Some highly security-sensitive applications require that USB redirection be disabled. You can disable USB redirection for all desktop pools, for specific desktop pools, or for specific users in a desktop pool.

Use any of the following strategies, as appropriate for your situation:

  • In View Administrator, edit the USB access policy for a specific pool to either allow or deny access.

  • In View Administrator, after you set the policy at the desktop pool level, you can override the policy for a specific virtual machine in the pool.

  • When installing View Agent, deselect the USB redirection component. VMware does not recommend this strategy because it offers less flexibility than using policy settings.

  • Set the Exclude All Devices policy to true, on the agent side or on the client side, as appropriate.

If you set the Exclude All Devices policy to true, Horizon Client prevents all USB devices from being redirected. You can use other policy settings to allow specific devices or families of devices to be redirected. If you set the policy to false, Horizon Client allows all USB devices to be redirected except those that are blocked by other policy settings. You can set the policy on both View Agent and Horizon Client. The following table shows how the Exclude All Devices policy that you can set for View Agent and Horizon Client combine to produce an effective policy for the client computer. By default, all USB devices are allowed to be redirected unless otherwise blocked.

Table 1. Effect of Combining Exclude All Devices Policies

Exclude All Devices Policy on View Agent

Exclude All Devices Policy on Horizon Client

Combined Effective Exclude All Devices Policy

false or not defined (include all USB devices)

false or not defined (include all USB devices)

Include all USB devices

false (include all USB devices)

true (exclude all USB devices)

Exclude all USB devices

true (exclude all USB devices)

Any or not defined

Exclude all USB devices

If you have set Disable Remote Configuration Download policy to true, the value of Exclude All Devices on View Agent is not passed to Horizon Client, but View Agent and Horizon Client enforce the local value of Exclude All Devices.

These policies are included in the View Agent Configuration ADM template file (vdm_agent.adm). For more information, see USB Settings in the View Agent Configuration ADM Template.