VMware\Omnissa Domain Bind account Active Directory (AD) service account.

Описание: An Omnissa Horizon Domain Bind account is a dedicated Active Directory (AD) service account used by Horizon Connection Servers to securely look up, browse, and enumerate AD objects (users, groups, computers) in a specified domain. It bridges the Horizon environment with AD, essential for authentication and entitlement, especially in untrusted or multi-domain architectures.

|| Key Aspects of Horizon Domain Bind:
__Purpose: Allows Horizon to read AD information without requiring a full domain trust relationship.

__Permissions: Requires read-only permissions for AD objects, specifically for the Organizational Units (OUs) used for virtual desktops/apps.

__Functionality: It is used to query AD for user authentication and to enable administrators to browse and select AD groups for desktop pool entitlements.

__Security: It is highly recommended to set this account to "Never Expires" or manage its expiration closely, as its failure disables single sign-on and prevents new desktop access.

__Primary vs. Auxiliary: A primary bind account is required, and an auxiliary account can be configured for redundancy.

|| In contrast to the Domain Bind account, a separate Domain Join account is typically used to create and manage the computer objects themselves

ITSA VMware Read-Only Mode Hands-On Lab Rentals.
RENT LAB @ITSA: Link https://www.itsa.cloud/contact
RENT LAB @EBAY: Link https://ebay.us/m/iwfbqs
Learn more at: https://www.ITSA.Cloud