Increase Security by Minimizing Permissions in Horizon AD
-
Having a controlled minimum set of permissions in your Active Directory (AD) will ensure nothing will slip during clone publishing. Otherwise, VMware Horizon, when instant clones are published, can make unwanted corrections in the AD service account while creating computer objects in the target organizational unit. You don’t want that.
Read the new article by Paolo Valsecchi of nolabnoparty.com on which set of AD permissions you should grant your VMware Horizon service account to avoid potential security threats.