Laptop person with pencil and paper

VMware Horizon Agent GPO Registry Keys

I find myself often needing to do a quick test on a machine and rather than building out group policies we can simply manually create the appropriate registry keys! I spent some time documenting each of these and hopefully you can find some value from them yourself one day.

Below is a list of corresponding Horizon Agent registry settings to the Horizon 7.9.0 View GPO Bundle

Agent Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration

GPO SettingRegistry KeyKey TypeValues
AllowDirectRDPAllowDirectRDPREG_SZfalse - disabled
true - enabled
AllowSingleSignonAllowSingleSignonREG_SZfalse - disabled
true - enabled
CommandsToRunOnConnectCommand1REG_SZC:\myscript.vbs
CommandsToRunOnDisconnectCommand1REG_SZC:\myscript.vbs
CommandsToRunOnReconnectCommand1REG_SZC:\myscript.vbs
ConnectionTicketTimeoutVdmConnectionTicketTimeoutREG_DWORD30-900
CredentialFilterExceptionsCredentialFilterExceptionsREG_SZC:\someapp.exe
Disable Time Zone SynchronizationDisableTimeZoneSynchronizationREG_SZfalse - disabled
true - enabled
DPI SynchronizationDpiSyncREG_DWORD0 - disabled
1 - enabled
DPI Synchronization Per ConnectionDpiSyncPerConnectionREG_DWORD0 - disabled
1 - enabled
Enable multi-media accelerationEnableMMRREG_SZfalse - disabled
true - enabled
Force MMR to use software overlayForceMMRToUseSoftwareOverlayREG_SZfalse - disabled
true - enabled
Single sign-on retry timeoutSSORetryTimeoutREG_DWORD0-30000
ShowDiskActivityIconShowDiskActivityIconREG_SZfalse - disabled
true - enabled
Toggle Display Settings ControlToggleDisplaySettingsControlREG_SZfalse - disabled
true - enabled
Enable Unauthenticated AccessUnAuthenticatedAccessEnabledREG_DWORD0 - disabled
1 - enabled
Allow control passing to collaboratorsAllowCollaborationControlPassingREG_SZfalse - disabled
true - enabled
Allow inviting collaborators by e-mailAllowCollaborationInviteByEmailREG_SZfalse - disabled
true - enabled
Allow inviting collaborators by IMAllowCollaborationInviteByIMREG_SZfalse - disabled
true - enabled
Separator used for multiple e-mail addresses in mailto: linksCollaborationEmailInviteDelimiterREG_SZ, or ;
Turn off collaborationAllowCollaborationREG_SZfalse - disabled
true - enabled
Maximum number of invited collaboratorsMaxCollaboratorCountREG_SZ1-10

Collaboration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\CollaborationServerURLs

GPO SettingRegistry KeyKey TypeValues
Server URLs to include in invitation messagehorizon.domain.comREG_SZ(blank - reserved for future use)

Agent Security - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Security

GPO SettingRegistry KeyKey TypeValues
Accept SSL encrypted framework channelAcceptTicketSSLAuthREG_SZ0 - disabled
1 - enabled
3 - enforce

Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection

GPO SettingRegistry KeyKey TypeValues
Default Color ModeDefaultColorModeREG_DWORD1 - Black & White
2 - Greyscale
3 - Color
Default DuplexDefaultDuplexREG_DWORD1 - Simplex
2 - Duplex
Disable functionalityScannerRedirectionREG_DWORD0 - enabled
1 - disabled
Hide WebcamHideWebcamREG_DWORD0 - enabled
1 - disabled
Lock ConfigLockConfigREG_DWORD0 - enabled
1 - disabled

Scanner Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\ScannerRedirection\ConnectAtLogin

GPO SettingRegistry KeyKey TypeValues
Default ScannerTWAIN
TWAIN Scanner
WIA
WIA Scanner
REG_DWORD
REG_SZ
REG_DWORD
REG_SZ
0 - none, 1 - autoselect, 2 - last used, 3 - specified
text field (ie.TestScanner)
0 - none, 1 - autoselect, 2 - last used, 3 - specified
text field (ie.TestScanner)

Serial COM - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings

GPO SettingRegistry KeyKey TypeValues
Bandwidth limitBandwidthLimitREG_DWORDkbps (0-2097152)
Disable functionalityDisabledREG_DWORD0 - enabled
1 - disabled
Local settings priorityLocalSettingsPriorityREG_DWORD0 - enabled
1 - disabled
Lock configurationLockConfigREG_DWORD0 - enabled
1 - disabled
COM Port Isolation ModeIsolatePortsREG_DWORD0 - isolation disabled
1 - full isolation

