VMware VIEW 4.5 Manual

VMware View Administrator's Guide
View 4.5
View Manager 4.5
View Composer 2.5
This document supports the version of each product listed and
supports all subsequent versions until the document is replaced
by a new edition. To check for more recent editions of this
document, see http://www.vmware.com/support/pubs.
EN-000244-00

VMware View Administrator's Guide
2 VMware, Inc.
You can find the most up-to-date technical documentation on the VMware Web site at:
http://www.vmware.com/support/
The VMware Web site also provides the latest product updates.
If you have comments about this documentation, submit your feedback to:
[email protected]
Copyright ©2010 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual
property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents.
VMware is a registered trademark or trademark of VMware, Inc. in the United States and/or other jurisdictions. All other marks
and names mentioned herein may be trademarks of their respective companies.
VMware, Inc.
3401 Hillview Ave.
Palo Alto, CA 94304
www.vmware.com

Contents
About This Book 7
1Configuring View Connection Server 9
Using View Administrator 9
Configuring vCenter Server and View Composer 12
Backing Up View Connection Server 16
Configuring Settings for Client Sessions 17
Disable or Enable View Connection Server 20
Edit an External URL 21
View LDAP Directory 21
Configuring View Connection Server Settings 22
2Configuring Role-Based Delegated Administration 23
Understanding Roles and Privileges 23
Using Folders to Delegate Administration 24
Understanding Permissions 25
Manage Administrators 26
Manage and Review Permissions 27
Manage and Review Folders 29
Manage Custom Roles 31
Predefined Roles and Privileges 32
Required Privileges for Common Tasks 35
Best Practices for Administrator Users and Groups 37
3Preparing Unmanaged Desktop Sources 39
Prepare an Unmanaged Desktop Source for View Desktop Deployment 39
Install View Agent on an Unmanaged Desktop Source 39
4Creating and Preparing Virtual Machines 43
Creating Virtual Machines for View Desktop Deployment 43
Install View Agent on a Virtual Machine 47
Install View Agent Silently 49
Configure a Virtual Machine with Multiple NICs for View Agent 54
Optimize Windows Guest Operating System Performance 54
Optimize Windows 7 Guest Operating System Performance 55
Optimizing Windows 7 for Linked-Clone Desktops 56
Preparing Virtual Machines for View Composer 62
Creating Virtual Machine Templates 67
Creating Customization Specifications 68
VMware, Inc. 3

5Creating Desktop Pools 69
Automated Pools That Contain Full Virtual Machines 70
Linked-Clone Desktop Pools 73
Manual Desktop Pools 92
Microsoft Terminal Services Pools 96
Provisioning Desktop Pools 98
Setting Power Policies for Desktop Pools 107
6Entitling Users and Groups 113
Add Entitlements to Desktop Pools 113
Remove Entitlements from a Desktop Pool 113
Review Desktop Pool Entitlements 114
Restricting View Desktop Access 114
7Setting Up User Authentication 119
Using Smart Card Authentication 119
Using Smart Card Certificate Revocation Checking 127
Using RSA SecurID Authentication 131
Using the Log in as Current User Feature 133
8Configuring Policies 135
Setting Policies in View Administrator 135
Using Active Directory Group Policies 139
Using the View Group Policy Administrative Template Files 140
Setting Up Location-Based Printing 153
Using Terminal Services Group Policies 156
Active Directory Group Policy Example 157
9Managing Linked-Clone Desktops 161
Reduce Linked-Clone Size with Desktop Refresh 161
Update Linked-Clone Desktops 163
Rebalance Linked-Clone Desktops 168
Manage View Composer Persistent Disks 170
10 Managing Desktops and Desktop Pools 175
Managing Desktop Pools 175
Reducing Adobe Flash Bandwidth 180
Managing Virtual-Machine Desktops 182
Export View Information to External Files 187
11 Managing Physical Computers and Terminal Servers 189
Add an Unmanaged Desktop Source to a Pool 189
Remove an Unmanaged Desktop Source from a Pool 190
Delete a Pool That Contains Unmanaged Desktops 190
Unregister an Unmanaged Desktop Source 191
Desktop Status of Physical Computers and Terminal Servers 191
VMware View Administrator's Guide
4 VMware, Inc.

