VMware Cloud Foundation - Design Decision - Change the default ESX Admins group to the ug-esxi-admins group in Active Directory.
book
Article ID: 318100
calendar_today
Updated On:
Products
VMwareVMware Cloud Foundation
Issue/Introduction
Design Decision: Change the default ESX Admins group to the ug-esxi-admins group in Active Directory.
Resolution
Design Justification: Changing the Active Directory group improves security by removing a known administrative access point.
Design Implication: Additional changes to the ESXi hosts advanced settings are required.
This design decision is supported in the following Domains. • Management Domain • VI Workload Domain
This design decision is supported on VCF version 4.1 and higher.
Note: To search for additional information on this design decision please search on the design decision text in https://docs.vmware.com/. For example https://docs.vmware.com/en/search/#/%22Enable%20Network%20I%2FO%20Control%20on%20all%20distributed%20switches.%22
Additional Information
Please reference the VMware Cloud Foundation version you are running and if this design decision is applicable to you.