I find myself often needing to do a quick test on a machine and rather than building out group policies we can simply manually create the appropriate registry keys! I spent some time documenting each of these and hopefully you can find some value from them yourself one day.
Below is a list of corresponding Horizon Agent registry settings to the Horizon 7.9.0 View GPO Bundle
Agent Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
AllowDirectRDP | AllowDirectRDP | REG_SZ | false - disabled true - enabled |
AllowSingleSignon | AllowSingleSignon | REG_SZ | false - disabled true - enabled |
CommandsToRunOnConnect | Command1 | REG_SZ | C:\myscript.vbs |
CommandsToRunOnDisconnect | Command1 | REG_SZ | C:\myscript.vbs |
CommandsToRunOnReconnect | Command1 | REG_SZ | C:\myscript.vbs |
ConnectionTicketTimeout | VdmConnectionTicketTimeout | REG_DWORD | 30-900 |
CredentialFilterExceptions | CredentialFilterExceptions | REG_SZ | C:\someapp.exe |
Disable Time Zone Synchronization | DisableTimeZoneSynchronization | REG_SZ | false - disabled true - enabled |
DPI Synchronization | DpiSync | REG_DWORD | 0 - disabled 1 - enabled |
DPI Synchronization Per Connection | DpiSyncPerConnection | REG_DWORD | 0 - disabled 1 - enabled |
Enable multi-media acceleration | EnableMMR | REG_SZ | false - disabled true - enabled |
Force MMR to use software overlay | ForceMMRToUseSoftwareOverlay | REG_SZ | false - disabled true - enabled |
Single sign-on retry timeout | SSORetryTimeout | REG_DWORD | 0-30000 |
ShowDiskActivityIcon | ShowDiskActivityIcon | REG_SZ | false - disabled true - enabled |
Toggle Display Settings Control | ToggleDisplaySettingsControl | REG_SZ | false - disabled true - enabled |
Enable Unauthenticated Access | UnAuthenticatedAccessEnabled | REG_DWORD | 0 - disabled 1 - enabled |
Allow control passing to collaborators | AllowCollaborationControlPassing | REG_SZ | false - disabled true - enabled |
Allow inviting collaborators by e-mail | AllowCollaborationInviteByEmail | REG_SZ | false - disabled true - enabled |
Allow inviting collaborators by IM | AllowCollaborationInviteByIM | REG_SZ | false - disabled true - enabled |
Separator used for multiple e-mail addresses in mailto: links | CollaborationEmailInviteDelimiter | REG_SZ | , or ; |
Turn off collaboration | AllowCollaboration | REG_SZ | false - disabled true - enabled |
Maximum number of invited collaborators | MaxCollaboratorCount | REG_SZ | 1-10 |
Collaboration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\CollaborationServerURLs
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Server URLs to include in invitation message | horizon.domain.com | REG_SZ | (blank - reserved for future use) |
Agent Security - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Security
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Accept SSL encrypted framework channel | AcceptTicketSSLAuth | REG_SZ | 0 - disabled 1 - enabled 3 - enforce |
Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Default Color Mode | DefaultColorMode | REG_DWORD | 1 - Black & White 2 - Greyscale 3 - Color |
Default Duplex | DefaultDuplex | REG_DWORD | 1 - Simplex 2 - Duplex |
Disable functionality | ScannerRedirection | REG_DWORD | 0 - enabled 1 - disabled |
Hide Webcam | HideWebcam | REG_DWORD | 0 - enabled 1 - disabled |
Lock Config | LockConfig | REG_DWORD | 0 - enabled 1 - disabled |
Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection\ConnectAtLogin
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Default Scanner | TWAIN TWAIN Scanner WIA WIA Scanner | REG_DWORD REG_SZ REG_DWORD REG_SZ | 0 - none, 1 - autoselect, 2 - last used, 3 - specified text field (ie.TestScanner) 0 - none, 1 - autoselect, 2 - last used, 3 - specified text field (ie.TestScanner) |
Serial COM - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Bandwidth limit | BandwidthLimit | REG_DWORD | kbps (0-2097152) |
Disable functionality | Disabled | REG_DWORD | 0 - enabled 1 - disabled |
Local settings priority | LocalSettingsPriority | REG_DWORD | 0 - enabled 1 - disabled |
