JustinI find myself often needing to do a quick test on a machine and rather than building out group policies we can simply manually create the appropriate registry keys! I spent some time documenting each of these and hopefully you can find some value from them yourself one day.
Below is a list of corresponding Horizon Agent registry settings to the Horizon 7.9.0 View GPO Bundle
Agent Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| AllowDirectRDP | AllowDirectRDP | REG_SZ | false - disabled true - enabled |
| AllowSingleSignon | AllowSingleSignon | REG_SZ | false - disabled true - enabled |
| CommandsToRunOnConnect | Command1 | REG_SZ | C:\myscript.vbs |
| CommandsToRunOnDisconnect | Command1 | REG_SZ | C:\myscript.vbs |
| CommandsToRunOnReconnect | Command1 | REG_SZ | C:\myscript.vbs |
| ConnectionTicketTimeout | VdmConnectionTicketTimeout | REG_DWORD | 30-900 |
| CredentialFilterExceptions | CredentialFilterExceptions | REG_SZ | C:\someapp.exe |
| Disable Time Zone Synchronization | DisableTimeZoneSynchronization | REG_SZ | false - disabled true - enabled |
| DPI Synchronization | DpiSync | REG_DWORD | 0 - disabled 1 - enabled |
| DPI Synchronization Per Connection | DpiSyncPerConnection | REG_DWORD | 0 - disabled 1 - enabled |
| Enable multi-media acceleration | EnableMMR | REG_SZ | false - disabled true - enabled |
| Force MMR to use software overlay | ForceMMRToUseSoftwareOverlay | REG_SZ | false - disabled true - enabled |
| Single sign-on retry timeout | SSORetryTimeout | REG_DWORD | 0-30000 |
| ShowDiskActivityIcon | ShowDiskActivityIcon | REG_SZ | false - disabled true - enabled |
| Toggle Display Settings Control | ToggleDisplaySettingsControl | REG_SZ | false - disabled true - enabled |
| Enable Unauthenticated Access | UnAuthenticatedAccessEnabled | REG_DWORD | 0 - disabled 1 - enabled |
| Allow control passing to collaborators | AllowCollaborationControlPassing | REG_SZ | false - disabled true - enabled |
| Allow inviting collaborators by e-mail | AllowCollaborationInviteByEmail | REG_SZ | false - disabled true - enabled |
| Allow inviting collaborators by IM | AllowCollaborationInviteByIM | REG_SZ | false - disabled true - enabled |
| Separator used for multiple e-mail addresses in mailto: links | CollaborationEmailInviteDelimiter | REG_SZ | , or ; |
| Turn off collaboration | AllowCollaboration | REG_SZ | false - disabled true - enabled |
| Maximum number of invited collaborators | MaxCollaboratorCount | REG_SZ | 1-10 |
Collaboration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\CollaborationServerURLs
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Server URLs to include in invitation message | horizon.domain.com | REG_SZ | (blank - reserved for future use) |
Agent Security - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Security
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Accept SSL encrypted framework channel | AcceptTicketSSLAuth | REG_SZ | 0 - disabled 1 - enabled 3 - enforce |
Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Default Color Mode | DefaultColorMode | REG_DWORD | 1 - Black & White 2 - Greyscale 3 - Color |
| Default Duplex | DefaultDuplex | REG_DWORD | 1 - Simplex 2 - Duplex |
| Disable functionality | ScannerRedirection | REG_DWORD | 0 - enabled 1 - disabled |
| Hide Webcam | HideWebcam | REG_DWORD | 0 - enabled 1 - disabled |
| Lock Config | LockConfig | REG_DWORD | 0 - enabled 1 - disabled |
Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection\ConnectAtLogin
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Default Scanner | TWAIN TWAIN Scanner WIA WIA Scanner | REG_DWORD REG_SZ REG_DWORD REG_SZ | 0 - none, 1 - autoselect, 2 - last used, 3 - specified text field (ie.TestScanner) 0 - none, 1 - autoselect, 2 - last used, 3 - specified text field (ie.TestScanner) |
Serial COM - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Bandwidth limit | BandwidthLimit | REG_DWORD | kbps (0-2097152) |
| Disable functionality | Disabled | REG_DWORD | 0 - enabled 1 - disabled |
