Hi Tom,
When you add your AD identity source you've added as an Active Directory (integrated Windows Authentication) ?
Domain name : yourdomain.net
Use Machine account is checked?
If so then you are done. I think the next part is where you may be having the real issue. How exactly are you assigning users to login? To assign a user or group Administrative permissions inside vCenter please perform/review the following steps:
1. Login with administrator@vsphere.local (for this example we will use the web client)
2. Select the vCenter server host name (this is the top level object where we will set permissions. You can get granular as each object has permissions/inheritance. For this we will keep it simple and assign full access.
3. With your hostname selected in the left pane - vcenter.domain.net - > click into the middle pane - Manage -> Permissions -> Plus sign
4. Click Add -> Select your DOMAIN from the list -> search for a user or group and add them. Click OK
5. Make sure the right side - Assigned role is set to administrator and Click OK.
Attempt to login with the account(s) you've added to that list.
Let me know the results or if you have questions!
-Brian
New blog - https://virtualizeme.org/
