Configure Clients in Kiosk Mode

To configure Active Directory and Omnissa Horizon to support clients in kiosk mode, you must perform several tasks in sequence.

Prerequisites

Verify that you have the privileges required to perform the configuration tasks.

• Domain Admins or Account Operators credentials in Active Directory to make changes to the accounts of users and groups in a domain.
• Administrators, Inventory Administrators, or an equivalent role to use Omnissa Horizon Console to entitle users or groups to remote desktops.
• Administrators or an equivalent role to run the vdmadmin command.

Setting Up Clients in Kiosk ModeYou can set up unattended clients that can obtain access to their desktops from Omnissa Horizon. Prepare Active Directory and Omnissa Horizon for Clients in Kiosk ModeYou must configure Active Directory to accept the accounts that you create to authenticate client devices. Whenever you create a group, you must also entitle that group to the desktop pool that a client accesses. You can also prepare the desktop pool that the clients use. Set Default Values for Clients in Kiosk ModeYou can use the vdmadmin command to set the default values for the organizational unit, password expiry, and group membership in Active Directory for clients in kiosk mode. Display the MAC Addresses of Client DevicesIf you want to create an account for a client that is based on its MAC address, you can use Omnissa Horizon Client to discover the MAC address of the client device. Add Accounts for Clients in Kiosk ModeYou can use the vdmadmin command to add accounts for clients to the configuration of an Omnissa Horizon Connection Server group. After you add a client, it is available for use with a Horizon Connection Server instance on which you have enabled authentication of clients. You can also update the configuration of clients, or remove their accounts from the system. Enable Authentication of Clients in Kiosk ModeYou can use the vdmadmin command to enable authentication of clients that attempt to connect to their remote desktops via a Horizon Connection Server instance. Verify the Configuration of Clients in Kiosk ModeYou can use the vdmadmin command to display information about clients in kiosk mode and Horizon Connection Server instances that are configured to authenticate such clients. Connect to Remote Desktops from Clients in Kiosk ModeYou can run the client from the command line or use a script to connect a client to a remote session. Configuring Role-Based Delegated AdministrationOne key management task in an Omnissa Horizon environment is to determine who can use Horizon Console and what tasks those users are authorized to perform. With role-based delegated administration, you can selectively assign administrative rights by assigning administrator roles to specific Active Directory users and groups.

1. Prepare Active Directory and Omnissa Horizon for Clients in Kiosk Mode
   You must configure Active Directory to accept the accounts that you create to authenticate client devices. Whenever you create a group, you must also entitle that group to the desktop pool that a client accesses. You can also prepare the desktop pool that the clients use.
2. Set Default Values for Clients in Kiosk Mode
   You can use the vdmadmin command to set the default values for the organizational unit, password expiry, and group membership in Active Directory for clients in kiosk mode.
3. Display the MAC Addresses of Client Devices
   If you want to create an account for a client that is based on its MAC address, you can use Horizon Client to discover the MAC address of the client device.
4. Add Accounts for Clients in Kiosk Mode
   You can use the vdmadmin command to add accounts for clients to the configuration of a Horizon Connection Server group. After you add a client, it is available for use with a Horizon Connection Server instance on which you have enabled authentication of clients. You can also update the configuration of clients, or remove their accounts from the system.
5. Enable Authentication of Clients in Kiosk Mode
   You can use the vdmadmin command to enable authentication of clients that attempt to connect to their remote desktops via a Horizon Connection Server instance.
6. Verify the Configuration of Clients in Kiosk Mode
   You can use the vdmadmin command to display information about clients in kiosk mode and Horizon Connection Server instances that are configured to authenticate such clients.
7. Connect to Remote Desktops from Clients in Kiosk Mode
   You can run the client from the command line or use a script to connect a client to a remote session.

Related information

Configuring Role-Based Delegated Administration