As this info isn't currently online anywhere I thought it might help others if I post it here...
I was tasked with disabling the ability to share storage devices from the users host machine to their VDI.
Everything we found, GPO settings, registry changes, etc. only allowed disabling sharing of external storage devices. However the users could still share their internal hard drives (anything other than drive C).
We discovered that manually reinstalling the Horizon Agent allowed us to choose not to install the 3 options that enabled sharing of all storage devices.
However, only a manual reinstall of the agent would allow this. An unattended install didn't offer an install switch for one of the three required options. So the best we could do was only disable sharing of external drives, with an unattended install.
The three options to disable are:
▪ Storage Drive Redirection (for the internal drives) ...this is the one we couldn't do except with a manual install.
▪ Client Drive Redirection (for external drives)
▪ USB Redirection (for external drives)
Finally we found two ways to do it.....
1) Using DEM. We haven't tested this yet, but it looks promising. Omnissa Product Documentation
| Omnissa |
remove preview |
|
| Omnissa Product Documentation |
| English Français cs-CZ da-DK Deutsch Español Italiano 日本語 ko-KR Nederlands pl-PL Português Русский sv-SE tr-TR 中文 (简体) 中文 (繁體, 台灣) |
| View this on Omnissa > |
|
|
2) The guy handling our ticket at Omnissa was able to talk to the designers. They gave him an install switch to try, and it worked.
The switch for Storage Drive Redirection is: StorageDriveRedir
So in addition to the info at this URL, you can add the switch above. Omnissa Product Documentation
| Omnissa |
remove preview |
|
| Omnissa Product Documentation |
| English Français cs-CZ da-DK Deutsch Español Italiano 日本語 ko-KR Nederlands pl-PL Português Русский sv-SE tr-TR 中文 (简体) 中文 (繁體, 台灣) |
| View this on Omnissa > |
|
|
Our final CMD line that I'll be running on our VDIs is this:
VMware-Horizon-Agent-x86_64-2312.1-8.12.1-23507832.exe /S /V"/qn ADDLOCAL=ALL REMOVE=ClientDriveRedirection,USB,StorageDriveRedir REBOOT=Reallysuppress /l*v %temp%\VMwareHorAgnt8.12.log"
Note that a reboot is required. In our case it's done by the software that we are using to push this install out to everyone.
I hope this helps someone. It took about a week to get to the answer. :)