| Local settings priority | LocalSettingsPriority | REG_DWORD | 0 - enabled 1 - disabled |
| Lock configuration | LockConfig | REG_DWORD | 0 - enabled 1 - disabled |
| COM Port Isolation Mode | IsolatePorts | REG_DWORD | 0 - isolation disabled 1 - full isolation |
Serial COM PortSettings - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings\PortSettings\PortSettingsX (X=1-5)
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| PortSettingsX (X=1-5) | Autoconnect DisableErrorsInWaitMask DstVirtPortNum FixedBaudRate FixedFlowControl FixedLineControlDataBits FixedLineControlParity FixedLineControlStopBits HandleBtDisappear IgnoreDsr PauseBeforeClosePort PauseBeforeSendData Serial2USBModeChangeEnabled SrcPortDevice SrcPortNum TimeoutsMultiplicator UsbToComTroubleShooting UseFixedBaudRate UseFixedFlowControl UseFixedLineControl UsePauseBeforeSendData UseTimeoutsMultiplicator | REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_SZ REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD | 1 - enabled 1 - enabled 1-255 (virtual COM port number) 110-115200 0 - Hardware 1 - Xon/Xoff 2 - None 5-8 0 - No 1 - Odd 2 - Even 3 - Mark 4 - Space 0 - 1 bit 1 - 1.5 bits 2 - 2 bits 1 - enabled 1 - enabled 0-3000 (ms) 0-5000 (ms) 1 - enabled text field (ie. COM5 or /dev/ttySerial0) 1-255 (ie. 2 means COM2) 1-10 1 - enabled 1 - enabled 1 - enabled 1 - enabled 1 - enabled 1 - enabled |
Smartcard Redirection Local Reader Access - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\SmartcardRedirection
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Allow applications access to Local Smart Card readers | AllowLocalAccess | REG_SZ | false - disabled true - enabled |
| Local Reader Name | LocalReaderName | REG_SZ | text field (ie. Test) |
| Require an inserted Smart Card | EnableLocalAccessAtCardInsert | REG_SZ | false - disabled true - enabled |
TrueSSO Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\CertSSO
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| All key sizes | KeySizes | REG_SZ | 1024,2048,3072,4096 |
| Minimum validity period required for a certificate | ValidityPeriodAtReconnect | REG_DWORD | 5-9999 (minutes) |
| Certificate wait timeout | CertSSOCertificateTimeoutSec | REG_DWORD | 10-120 (seconds) |
| Disable True SSO | DisableCertSSO | REG_SZ | false - disabled true - enabled |
| Number of keys to pre-create | KeyCount | REG_DWORD | 1-100 |
| Minimum key size | MinKeySize | REG_DWORD | 1024-8192 |
Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Send updates for empty or offscreen windows | AllowTinyOrOffscreenWindows | REG_SZ | false - disabled true - enabled |
| Enable Unity Touch | EnableUnityTouch | REG_SZ | false - disabled true - enabled |
| Enable system tray redirection for Hosted Apps | EnableSystemTrayRedirection | REG_SZ | false - disabled true - enabled |
| Enable user profile customization for Hosted Apps | CustomizeUserProfile | REG_SZ | false - disabled true - enabled |
| Only launch new instances of Hosted Apps if arguments are different | LaunchAppWhenArgsAreDifferent | REG_SZ | false - disabled true - enabled |
| Limit usage of Windows hooks | MinimalHookingModeEnabled | REG_SZ | false - disabled true - enabled |
Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity\Filters
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Unity Filter rule list | classname=XYZ company=XYZ product=XYZ major=XYZ minor=XYZ build=XYZ revision=XYZ | REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ | classname=XYZ company=XYZ product=XYZ major=XYZ minor=XYZ build=XYZ revision=XYZ |
View Agent Direct-Connection Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\XMLAPI
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Applications Enabled | appEnabled | REG_SZ | false - disabled true - enabled |
| Client Config Name Value Pairs | ClientConfig (subkey) Name=Value1 | REG_SZ | text field (ie. clientCredentialCacheTimeout=1440) |
| Client Credential Cache Timeout | clientCredentialCacheTimeout | REG_SZ | 0 - never -1 - forever custom value (minutes) |