Serial COM PortSettings - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\SerialCOM\Agent\Settings\PortSettings\PortSettingsX (X=1-5)

GPO SettingRegistry KeyKey TypeValues
PortSettingsX (X=1-5)Autoconnect
DisableErrorsInWaitMask
DstVirtPortNum
FixedBaudRate
FixedFlowControl


FixedLineControlDataBits
FixedLineControlParity




FixedLineControlStopBits


HandleBtDisappear
IgnoreDsr
PauseBeforeClosePort
PauseBeforeSendData
Serial2USBModeChangeEnabled
SrcPortDevice
SrcPortNum
TimeoutsMultiplicator
UsbToComTroubleShooting
UseFixedBaudRate
UseFixedFlowControl
UseFixedLineControl
UsePauseBeforeSendData
UseTimeoutsMultiplicator
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD


REG_DWORD
REG_DWORD




REG_DWORD


REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_SZ
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
REG_DWORD
1 - enabled
1 - enabled
1-255 (virtual COM port number)
110-115200
0 - Hardware
1 - Xon/Xoff
2 - None
5-8
0 - No
1 - Odd
2 - Even
3 - Mark
4 - Space
0 - 1 bit
1 - 1.5 bits
2 - 2 bits
1 - enabled
1 - enabled
0-3000 (ms)
0-5000 (ms)
1 - enabled
text field (ie. COM5 or /dev/ttySerial0)
1-255 (ie. 2 means COM2)
1-10
1 - enabled
1 - enabled
1 - enabled
1 - enabled
1 - enabled
1 - enabled

Smartcard Redirection Local Reader Access - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\SmartcardRedirection

GPO SettingRegistry KeyKey TypeValues
Allow applications access to Local Smart Card readersAllowLocalAccessREG_SZfalse - disabled
true - enabled
Local Reader NameLocalReaderNameREG_SZtext field (ie. Test)
Require an inserted Smart CardEnableLocalAccessAtCardInsertREG_SZfalse - disabled
true - enabled

TrueSSO Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\CertSSO

GPO SettingRegistry KeyKey TypeValues
All key sizesKeySizesREG_SZ1024,2048,3072,4096
Minimum validity period required for a certificateValidityPeriodAtReconnectREG_DWORD5-9999 (minutes)
Certificate wait timeoutCertSSOCertificateTimeoutSecREG_DWORD10-120 (seconds)
Disable True SSODisableCertSSOREG_SZfalse - disabled
true - enabled
Number of keys to pre-createKeyCountREG_DWORD1-100
Minimum key sizeMinKeySizeREG_DWORD1024-8192

Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity

GPO SettingRegistry KeyKey TypeValues
Send updates for empty or offscreen windowsAllowTinyOrOffscreenWindowsREG_SZfalse - disabled
true - enabled
Enable Unity TouchEnableUnityTouchREG_SZfalse - disabled
true - enabled
Enable system tray redirection for Hosted AppsEnableSystemTrayRedirectionREG_SZfalse - disabled
true - enabled
Enable user profile customization for Hosted AppsCustomizeUserProfileREG_SZfalse - disabled
true - enabled
Only launch new instances of Hosted Apps if arguments are differentLaunchAppWhenArgsAreDifferentREG_SZfalse - disabled
true - enabled
Limit usage of Windows hooksMinimalHookingModeEnabledREG_SZfalse - disabled
true - enabled

Unity Touch and Hosted Apps - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\VMware Unity\Filters

GPO SettingRegistry KeyKey TypeValues
Unity Filter rule listclassname=XYZ
company=XYZ
product=XYZ
major=XYZ
minor=XYZ
build=XYZ
revision=XYZ
REG_SZ
REG_SZ
REG_SZ
REG_SZ
REG_SZ
REG_SZ
REG_SZ
classname=XYZ
company=XYZ
product=XYZ
major=XYZ
minor=XYZ
build=XYZ
revision=XYZ

View Agent Direct-Connection Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\XMLAPI

