VMware Horizon Community
ymagalif
Enthusiast
Enthusiast
‎05-27-2022 10:22 AM

Horizon 8 with Domain Functional Level 2008 R2 - what will break?

Hello community,

My client needs a new on-premises installation of Horizon 8, the latest version (2203/2111 as of now). 

Currently, the client has Microsoft Active Directory Domain Functional Level of 2008 R2.

Unfortunately, per VMware KB 78652, for Horizon 8 (from 2006 to 2111), the lowest supported Microsoft Active Directory Domain Functional Level is 2012 R2.

https://kb.vmware.com/s/article/78652

For various reasons, it’s not possible for the client to upgrade to 2012 R2 Domain Functional Level in the near future.

I installed 2 Connection Servers 2111 (8.4.0-19446835) successfully, and they are replicating well.

Under Domains>Connection Server, the current domain is green, status is Normal, No Problems detected.

Our options seem to be:

  1. Leave the installation as is at Horizon 2111/2203 and hope for the best.
    1. We are opening a VMware support ticket to see if VMware can clarify and maybe confirm that nothing bad will happen (even though it is Unsupported).
    2. The configuration will be unsupported, and the client can eventually upgrade to a higher Domain Functional Level.
  2. Scrap Horizon 8 and install Horizon 7.10.3. Horizon 7.10.3 is the last Horizon version that officially supports Domain Functional Level of 2008 R2.
    1. https://docs.vmware.com/en/VMware-Horizon-7/7.10/horizon-installation/GUID-F6075DF0-9614-4A81-B27A-7...
    2. Horizon 7.10.3 does fix the log4j vulnerability.
    3. Horizon 7.10.3 is supported by Horizon Cloud Connector 2.1.2 (but not 2.2.0) — this still allows the client to use Horizon Universal Subscription license which they purchased.
    4. The support for 7.10 Extended Service Branch at the “Technical Guidance” phase expires 3-22-2023, which means the client can still call support for major issues.
    5. Hopefully, by the expiration of the “Technical Guidance” support phase on 3-22-2023, the client can eventually upgrade to a higher Domain Functional Level and then upgrade Horizon to 8.
  3. Upgrade to Microsoft Active Directory Domain Functional Level of 2012 R2 or higher — not possible in the near future.

Questions to the community:

  1. Does anyone know what Horizon 8 (2203/2111) functionality will break if using with the unsupported Microsoft Active Directory Domain Functional Level of 2008 R2 ?
  2. Can anyone think of other options in this situation?

Sincerely,

Yury Magalif

0 Kudos
0 Replies