12 Managing ThinApp Applications in View Administrator 193
View Requirements for ThinApp Applications 193
Capturing and Storing Application Packages 194
Assigning ThinApp Applications to Desktops and Pools 197
Maintaining ThinApp Applications in View Administrator 203
Monitoring and Troubleshooting ThinApp Applications in View Administrator 206
ThinApp Configuration Example 209
13 Managing Local Desktops 211
Benefits of Using View Desktops in Local Mode 211
Managing View Transfer Server 217
Managing the Transfer Server Repository 221
Managing Data Transfers 227
Configure Security and Optimization for Local Desktop Operations 231
Configuring Endpoint Resource Usage 236
Configuring an HTTP Cache to Provision Local Desktops Over a WAN 240
Configuring the Heartbeat Interval for Local Desktop Client Computers 243
Manually Downloading a Local Desktop to a Location with Poor Network Connections 245
Troubleshooting View Transfer Server and Local Desktop Operations 248
14 Maintaining View Components 257
Backing Up and Restoring View Configuration Data 257
Monitor View Components 262
Monitor Desktop Status 263
Understanding View Manager Services 263
Add Licenses to VMware View 266
Update General User Information from Active Directory 266
Migrating View Composer with an Existing Database 266
15 Troubleshooting View Components 269
Monitoring System Health 270
Monitor Events in View Manager 270
Send Messages to Desktop Users 271
Display Desktops with Suspected Problems 271
Manage Desktops and Policies for Unentitled Users 272
Collecting Diagnostic Information for VMware View 272
Update Support Requests 276
Further Troubleshooting Information 276
Troubleshooting Network Connection Problems 276
Troubleshooting Desktop Pool Creation Problems 278
Troubleshooting USB Redirection Problems 282
Troubleshooting QuickPrep Customization Problems 283
View Composer Provisioning Errors 284
Windows XP Linked Clones Fail to Join the Domain 285
16 Using the vdmadmin Command 287
vdmadmin Command Usage 288
Configuring Logging in View Agent Using the -A Option 291
Contents
VMware, Inc. 5

Overriding IP Addresses Using the -A Option 292
Setting the Name of a View Connection Server Group Using the -C Option 293
Updating Foreign Security Principals Using the -F Option 294
Listing and Displaying Health Monitors Using the -H Option 294
Listing and Displaying Reports of View Manager Operation Using the -I Option 295
Assigning Dedicated Desktops Using the -L Option 296
Displaying Information About Machines Using the -M Option 297
Configuring Domain Filters Using the -N Option 298
Configuring Domain Filters 300
Displaying the Desktops and Policies of Unentitled Users Using the -O and -P Options 304
Configuring Clients in Kiosk Mode Using the -Q Option 305
Displaying the First User of a Desktop Using the -R Option 309
Removing the Entry for a View Connection Server Instance Using the -S Option 309
Setting the Split Limit for Publishing View Transfer Server Packages Using the -T Option 310
Displaying Information About Users Using the -U Option 310
Decrypting the Virtual Machine of a Local Desktop Using the -V Option 311
Unlocking or Locking Virtual Machines Using the -V Option 312
17 Setting Up Clients in Kiosk Mode 315
Configure Clients in Kiosk Mode 316
18 Running View Client from the Command Line 325
View Client Command Usage 325
View Client Configuration File 327
View Client Registry Settings 327
View Client Exit Codes 328
Index 331
VMware View Administrator's Guide
6 VMware, Inc.