Lock configuration | LockConfig | REG_DWORD | 0 - enabled 1 - disabled |
COM Port Isolation Mode | IsolatePorts | REG_DWORD | 0 - isolation disabled 1 - full isolation |
Serial COM PortSettings - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings\PortSettings\PortSettingsX (X=1-5)
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
PortSettingsX (X=1-5) | Autoconnect DisableErrorsInWaitMask DstVirtPortNum FixedBaudRate FixedFlowControl FixedLineControlDataBits FixedLineControlParity FixedLineControlStopBits HandleBtDisappear IgnoreDsr PauseBeforeClosePort PauseBeforeSendData Serial2USBModeChangeEnabled SrcPortDevice SrcPortNum TimeoutsMultiplicator UsbToComTroubleShooting UseFixedBaudRate UseFixedFlowControl UseFixedLineControl UsePauseBeforeSendData UseTimeoutsMultiplicator | REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_SZ REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD REG_DWORD | 1 - enabled 1 - enabled 1-255 (virtual COM port number) 110-115200 0 - Hardware 1 - Xon/Xoff 2 - None 5-8 0 - No 1 - Odd 2 - Even 3 - Mark 4 - Space 0 - 1 bit 1 - 1.5 bits 2 - 2 bits 1 - enabled 1 - enabled 0-3000 (ms) 0-5000 (ms) 1 - enabled text field (ie. COM5 or /dev/ttySerial0) 1-255 (ie. 2 means COM2) 1-10 1 - enabled 1 - enabled 1 - enabled 1 - enabled 1 - enabled 1 - enabled |
Smartcard Redirection Local Reader Access - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\SmartcardRedirection
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Allow applications access to Local Smart Card readers | AllowLocalAccess | REG_SZ | false - disabled true - enabled |
Local Reader Name | LocalReaderName | REG_SZ | text field (ie. Test) |
Require an inserted Smart Card | EnableLocalAccessAtCardInsert | REG_SZ | false - disabled true - enabled |
TrueSSO Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\CertSSO
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
All key sizes | KeySizes | REG_SZ | 1024,2048,3072,4096 |
Minimum validity period required for a certificate | ValidityPeriodAtReconnect | REG_DWORD | 5-9999 (minutes) |
Certificate wait timeout | CertSSOCertificateTimeoutSec | REG_DWORD | 10-120 (seconds) |
Disable True SSO | DisableCertSSO | REG_SZ | false - disabled true - enabled |
Number of keys to pre-create | KeyCount | REG_DWORD | 1-100 |
Minimum key size | MinKeySize | REG_DWORD | 1024-8192 |
Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Send updates for empty or offscreen windows | AllowTinyOrOffscreenWindows | REG_SZ | false - disabled true - enabled |
Enable Unity Touch | EnableUnityTouch | REG_SZ | false - disabled true - enabled |
Enable system tray redirection for Hosted Apps | EnableSystemTrayRedirection | REG_SZ | false - disabled true - enabled |
Enable user profile customization for Hosted Apps | CustomizeUserProfile | REG_SZ | false - disabled true - enabled |
Only launch new instances of Hosted Apps if arguments are different | LaunchAppWhenArgsAreDifferent | REG_SZ | false - disabled true - enabled |
Limit usage of Windows hooks | MinimalHookingModeEnabled | REG_SZ | false - disabled true - enabled |
Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity\Filters
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Unity Filter rule list | classname=XYZ company=XYZ product=XYZ major=XYZ minor=XYZ build=XYZ revision=XYZ | REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ REG_SZ | classname=XYZ company=XYZ product=XYZ major=XYZ minor=XYZ build=XYZ revision=XYZ |
View Agent Direct-Connection Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\XMLAPI
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Applications Enabled | appEnabled | REG_SZ | false - disabled true - enabled |
Client Config Name Value Pairs | ClientConfig (subkey) Name=Value1 | REG_SZ | text field (ie. clientCredentialCacheTimeout=1440) |
Client Credential Cache Timeout | clientCredentialCacheTimeout | REG_SZ | 0 - never -1 - forever custom value (minutes) |
Client Session Timeout | clientSessionTimeout | REG_SZ | seconds (default is 36000 - 10 hours) |