| Client Session Timeout | clientSessionTimeout | REG_SZ | seconds (default is 36000 - 10 hours) |
| Client setting: AlwaysConnect | alwaysConnect | REG_SZ | false - disabled true - enabled |
| Client setting: AutoConnect | autoConnect | REG_SZ | false - disabled true - enabled |
| Client setting: ScreenSize | screenSize | REG_SZ | text field (ie. 1024x768) |
| Default Protocol | defaultProtocol | REG_SZ | text field (ie. BLAST) |
| Disclaimer Enabled | disclaimerEnabled | REG_SZ | false - disabled true - enabled |
| Disclaimer Text | disclaimerText | REG_SZ | text field (ie. Warning) |
| External Blast Port | externalBlastPort | REG_SZ | text field |
| External Framework Channel Port | externalFrameworkChannelPort | REG_SZ | text field |
| External IP Address | externalIPAddress | REG_SZ | text field |
| External PCoIP Port | externalPCoIPPort | REG_SZ | text field |
| External RDP Port | externalRDPPort | REG_SZ | text field |
| HTTPS Port Number | httpsPortNumber | REG_SZ | text field |
| Multimedia redirection (MMR) Enabled | mmrEnabled | REG_SZ | false - disabled true - enabled |
| Reset Enabled | resetEnabled | REG_SZ | false - disabled true - enabled |
| Session Timeout | sessionTimeout | REG_SZ | text field (minutes) |
| USB AutoConnect | usbAutoConnect | REG_SZ | false - disabled true - enabled |
| USB Enabled | usbEnabled | REG_SZ | false - disabled true - enabled |
| User Idle Timeout | userIdleTimeout | REG_SZ | text field (seconds) |
| X509 Certificate Authentication | x509CertAuth | REG_SZ | 0 - disabled 1 - allowed 2 - required |
| X509 SSL Certificate Authentication Enabled | x509SSLCertAuth | REG_SZ | false - disabled true - enabled |
View RTAV Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\RTAV
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Disable RTAV | DisableRTAV | REG_SZ | false - disabled true - enabled |
| Resolution - Default image resolution height in pixels | WebcamDefaultResHeight | REG_DWORD | 1-9999 |
| Resolution - Default image resolution width in pixels | WebcamDefaultResWidth | REG_DWORD | 1-9999 |
| Max frames per second | WebcamMaxFrameRate | REG_DWORD | 1-25 |
| Resolution - Max image height in pixels | WebcamMaxResHeight | REG_DWORD | 1-9999 |
| Resolution - Max image width in pixels | WebcamMaxResWidth | REG_DWORD | 1-9999 |
View USB Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\USB
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Exclude Vid/Pid Device | ExcludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
| Exclude All Devices | ExcludeAllDevices | REG_SZ | false - disabled true - enabled |
| Exclude Device Family | ExcludeFamily | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
| Include Vid/Pid Device | IncludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
| Include Device Family | IncludeFamily | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
| Allow Audio Input Devices | AllowAudioIn | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow Audio Output Devices | AllowAudioOut | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow Audio Device Splitting | AllowAutoDeviceSplitting | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow HID-Bootable | AllowHIDBootable | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow Smart Cards | AllowSmartcard | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow Video Devices | AllowVideo | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow keyboard and Mouse Devices | AllowKeyboardMouse | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Allow other input devices | AllowHID | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
| Exclude Vid/Pid Device from Split | SplitExcludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
| Split Vid/Pid Device | SplitVidPid | REG_SZ | {m|o}: |
VMware Client IP Transparency - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware CIT
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Default proxy server | proxy_default_ie_proxyserver | REG_SZ | text field (ie. proxyserver.local) |
