Block user

[Ala35]

Hi

I want block one user to connect his vm via UAG , access to it just via connection server or he can logging specify rang of network (for example : 172.16.0.0/16) .How do it?

[Mickeybyte · Accepted solution]

@Ala35 

By default, there's no user/group specified under Horizon Admin Console - Users & Groups - Remote Access, which means everyone can access Horizon via UAG. As soon as you add a group there, only the users in that group can access Horizon via UAG. 

To exclude a user from accessing Horizon via UAG, you would have to create a group containing all users except that one user and add that group to the Remote Users tab in Horizon.

[Ala35]

should I configure it in vmware horizon administrator?

[Mickeybyte]

yes: 

[Ala35]

Is it possible to limit it for ip , that only certain ip ranges can connect to connection server?

[Mickeybyte]

Not by default in Horizon. You would need some kind of firewall before your connection server and set limits on the firewall then.

[Lieven]

Hi,

I wrote a blog article about this a while ago. https://ituda.com/vmware-horizon-view-restrict-remote-access-through-uag/

Hope this helps.