VMware Horizon Community
vmmaj
Enthusiast
Enthusiast
Jump to solution

USB access - VDI desktop - individuals

Trying to find the best way for USB drive access for individual users in a VDI environment. 

Our company utilizes Checkpoint software for physical desktops but it does not seem to work well with virtual desktops.

I can some what control USB access with the thin client but that requires the virtual desktop to have USB left open and then horizon clients are un-controlled.

Does anyone have a great solution for USB access for single users on VDI desktops. ?

 

Thanks.

Reply
0 Kudos
1 Solution

Accepted Solutions
ofox
VMware Employee
VMware Employee
Jump to solution

Do those users with USB access have dedicated VDI desktops? Do you want to control all types of USB device or just mass storage device?

Horizon offers a bunch of GPO policies to configure USB redirection and you might need to pick some combinations according to what exactly you want to achieve.

https://docs.vmware.com/en/VMware-Horizon/2111/horizon-remote-desktop-features/GUID-0BA5D4E1-B71C-4E...

https://docs.vmware.com/en/VMware-Horizon/2111/horizon-remote-desktop-features/GUID-433CDB2E-6A71-4A...

 

View solution in original post

Reply
0 Kudos
4 Replies
ofox
VMware Employee
VMware Employee
Jump to solution

Could you elaborate a bit more about "USB drive access for individual users"? Not quite understand what it meant.

Reply
0 Kudos
mrkasius
Hot Shot
Hot Shot
Jump to solution

Hi @vmmaj,

In Horizon, you can block USB Access at global or desktop pool- level. On the desktop pool, with Policy Overrides you can overrule the policy and allow USB access for specific users. The Policy Overrides settings always take precedence over global and desktop pool-level policy settings.

Be aware, that the USB Access Policy determines whether remote desktops can use USB devices connected to the client system. When the use case is specific to USB flash drive redirection you still have to catch that with for example a Removable Disks GPO setting.

vmmaj
Enthusiast
Enthusiast
Jump to solution

Thanks for your reply, 

I mis-typed when i mentioned USB - Drive, What i meant was USB port access to a device like a USB mass storage device.

We want the vast majority of the VDI desktops to be locked down with no USB port \ mass storage available, but at the same time there will be the need for a user(s) to be able to connect to a device via the USB port. We would like to be able to easily accommodate a request from a user. 

 

Thanks.

 

Reply
0 Kudos
ofox
VMware Employee
VMware Employee
Jump to solution

Do those users with USB access have dedicated VDI desktops? Do you want to control all types of USB device or just mass storage device?

Horizon offers a bunch of GPO policies to configure USB redirection and you might need to pick some combinations according to what exactly you want to achieve.

https://docs.vmware.com/en/VMware-Horizon/2111/horizon-remote-desktop-features/GUID-0BA5D4E1-B71C-4E...

https://docs.vmware.com/en/VMware-Horizon/2111/horizon-remote-desktop-features/GUID-433CDB2E-6A71-4A...

 

Reply
0 Kudos