About This Book
The VMware View Administrator's Guide describes how to configure and administer VMware View™, including
how to configure View Connection Server, create administrators, provision and deploy View desktops, set up
user authentication, configure policies, and manage VMware ThinApp™ applications in View Administrator.
This guide also describes how to maintain and troubleshoot VMware View components.
Intended Audience
This guide is intended for anyone who wants to configure and administer VMware View. The information in
this guide is written for experienced Windows or Linux system administrators who are familiar with virtual
machine technology and datacenter operations.
VMware Technical Publications Glossary
VMware® Technical Publications provides a glossary of terms that might be unfamiliar to you. For definitions
of terms as they are used in VMware technical documentation, go to
http://www.vmware.com/support/pubs.
Document Feedback
VMware welcomes your suggestions for improving our documentation. If you have comments, send your
feedback to [email protected].
Technical Support and Education Resources
The following technical support resources are available to you. To access the current version of this book and
other books, go to http://www.vmware.com/support/pubs.
Online and Telephone
Support
To use online support to submit technical support requests, view your product
and contract information, and register your products, go to
http://www.vmware.com/support.
Customers with appropriate support contracts should use telephone support
for the fastest response on priority 1 issues. Go to
http://www.vmware.com/support/phone_support.html.
Support Offerings To find out how VMware support offerings can help meet your business needs,
go to http://www.vmware.com/support/services.
VMware Professional
Services
VMware Education Services courses offer extensive hands-on labs, case study
examples, and course materials designed to be used as on-the-job reference
tools. Courses are available onsite, in the classroom, and live online. For onsite
pilot programs and implementation best practices, VMware Consulting
VMware, Inc. 7

Services provides offerings to help you assess, plan, build, and manage your
virtual environment. To access information about education classes,
certification programs, and consulting services, go to
http://www.vmware.com/services.
VMware View Administrator's Guide
8 VMware, Inc.

Configuring View Connection Server 1
After you install and perform initial configuration of View Connection Server, you can add vCenter Server
instances and View Composer services to View Manager, set up roles to delegate administrator responsibilities,
and schedule backups of your configuration data.
This chapter includes the following topics:
n“Using View Administrator,” on page 9
n“Configuring vCenter Server and View Composer,” on page 12
n“Backing Up View Connection Server,” on page 16
n“Configuring Settings for Client Sessions,” on page 17
n“Disable or Enable View Connection Server,” on page 20
n“Edit an External URL,” on page 21
n“View LDAP Directory,” on page 21
n“Configuring View Connection Server Settings,” on page 22
Using View Administrator
View Administrator is the Web interface through which you configure View Connection Server and manage
your View desktops.
For a comparison of the operations that you can perform with View Administrator, View cmdlets, and
vdmadmin, see the VMware View Integration Guide.
View Administrator and View Connection Server
View Administrator provides a management interface for View Manager.
Depending on your View deployment, you use one or more View Administrator interfaces.
nUse one View Administrator interface to manage the View components that are associated with a single,
standalone View Connection Server instance or a group of replicated View Connection Server instances.
You can use the IP address of any replicated instance to log in to View Administrator.
nYou must use a separate View Administrator interface to manage the View components for each single,
standalone View Connection Server instance and each group of replicated View Connection Server
instances.
VMware, Inc. 9

You also use View Administrator to manage security servers and View Transfer Server instances associated
with View Connection Server.
nEach security server is associated with one View Connection Server instance.
nEach View Transfer Server instance can communicate with any View Connection Server instance in a
group of replicated instances.
Log In to View Administrator
To perform initial configuration tasks, you must log in to View Administrator.
Prerequisites
nVerify that View Connection Server is installed on a dedicated computer.
nVerify that you are using a Web browser supported by View Administrator. For View Administrator
requirements, see the VMware View Installation Guide.
Procedure
1 Open your Web browser and enter the following URL, where server is the host name or IP address of the
View Connection Server instance.
https:// server /admin
You access View Administrator by using a secure (SSL) connection. When you first connect, your Web
browser might display a page warning that the security certificate associated with the address is not issued
by a trusted certificate authority. This response is expected behavior because the default certificate
supplied with View Connection Server is self-signed.
2 Click Ignore to continue using the current SSL certificate.
3 Log in using administrator credentials on the View Connection Server computer.
Initially, all users who are members of the local Administrators group (BUILTIN\Administrators) on the
View Connection Server computer are allowed to log in to View Administrator.
After you log in to View Administrator, you can use View Configuration > Administrators to change the
list of View Manager administrators.
Tips for Using the View Administrator Interface
You can use View Administrator user-interface features to navigate View Pages and to find, filter, and sort
View objects.
View Administrator includes many common user interface features. For example, the navigation pane on the
left side of each page directs you to other View Administrator pages. The search filters let you select filtering
criteria that are related to the objects you are searching for.
Table 1-1 describes a few additional features that can help you to use View Administrator.
VMware View Administrator's Guide
10 VMware, Inc.

