VMware Cloud Foundation - Design Decision - Change the default ESX Admins group to the ug-esxi-admins group in Active Directory.

Products

• VMware
• VMware Cloud Foundation

Issue/Introduction

Design Decision: Change the default ESX Admins group to the ug-esxi-admins group in Active Directory.

Resolution

Design Justification: Changing the Active Directory group improves security by removing a known administrative access point.

Design Implication: Additional changes to the ESXi hosts advanced settings are required.

This design decision is supported in the following Domains. 
•    Management Domain
•    VI Workload Domain

This design decision is supported on VCF version 4.1 and higher. 

Note: To search for additional information on this design decision please search on the design decision text in https://docs.vmware.com/. For example https://docs.vmware.com/en/search/#/%22Enable%20Network%20I%2FO%20Control%20on%20all%20distributed%20switches.%22

Additional Information

Please reference the VMware Cloud Foundation version you are running and if this design decision is applicable to you. 

VMware Validated Design (VVD) Bill of Materials