Active Directory

If you plan on integrating Active Directory authentication with ESX Service Console access using esxcfg-auth, you need to control any existing root account in Active Directory. A root account in Active Directory will natively grant root access to the ESX Service Console to whoever knows the AD root password regardless of what the root password is on the ESX host.
More vQuotes