Configuring Remote Desktop Features

4 Include Vid/Pid Device
5 Exclude Device Family
6 Include Device Family
7 Allow Audio Input Devices, Allow Audio Output Devices, Allow HIDBootable, Allow HID (Non
Bootable and Not Mouse Keyboard), Allow Keyboard and Mouse Devices, Allow Smart Cards, and Allow
Video Devices
8 Combined eective Exclude All Devices policy evaluated to exclude or include all USB devices
You can set Exclude Path and Include Path lter policy seings only for Horizon Client. The Allow lter
policy seings that refer to separate device families have equal precedence.
If you congure a policy seing to exclude devices based on vendor and product ID values, Horizon Client
excludes a device whose vendor and product ID values match this policy seing even though you might
have congured an Allow policy seing for the family to which the device belongs.
The order of precedence for policy seings resolves conicts between policy seings. If you congure Allow
Smart Cards to allow the redirection of smart cards, any higher precedence exclusion policy seing
overrides this policy. For example, you might have congured an Exclude Vid/Pid Device policy seing to
exclude smart-card devices with matching path or vendor and product ID values, or you might have
congured an Exclude Device Family policy seing that also excludes the smart-card device family entirely.
If you have congured any Horizon Agent lter policy seings, Horizon Agent evaluates and enforces the
lter policy seings in the following order of precedence on the remote desktop or application, with item 1
having the highest precedence.
1 Exclude Vid/Pid Device
2 Include Vid/Pid Device
3 Exclude Device Family
4 Include Device Family
5 Agent-enforced Exclude All Devices policy set to exclude or include all USB devices
Horizon Agent enforces this limited set of lter policy seings on its side of the connection.
By dening lter policy seings for Horizon Agent, you can create a ltering policy for non-managed client
computers. The feature also allows you to block devices from being forwarded from client computers, even
if the lter policy seings for Horizon Client permit the redirection.
For example, if you congure a policy that permits Horizon Client to allow a device to be redirected,
Horizon Agent blocks the device if you congure a policy for Horizon Agent to exclude the device.
Examples of Setting Policies to Filter USB Devices
The vendor IDs and product IDs used in these examples are examples only. For information about
determining the vendor ID and product ID for a specify device, see “Using Log Files for Troubleshooting
and to Determine USB Device IDs,” on page 75.
n
On the client, exclude a particular device from being redirected:
Exclude Vid/Pid Device: Vid-0341_Pid-1a11
n
Block all storage devices from being redirected to this desktop or application pool. Use an agent-side
seing:
Exclude Device Family: o:storage
Chapter 4 Using USB Devices with Remote Desktops and Applications
VMware, Inc. 81