Problem description:

In a virtual desktop environment, active directory domain controller to focus on the desktop management, under the condition of no behavior management software,
How to use the component or function or Windows AD itself with other functions, to achieve the AD domain within the scope of network
On logical isolation, make sure that the AD domain control can be centrally managed all domains within the desktop virtual machine, while the virtual machine between cannot be connected network discovery or through the network to each other; The implementation, a domain control management of N independent desktop terminal function,

Consult your technology and industry follows the old driver, glad!!!!!!

CodePudding user response:

Firewall policy, allowing only the server and client communication,
Client rules only allowed in the server's IP can, at the same time and the client network segment to stem the rules

CodePudding user response:

You also can realize the network isolation from the switch,