Table 1-1. View Administrator Navigation and Display Features
View Administrator Feature Description
Navigating backward and forward in
View Administrator pages.
Click the Back button in the upper left corner of a View Administrator page to
go to the previously displayed View Administrator page. Click the Forward
button to return to the current page.
Do not use your browser's Back button. This button displays the View
Administrator log-in page.
Multicolumn sorting You can sort View objects in a variety of ways by using multicolumn sorting.
Click a heading in the top row of a View Administrator table to sort the View
objects in alphabetical order based on that heading.
For example, in the Inventory > Desktops page, you can click Pool to sort
desktops by the pools that contain them.
The number 1 appears next to the heading to indicate that it is the primary
sorting column. You can click the heading again to reverse the sorting order,
indicated by an up or down arrow.
To sort the View objects by a secondary item, Ctrl+click another heading.
For example, in the Desktops table, you can click Users to perform a secondary
sort by users to whom the desktops are dedicated. A number 2 appears next to
the secondary heading. In this example, desktops are sorted by pool and by users
within each pool.
You can continue to Ctrl+click to sort all the columns in a table in descending
order of importance.
Press Ctrl+Shift and click to deselect a sort item.
For example, you might want to display the desktops in a pool that are in a
particular state and are stored on a particular datastore. You can click Inventory
> Pools, click the pool ID, click the Datastore heading, and Ctrl+click the Status
heading.
Selecting View objects and displaying
View object details
In View Administrator tables that list View objects, you can select an object or
display object details.
nTo select an object, click anywhere in the object's row in the table. At the top
of the page, menus and commands that manage the object become active.
nTo display object details, double-click the left cell in the object's row. A new
page displays the object's details.
For example, on the Inventory > Pools page, click anywhere in an individual
pool's row to activate commands that affect the pool.
Double-click the Pool ID cell in the left column to display a new page that
contains details about the pool.
Expanding dialog boxes to view details You can expand View Administrator dialog boxes to view details such as
desktop names and user names in table columns.
To expand a dialog box, place your mouse over the dots in the lower right corner
of the dialog box and drag the corner.
Troubleshooting Access to View Administrator Without a Secure SSL Connection
You cannot log in to View Administrator through a Web browser when the SSL setting for your View clients
is not consistent with the URL you use to connect to View Administrator. If you deselect the SSL setting, you
cannot use https in the URL.
Problem
The URL that you use to log in to View Administrator no longer works. A connection failure occurs.
Cause
By default, View Manager uses SSL to create secure connections between View clients and View Connection
Server. This setting also applies to computers that connect to View Administrator through a Web browser.
Chapter 1 Configuring View Connection Server
VMware, Inc. 11

