VMware ESX 4.1.x
VMware ESXi 4.1.x Embedded
VMware ESXi 4.1.x Installable
VMware ESXi 5.0.x
VMware ESXi 5.1.x
VMware ESXi 5.5.x
VMware ESXi 6.0.x
Configuring the ESXi host with Active Directory authentication (2075361)
To add an ESXi host to the Active Directory using vSphere client:
- Confirm the ESXi host is synchronizing time with the Active Directory Domain controller. For more information, see Synchronizing ESXi/ESX time with a Microsoft Domain Controller (1035833).
- From the vSphere Client, select the host that you want to add to the Active Directory.
- Click the Configuration tab
- Click the Authentication Services.
- Click the Properties link at the top right pane.
- In the Directory Services Configuration dialog, select the directory service from the dropdown.
- Enter a domain.
- Click Join Domain.
- Enter the user name (in email@example.com format) and password of a directory service user account that has permissions to join the host to the domain and click OK.
- Click OK to close the Directory Services Configuration dialog box.
- Click the Configuration tab and click Advanced Settings.
- Navigate to Config > HostAgent.
- Change the Config.HostAgent.plugins.hostsvc.esxAdminsGroup setting to match the Administrator group that you want to use in the Active Directory. These settings takes affect within a minute and no reboot is required.
- If the Config.HostAgent.plugins.hostsvc.esxAdmi
nsGroup setting is changed, ensure to remove any invalid users from the Permissions tab of the ESXi host.
- In ESXi 4.1, the ESX Admins container is hard coded and must be added on the Active Directory side for authentication to work.