Setting Up Desktop and Application Pools in View

7 Allow Audio Input Devices, Allow Audio Output Devices, Allow HIDBootable, Allow HID (Non
Bootable and Not Mouse Keyboard), Allow Keyboard and Mouse Devices, Allow Smart Cards, and Allow
Video Devices
8 Combined effective Exclude All Devices policy evaluated to exclude or include all USB devices
You can set Exclude Path and Include Path filter policy settings only for Horizon Client. The Allow filter
policy settings that refer to separate device families have equal precedence.
If you configure a policy setting to exclude devices based on vendor and product ID values, Horizon Client
excludes a device whose vendor and product ID values match this policy setting even though you might
have configured an Allow policy setting for the family to which the device belongs.
The order of precedence for policy settings resolves conflicts between policy settings. If you configure Allow
Smart Cards to allow the redirection of smart cards, any higher precedence exclusion policy setting
overrides this policy. For example, you might have configured an Exclude Vid/Pid Device policy setting to
exclude smart-card devices with matching path or vendor and product ID values, or you might have
configured an Exclude Device Family policy setting that also excludes the smart-card device family
entirely.
If you have configured any View Agent filter policy settings, View Agent evaluates and enforces the filter
policy settings in the following order of precedence on the remote desktop or application, with item 1
having the highest precedence.
1 Exclude Vid/Pid Device
2 Include Vid/Pid Device
3 Exclude Device Family
4 Include Device Family
5 Agent-enforced Exclude All Devices policy set to exclude or include all USB devices
View Agent enforces this limited set of filter policy settings on its side of the connection.
By defining filter policy settings for View Agent, you can create a filtering policy for non-managed client
computers. The feature also allows you to block devices from being forwarded from client computers, even
if the filter policy settings for Horizon Client permit the redirection.
For example, if you configure a policy that permits Horizon Client to allow a device to be redirected, View
Agent blocks the device if you configure a policy for View Agent to exclude the device.
Examples of Setting Policies to Filter USB Devices
The vendor IDs and product IDs used in these examples are examples only. For information about
determining the vendor ID and product ID for a specify device, see “Using Log Files for Troubleshooting
and to Determine USB Device IDs,” on page 185.
n
On the client, exclude a particular device from being redirected:
Exclude Vid/Pid Device: Vid-0341_Pid-1a11
n
Block all storage devices from being redirected to this desktop or application pool. Use an agent-side
setting:
Exclude Device Family: o:storage
n
For all users in a desktop pool, block audio and video devices to ensure that these devices will always
be available for the Real-Time Audio-Video feature. Use an agent-side setting::
Exclude Device Family: o:video;audio
Note that another strategy would be to exclude specific devices by vendor and product ID.
Chapter 14 Using USB Devices with Remote Desktops and Applications
VMware, Inc. 191