;
; This ADM file is for configuring VMs running the View Connection Server.
;
; This file is added to a policy object through the Group Policy Object
; Editor.

CLASS MACHINE

CATEGORY !!VMwareViewServer

KEYNAME "Software\Policies\VMware, Inc.\VMware VDM"

POLICY !!PasswordAuthMode
    EXPLAIN !!PasswordAuthModeExplain
    PART !!PasswordAuthMode DROPDOWNLIST
        VALUENAME "PasswordAuthMode"
        REQUIRED
        ITEMLIST
            NAME "KerberosOnly"                 VALUE 1 DEFAULT
            NAME "KerberosWithFallbackToNTLM"   VALUE 2
            NAME "Legacy"                       VALUE 0
        END ITEMLIST
    END PART
END POLICY

POLICY !!RecursiveDomainEnum
    EXPLAIN !!RecursiveDomainEnumExplain
    VALUENAME "RecursiveDomainEnum"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!IncludeForestTrustChildDomains
    EXPLAIN !!IncludeForestTrustChildDomainsExplain
    VALUENAME "IncludeForestTrustChildDomains"
    VALUEON true
    VALUEOFF false
END POLICY

END CATEGORY

[Strings]
VMwareViewServer="VMware View Server Configuration"
PasswordAuthMode="Windows Password Authentication Mode"
PasswordAuthModeExplain="Select the windows password authentication mode.\n\nKerberosOnly: Authenticate using Kerberos.\nKerberosWithFallbackToNTLM: Authenticate using Kerberos, but fallback to using NTLM on failure.\nLegacy: Authenticate using NTLM, but fallback to using Kerberos on failure. Used to support legacy NT domain controllers.\n\nDefault is KerberosOnly."
RecursiveDomainEnum="Recursive Enumeration of Trusted Domains"
RecursiveDomainEnumExplain="Determines if every domain trusted by the domain in which the server resides is enumerated. In order to establish a complete chain of trust, the domains trusted by each trusted domain are also enumerated and the process continues recursively until all trusted domains are discovered. This information is passed to View Connection Server in order to ensure that all trusted domains are available to the client on login.\n\nThis property is enabled by default. When disabled, only directly trusted domains are enumerated and connection to remote domain controllers does not take place.\n\nNote: In environments with complex domain relationships — such as those that use multiple forest structures with trust between domains in their forests — this process can take a few minutes to complete."
IncludeForestTrustChildDomains="Enumerate Forest Trust Child Domains"
IncludeForestTrustChildDomainsExplain="Determines if child domains of a forest trust are enumerated.\n\nDefault if not configured is true."
