Friday, May 10, 2024

w365: One way clipboard redirection

Due to security measures, organisations will want to restrict clipboard restrictions (copy-paste) from the cloud pc to base laptop but allow copy-paste to work from base laptop to cloud pc. In this case, how can we achieve this??

  • Session hosts(cloud pc) running Windows 11 Insider Preview Build 25898 or the most recent version of Windows Insider Build (Dev Channel). You must join the Windows Insider Program to activate the Dev Channel Preview Build. 

  • The “Do not allow clipboard redirection” setting must be set to disabled. Else this settings will not work.


How to block clipboard redirection from session host (cloud pc) to client laptop:

There are 3 ways to block clipboard redirection from cloud pc to the client laptop. They are,

1. Intune configuration policy

2. GPO

3. Registry

Below, I will share steps to configure through Intune portal.

  1. Open Intune and Create a profile with custom settings for Windows 10 and later devices, with the Templates profile type and the Custom profile template name.

  2. For the Configuration settings tab, select Add

  3. In the Add row pane, do the following 

    • To configure the clipboard from session host to client:

      • Name: Block copy paste from Session host to client

      • Description: enter description

      • OMA-URI./Vendor/MSFT/Policy/Config/RemoteDesktopServices/LimitServerToClientClipboardRedirection

      • Data typeString

      • Value

        <![CDATA[<enabled/><data id="TS_SC_CLIPBOARD_RESTRICTION_Text" value="0"/>]]>

        This will block clipboard redirection from session host (cloudpc) to base laptop alone.



Respective Registry keys:

Users can however copy-paste items from base laptop to cloud pc but copy-paste from cloud pc to base laptop will be restricted using this method.


PowerShell Scripts:

No comments:

Post a Comment