How can I configure USB authorizations for HP Anyware and PCoIP Software Client?

Rate this Article
Average: 5 (2 votes)

August 23, 2018

Last modified: 09/03/2023, 6:07 pm

Knowledge Base Article Tutorial Peripheral Devices Security HP Anyware

Configuring PCoIP Agent USB authorizations for HP Anyware

 

From HP Anyware release version 2.11 and newer, USB redirection is enabled by default. USB bridging, which enables USB devices to be used via a PCoIP Client on a HP Anyware PCoIP Agent, is enabled by default. To prevent USB devices from being used from remote sessions, USB redirection must be disabled by changing the Enable/disable USB in the PCoIP session GPO variable.

To modify USB redirection, the GPO administrative template file into the host VM to disable the USB support  and configure authorization of USB devices.

 

Steps to import GPO administrative template

 

  1. Open the Local GPO Editor:

    1. Press  + r to open a run dialog.

    2. Type gpedit.msc and press Enter.

  2. Navigate to the Local Computer Policy > Computer Configuration > Administrative Templates directory.
  3. Right-click the Administrative Templates folder and select Add/Remove Templates from the context menu.
  4. Click Add, and navigate to thefollowing directory:
    C:\Program Files (x86)\Teradici\PCoIP Agent\configuration
  5. Select pcoip.adm, and click Open and then Close. The template file will be imported.

 

Steps to disable USB redirection

 

  1. Connect to the host you wish to configure via a PCoIP client.
  2. Open the Local GPO Editor:

    1. Press  + r to open a run dialog.

    2. Type gpedit.msc and press Enter.

  3. In the left pane, navigate to 
    Local Computer Policy 
    > Computer Configuration 
    > Administrative Templates 
    > Classic Administrative Templates (ADM) 
    > PCoIP Session Variables 
    > Overridable Administrator Defaults

  4. Double-click Enable/disable USB in the PCoIP session. The variable editor window appears.
  5. Select Disabled and click OK.
  6. Close the GPO Variable Editor.
  7. The change will be effective on the next PCoIP connection to the host desktop.

 

Steps to configure PCoIP USB allowed and disallowed device rules

 

  1. Connect to the host you wish to configure via a PCoIP client.

  2. Open the Local GPO Editor:

  3. Press  + r to open a run dialog.

  4. Type gpedit.msc and press Enter.
  5. In the left pane, navigate to 
    Local Computer Policy 
    > Computer Configuration 
    > Administrative Templates 
    > Classic Administrative Templates (ADM) 
    > PCoIP Session Variables 
    > Overridable Administrator Defaults
  6. Double-click Configure PCoIP USB allowed and unallowed device rules. The variable editor appears.
  7. Read the instructions in the help pane for detailed information about rule formats and restrictions.
  8. Specify your USB allowed and unallowed rules in the Options pane and click OK.
  9. Close the Local Group Policy editor.

  10. The change will be effective on the next PCoIP connection to the host desktop.

 

Steps to connect a USB device to PCoIP Software Client

 

Remote Windows hosts using the PCoIP Standard Agent or the PCoIP Graphics Agent can use USB devices that are attached to the client. When you connect a local USB device to your remote host it will be disabled on the client machine. USB device connections do not persist across multiple PCoIP sessions. You must connect your USB device each time you connect.

  1. Attach the USB device you want to connect.

  2. Select Connection > USB Devices from the PCoIP Software Client menu.

    A list of USB devices connected to your client machine appears. Integrated USB devices, such as built-in cameras on laptops, will appear in this list along with devices you have plugged in yourself.

    Some devices will identify themselves only as USB Device.

  3. Click Connect beside the USB device you want to use.

 

Steps to disconnect USB device from PCoIP Software Client

 

  1. Select Connection > USB Devices from the PCoIP Software Client menu.
  2. Click Disconnect beside the USB device you want to disconnect.

 

Steps to connect and disconnect a USB from a PCoIP Zero Client

 

PCoIP Zero Clients will automatically bridge all non HID devices to the PCoIP Agent. Any devices unauthorized will not be bridged. PCoIP Zero Clients have additional configuration that can be performed locally for authorization and unauthorization of USB devices. For more information How can I change USB authorizations for PCoIP Zero Client?