Disable File Copy between VMs

[shawnnny]

When I access multiple virtual desktops via VMware View 4, I'm able to copy files between VMs. The VMs are located in different isolated networks. This is a security concern in my organization and how can I disable this feature? I'm not able to find any related configuration in View Connection Server. Thanks!

[rudack]

Can you elaborate on your exact issue? Copy how? From OS to OS? From the sounds of this it looks like you need to lock down your operating systems.

[shawnnny]

Here is the scenario: VirtualDesktop A (10.10.10.x) and VirtualDesktop B (192.168.10.x) are located in its isolated network. A cannot ping B and vice versa. This is done in such a way for security reasons. My DesktopC located in 172.x.x.x segment has route to 10.10.10.x and 192.168.10.x, therefore i'm able to access both A and B. When I use View Client to access A and B, I'm able to right-click COPY a file in A and right-click PASTE in B and vice versa. I do not want the users to be able to do this.

[Linjo · Accepted solution]

I guess you are using RDP as the protocol currently, correct?

In that case you need to implement some GPO:s in the desktops to prevent copy and paste.

Look in the "Extras" folder on the View Connection server, there are a number of ADM files that you can implement to restrict all kinds of things.

Best regards,

Linjo

If you find this information useful, please award points for "correct" or "helpful".

[AnatolyVilchins]

Try adding isolation.tools.copy.enable = "FALSE" &

isolation.tools.paste.enable = "FALSE" to the .vmx files, I'm not a

View user but that works for WS.

from http://serverfault.com/questions/106785/disable-file-copy-between-vms

Starwind Software Developer

www.starwindsoftware.com

[shawnnny]

It's RDP causing the problem. Should have known it better. When using PCOIP on both A and B, copying and pasting from one to another Desktop is not possible. And the other concern is Drive Mapping when using RDP. All this configurations should have been available in View Manager.

[TobiasKracht]

I don't know View Connection Server, but on my VM Settings (in VM

Workstation), I have a point "Guest Isolation" in the Options tab.

There you can enable/disable drag and drop and also copy/paste.

Although this is not an answer, it may help you anyway..

StarWind Software R&D

[rosspcs]

You will need to look a the Terminal services settings, and disable the redirection options

Client/Server Data Redirection	Allow audio redirection	Allows users to play the remote computer audio at the local computer during a Remote Desktop session.
	Do not allow clipboard redirection	Disables sharing of clipboard contents.
	Do not allow drive redirection	Disables mapping of client drives in Remote Desktop sessions.
	Do not allow COM port redirection	Disables redirection of data from the remote computer to client COM ports during the Remote Desktop session.
	Do not allow client printer redirection	Disables mapping of client printers in Remote Desktop sessions.
	Do not allow LPT port redirection	Disables redirection of data from the remote computer to client LPT ports during the Remote Desktop session.
	Do not set default client printer to be default printer in a session	Directs Terminal Services to automatically not specify the client printer as the default printer in the Remote Desktop session.