I need to find a way to disable scanner redirection, folder sharing, USB access and similar functionality when a user logs into their virtual desktop from an untrusted device (e.g. a private laptop, ...
See more...
I need to find a way to disable scanner redirection, folder sharing, USB access and similar functionality when a user logs into their virtual desktop from an untrusted device (e.g. a private laptop, or PC), but to leave these features enabled when the same user logs into the same virtual desktop from a trusted corporate laptop. I was hoping that someone here might have had experience using Start Session Scripts, or CommandsToRunOnConnect / CommandsToRunOnReconnect group policy settings (or some similar functionality) to test for a factor on the client device - enabling or disabling the corresponding services on the virtual desktop based on the outcome of that test. The test could be for anything really, such as: Domain Membership of the client machine Presence or absence of a specific environment variable on client machine Presence or absence of a specific file Presence or absence of a specific registry entry Presence or absence of a specific certificate Any suggestions on the simplest way to achieve this outcome? (Our service provider's infrastructure doesn't yet support Smart Policies)