It is possible to reconfigure the ESXi host to be joined to the Microsoft Active Directory Domain, and source users and groups from this LDAP source, rather than using local groups. There are two main ways to achieve this configuration. One uses either the vSphere Client or PowerCLI to join the ESXi host to the domain. This requires credentials sufficient in Active Director to complete the process. Alternatively, the vSphere Authentication Proxy can achieve the same result without the need for domain credentials.  

It is possible to reconfigure the ESXi host to be joined to the Microsoft Active Directory Domain, and source users and groups from this LDAP source, rather than using local groups. There are two main ways to achieve this configuration. One uses either the vSphere Client or PowerCLI to join the ESXi host to the domain. This requires credentials sufficient in Active Director to complete the process. Alternatively, the vSphere Authentication Proxy can achieve the same result without the need for domain credentials.  

'''1.''' Open the vSphere Client on the ESX host click the '''Configuration''' tab and select '''Authentication Services''' under the '''Software Pane'''.

'''1.''' Open the vSphere Client on the ESX host click the '''Configuration''' tab and select '''Authentication Services''' under the '''Software Pane'''.

[[File:Screen_Shot_2013-11-11_at_14.38.28.png]]

[[File:Screen_Shot_2013-11-11_at_14.38.28.png]]

'''5.''' In the Join Domain dialog box, type the name FQDN for the domain, together with a username/password for account with rights to join the domain

"Assign Permissions to Active Directory Group"