Never noticed this before...
I added my AD group, vmwareadmins, to the administrator role in the web client, then I started up the fat client, and couldnt log in with my AD account. So, I logged in as administrator in the fat client, noticed that the AD account wasnt there. So I added it. Now I can login to the fat client, also.
Is this normal? Web client vs fat client permissions are different?