With users often working around important settings that VMware itself may not be able to enforce or remediate, it becomes a potential vulnerability for cyber threats.