This problem occurs when you change this setting in View Administrator by navigating to View Configuration
> Global Settings and deselecting the Require SSL for client connections and View Administrator check box.
Solution
Use the following URL to connect to View Administrator, where server is the host name or IP address of the
View Connection Server instance.
http:// server /admin
Troubleshooting the Text Display in View Administrator
If your Web browser runs on a non-Windows operating system such as Linux, UNIX, or Mac OS, the text in
View Administrator does not display properly.
Problem
The text in the View Administrator interface is garbled. For example, spaces occur in the middle of words.
Cause
View Administrator requires Microsoft-specific fonts.
Solution
Install Microsoft-specific fonts on your computer.
Currently, the Microsoft Web site does not distribute Microsoft fonts, but you can download them from
independent Web sites.
Configuring vCenter Server and View Composer
To use virtual machines as desktop sources, you must configure View Manager to communicate with vCenter
Server. To create and manage linked-clone desktops, you must configure View Composer settings in View
Manager.
Add vCenter Server Instances to View Manager
You must configure View Manager to connect to the vCenter Server instances in your View deployment.
vCenter Server creates and manages the virtual machines that View Manager uses as desktop sources.
Prerequisites
nInstall the View Connection Server product license key.
nPrepare a vCenter Server user with permission to perform the operations in vCenter Server that are
necessary to support View Manager. To use View Composer, you must give the user additional privileges.
To manage desktops that are used in local mode, you must give the user privileges in addition to those
that are required for View Manager and View Composer.
For details about configuring a vCenter Server user for View Manager, see the VMware View Installation
Guide.
Procedure
1 In View Administrator, click View Configuration > Servers.
2 In the vCenter Servers panel, click Add.
VMware View Administrator's Guide
12 VMware, Inc.

3 In the server address text box, type the fully qualified domain name (FQDN) or IP address of the vCenter
Server instance.
The FQDN includes the host name and domain name. For example, in the FQDN
myserverhost . companydomain .com, myserverhost is the host name and companydomain .com is the domain.
NOTE If you enter a server by using a DNS name or URL, View Manager does not perform a DNS lookup
to verify whether an administrator previously added this server to View Manager by using its IP address.
A conflict arises if you add a vCenter Server with both its DNS name and its IP address.
4 Type the name of the vCenter Server user.
5Type the vCenter Server user password.
6 (Optional) Type a description for this vCenter Server instance.
7 To connect to the vCenter Server instance using a secure channel (SSL), make sure that Connect using SSL
is selected. SSL connection is the default setting.
8 Type the TCP port number.
The default port is 443.
9 (Optional) Click Advanced to configure the maximum concurrent pool operations in vCenter Server.
a Set the maximum number of concurrent provisioning operations.
This setting determines the largest number of concurrent requests that View Manager can make to
provision full virtual machines in this vCenter Server instance. The default value is eight. This setting
does not control linked-clone provisioning.
b Set the maximum number of concurrent power operations.
This setting determines the largest number of power operations (startup, shutdown, suspend, and so
on) that can take place simultaneously on full virtual machines managed by View Manager in this
vCenter Server instance. The default value is five. This setting controls power operations for full
virtual machines and linked clones.
10 Choose whether to configure View Composer.
Option Action
You are not using View Composer Click OK.
You are using View Composer Configure the View Composer settings.
What to do next
If this View Connection Server instance or group of replicated View Connection Server instances uses multiple
vCenter Server instances, repeat this procedure to add the other vCenter Server instances.
Remove a vCenter Server Instance from View Manager
You can remove the connection between View Manager and a vCenter Server instance. When you do so, View
Manager no longer manages the View desktops created in that vCenter Server instance.
Prerequisites
Delete all the View desktops that are associated with the vCenter Server instance. See “Delete a Desktop Pool
from View Manager,” on page 179.
Chapter 1 Configuring View Connection Server
VMware, Inc. 13

