The View Agent Configuration ADM template file (vdm_agent.adm) contains policy settings related to the authentication and environmental components of View Agent.

View Agent Configuration Template Settings describes policy settings in the View Agent Configuration ADM template file other than those settings that are used with USB devices. The template contains both Computer Configuration and User Configuration settings. The User Configuration setting overrides the equivalent Computer Configuration setting.

View Agent Configuration Template Settings

Setting

Computer

User

Properties

AllowDirectRDP

X

Determines whether non-View clients can connect directly to View desktops with RDP. When this setting is disabled, View Agent permits only View-managed connections through View Client.

When connecting to a virtual desktop from View Client for Mac OS X, do not disable the AllowDirectRDP setting. If this setting is disabled, the connection fails with an Access is denied error.

By default, while a user is logged in to a View desktop session, you can use RDP to connect to the desktop virtual machine from outside of View. The RDP connection terminates the View desktop session, and the View user's unsaved data and settings might be lost. The View user cannot log in to the desktop until the external RDP connection is closed. To avoid this situation, disable the AllowDirectRDP setting.

This setting is enabled by default.

AllowSingleSignon

X

Determines whether single sign-on (SSO) is used to connect users to View desktops. When this setting is enabled, users are required to enter only their credentials when connecting with View Client. When it is disabled, users must reauthenticate when the remote connection is made.

This setting is enabled by default.

CommandsToRunOnConnect

X

Specifies a list of commands or command scripts to be run when a session is connected for the first time.

See Running Commands on View Desktops for more information.

CommandsToRunOnReconnect

X

Specifies a list of commands or command scripts to be run when a session is reconnected after a disconnect.

See Running Commands on View Desktops for more information.

Connect using DNS Name

X

Determines whether View Connection Server uses the DNS name instead of the IP address of the host when connecting. This setting is typically enabled in a NAT or firewall situation when View Client or View Connection Server cannot use the desktop IP address directly.

This setting is disabled by default.

ConnectionTicketTimeout

X

Specifies the amount of time in seconds that the View connection ticket is valid.

View clients use a connection ticket for verification and single sign-on when connecting to View Agent. For security reasons, a connection ticket is valid for a limited amount of time. When a user connects to a View desktop, authentication must take place within the connection ticket timeout period or the session times out.

If this setting is not configured, the default timeout period is 900 seconds.

CredentialFilterExceptions

X

Specifies the executable files that are not allowed to load the agent CredentialFilter. Filenames must not include a path or suffix. Use a semicolon to separate multiple filenames.

Disable Time Zone Synchronization

X

X

Determines whether the time zone of the View desktop is synchronized with the time zone of the connected client. An enabled setting applies only if the Disable time zone forwarding setting of the View Client Configuration policy is not set to disabled.

This setting is disabled by default.

Enable multi-media acceleration

X

Determines whether multimedia redirection (MMR) is enabled on the View desktop.

MMR is a Microsoft DirectShow filter that forwards multimedia data from specific codecs on the remote system directly through a TCP socket to the client. The data is then decoded directly on the client, where it is played. You can disable MMR if the client has insufficient resources to handle local multimedia decoding.

MMR does not work correctly if the View Client video display hardware does not have overlay support. MMR policy does not apply to local desktop sessions.

This setting is enabled by default.

Force MMR to use software overlay

X

Determines whether the multimedia redirection (MMR) feature uses a software overlay instead of a hardware overlay.

MMR uses video display hardware with overlay support for better performance. Because hardware overlays typically exist only on the primary monitor in a multi-monitor system, video is not displayed when it is dragged from the primary monitor to a secondary monitor.

Enabling this setting forces MMR to use a software overlay on all monitors.

This setting is disabled by default.

ShowDiskActivityIcon

X

This setting is not supported in this release.

Toggle Display Settings Control

X

Determines whether to disable the Settings tab in the Display control panel when a client session uses the PCoIP display protocol.

This setting is enabled by default.

You can define USB policy settings for both View Agent and View Client for Windows. On connection, View Client downloads the USB policy settings from View Agent and uses them in conjunction with the View Client USB policy settings to decide which devices it will allow to be available for redirection from the client computer.

The settings apply at computer level. View Agent preferentially reads the settings from the GPO at computer level, and otherwise from the registry at HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\USB

View Agent Configuration Template: Device-Splitting Settings describes each policy setting for splitting composite USB devices in the View Agent Configuration ADM template file. View Agent does not enforce these settings. View Agent passes the settings to View Client for interpretation and enforcement according to whether you specify the merge (m) or override (o) modifier. View Client uses the settings to decide whether to split composite USB devices into their component devices, and whether to exclude the component devices from being available for redirection. For a description of how View applies the policies for splitting composite USB devices, see Configuring Device Splitting Policy Settings for Composite USB Devices.

View Agent Configuration Template: Device-Splitting Settings

Setting

Properties

Allow Auto Device Splitting

Allows the automatic splitting of composite USB devices.