GPO SettingRegistry KeyKey TypeValues
Applications EnabledappEnabledREG_SZfalse - disabled
true - enabled
Client Config Name Value PairsClientConfig (subkey) Name=Value1REG_SZtext field (ie. clientCredentialCacheTimeout=1440)
Client Credential Cache TimeoutclientCredentialCacheTimeoutREG_SZ0 - never
-1 - forever
custom value (minutes)
Client Session TimeoutclientSessionTimeoutREG_SZseconds (default is 36000 - 10 hours)
Client setting: AlwaysConnectalwaysConnectREG_SZfalse - disabled
true - enabled
Client setting: AutoConnectautoConnectREG_SZfalse - disabled
true - enabled
Client setting: ScreenSizescreenSizeREG_SZtext field (ie. 1024x768)
Default ProtocoldefaultProtocolREG_SZtext field (ie. BLAST)
Disclaimer EnableddisclaimerEnabledREG_SZfalse - disabled
true - enabled
Disclaimer TextdisclaimerTextREG_SZtext field (ie. Warning)
External Blast PortexternalBlastPortREG_SZtext field
External Framework Channel PortexternalFrameworkChannelPortREG_SZtext field
External IP AddressexternalIPAddressREG_SZtext field
External PCoIP PortexternalPCoIPPortREG_SZtext field
External RDP PortexternalRDPPortREG_SZtext field
HTTPS Port NumberhttpsPortNumberREG_SZtext field
Multimedia redirection (MMR) EnabledmmrEnabledREG_SZfalse - disabled
true - enabled
Reset EnabledresetEnabledREG_SZfalse - disabled
true - enabled
Session TimeoutsessionTimeoutREG_SZtext field (minutes)
USB AutoConnectusbAutoConnectREG_SZfalse - disabled
true - enabled
USB EnabledusbEnabledREG_SZfalse - disabled
true - enabled
User Idle TimeoutuserIdleTimeoutREG_SZtext field (seconds)
X509 Certificate Authenticationx509CertAuthREG_SZ0 - disabled
1 - allowed
2 - required
X509 SSL Certificate Authentication Enabledx509SSLCertAuthREG_SZfalse - disabled
true - enabled

View RTAV Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\RTAV

GPO SettingRegistry KeyKey TypeValues
Disable RTAVDisableRTAVREG_SZfalse - disabled
true - enabled
Resolution - Default image resolution height in pixelsWebcamDefaultResHeightREG_DWORD1-9999
Resolution - Default image resolution width in pixelsWebcamDefaultResWidthREG_DWORD1-9999
Max frames per secondWebcamMaxFrameRateREG_DWORD1-25
Resolution - Max image height in pixelsWebcamMaxResHeightREG_DWORD1-9999
Resolution - Max image width in pixelsWebcamMaxResWidthREG_DWORD1-9999

View USB Configuration - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\USB

GPO SettingRegistry KeyKey TypeValues
Exclude Vid/Pid DeviceExcludeVidPidREG_SZ{m|o}:_pid->[;...]
m=client setting will merge with agent setting
o=agent setting will override client setting
Exclude All DevicesExcludeAllDevicesREG_SZfalse - disabled
true - enabled
Exclude Device FamilyExcludeFamilyREG_SZ{m|o}:[;...]
m=client setting will merge with agent setting
o=agent setting will override client setting
Include Vid/Pid DeviceIncludeVidPidREG_SZ{m|o}:_pid->[;...]
m=client setting will merge with agent setting
o=agent setting will override client setting
Include Device FamilyIncludeFamilyREG_SZ{m|o}:[;...]
m=client setting will merge with agent setting
o=agent setting will override client setting
Allow Audio Input DevicesAllowAudioInREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow Audio Output DevicesAllowAudioOutREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow Audio Device SplittingAllowAutoDeviceSplittingREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow HID-BootableAllowHIDBootableREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow Smart CardsAllowSmartcardREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow Video DevicesAllowVideoREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow keyboard and Mouse DevicesAllowKeyboardMouseREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Allow other input devicesAllowHIDREG_SZd:true = Allow - Default Client Setting
o:true = Allow - Override Client Setting
d:false = Disable - Default Client Setting
o:false = Disable - Override Client Setting
Exclude Vid/Pid Device from SplitSplitExcludeVidPidREG_SZ{m|o}:_pid->[;...]
m=client setting will merge with agent setting
o=agent setting will override client setting
Split Vid/Pid DeviceSplitVidPidREG_SZ{m|o}:_pid-(exintf:xx[;exintf:xx])>[;...]

