You can use Windows registry key settings to control client drive redirection behavior on a remote desktop.
You can use the Windows Registry Editor on the remote desktop to edit local registry settings.
Note: Client drive redirection policies set with Smart Policies take precedence over local registry settings.
Deactivating Client Drive Redirection
To deactivate client drive redirection, create a new string value named disabled and set its value to true.
The value is false (activated) by default.
Preventing Write or Read Access to Shared Folders
To prevent write access to all folders that are shared with the remote desktop, create a new string value named permissions and set its value to any string that begins with r, except for rw.
To prevent read access, set the permissions value to any string that begins with w.
The value is rw (all shared folders are readable and writeable) by default.
Sharing Specific Folders
To share specific folders with the remote desktop, create a new key named default shares and create a new subkey for each folder to share with the remote desktop. For each subkey, create a new string value named name and set its value to the path of the folder to share. The following example shares the folders C:\ebooks and C:\spreadsheets.
If you set name to *all, all client drives are shared with the remote desktop. The *all setting is supported only on Windows client systems.
To prevent the client from sharing additional folders (that is, folders that are not specified with the default shares key), create a string value named ForcedByAdmin and set its value to true.
When the value is true, the Sharing dialog box does not appear when users connect to the remote desktop in Omnissa Horizon Client. The value is false (clients can share additional folders) by default.
The following example shares the folders C:\ebooks and C:\spreadsheets, makes both folders read-only, and prevents the client from sharing additional folders.
Note: Do not use the ForcedByAdmin feature as a security feature or share control. A user can bypass the ForcedByAdmin=true setting by creating a link to an existing share that points to folders not specified with the default shares key.
Was this page helpful?