Procedure
1Click View Configuration > Servers.
2 In the vCenter Servers panel, select the vCenter Server instance.
3 Click Remove.
A dialog warns you that View Manager will no longer have access to the virtual machines that are managed
by this vCenter Server instance.
4 Click OK.
View Manager can no longer access the virtual machines created in the vCenter Server instance.
Create a User Account for View Composer
If you use View Composer, you must create a user account in Active Directory to use with View Composer.
View Composer requires this account to join linked-clone desktops to your Active Directory domain.
To ensure security, you should create a separate user account to use with View Composer. By creating a
separate account, you can guarantee that it does not have additional privileges that are defined for another
purpose. You can give the account the minimum privileges that it needs to create and remove computer objects
in a specified Active Directory container. For example, the View Composer account does not require domain
administrator privileges.
Procedure
1 In Active Directory, create a user account in the same domain as your View Connection Server host or in
a trusted domain.
2 Add the Create Computer Objects, Delete Computer Objects, and Write All Properties permissions to
the account in the Active Directory container in which the linked-clone computer accounts are created or
to which the linked-clone computer accounts are moved.
The following list shows all the required permissions for the user account, including permissions that are
assigned by default:
nList Contents
nRead All Properties
nWrite All Properties
nRead Permissions
nCreate Computer Objects
nDelete Computer Objects
3 Make sure that the user account's permissions apply to the Active Directory container and to all child
objects of the container.
What to do next
Specify the account in View Administrator when you configure View Composer for vCenter Server and when
you configure and deploy linked-clone desktop pools.
Configure View Composer Settings for vCenter Server
To use View Composer, you must configure View Manager with initial settings that match the settings for the
View Composer service that is installed in vCenter Server. View Composer is a feature of View Manager, but
its service operates directly on virtual machines in vCenter Server.
NOTE If you are not using View Composer, you can skip this task.
VMware View Administrator's Guide
14 VMware, Inc.

Prerequisites
nVerify that you created a user in Active Directory with permission to add and remove virtual machines
from the Active Directory domain that contains your linked clones. See “Create a User Account for View
Composer,” on page 14.
nVerify that you configured View Manager to connect to vCenter Server. See “Add vCenter Server Instances
to View Manager,” on page 12.
Procedure
1 In View Administrator, open the Edit vCenter Server dialog box.
a Click View Configuration > Servers.
b In the vCenter Servers panel, select the vCenter Server entry.
c Click Edit.
2 Select Enable View Composer and make sure that the port number is the same as the port that you
specified when you installed the View Composer service on vCenter Server.
View Manager verifies that the View Composer service is running on vCenter Server.
3 Click Add to add the domain user for View Composer account information.
a Type the domain name of the Active Directory domain.
For example: domain.com
b Type the domain user name, including the domain name.
For example: domain.com\admin
c Type the account password.
d Click OK.
e To add domain user accounts with privileges in other Active Directory domains in which you deploy
linked-clone pools, repeat the preceding steps.
4 Click OK to close the Edit vCenter Server dialog box.
What to do next
Repeat this procedure for each vCenter Server instance in which View Composer services are installed.
Remove View Composer from View Manager
You can remove the connection between View Manager and the View Composer service installed in a vCenter
Server instance. When you do so, View Manager no longer manages the linked-clone desktops created by View
Composer in the vCenter Server instance.
Before you disable the connection to View Composer, you must remove from View Manager all the linked-
clone desktops that were created by View Composer. After the connection to View Composer is disabled, View
Manager cannot provision, manage, or delete the linked clones. View Manager does not force you to delete
the linked clones. You must take this action on your own.
Chapter 1 Configuring View Connection Server
VMware, Inc. 15

Procedure
1Remove the linked-clone pools that were created by View Composer.
a In View Administrator, click Inventory > Pools.
b Select a linked-clone pool and click Delete.
A dialog box warns that you will permanently delete the linked-clone pool from View Manager. The
virtual machines are deleted from vCenter Server. In addition, the associated View Composer
database entries and the replicas that were created by View Composer are removed.
c Click OK.
d Repeat these steps for each linked-clone pool that was created by View Composer.
2 Click View Configuration > Servers.
3 In the vCenter Servers panel, select the vCenter Server instance in which View Composer is installed.
4 Click Edit.
5 In the View Composer Settings panel, deselect Enable View Composer and click OK.
You can no longer create linked-clone desktops in this vCenter Server instance, but you can continue to create
and manage full virtual-machine desktop pools in the vCenter Server instance.
If linked-clone desktops were not deleted before you disabled the connection to View Composer, you can try
enabling the connection to View Composer, deleting the linked clones, and disabling the connection to View
Composer again. For details about enabling View Composer, see “Configure View Composer Settings for
vCenter Server,” on page 14.
Conflicting vCenter Server Unique IDs
If you have multiple vCenter Server instances configured in your environment, an attempt to add a new
instance might fail because of conflicting unique IDs.
Problem
You try to add a vCenter Server instance to View Manager, but the unique ID of the new vCenter Server instance
conflicts with an existing instance.
Cause
Two vCenter Server instances cannot use the same unique ID. By default, a vCenter Server unique ID is
randomly generated, but you can edit it.
Solution
1 In vSphere Client, click Administration > vCenter Server Settings > Runtime Settings.
2 Type a new unique ID and click OK.
For details about editing vCenter Server unique ID values, see the vSphere documentation.
Backing Up View Connection Server
After you complete the initial configuration of View Connection Server, you should schedule regular backups
of your View Manager and View Composer configuration data.
For information about backing up and restoring your View configuration, see “Backing Up and Restoring View
Configuration Data,” on page 257.
VMware View Administrator's Guide
16 VMware, Inc.

