Trying to find the best way for USB drive access for individual users in a VDI environment.
Our company utilizes Checkpoint software for physical desktops but it does not seem to work well with virtual desktops.
I can some what control USB access with the thin client but that requires the virtual desktop to have USB left open and then horizon clients are un-controlled.
Does anyone have a great solution for USB access for single users on VDI desktops. ?
Thanks.
Do those users with USB access have dedicated VDI desktops? Do you want to control all types of USB device or just mass storage device?
Horizon offers a bunch of GPO policies to configure USB redirection and you might need to pick some combinations according to what exactly you want to achieve.
Could you elaborate a bit more about "USB drive access for individual users"? Not quite understand what it meant.
Hi @vmmaj,
In Horizon, you can block USB Access at global or desktop pool- level. On the desktop pool, with Policy Overrides you can overrule the policy and allow USB access for specific users. The Policy Overrides settings always take precedence over global and desktop pool-level policy settings.
Be aware, that the USB Access Policy determines whether remote desktops can use USB devices connected to the client system. When the use case is specific to USB flash drive redirection you still have to catch that with for example a Removable Disks GPO setting.
Thanks for your reply,
I mis-typed when i mentioned USB - Drive, What i meant was USB port access to a device like a USB mass storage device.
We want the vast majority of the VDI desktops to be locked down with no USB port \ mass storage available, but at the same time there will be the need for a user(s) to be able to connect to a device via the USB port. We would like to be able to easily accommodate a request from a user.
Thanks.
Do those users with USB access have dedicated VDI desktops? Do you want to control all types of USB device or just mass storage device?
Horizon offers a bunch of GPO policies to configure USB redirection and you might need to pick some combinations according to what exactly you want to achieve.