Thanks for your response, but this has nothing to do with Horizon PowerCLI. vdmadmin can be used from a Windows command prompt.

With vdmadmin you can flawlessly exlude 'trusted' domains, but with 'untrusted' domains unfortunately not. This has consequences for your design .

I feel a feature request coming on:

- define domain list order

- exclude untrusted domains.