VMware Client IP Transparency - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware CIT

GPO SettingRegistry KeyKey TypeValues
Default proxy serverproxy_default_ie_proxyserverREG_SZtext field (ie. proxyserver.local)
EnableenabledREG_DWORD0 - disabled
1 - enabled
Default auto detect proxyproxy_default_ie_autodetectREG_DWORD0 - disabled
1 - enabled
Set proxy for Java appletupdate_java_proxyREG_SZclient - Use client IP transparency for Java proxy
direct - Use direct connect for Java proxy
default - Use the default value for Java proxy

VMware Device Bridge - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware DeviceBridge

GPO SettingRegistry KeyKey TypeValues
Disable Device Bridge BAS PluginDisableBASPluginREG_SZfalse - disabled
true - enabled

VMware FlashMMR - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware FlashMMR

GPO SettingRegistry KeyKey TypeValues
Enable flash multi-media redirectionFlashRedirectionREG_DWORD0 - disabled
1 - enabled
Minimum rect size to enable FlashMMRflashmmr.minimumRectSizeREG_SZx,x - Default (320x200)

VMware Horizon Client Drive Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsdr

GPO SettingRegistry KeyKey TypeValues
Timeout for drive letter initializationInitDriveLetterTimeoutREG_DWORD1 - 600000 (ms)
Display redirected device with drive letterIsDriveLetterNeededREG_SZfalse - disabled
true - enabled

VMware Horizon Client Drive Redirection Device Filtering - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware tsd\Filter

GPO SettingRegistry KeyKey TypeValues
Exclude Vid/Pid DeviceExcludeVidPidREG_SZ_pid>[;...]
(ie. vid-0781_pid-554c;vid-0781_pid-9999)
Include Vid/Pid DeviceIncludeVidPidREG_SZ_pid>[;...]
(ie. vid-0781_pid-554c;vid-0781_pid-9999)

VMware HTML5 Features - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5Server

GPO SettingRegistry KeyKey TypeValues
Enable VMware HTML5 FeaturesenabledREG_DWORD0 - disabled
1 - enabled
Disable Automatically Detect Intranetdisable_autodetect_intranetREG_DWORD0 - disabled
1 - enabled

VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR

GPO SettingRegistry KeyKey TypeValues
Enable VMware HTML5 Multimedia Redirection enabledREG_DWORD0 - disabled
1 - enable
Enable Chrome Browser for VMware HTML5 Multimedia Redirectionchrome_enabledREG_DWORD0 - disabled
1 - enable
Enable Edge Browser for VMware HTML5 Multimedia Redirectionedge_enabledREG_DWORD0 - disabled
1 - enable

VMware HTML5 Features > VMware HTML5 Multimedia Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware HTML5MMR\UrlWhiteList

GPO SettingRegistry KeyKey TypeValues
Enable URL list for VMware HTML5 Multimedia Redirectionhttp://website.comREG_SZempty (future use)

VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR

GPO SettingRegistry KeyKey TypeValues
Enable VMware Geolocation RedirectionenabledREG_DWORD0 - disabled
1 - enabled
Set the minimum distance for which to report location updatesgeoDistanceDeltaREG_SZxxx (distance in meters)

VMware HTML5 Features > VMware Geolocation Redirection - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware GEOREDIR\UrlWhiteList

GPO SettingRegistry KeyKey TypeValues
Enable URL list for VMware Geolocation Redirectionhttp://website.comREG_SZempty (future use)

VMware Virtualization Pack for Skype for Business - These settings are stored in HKLM\Software\Policies\VMware, Inc.\VMware VDM\Agent\VMWMediaProviderProxy

GPO SettingRegistry KeyKey TypeValues
Disable extended filter for acoustic echo cancellation in VMware Virtualization Pack for Skype for BusinessDisableAECExtendedFilterREG_DWORD0 - disabled
1 - enabled
EnableDetectProxySettingsEnableDetectProxySettingsREG_DWORD0 - disabled
1 - enabled
Force Skype for Business in non-optimized modeSetForceNonOptimizedEnvVarREG_SZenvironment variable (ie. ViewClient_F5_APM)
Show IconShowIconREG_DWORD0 - disabled
1 - enabled
Show MessagesShowMessagesREG_DWORD0 - disabled
1 - enabled
Suppress Minor Version Mismatch WarningSuppressMinorVersionMismatchWarningREG_DWORD0 - disabled
1 - enabled

 

There you have it, lots and lots of settings!

Add comment