VMware, Inc. 391
Chapter 19 Setting and Using Policies and Customizing VMware Player
Setting Access Control Policies
ActivationandauthenticationpoliciescontrolaccesstoinstalledACEpackagesandthe
instancescreatedfromthosepackages.Theactivationpolicyspecifieswhocanaccess
aninstalledACEpackageandturnitintoanACEinstance.Theauthenticationpolicy
specifieswhocanrunanACEinstance.
Thesettingsyouchooseforthesepoliciesde
terminethedefaultsettingsforpackage
andencryptionpolicies,whichprotecttheACEpackagesandfilesintransit.See
“EncryptionSettings”onpage 436.
Thesettingsforthesepoliciesandhowtheyareimplementedvarydependingonhow
yourACEinstancesaremanagedand(optionally)tracked.Thepossiblemanagement
setupsare:
Server,withActiveDirectory–ACEinstancesaremanagedbyanACE
ManagementServer,andtheserverisintegratedwithActiveDirectory.
AnendusermustenterActiveDirectoryusercredentialseachtimetheACE
instanceisrun.Onlytheuserwhoactivates theinstancecanauthenticate(run)the
instance.Theactivationstepisper
formedwheneveranACEpackageisinstalled.
Server,noActiveDirectory–ACEinstancesaremanagedbyanACE
ManagementServer,andtheserverisnotintegratedwithActiveDirectory.
Theadministratorchooseswhethertheendusermustenterapasswordtoactivate
theACEinstanceandrunit.
Standalone–ACEinstancesarestandalone,whichmeanstheyarenotmanaged
byaserver.
Theadministratorchooseswhethertheendusermustenterapasswordtoactivate
theACEinstanceandrunit.
IfyouuseACEManagementServer,theserveralsoverifiesthefollowingitemsbefore
theinstanceisallowedtorun:
Therevocationflagisnotsetandtheinstanceisnotblockedfromrunningbecause
ofanypolicyerrors.
Theexpirationdatesetfortheinstance,ifany,hasnotbeenreached.See“Setting
ExpirationPolicies”onpage 399.
Comentarios a estos manuales