The Horizon Agent Configuration ADM template file (vdm_agent.adm) contains policy settings related to the authentication and environmental components of Horizon Agent.

This ADM file is available in a bundled .zip file named VMware-Horizon-Extras-Bundle-x.x.x-yyyyyyy.zip, which you can download from the VMware download site at https://my.vmware.com/web/vmware/downloads. Under Desktop & End-User Computing, select the VMware Horizon 7 download, which includes the bundled .zip file.

The following table describes policy settings in the Horizon Agent Configuration ADM template file other than those settings that are used with USB devices. The template contains both Computer Configuration and User Configuration settings. The User Configuration setting overrides the equivalent Computer Configuration setting.

Table 1. Horizon Agent Configuration Template Settings

Setting

Computer

User

Properties

AllowDirectRDP

X

Determines whether clients other than Horizon Client devices can connect directly to remote desktops with RDP. When this setting is disabled, the agent permits only View-managed connections through Horizon Client.

When connecting to a remote desktop from Horizon Client for Mac, do not disable the AllowDirectRDP setting. If this setting is disabled, the connection fails with an Access is denied error.

By default, while a user is logged in to a View desktop session, you can use RDP to connect to the virtual machine from outside of View. The RDP connection terminates the View desktop session, and the View user's unsaved data and settings might be lost. The View user cannot log in to the desktop until the external RDP connection is closed. To avoid this situation, disable the AllowDirectRDP setting.

Important:

For View to operate correctly, the Windows Remote Desktop Services service must be running on the guest operating system of each desktop. You can use this setting to prevent users from making direct RDP connections to their desktops.

This setting is enabled by default.

AllowSingleSignon

X

Determines whether single sign-on (SSO) is used to connect users to desktops and applications. When this setting is enabled, users are required to enter their credentials only once, when they log in to the server. When this setting is disabled, users must reauthenticate when the remote connection is made.

This setting is enabled by default.

CommandsToRunOnConnect

X

Specifies a list of commands or command scripts to be run when a session is connected for the first time.

See Running Commands on View Desktops for more information.

CommandsToRunOnDisconnect

X

Specifies a list of commands or command scripts to be run when a session is disconnected.

See Running Commands on View Desktops for more information.

CommandsToRunOnReconnect

X

Specifies a list of commands or command scripts to be run when a session is reconnected after a disconnect.

See Running Commands on View Desktops for more information.

ConnectionTicketTimeout

X

Specifies the amount of time in seconds that the View connection ticket is valid.

Horizon Client devices use a connection ticket for verification and single sign-on when connecting to the agent. For security reasons, a connection ticket is valid for a limited amount of time. When a user connects to a remote desktop, authentication must take place within the connection ticket timeout period or the session times out. If this setting is not configured, the default timeout period is 900 seconds.

CredentialFilterExceptions

X

Specifies the executable files that are not allowed to load the agent CredentialFilter. Filenames must not include a path or suffix. Use a semicolon to separate multiple filenames.

Disable Time Zone Synchronization

X

X

Determines whether the time zone of the View desktop is synchronized with the time zone of the connected client. An enabled setting applies only if the Disable time zone forwarding setting of the Horizon Client Configuration policy is not set to disabled.

This setting is disabled by default.

Enable multi-media acceleration

X

Determines whether multimedia redirection (MMR) is enabled on the View desktop.

MMR is a Windows Media Foundation filter that forwards multimedia data from specific codecs on the remote system directly through a TCP socket to the client. The data is then decoded directly on the client, where it is played. You can disable MMR if the client has insufficient resources to handle local multimedia decoding.

This setting is enabled by default.

Enable system tray redirection for Hosted Apps

X

Determines whether system tray redirection is enabled while a user is running remote applications.

This setting is located in the VMware View Agent Configuration > Unity Touch and Hosted Apps folder in the Group Policy Management Editor.

This setting is enabled by default.

Enable Unity Touch

X

Determines whether the Unity Touch functionality is enabled on the View desktop. Unity Touch supports the delivery of remote applications in View and allows mobile device users to access applications in the Unity Touch sidebar.

This setting is located in the VMware View Agent Configuration > Unity Touch and Hosted Apps folder in the Group Policy Management Editor.

This setting is enabled by default.

ShowDiskActivityIcon

X

This setting is not supported in this release.

Toggle Display Settings Control

X

Determines whether to disable the Settings tab in the Display control panel when a client session uses the PCoIP display protocol.

This setting is enabled by default.

DPI Synchronization

X

X

Adjusts the system-wide DPI setting for the remote session. When this setting is enabled or not configured, the system-wide DPI setting for the remote session is set to match the corresponding DPI setting on the client operating system. When this setting is disabled, the system-wide DPI setting for the remote session is never changed.

This setting is not configured by default.

Note:

This setting applies only to version 7.0.2 or later and to Windows clients on which Horizon Client 4.2 or later is installed.

VMwareViewAgentCIT

X

Enables remote connections to Internet Explorer to use the Client's IP address instead of the IP address of the remote desktop machine. The setting takes effect at the next login.

If the VMware Client IP Transparency custom setup option is selected in the Horizon Agent installer, this setting is enabled by default.

ProxyDefaultAutoDetectSettings

X

Default Internet Explorer connection setting that automatically detects settings in Internet Properties and Local Area Network Settings.

This setting is not enabled by default.

ProxyDefaultIEProxyServer

X

Default Internet Explorer connection setting for the proxy server that specifies the proxy server to use in Internet Properties and Local Area Network Settings.

This setting is not enabled by default.

UpdateJavaProxy

X

Directs a remote connection to use the Client's IP address instead of the IP address of the remote desktop machine for Java applets.

This setting is not enabled by default.

FlashMMRUrlListEnableType

Specifies the white list or black list that enables or disables URLs from using Flash Redirection. To use a white list, set FlashMMRUrlListEnableType=0 so that only the URLs in the URL list are enabled to use Flash Redirection. To use a black list, set FlashMMRUrlListEnableType=1 so that the URLs in the URL list will not be able to use Flash Redirection.

This setting specifies the white list default.

FlashMMRUrlList

Specifies the URL list that is enabled or disabled to use Flash Redirection based on the FlashMMRUrlListEnableType setting.

Be sure to include http:// or https://. You can use regular expressions. For example, you can specify https://*.google.com and http://www.cnn.com.

Note:

The Connect using DNS Name setting was removed in the Horizon 6 version 6.1 release. You can set the View LDAP attribute, pae-PreferDNS, to tell View Connection Server to give preference to DNS names when sending the addresses of desktop machines and RDS hosts to clients and gateways. See "Give Preference to DNS Names When View Connection Server Returns Address Information" in the View Installation document.

USB Settings for the Horizon Agent

See USB Settings in the Horizon Agent Configuration ADM Template.