Client setting: AlwaysConnect | alwaysConnect | REG_SZ | false - disabled true - enabled |
Client setting: AutoConnect | autoConnect | REG_SZ | false - disabled true - enabled |
Client setting: ScreenSize | screenSize | REG_SZ | text field (ie. 1024x768) |
Default Protocol | defaultProtocol | REG_SZ | text field (ie. BLAST) |
Disclaimer Enabled | disclaimerEnabled | REG_SZ | false - disabled true - enabled |
Disclaimer Text | disclaimerText | REG_SZ | text field (ie. Warning) |
External Blast Port | externalBlastPort | REG_SZ | text field |
External Framework Channel Port | externalFrameworkChannelPort | REG_SZ | text field |
External IP Address | externalIPAddress | REG_SZ | text field |
External PCoIP Port | externalPCoIPPort | REG_SZ | text field |
External RDP Port | externalRDPPort | REG_SZ | text field |
HTTPS Port Number | httpsPortNumber | REG_SZ | text field |
Multimedia redirection (MMR) Enabled | mmrEnabled | REG_SZ | false - disabled true - enabled |
Reset Enabled | resetEnabled | REG_SZ | false - disabled true - enabled |
Session Timeout | sessionTimeout | REG_SZ | text field (minutes) |
USB AutoConnect | usbAutoConnect | REG_SZ | false - disabled true - enabled |
USB Enabled | usbEnabled | REG_SZ | false - disabled true - enabled |
User Idle Timeout | userIdleTimeout | REG_SZ | text field (seconds) |
X509 Certificate Authentication | x509CertAuth | REG_SZ | 0 - disabled 1 - allowed 2 - required |
X509 SSL Certificate Authentication Enabled | x509SSLCertAuth | REG_SZ | false - disabled true - enabled |
View RTAV Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\RTAV
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Disable RTAV | DisableRTAV | REG_SZ | false - disabled true - enabled |
Resolution - Default image resolution height in pixels | WebcamDefaultResHeight | REG_DWORD | 1-9999 |
Resolution - Default image resolution width in pixels | WebcamDefaultResWidth | REG_DWORD | 1-9999 |
Max frames per second | WebcamMaxFrameRate | REG_DWORD | 1-25 |
Resolution - Max image height in pixels | WebcamMaxResHeight | REG_DWORD | 1-9999 |
Resolution - Max image width in pixels | WebcamMaxResWidth | REG_DWORD | 1-9999 |
View USB Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\USB
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Exclude Vid/Pid Device | ExcludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
Exclude All Devices | ExcludeAllDevices | REG_SZ | false - disabled true - enabled |
Exclude Device Family | ExcludeFamily | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
Include Vid/Pid Device | IncludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
Include Device Family | IncludeFamily | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
Allow Audio Input Devices | AllowAudioIn | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow Audio Output Devices | AllowAudioOut | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow Audio Device Splitting | AllowAutoDeviceSplitting | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow HID-Bootable | AllowHIDBootable | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow Smart Cards | AllowSmartcard | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow Video Devices | AllowVideo | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow keyboard and Mouse Devices | AllowKeyboardMouse | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Allow other input devices | AllowHID | REG_SZ | d:true = Allow - Default Client Setting o:true = Allow - Override Client Setting d:false = Disable - Default Client Setting o:false = Disable - Override Client Setting |
Exclude Vid/Pid Device from Split | SplitExcludeVidPid | REG_SZ | {m|o}: m=client setting will merge with agent setting o=agent setting will override client setting |
Split Vid/Pid Device | SplitVidPid | REG_SZ | {m|o}: |
VMware Client IP Transparency - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware CIT
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Default proxy server | proxy_default_ie_proxyserver | REG_SZ | text field (ie. proxyserver.local) |
