Program Files\VMware\VMware View\Server\tools\bin>
- Command to Add the Secondary Credentials:
vdmadmin -T -domainauth -add -owner domain\viewadminUIuser -user domain\trustdomainuser -password trustdomainpassword - Command to Remove the Secondary Credentials:
vdmadmin -T -domainauth –remove-owner domain\viewadminUIuser -user domain\trustdomainuser - Command to View all the Secondary Credentials for specified accounts
vdmadmin -T -domainauth –list -owner domain\viewadminUIuser - Repeat Step 3 multiple times, if you have more than One View Administrator that needs the capability to entitle Users & Groups or Creation of Desktop pools
Usage Notes:
Next to the –owner switch you need to add the user account use to logging into View Administrator Console
Next to the –user switch enter the credentials or service account of the trust domain where the User, Groups, OU Structure etc. reside
After you have added the secondary credentials, you will be able to perform ‘User & Group’ entitlements along with the ability to browse the ‘AD Container’ during the desktop pool creation in View Administrator console.
More details about the Secondary Credentials can also be found in the View Administrator Guide (Page No. 237)
Thanks,
Aresh
Hi,Thanks for this info, in case anyone else comes across this – you cant pass the password in the usual * format:vdmadmin -T -domainauth -add -owner domain\\view_admin -user other_domain\\domain_admin -password *It prompts for the password but you always get an incorrect password error – you have to actually pass the password in the command line like this:vdmadmin -T -domainauth -add -owner domain\\view_admin -user other_domain\\domain_user -password the_password Hope that helps someone!