ESX Configuration Guide

Add a Host to a Directory Service Domain

To use a directory service, you must join the host to the directory service domain.

You can enter the domain name in one of two ways:

nname.tld (for example, domain.com): The account is created under the default container.

nname.tld/container/path (for example, domain.com/OU1/OU2): The account is created under a particular organizational unit (OU).

Prerequisites

Verify that the vSphere Client is connected to a vCenter Server system or to the host.

Procedure

1 Select a host in the vSphere Client inventory, and click the Configuration tab.

2Under Software, select Authentication Services and click Properties.

3In the Directory Services Configuration dialog box, select the type of authentication from the drop-down menu.

Option	Description
If you select Active Directory	Enter a domain in the form of name.tld or name.tld/container/path
	and click Join Domain.
If the host is already using a	Select Leave Domain to leave the domain and join another.
directory service

4Enter the user name and password of an Active Directory user who has permissions to join the host to the domain, and click OK.

5Click OK to close the Directory Services Configuration dialog box.

Use Host Profiles to Apply Permissions to Hosts

When you join a host to an Active Directory domain, you must define roles on the host for a user or group in that domain. Otherwise, the host is not accessible to Active Directory users or groups. You can use host profiles to set a required role for a user or group and to apply the change to one or more hosts.

Prerequisites

You must have an existing host profile. See “Creating a Host Profile,” on page 220.

Verify that the hosts to which you apply a profile are in maintenance mode.

Procedure

1 Using the vSphere Client, select View > Management > Host Profiles.

2Right-click an existing host profile and select Edit Profile.

3 Expand the profile tree, and then expand Security configuration. 4 Right-click the Permission rules folder and select Add Profile.

5Expand Permission rules and select Permission.

6On the Configuration Details tab in the right pane, click the Configure a permission drop-down menu and select Require a Permission Rule.

182	VMware, Inc.