topic Re: Hardening Horizon desktops and apps in Horizon Desktops and Apps

Hardening Horizon desktops and apps

hamidja — Sat, 20 Feb 2021 22:08:29 GMT

I need to harden horizon 8 desktops and apps pool.i need no interaction between my desktop and client.No printer redirection from client to desktop but user could print on desktop. is there any hardening document?

Thank you in advance

Re: Hardening Horizon desktops and apps

yajimad — Tue, 23 Feb 2021 08:18:48 GMT

Hi,

Is below document helpful ?

- Configuring Remote Desktop Features in Horizon

https://docs.vmware.com/en/VMware-Horizon/2012/horizon-remote-desktop-features/GUID-8C6EA053-EA43-47B0-9613-B8C26158285E.html

Regards

Re: Hardening Horizon desktops and apps

ada2017 — Thu, 25 Feb 2021 02:57:02 GMT

We have an agent GPO "Do not redirect client printer(s)" starting from Horizon 2012, which can do this. Please refer to https://docs.vmware.com/en/VMware-Horizon/2012/horizon-remote-desktop-features/GUID-81E84F1C-C446-46EB-A48A-07498E3853D4.html#GUID-81E84F1C-C446-46EB-A48A-07498E3853D4.

Re: Hardening Horizon desktops and apps

Williams4718 — Sat, 27 Feb 2021 03:51:40 GMT

Desktop and application virtualization offers IT a more streamlined, secure way to manage users and provide agile, on-demand desktop services.

Re: Hardening Horizon desktops and apps

hamidja — Mon, 01 Mar 2021 19:22:47 GMT

Hi unfortunately I am using 2006? is there sth for 2006 version? Is there any document about horizon (managment & client) security in general.

Thank you

Re: Hardening Horizon desktops and apps

sjesse — Mon, 01 Mar 2021 19:23:25 GMT

When you install the horizon agent you pick a printing option, you should be able to just reinstall the horizon agent without that to prevent printer redirection at all if you don't need it globally.

Re: Hardening Horizon desktops and apps

hamidja — Tue, 02 Mar 2021 21:02:15 GMT

I want they could print on local (LAN printers) but no client printer redirect to vdi

Re: Hardening Horizon desktops and apps

sjesse — Tue, 02 Mar 2021 21:11:12 GMT

You don't want the integrated printing feature then, thats what redirect printers from user desktops to the virtual desktops. The GPOs will disable that , but if you don't need it at all just reinstall the agent without it.