VMware Horizon 8.x Exam: Required Active Directory Permissions for Instant Clone Domain Admin Account

Required Active Directory Permissions for Instant Clone Domain Admin Account

Question

What are two required Active Directory permissions for the Instant Clone Domain Admin account? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

AC.

https://docs.vmware.com/en/VMware-Horizon-7/7.0/com.vmware.horizon-view.installation.doc/GUID-E91881F4-F8C0-48A5-A1A4-

In a VMware Horizon environment that is configured to use instant clone technology, the instant clone domain admin account is used to create and manage the virtual desktops. This account must have specific Active Directory permissions to perform its tasks properly.

The two required Active Directory permissions for the Instant Clone Domain Admin account are:

  1. Create computer objects: This permission allows the instant clone domain admin account to create new computer objects in the specified Active Directory domain. When a new instant clone desktop is created, a new computer object is also created in Active Directory. This permission is necessary to create and manage these computer objects.

  2. Write all properties: This permission allows the instant clone domain admin account to modify all properties of the computer objects it creates. This permission is necessary to modify the attributes of the computer objects that are used to identify the virtual desktops created by the instant clone technology.

The other two options listed, Read all properties and Full control, are not required for the instant clone domain admin account to function properly. Read all properties permission only allows the account to view the properties of the computer objects in Active Directory, while Full control permission grants all permissions, including permissions that are not necessary for instant clone desktop management.