Configuring Settings for Client Sessions
You can configure global settings that affect the client sessions that are managed by a View Connection Server
instance or replicated group. You can set the session-timeout length, require SSL for client connections and
View Administrator, display prelogin and warning messages, and set other client-connection options.
Set Options for Client Sessions and Connections
You configure global settings to determine the way client sessions and connections work.
The global settings are not specific to a single View Connection Server instance. They affect all client sessions
that are managed by a standalone View Connection Server instance or a group of replicated instances.
You can also configure View Connection Server instances to use direct, nontunneled connections between View
clients and View desktops. See “Configure the Tunnel Connection,” on page 20 for information about
configuring direct connections.
Prerequisites
Familiarize yourself with the global settings. See “Global Settings for Client Sessions and Connections,” on
page 18.
Procedure
1 In View Administrator, click View Configuration > Global Settings.
2 Click Edit.
3 Configure the global settings.
4 Click OK.
What to do next
If you change one of the following global settings, you must restart the View Connection Server service to
make your changes take effect.
nRequire SSL for client connections and View Administrator
nReauthenticate secure VPN connections after network interruption
nDisplay a pre-login message
In a group of replicated View Connection Server instances, you must restart the View Connection Server service
on all instances in the group. You do not have to restart the Windows Server computer where View Connection
Server is installed.
Chapter 1 Configuring View Connection Server
VMware, Inc. 17

Global Settings for Client Sessions and Connections
Global settings determine session time-out length and whether SSL is used, clients are reauthenticated after
interruptions, View components use secure internal communications, prelogin and warning messages are
displayed, and SSO is used for local-desktop operations.
Table 1-2. Global Settings for Client Sessions and Connections
Setting Description
Session timeout Determines how long a user can keep a session open after logging in to
View Connection Server.
The value is set in minutes. You must type a value. The default is 600
minutes.
Require SSL for client connections and View
Administrator
Determines if a secure SSL communication channel is used between
View Connection Server and View desktop clients, and between View
Connection Server and clients that access View Administrator.
When you select this setting, clients must use SSL connections.
You must select this setting if you use smart card authentication.
After you change this setting, you must restart the View Connection
Server service to make your change take effect.
Reauthenticate secure VPN connections after
network interruption
Determines if user credentials must be reauthenticated after a network
interruption when you use tunneled, secure VPN connections to the
client.
This setting has no effect when you use direct connection.
After you change this setting, you must restart the View Connection
Server service to make your change take effect.
Message security mode Determines the security of communications between View Manager
components. Specifically, determines if signing and verification of the
JMS messages passed between View Manager components takes place.
For details, see “Message Security Mode for View Components,” on
page 19.
Disable Single Sign-on for Local Mode
operations
Determines if single sign-on is enabled when users log in to their local
desktops.
If you disable this setting, users must manually log in to their desktops
to start their Windows sessions after they log in.
When you change this setting, the change takes effect for each user at
the next user operation.
Enable automatic status updates Determines if View Manager updates the global status pane in the upper
left corner of View Administrator every few minutes. The dashboard
page of View Administrator is also updated every few minutes.
When you enable this setting, idle sessions do not time out for any user
who is logged into View Administrator.
IMPORTANT Disabling idle-session timeouts increases the risk of
unauthorized use of View Administrator. Use caution when you enable
this setting.
By default, this setting is not enabled. Idle-session timeouts do occur.
VMware View Administrator's Guide
18 VMware, Inc.

