You set policies using the policy editor. You may continue directly from the Add Virtual Machine Wizard to the policy editor. Or you may start the policy editor from any summary display. To start the policy editor from the project summary display, select the name of a virtual machine, then click Policies.

You may set default policies for all virtual machines, policies that apply to a particular virtual machine and policies that apply to VMware ACE, the application included in the project.

Before you can set policies based on users and groups in your Active Directory service, you must choose an Active Directory domain. You must also choose an Active Directory domain if you want to use the Active Directory service to store dynamic network quarantine settings.

Note: If you store policies on your Active Directory server, you must be sure end users' host computers have been added to the domain where the policies are stored, and end users must log on to that domain so VMware ACE has access to the policies. Similarly if you set policies based on users and groups in your Active Directory domain, end users' host computers must log on to a domain where those users and groups are defined.

If you attempt to make a policy setting that requires an Active Directory domain and you have not yet specified the domain, a dialog box notifies you that you need to set up the domain.

Click Yes to open a second dialog box that allows you to specify the policies domain. If you click No, you can specify the domain at any time in the project settings editor (Project > Settings).

Choose the appropriate domain name from the Policies domain drop-down list.

The list of settings available in the right pane of the policy editor depends on the category you select in the left pane. For several categories, the settings are similar to those in the following list:

• None — No restrictions are imposed.
• Password — Users must log on with a password.
• Users and groups — Specified users or members of specified groups defined in your Active Directory service have permission to take the action. Click Add to add a user or group to the list. To remove a name from the list, select the name of a user or group in the list, then click Remove.
• Determine using script — Use your own custom plug-in to determine what settings are applied. Click Set to open a dialog box that lets you locate the plug-in script file and specify the command line for running the script. You may also specify a timeout interval in case the script does not run to completion.

  Scripts used in a project must be in the Project Resources folder under the project folder. They must be in the main Project Resources folder, not in a subdirectory under that folder. If the scripts need any additional resource files, place those files in the main Project Resources folder, too.

  For details on how to create plug-in scripts, see Writing Plug-In Policy Scripts.