A Horizon Cloud with On-Premises Infrastructure environment supports using VMware Horizon smart policies to control the end users' virtual desktops. These smart policies provide policy-driven control over the behavior of features such as USB redirection, virtual printing, clipboard redirection, client drive redirection, and PCoIP display protocol features on the virtual desktops. By using these smart policies, you can have policies that take effect only if certain conditions are met. For example, you can configure a policy that disables the client drive redirection feature if a user connects to a remote desktop from outside your corporate network.

For a detailed description of VMware Horizon smart policies and instructions on how to use them, see Using Smart Policies in the VMware Horizon documentation or the VMware Horizon smart policies information in the VMware Horizon document titled Configuring Remote Desktop Features in Horizon 7.

These smart policies require use of User Environment Manager software and the App Volumes Unified Agent Installer software to install the required agents. You can download the software from the VMware Downloads page. Obtain version User Environment Manager 9.1 or later. For User Environment Manager system requirements and complete installation instructions, see the User Environment Manager product documentation. For detailed information and best practices for using User Environment Manager and App Volumes with your Horizon Cloud with On-Premises Infrastructure environment, see the document titled VMware App Volumes with Horizon Cloud Application Delivery Best Practices and Operations Procedures at vmware.com.

The User Environment Manager Management Console runs on Windows. You can install it on a Windows VM running on your Horizon Cloud Node or on a Windows VM or machine from which you want to manage the User Environment Manager environment.

After you have completed installation and configuration of User Environment Manager and its Management Console as described in the previously mentioned documents, to configure a smart policy on your master virtual machine (VM), you need to perform the following steps on that master VM.

  • Run the App Volumes Unified Agent Installer to install the required agents on the master VM, as described in Install and Configure VMware Agents. The User Environment Manager agent is installed on the VM in that process. The User Environment Manager FlexEngine client is installed with that agent component.

  • Define the VMware Horizon smart policy using the User Environment Manager Management Console.

    For descriptions of the VMware Horizon smart policy settings you can select in User Environment Manager, see Horizon Smart Policy Settings in the VMware Horizon 7 documentation.

  • Add conditions that must be met for the policy to take effect, as described in Adding Conditions to Horizon Smart Policy Definitions in the VMware Horizon documentation.

For examples of using Horizon smart policies, see Reviewer's Guide for View in VMware Horizon 7: Smart Policies document at vmware.com.

Adding Conditions to Horizon Smart Policy Definitions describes the use of Horizon Client property conditions in the smart policies. Predefined Horizon Client properties correspond to ViewClient_ registry keys. Not all of the predefined properties used in Horizon 7 are applicable in a Horizon Cloud with On-Premises Infrastructure environment. The properties that are not applicable are:

  • ViewClient_Broker_Pool_Tags

  • ViewClient_Broker_Tags

  • ViewClient_Launch_Matched_Tags

  • ViewClient_Broker_DNS_Name

In a Horizon Cloud with On-Premises Infrastructure environment configured using Unified Access Gateway, the broker sets the following gateway-related properties by default to these values as follows:

  • If your Unified Access Gateway is external, then ViewClient_Broker_GatewayLocation property is set to External and ViewClient_Broker_GatewayType property is set to AP.

  • If your Unified Access Gateway is internal, then ViewClient_Broker_GatewayLocation property is set to Internal and ViewClient_Broker_GatewayType property is set to AP.

As stated in the Installation guide, using a Unified Access Gateway with your Horizon Cloud with On-Premises Infrastructure environment is a best practice. However, if you do not have a Unified Access Gateway, the broker sets the ViewClient_Broker_GatewayLocation property to Internal and the ViewClient_Broker_GatewayType property to None.