Due to security measures, organisations will want to restrict clipboard restrictions (copy-paste) from the cloud pc to base laptop but allow copy-paste to work from base laptop to cloud pc. In this case, how can we achieve this??
Prerequisites
Session hosts(cloud pc) running Windows 11 Insider Preview Build 25898 or the most recent version of Windows Insider Build (Dev Channel). You must join the Windows Insider Program to activate the Dev Channel Preview Build.
The “Do not allow clipboard redirection” setting must be set to disabled. Else this settings will not work.
There are 3 ways to block clipboard redirection from cloud pc to the client laptop. They are,
1. Intune configuration policy
2. GPO
3. Registry
Below, I will share steps to configure through Intune portal.
Open Intune and Create a profile with custom settings for Windows 10 and later devices, with the Templates profile type and the Custom profile template name.
For the Configuration settings tab, select Add
In the Add row pane, do the following
To configure the clipboard from session host to client:
Name: Block copy paste from Session host to client
Description: enter description
OMA-URI:
./Vendor/MSFT/Policy/Config/RemoteDesktopServices/LimitServerToClientClipboardRedirection
Data type:
String
Value:
<![CDATA[<enabled/><data id="TS_SC_CLIPBOARD_RESTRICTION_Text" value="0"/>]]>
This will block clipboard redirection from session host (cloudpc) to base laptop alone.
Respective Registry keys:
Users can however copy-paste items from base laptop to cloud pc but copy-paste from cloud pc to base laptop will be restricted using this method.
No comments:
Post a Comment