Forum Discussion
Udayabhanu2020
Jul 09, 2020Brass Contributor
Client drive redirection for group of users
When we publish a WVD desktop to all users & need to have the client drive, clip board mapping disabled for all. But there will be a group of users who need access to client drive & clip board. We ...
Soo Kuan Teo
Microsoft
Jul 10, 2020One option you may try is to use the winstation permission setting for specific users. You can set it with RDS wmi provider Win32_TSAccount on TerminalName="rdp-sxs". You'll need to do this for each VM.
As local resource redirection uses virtual channel, you can allow/deny WINSTATION_VIRTUAL to control resource redirection.
Deny will take precedence over allow. it will work if you allow everyone for redirection during publishing, then use wmi to add user/user groups whom you want to deny redirection.
https://docs.microsoft.com/en-us/windows/win32/termserv/win32-tspermissionssetting
https://docs.microsoft.com/en-us/windows/win32/termserv/win32-tsaccount
As local resource redirection uses virtual channel, you can allow/deny WINSTATION_VIRTUAL to control resource redirection.
Deny will take precedence over allow. it will work if you allow everyone for redirection during publishing, then use wmi to add user/user groups whom you want to deny redirection.
https://docs.microsoft.com/en-us/windows/win32/termserv/win32-tspermissionssetting
https://docs.microsoft.com/en-us/windows/win32/termserv/win32-tsaccount
Udayabhanu2020
Jul 13, 2020Brass Contributor
Soo Kuan Teo Thank you, I will configure and test this option and let you know how it goes.