A Horizon Cloud environment supports using VMware Horizon smart policies to control the end users' virtual desktops. These smart policies provide policy-driven control over the behavior of features such as USB redirection, virtual printing, clipboard redirection, client drive redirection, and PCoIP display protocol features on the virtual desktops. By using these smart policies, you can have policies that take effect only if certain conditions are met. For example, you can configure a policy that disables the client drive redirection feature if a user connects to a remote desktop from outside your corporate network.

For a detailed description of VMware Horizon smart policies and instructions on how to use them, see Using Smart Policies in the VMware Horizon documentation or the VMware Horizon smart policies information in the VMware Horizon document titled Configuring Remote Desktop Features in Horizon 7.

These smart policies require use of User Environment Manager software and the App Volumes Unified Agent Installer software to install the required agents. You can download the software from the VMware Downloads page. Obtain version User Environment Manager 9.1 or later. For User Environment Manager system requirements and complete installation instructions, see the User Environment Manager product documentation. For detailed information and best practices for using User Environment Manager and App Volumes with your environment, see the document titled VMware App Volumes with Horizon Cloud Application Delivery Best Practices and Operations Procedures at vmware.com.

After you have completed installation and configuration of User Environment Manager and its Management Console as described in the previously mentioned documents, to configure a smart policy on your master virtual machine (VM), you need to perform the following steps on that master VM.

  • If you have not done so already, run the App Volumes Unified Agent Installer, as described in Install the App Volumes Agent. The User Environment Manager agent is installed on the VM in that process. The User Environment Manager FlexEngine client is installed with that agent component.

  • Define the VMware Horizon smart policy using the User Environment Manager Management Console.

    For descriptions of the VMware Horizon smart policy settings you can select in User Environment Manager, see Horizon Smart Policy Settings in the VMware Horizon 7 documentation.

  • Add conditions that must be met for the policy to take effect, as described in Adding Conditions to Horizon Smart Policy Definitions in the VMware Horizon documentation.

For examples of using Horizon smart policies, see Reviewer's Guide for View in VMware Horizon 7: Smart Policies document at vmware.com.

Adding Conditions to Horizon Smart Policy Definitions describes the use of Horizon Client property conditions in the smart policies. Predefined Horizon Client properties correspond to ViewClient_ registry keys. Not all of the predefined properties used in Horizon 7 are applicable in a Horizon Cloud environment. The properties that are not applicable are:

  • ViewClient_Broker_Pool_Tags

  • ViewClient_Broker_Tags

  • ViewClient_Launch_Matched_Tags

  • ViewClient_Broker_DNS_Name

In a Horizon Cloud environment configured using Unified Access Gateway, the broker sets the following gateway-related properties by default to these values as follows:

  • If your Unified Access Gateway is external, then the ViewClient_Broker_GatewayLocation property is set to External and ViewClient_Broker_GatewayType property is set to AP.

  • If your Unified Access Gateway is internal, then the ViewClient_Broker_GatewayLocation property is set based on the Internal Networks list and the ViewClient_Broker_GatewayType property is set to AP.

Note:

The Internal Networks list is created by your service provider and is displayed on the General Settings page.

Using a Unified Access Gateway with your Horizon Cloud environment is a best practice. However, if you do not have a Unified Access Gateway, the broker sets the ViewClient_Broker_GatewayLocation property based on the Internal Networks list and sets the ViewClient_Broker_GatewayType property to None.