Specifications
Table Of Contents
- View Manager Administration Guide
- Contents
- About This Book
- Introduction
- Installation
- View Administrator
- Virtual Desktop Deployment
- Client Management
- Installing and Running View Client and View Portal
- Client Connections from the Internet
- Creating SSL Server Certificates
- Using Existing SSL Certificates
- Smart Card Authentication
- RSA SecurID Authentication
- View Client Command Line Options
- Virtual Printing
- Adobe Flash Bandwidth Reduction
- Client Computer Information
- Using PCoIP Display Protocol
- Using HP RGS Display Protocol
- View Composer
- Overview of View Composer
- Preparing vCenter Server for View Composer
- Preparing a Parent VM
- Deploying Linked Clone Desktops from View Manager
- Refreshing, Recomposing, and Rebalancing Linked Clone Desktops
- Using an Existing View Composer Database
- Using the SviConfig Tool for View Composer
- Offline Desktop
- Component Policies
- Unified Access
- Troubleshooting
- Appendix: The locked.properties File
- Glossary
- Index
VMware, Inc. 87
Chapter 4 Virtual Desktop Deployment
Understanding Tag Matching
TherestrictedentitlementsfeatureusestagmatchingtodeterminewhetheraView
ConnectionServerinstancecanaccessaparticularViewdesktopordesktoppool.
Atthemostbasiclevel,tagmatchingdeterminesthataViewConnectionServer
instancewithaspecifictagcanaccessadesktopordesktoppoolthathas
thesametag.
TheabsenceoftagassignmentscanalsoaffectwhetheraViewConnectionServer
instancecanaccessadesktopordesktoppool.Forexample,ViewConnectionServer
instancesthatdonothaveanytagscanonlyaccessdesktopsanddesktoppoolsthat
alsodonothaveanytags.
Table 4‐1
showshowtherestrictedentitlementfeaturedetermineswhenaView
ConnectionServercanaccessadesktopordesktoppool.
Considerations and Limitations
AsingleViewConnectionServerinstance,desktop,ordesktoppoolcanhavemultiple
tags.MultipleViewConnectionServerinstances,desktops,anddesktoppoolscanhave
thesametag.
DesktopsanddesktoppoolsthatdonothaveanytagscanbeaccessedbyanyView
ConnectionServerinstance.ViewConnectionServerinstances
thatdonothaveany
tagscanonlyaccessdesktopsanddesktoppoolsthatalsodonothaveanytags.
Ifyouuseasecurityserver,youmustconfigurerestrictedentitlementsontheView
ConnectionServerinstancethesecurityserverispairedwith.Youcannotconfigure
restrictedentitlementsonasecurity
server.
YoucannotmodifyorremoveatagfromaViewConnectionServerinstanceifthattag
isstillassignedtoadesktopordesktoppoolandnootherViewConnectionServer
instanceshaveamatchingtag.
Restrictedentitlementstakeprecedenceoverotherdesktopentitlements.Forexample,
evenifauseris
entitledtoaparticulardesktop,theuserwillnotbeabletoaccessthat
desktopifthedesktopʹstagdoesnotmatchthetagassignedtotheViewConnection
Serverinstancethattheuserconnectedto.
Table 4-1. Tag Matching Rules
View Connection Server Desktop/Desktop Pool Access Permitted?
Notags Notags Yes
Notags Oneormoretags No
Oneormoretags Notags Yes
Oneormoretags Oneormoretags Onlywhentagsmatch