7.0

3 Select the Settings tab and define the policy settings.
a In the General Settings section, type a name for the policy in the Name text box.
For example, if the policy will affect the client drive redirection feature, you might name the policy
CDR.
b In the Horizon Policy Settings section, select the remote desktop features and settings to include in
the policy.
You can select multiple remote desktop features.
4 (Optional) To add a condition to the policy, select the Conditions tab, click Add, and select a condition.
You can add multiple conditions to a policy definition.
5 Click Save to save the policy.
User Environment Manager processes the Horizon policy each time a user connects or reconnects to the
remote desktop.
User Environment Manager processes multiple policies in alphabetical order based on the policy name.
Horizon policies appear in alphabetical order in the Horizon Policies pane. If policies conflict, the last policy
processed takes precedence. For example, if you have a policy named Sue that enables USB redirection for
the user named Sue, and another policy named Pool that disables USB redirection for the desktop pool
named Win7, the USB redirection feature is enabled when Sue connects to a remote desktop in the Win7
desktop pool.
Using Active Directory Group Policies
You can use Microsoft Windows Group Policy to optimize and secure remote desktops, control the behavior
of View components, and to configure location-based printing.
Group Policy is a feature of Microsoft Windows operating systems that provides centralized management
and configuration of computers and remote users in an Active Directory environment.
Group policy settings are contained in entities called group policy objects (GPOs). GPOs are associated with
Active Directory objects. You can apply GPOs to View components at a domain-wide level to control
various areas of the View environment. After they are applied, GPO settings are stored in the local
Windows Registry of the specified component.
You use the Microsoft Windows Group Policy Object Editor to manage group policy settings. The Group
Policy Object Editor is a Microsoft Management Console (MMC) snap-in. The MMC is part of the Microsoft
Group Policy Management Console (GPMC). See the Microsoft TechNet Web site for information on
installing and using the GPMC.
Creating an OU for Remote Desktops
You should create an organizational unit (OU) in Active Directory specifically for your remote desktops.
To prevent group policy settings from being applied to other Windows servers or workstations in the same
domain as your remote desktops, create a GPO for your View group policies and link it to the OU that
contains your remote desktops.
See the Microsoft Active Directory documentation on the Microsoft TechNet Web site for information on
creating OUs and GPOs.
Chapter 17 Configuring Policies for Desktop and Application Pools
VMware, Inc. 263