Most of organization uses AD infrastructure for authentication and administrator the resources of organization. ESX servers and VSphere can also be joined to AD domain and administrator using domain account.
Here are the steps to do the same.
Confirm the appropriate DNS address & domain name is configured for ESX. Login to ESX using VSphere client, select Configuration tab, select ‘DNS and routing’. If correct DNS IP is not configured then click on ‘Properties’ and save valid details.
Click on Authentication Services, select Properties to edit current settings, select directory service type as Active Directory. Type domain name then join to domain by giving domain admin credential.
Once ESX joined in the domain, you should be able to see computer account listed in ADUC (Active directory user’s & computer)
Now create a group called ‘VMWare Admin’ & a user ‘VAdmin’, this user will be the member of ‘VMware admin’ group.
In your VSphere client, select Permission tab, right click on empty space select ‘Add Permission’.
Click on ADD, from drop down menu select the domain, you should be able to see AD objects, select VMware admin group.
Select the role you wish to give to map with AD group ‘VMware admin’.
Once it added successfully, you should be able to login in ESX Vsphere client using domain credential. You can check box ‘use windows session credential’ if you wants to login using current windows login.
If you are managing ESX using VMWare VCenter then open VCenter page, go to ‘Administration’ page, select ‘Configuration’, In ‘Identity source’ option select ‘Active Directory (integrated windows authentication)’, Type appropriate domain name and click on OK.
Click on ‘Global Permission’ Tab, click on ‘+’ option then Add AD group ‘VMware admin’.
Select the role you wish to map with to ‘VMware admin’ AD group.
Now you should be able to login to VCenter using windows & AD authentication.
