Strict Lockdown Mode has been enabled on an ESXi host. Which action should an administrator perform to allow ESXi Shell or SSH access for users with administrator privileges?

Holding the administrator role does not grant an exemption from Strict Lockdown Mode - only placement on the Exception Users list allows a user to bypass the lockdown restriction for direct host access.

The Exception Users list in ESXi allows specific local or Active Directory users to retain their defined access privileges even when Strict Lockdown Mode is active on the host. The administrator must also enable the ESXi Shell or SSH service independently, as the Exception Users list only preserves privilege status and does not automatically start services. This is the only VMware-supported mechanism to permit direct host access under Strict Lockdown Mode.

Strict Lockdown Mode does not entirely prevent all direct access; it specifically permits access for users who appear on the Exception Users list, making this statement technically incorrect.

Adding users to vsphere.local (the SSO domain used by vCenter) has no effect on ESXi Strict Lockdown Mode exception handling, which is controlled exclusively through the per-host Exception Users list.