| Enable | enabled | REG_DWORD | 0 - disabled 1 - enabled |
| Default auto detect proxy | proxy_default_ie_autodetect | REG_DWORD | 0 - disabled 1 - enabled |
| Set proxy for Java applet | update_java_proxy | REG_SZ | client - Use client IP transparency for Java proxy direct - Use direct connect for Java proxy default - Use the default value for Java proxy |
VMware Device Bridge - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware DeviceBridge
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Disable Device Bridge BAS Plugin | DisableBASPlugin | REG_SZ | false - disabled true - enabled |
VMware FlashMMR - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware FlashMMR
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable flash multi-media redirection | FlashRedirection | REG_DWORD | 0 - disabled 1 - enabled |
| Minimum rect size to enable FlashMMR | flashmmr.minimumRectSize | REG_SZ | x,x - Default (320x200) |
VMware Horizon Client Drive Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsdr
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Timeout for drive letter initialization | InitDriveLetterTimeout | REG_DWORD | 1 - 600000 (ms) |
| Display redirected device with drive letter | IsDriveLetterNeeded | REG_SZ | false - disabled true - enabled |
VMware Horizon Client Drive Redirection Device Filtering - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsd\Filter
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Exclude Vid/Pid Device | ExcludeVidPid | REG_SZ | (ie. vid-0781_pid-554c;vid-0781_pid-9999) |
| Include Vid/Pid Device | IncludeVidPid | REG_SZ | (ie. vid-0781_pid-554c;vid-0781_pid-9999) |
VMware HTML5 Features - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5Server
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable VMware HTML5 Features | enabled | REG_DWORD | 0 - disabled 1 - enabled |
| Disable Automatically Detect Intranet | disable_autodetect_intranet | REG_DWORD | 0 - disabled 1 - enabled |
VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable VMware HTML5 Multimedia Redirection | enabled | REG_DWORD | 0 - disabled 1 - enable |
| Enable Chrome Browser for VMware HTML5 Multimedia Redirection | chrome_enabled | REG_DWORD | 0 - disabled 1 - enable |
| Enable Edge Browser for VMware HTML5 Multimedia Redirection | edge_enabled | REG_DWORD | 0 - disabled 1 - enable |
VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR\UrlWhiteList
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable URL list for VMware HTML5 Multimedia Redirection | http://website.com | REG_SZ | empty (future use) |
VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable VMware Geolocation Redirection | enabled | REG_DWORD | 0 - disabled 1 - enabled |
| Set the minimum distance for which to report location updates | geoDistanceDelta | REG_SZ | xxx (distance in meters) |
VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR\UrlWhiteList
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Enable URL list for VMware Geolocation Redirection | http://website.com | REG_SZ | empty (future use) |
VMware Virtualization Pack for Skype for Business - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\VMWMediaProviderProxy
| GPO Setting | Registry Key | Key Type | Values |
|---|---|---|---|
| Disable extended filter for acoustic echo cancellation in VMware Virtualization Pack for Skype for Business | DisableAECExtendedFilter | REG_DWORD | 0 - disabled 1 - enabled |
| EnableDetectProxySettings | EnableDetectProxySettings | REG_DWORD | 0 - disabled 1 - enabled |
| Force Skype for Business in non-optimized mode | SetForceNonOptimizedEnvVar | REG_SZ | environment variable (ie. ViewClient_F5_APM) |
| Show Icon | ShowIcon | REG_DWORD | 0 - disabled 1 - enabled |
| Show Messages | ShowMessages | REG_DWORD | 0 - disabled 1 - enabled |
| Suppress Minor Version Mismatch Warning | SuppressMinorVersionMismatchWarning | REG_DWORD | 0 - disabled 1 - enabled |
There you have it, lots and lots of settings!
Add comment