Enable | enabled | REG_DWORD | 0 - disabled 1 - enabled |
Default auto detect proxy | proxy_default_ie_autodetect | REG_DWORD | 0 - disabled 1 - enabled |
Set proxy for Java applet | update_java_proxy | REG_SZ | client - Use client IP transparency for Java proxy direct - Use direct connect for Java proxy default - Use the default value for Java proxy |
VMware Device Bridge - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware DeviceBridge
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Disable Device Bridge BAS Plugin | DisableBASPlugin | REG_SZ | false - disabled true - enabled |
VMware FlashMMR - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware FlashMMR
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable flash multi-media redirection | FlashRedirection | REG_DWORD | 0 - disabled 1 - enabled |
Minimum rect size to enable FlashMMR | flashmmr.minimumRectSize | REG_SZ | x,x - Default (320x200) |
VMware Horizon Client Drive Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsdr
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Timeout for drive letter initialization | InitDriveLetterTimeout | REG_DWORD | 1 - 600000 (ms) |
Display redirected device with drive letter | IsDriveLetterNeeded | REG_SZ | false - disabled true - enabled |
VMware Horizon Client Drive Redirection Device Filtering - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsd\Filter
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Exclude Vid/Pid Device | ExcludeVidPid | REG_SZ | (ie. vid-0781_pid-554c;vid-0781_pid-9999) |
Include Vid/Pid Device | IncludeVidPid | REG_SZ | (ie. vid-0781_pid-554c;vid-0781_pid-9999) |
VMware HTML5 Features - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5Server
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable VMware HTML5 Features | enabled | REG_DWORD | 0 - disabled 1 - enabled |
Disable Automatically Detect Intranet | disable_autodetect_intranet | REG_DWORD | 0 - disabled 1 - enabled |
VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable VMware HTML5 Multimedia Redirection | enabled | REG_DWORD | 0 - disabled 1 - enable |
Enable Chrome Browser for VMware HTML5 Multimedia Redirection | chrome_enabled | REG_DWORD | 0 - disabled 1 - enable |
Enable Edge Browser for VMware HTML5 Multimedia Redirection | edge_enabled | REG_DWORD | 0 - disabled 1 - enable |
VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR\UrlWhiteList
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable URL list for VMware HTML5 Multimedia Redirection | http://website.com | REG_SZ | empty (future use) |
VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable VMware Geolocation Redirection | enabled | REG_DWORD | 0 - disabled 1 - enabled |
Set the minimum distance for which to report location updates | geoDistanceDelta | REG_SZ | xxx (distance in meters) |
VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR\UrlWhiteList
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Enable URL list for VMware Geolocation Redirection | http://website.com | REG_SZ | empty (future use) |
VMware Virtualization Pack for Skype for Business - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\VMWMediaProviderProxy
GPO Setting | Registry Key | Key Type | Values |
---|---|---|---|
Disable extended filter for acoustic echo cancellation in VMware Virtualization Pack for Skype for Business | DisableAECExtendedFilter | REG_DWORD | 0 - disabled 1 - enabled |
EnableDetectProxySettings | EnableDetectProxySettings | REG_DWORD | 0 - disabled 1 - enabled |
Force Skype for Business in non-optimized mode | SetForceNonOptimizedEnvVar | REG_SZ | environment variable (ie. ViewClient_F5_APM) |
Show Icon | ShowIcon | REG_DWORD | 0 - disabled 1 - enabled |
Show Messages | ShowMessages | REG_DWORD | 0 - disabled 1 - enabled |
Suppress Minor Version Mismatch Warning | SuppressMinorVersionMismatchWarning | REG_DWORD | 0 - disabled 1 - enabled |
There you have it, lots and lots of settings!
Add comment