The default value is undefined.

Exclude Vid/Pid Device From Split

Excludes a composite USB device specified by vendor and product IDs from splitting. The format of the setting is {m|o}:vid-xxx1_pid-yyy2[;vid-xxx2_pid-yyy2]...

You must specify ID numbers in hexadecimal. You can use the wildcard character (*) in place of individual digits in an ID.

For example: o:vid-0781_pid-55**

The default value is undefined.

Split Vid/Pid Device

Treats the components of a composite USB device specified by vendor and product IDs as separate devices. The format of the setting is

{m|o}:vid-xxxx_pid-yyyy(exintf:zz[;exintf:ww])

or

{m|o}:vid-xxxx_pid-yyyy(exintf:zz[;exintf:ww])

You can use the exintf keyword to exclude components from redirection by specifying their interface number. You must specify ID numbers in hexadecimal, and interface numbers in decimal including any leading zero. You can use the wildcard character (*) in place of individual digits in an ID.

For example: o:vid-0781_pid-554c(exintf:01;exintf:02)

Note

View does not automatically include the components that you have not explicitly excluded. You must specify a filter policy such as Include Vid/Pid Device to include those components.

The default value is undefined.

View Agent Configuration Template: Agent-Enforced Settings describes each agent-enforced policy setting for USB in the View Agent Configuration ADM template file. View Agent uses the settings to decide if a USB device can be forwarded to the host machine. View Agent also passes the settings to View Client for interpretation and enforcement according to whether you specify the merge (m) or override (o) modifier. View Client uses the settings to decide if a USB device is available for redirection. As View Agent always enforces an agent-enforced policy setting that you specify, the effect might be to counteract the policy that you have set for View Client. For a description of how View applies the policies for filtering USB devices, see Configuring Filter Policy Settings for USB Devices.

View Agent Configuration Template: Agent-Enforced Settings

Setting

Properties

Exclude All Devices

Excludes all USB devices from being forwarded. If set to true, you can use other policy settings to allow specific devices or families of devices to be forwarded. If set to false, you can use other policy settings to prevent specific devices or families of devices from being forwarded.

If set to true and passed to View Client, this setting always overrides the setting on View Client. You cannot use the merge (m) or override (o) modifier with this setting.

The default value is undefined, which equates to false.

Exclude Device Family

Excludes families of devices from being forwarded. The format of the setting is {m|o}:family_name_1[;family_name_2]...

For example: o:bluetooth;smart-card

If you have enabled automatic device splitting, View examines the device family of each interface of a composite USB device to decide which interfaces should be excluded. If you have disabled automatic device splitting, View examines the device family of the whole composite USB device.

The default value is undefined.

Exclude Vid/Pid Device

Excludes devices with specified vendor and product IDs from being forwarded. The format of the setting is {m|o}:vid-xxx1_pid-yyy2[;vid-xxx2_pid-yyy2]...

You must specify ID numbers in hexadecimal. You can use the wildcard character (*) in place of individual digits in an ID.

For example: m:vid-0781_pid-****;vid-0561_pid-554c

The default value is undefined.

Include Device Family

Includes families of devices that can be forwarded. The format of the setting is {m|o}:family_name_1[;family_name_2]...

For example: m:storage

The default value is undefined.

Include Vid/Pid Device

Includes devices with specified vendor and product IDs that can be forwarded. The format of the setting is {m|o}:vid-xxx1_pid-yyy2[;vid-xxx2_pid-yyy2]...

You must specify ID numbers in hexadecimal. You can use the wildcard character (*) in place of individual digits in an ID.

For example: o:vid-0561_pid-554c

The default value is undefined.

View Agent Configuration Template: Client-Interpreted Settings describes each client-interpreted policy setting in the View Agent Configuration ADM template file. View Agent does not enforce these settings. View Agent passes the settings to View Client for interpretation and enforcement. View Client uses the settings to decide if a USB device is available for redirection.

View Agent Configuration Template: Client-Interpreted Settings

Setting

Properties

Allow Audio Input Devices

Allows audio input devices to be forwarded.

The default value is undefined.

Allow Audio Output Devices

Allows audio output devices to be forwarded.

The default value is undefined.

Allow HIDBootable

Allows input devices other than keyboards or mice that are available at boot time (also known as hid-bootable devices) to be forwarded.

The default value is undefined.

Allow Other Input Devices

Allows input devices other than hid-bootable devices or keyboards with integrated pointing devices to be forwarded.

The default value is undefined.

Allow Keyboard and Mouse Devices

Allows keyboards with integrated pointing devices (such as a mouse, trackball, or touch pad) to be forwarded.

The default value is undefined.

Allow Smart Cards

Allows smart-card devices to be forwarded.

The default value is undefined.

Allow Video Devices

Allows video devices to be forwarded.

The default value is undefined.