You can use Windows registry key settings to control client drive redirection behavior on a remote desktop.

The Windows registry settings that control client drive redirection behavior on a remote desktop are located in the following path:

HKLM\Software\VMware, Inc.\VMware TSDR

You can use the Windows Registry Editor on the remote desktop to edit local registry settings.

Note: Client drive redirection policies set with Smart Policies take precedence over local registry settings.

Disabling Client Drive Redirection

To disable client drive redirection, create a new string value named disabled and set its value to true.

HKLM\Software\VMware, Inc.\VMware TSDR\disabled=true

The value is false (enabled) by default.

Preventing Write or Read Access to Shared Folders

To prevent write access to all folders that are shared with the remote desktop, create a new string value named permissions and set its value to any string that begins with r, except for rw.
HKLM\Software\VMware, Inc.\VMware TSDR\permissions=r

To prevent read access, set the permissions value to any string that begins with w.

HKLM\Software\VMware, Inc.\VMware TSDR\permissions=w

The value is rw (all shared folders are readable and writeable) by default.

Sharing Specific Folders

To share specific folders with the remote desktop, create a new key named default shares and create a new subkey for each folder to share with the remote desktop. For each subkey, create a new string value named name and set its value to the path of the folder to share. The following example shares the folders C:\ebooks and C:\spreadsheets.

HKLM\Software\VMware, Inc.\VMware TSDR\default shares\f1\name=C:\ebooks
HKLM\Software\VMware, Inc.\VMware TSDR\default shares\f2\name=C:\spreadsheets

If you set name to *all, all client drives are shared with the remote desktop. The *all setting is supported only on Windows client systems.

HKLM\Software\VMware, Inc.\VMware TSDR\default shares\1st\name=*all

To prevent the client from sharing additional folders (that is, folders that are not specified with the default shares key), create a string value named ForcedByAdmin and set its value to true.

HKLM\Software\VMware, Inc.\VMware TSDR\ForcedByAdmin=true

When the value is true, the Sharing dialog box does not appear when users connect to the remote desktop in Horizon Client. The value is false (clients can share additional folders) by default.

The following example shares the folders C:\ebooks and C:\spreadsheets, makes both folders read-only, and prevents the client from sharing additional folders.

HKLM\Software\VMware, Inc.\VMware TSDR\ForcedByAdmin=true
HKLM\Software\VMware, Inc.\VMware TSDR\permissions=r
HKLM\Software\VMware, Inc.\VMware TSDR\default shares\f1\name=C:\ebooks
HKLM\Software\VMware, Inc.\VMware TSDR\default shares\f2\name=C:\spreadsheets
Note: Do not use the ForcedByAdmin feature as a security feature or share control. A user can bypass the ForcedByAdmin=true setting by creating a link to an existing share that points to folders not specified with the default shares key.