Virtual desktop showing terminal drives of base system(thinclient)

[Ravi1987]

i deliverd 5 virtual desktop to my user by using view composer under persisten mode. everything was fine but when my user logs on one of the vdi ,,,the vdi shows some c and d drive and other drives which are from base desktop( thin client ) can any body tell me how can i prevent this so that user not able to access thin cient drives.

[AndreTheGiant]

You can disable disk sharing option in RDP using group policy.

Andre

[Ravi1987]

Thanks Andre

From wgere i can found this policy in windows 2008 doamin controller.

[AndreTheGiant]

See:

http://technet.microsoft.com/en-us/library/cc770884(WS.10).aspx

You must set (on all virtual client) the "do not allow drive redirection" option.

See also this VMware KB:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100685...

Andre

[Ravi1987]

Thanks for reply.

Can i use view_client.adm template because we are not using terminal server

[mpryor]

Thanks for reply.

Can i use view_client.adm template because we are not using terminal server

The terminal server GPO works for standard RDP connections to XP and Vista VMs too. You have two choices, either (1) apply the policy on the clients using the view_client.adm template as you suggest, or (2) use the standard terminal services GPO on your VMs. The option for setting on the VMs is Adminstrative Templates/Windows Components/Terminal Services/Client/Server data redirection/Do not allow drive redirection.

Personally, I think (2) is easier. After all, you're trying to minimize the amount of management you need to do on your thin clients.

Mike

[Ravi1987]

Where i need to apply this

User configuration or computer configuration

[kovals]

Computer configuration.

I have to add that i had to set those changes in the local group policy of my base image - setting the changes in the GPO didn't work for me.

[mpryor]

If you intend to apply it to every single user, then just use the computer configuration. If you think you'll end up wanting to allow it for some users (e.g. site admins) you should use the user configuration option as it can then be applied per AD user or group.

[Ravi1987]

Thanks for reply,

I m tried to deployed it from both way group policy and view_client.adm but client drive are still visible.

[admin · Accepted solution]

Hi,

some timeago I wrote an article about that: http://www.thatsmyview.net/2009/04/16/using-client-drives/

Regards,

Christoph

Don't forget to award the points if this answer was helpful for you.

Blog:

http://communities.vmware.com/blogs/dommermuth |