This is a very well put together a guide for those who would like to know how to do it and, for those, who might need a check list of sorts. If you have VMware 6.5, you can enable Secure Boot using the EFI boot. This will help alleviate ROOT KITS being installed and, more importantly, being able to run. Kind of a big deal these days.
This is a template outline I have used several times and am very happy with it. It should work great for you and if not then let me know. I did this with vSphere 6.0 U2a and Windows 2016. I also used the vSphere Web Client as you will see in the screenshots. I will keep this article current by using it as necessary and improving it when I learn something new so keep an eye on it. I have more articles on templates and you can find them all – including this one here.
I would also like to mention that you do not have to do everything I do below. While it works for me and is a good idea for me, it may not be a good idea for you. For example, if you don’t have a server in the DMZ, and all your servers are always on your domain, than maybe much of the manual config I do below is better off done in your GPO.
Read more - Click Here