Table 1-2. Global Settings for Client Sessions and Connections (Continued)
Setting Description
Display a pre-login message Displays a disclaimer or another message to View Client users when
they log in.
Type your information or instructions in the text box in the Global
Settings dialog window.
To display no message, leave the text box blank.
After you change this setting, you must restart the View Connection
Server service to make your change take effect.
Display warning before forced logoff Displays a warning message when users are forced to log off because a
scheduled or immediate update such as a desktop-refresh operation is
about to start. This setting also determines how long to wait after the
warning is shown before the user is logged off.
Check the box to display a warning message.
Type the number of minutes to wait after the warning is displayed and
before logging off the user. The default is five minutes.
Type your warning message. You can use the default message:
Your desktop is scheduled for an important update and
will be restarted in 5 minutes. Please save any unsaved
work now.
Message Security Mode for View Components
You can set the level of security for communications between View components. This setting determines
whether to sign and verify JMS messages that are passed between View Manager components. Enabling this
setting prevents control messages that did not come from an authorized source from being processed.
If any component in your View environment predates View Manager 3.0, signing and verification cannot take
place.
Table 1-3 shows the options you can select to configure the message security level. To set an option, select it
from the Message security mode list in the Global Settings dialog window.
Table 1-3. Message Security Mode Options
Option Description
Disabled Message security mode is disabled.
Mixed Message security mode is enabled but not enforced.
You can use this mode to detect components in your View environment that predate
View Manager 3.0. The log files generated by View Connection Server contain references
to these components.
Enabled Message security mode is enabled. Unsigned messages are rejected by View components.
NOTE View components that predate View Manager 3.0 are not allowed to communicate
with other View components
Message security mode is supported in View Manager 3.1 and later. If you change the message security mode
from Disabled or Mixed to Enabled, you cannot launch a desktop with a View Agent from Virtual Desktop
Manager version 2.1 or earlier. If you then change the message security mode from Enabled to Mixed to
Disabled, the desktop still fails to launch. To launch a desktop after you change the message security mode
from Enabled to Mixed to Disabled, you must restart the desktop.
Chapter 1 Configuring View Connection Server
VMware, Inc. 19

Configure the Tunnel Connection
When the tunnel connection is enabled, View Client makes a second HTTPS connection to the View Connection
Server or security server host when users connect to a View desktop with the Microsoft RDP display protocol.
When the tunnel connection is disabled, View desktop sessions are established directly between the client
system and the View desktop virtual machine, bypassing the View Connection Server or security server host.
This type of connection is called a direct connection.
NOTE Clients that use the PCoIP and HP RGS display protocols do not use the tunnel connection.
Procedure
1In View Administrator, click View Configuration > Servers.
2 In the View Connection Servers panel, select a View Connection Server instance and click Edit.
Option Description
Disable the tunnel connection Deselect Use secure tunnel connection to desktop.
Enable the tunnel connection Select Use secure tunnel connection to desktop.
The tunnel connection is enabled by default.
3Click OK to save your changes.
Disable or Enable View Connection Server
You can disable a View Connection Server instance to prevent users from logging in to their View desktops.
After you disable an instance, you can enable it again.
When you disable a View Connection Server instance, users who are currently logged in to View desktops are
not affected.
Your View Manager deployment determines how users are affected by disabling an instance.
nIf this is a single, standalone View Connection Server instance, users cannot log in to their desktops. They
cannot connect to View Connection Server.
nIf this is a replicated View Connection Server instance, your network topology determines whether users
can be routed to another replicated instance. If users can access another instance, they can log in to their
desktops.
Procedure
1 In View Administrator, click View Configuration > Servers.
2 In the View Connection Servers panel, select the View Connection Server instance.
3 Click Disable.
You can enable the instance again by clicking Enable.
VMware View Administrator's Guide
20 VMware, Inc.