SOLVED

RD client - Windows 365 - Block Clipboard

%3CLINGO-SUB%20id%3D%22lingo-sub-2711397%22%20slang%3D%22en-US%22%3ERD%20client%20-%20Windows%20365%20-%20Block%20Clipboard%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2711397%22%20slang%3D%22en-US%22%3EI%20am%20struggling%20to%20disable%20access%20to%20the%20clipboard%20data(Clipboard%20redirection)%20of%20the%20local%20client%20from%20the%20Cloud%20PC.%3CBR%20%2F%3E%3CBR%20%2F%3EWe%20want%20to%20ensure%20no%20data%20can%20get%20transferred%20to%20and%20from%20the%20Cloud%20PC%20to%20the%20local%20PC.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20used%20an%20on-prem%20GPO%2C%20the%20MEM%20settings%20catalog%2C%20OMA-URI%20and%20even%20manually%20added%20reg%20key%20fDisableClip%2C%20but%20can't%20seem%20to%20block%20clipboard.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAnyone%20else%20having%20similar%20troubles%3F%3CBR%20%2F%3E%3CBR%20%2F%3EFYI%20the%20config%20policy%20setting%20in%20MEM%20to%20block%20local%20drive%20access%20works%20perfectly%20but%20the%20block%20clipboard%2C%20COM%20port%2C%20plugnplay%2C%20etc%2C%20all%20show%20errors%20in%20MEM%20when%20looking%20at%20status%20of%20setting.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EI%20think%20the%20informational%20pop%20up%20when%20looking%20at%20settings%20in%20catalog%2C%20it%20mentions%20blocking%20clipboard%20and%20other%20settings%20are%20for%20windows%20insiders%20only%20if%20I%20recall%20correctly%20%E2%80%83%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2711397%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Eenterprise%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2718069%22%20slang%3D%22en-US%22%3ERe%3A%20RD%20client%20-%20Windows%20365%20-%20Block%20Clipboard%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2718069%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F1139763%22%20target%3D%22_blank%22%3E%40se8791%3C%2FA%3E%26nbsp%3B-%20That's%20surprising%20that%20Domain-based%20GPO%20didn't%20work.%20Can%20you%20try%20that%20again%3F%20We%20also%20have%20some%20documentation%20that%20also%20links%20to%20the%20ADMX%20files%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-365%2Fmanage-rdp-device-redirections%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EManage%20device%20RDP%20redirections%20for%20Cloud%20PCs.%20%7C%20Microsoft%20Docs%3C%2FA%3E%26nbsp%3B.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20are%20correct%2C%20some%20of%20the%20settings%20in%20MEM%26nbsp%3B%3CSTRONG%3ESettings%20Catalog%26nbsp%3B%3C%2FSTRONG%3Eonly%20applies%20to%20Windows%20Insider%20machines.%20We%20are%20working%20with%20them%2C%20and%20as%20soon%20as%20they%20are%20available%20to%20more%20versions%20of%20Windows%2C%20we'll%20update%20our%20documentation%20to%20include%20that.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2729268%22%20slang%3D%22en-US%22%3ERe%3A%20RD%20client%20-%20Windows%20365%20-%20Block%20Clipboard%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2729268%22%20slang%3D%22en-US%22%3EThanks%20much%3CBR%20%2F%3EI%20am%20looking%20into%20why%20the%20AD%20GPO's%20didnt%20work%20-%20they%20arent%20showing%20in%20GPRESULT%20so%20not%20applied%20so%20might%20be%20an%20issue%20on%20my%20end.%20I%20did%20wind%20up%20using%20an%20Intune%20PS%20script%20to%20add%20reg%20key%20to%20disable%20clip%20as%20a%20workaround%20-%20which%20is%20working%20at%20the%20moment.%3CBR%20%2F%3EThanks%20for%20checking%20in.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2733755%22%20slang%3D%22en-US%22%3ERe%3A%20RD%20client%20-%20Windows%20365%20-%20Block%20Clipboard%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2733755%22%20slang%3D%22en-US%22%3EUpdate%3A%3CBR%20%2F%3EIt%20was%20an%20issue%20on%20our%20end%20with%20the%20GPO.%20Once%20we%20straightened%20that%20out%2C%20the%20on-prem%20GPO%20applied%20to%20the%20Cloud%20PC%20using%20settings%20from%20MS%20that%20you%20linked.%20Thanks%20again%20very%20much%20for%20your%20assistance.%3CBR%20%2F%3EHave%20a%20nice%20day%3C%2FLINGO-BODY%3E
Occasional Contributor
I am struggling to disable access to the clipboard data(Clipboard redirection) of the local client from the Cloud PC.

We want to ensure no data can get transferred to and from the Cloud PC to the local PC.

I used an on-prem GPO, the MEM settings catalog, OMA-URI and even manually added reg key fDisableClip, but can't seem to block clipboard.


Anyone else having similar troubles?

FYI the config policy setting in MEM to block local drive access works perfectly but the block clipboard, COM port, plugnplay, etc, all show errors in MEM when looking at status of setting.


I think the informational pop up when looking at settings in catalog, it mentions blocking clipboard and other settings are for windows insiders only if I recall correctly  
5 Replies
best response confirmed by se8791 (Occasional Contributor)
Solution

@se8791 - That's surprising that Domain-based GPO didn't work. Can you try that again? We also have some documentation that also links to the ADMX files - Manage device RDP redirections for Cloud PCs. | Microsoft Docs .

 

You are correct, some of the settings in MEM Settings Catalog only applies to Windows Insider machines. We are working with them, and as soon as they are available to more versions of Windows, we'll update our documentation to include that.

Thanks much
I am looking into why the AD GPO's didnt work - they arent showing in GPRESULT so not applied so might be an issue on my end. I did wind up using an Intune PS script to add reg key to disable clip as a workaround - which is working at the moment.
Thanks for checking in.
Update:
It was an issue on our end with the GPO. Once we straightened that out, the on-prem GPO applied to the Cloud PC using settings from MS that you linked. Thanks again very much for your assistance.
Have a nice day
I'm having the same issue, @se8791, can you share what it was you found/fixed to get this to work via GPO?
For us we simply had the GPO linked incorrectly. Once linked properly, settings applied to the Cloud PC's and access to clipboard and other resources are now blocked.
www.000webhost.com