I've started messing with vSphere 5.5.0a. From what I can tell any user with an AD account can log into the vSphere Web Client. They can't really see anything but the fact that they can log in bothers me. The same user cannot log into vCenter using the vSphere Client. What am I missing?
While adding your AD please configure search filter for only required group and not on users. If you do it on users, everyone will be able to access.
When adding "Active Directory (Integrated Windows Authentication)" there is not an option to filter based on OU or group. Other options?