Global Client Restriction Settings for Client Sessions in Horizon Console

Global client restriction settings can restrict launching of virtual desktops, published desktops, and published applications to specific clients and versions.

In Horizon Console, you can configure global client restriction settings by navigating to Settings > Global Settings > Client Restriction Settings and entering the version for Horizon Clients.

Horizon Clients must be version 4.5.0 or later, except Horizon Client for Chrome, which must be version 4.8.0 or later. Earlier versions of Horizon Client are prevented from connecting to remote desktops and published applications when this feature is configured.

Note: Client restriction settings only prevent end users from launching remote desktops and published applications. This feature does not prevent end users from logging in to Horizon 7.

Table 1. Global Client Restriction Settings for Client Sessions

Setting	Description
Horizon Client for Windows	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for Linux	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for Mac	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for iOS	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for Android	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for UWP	Enter a Horizon Client version number that is version 4.5.0 or later.
Horizon Client for Chrome	Enter a Horizon Client version number that is version 4.8.0 or later.
Horizon Client for HTML Access	Enter a Horizon Client version number that is version 4.5.0 or later.
Block Additional Clients	When you select this option, all other clients types except the whitelisted Horizon Clients will be blocked from launching any desktops or published applications. However, if you want your end users to use other client types to launch desktops and published applications, you must add the client type to the pae-AdditionalClientTypes LDAP attribute to bypass the block settings for that client type. You can use the ADSI Edit utility to edit LDAP attributes on the Connection Server. In the ADSI Edit utility, the pae-AdditionalClientTypes LDAP attribute is available under CN=Common, OU=Global, OU=Properties, DC=vdi, DC=vmware, DC=int.
Message	Enter the message to display if a user tries to launch a desktop or published application from a non-whitelisted client type or version.