How to disable all USB devices but allow Human Interface Devices (HID) using the PCoIP Management Console

Rate this Article
Average: 1 (1 vote)

August 27, 2018

Last modified: 09/03/2023, 6:09 pm

Knowledge Base Article Tutorial Peripheral Devices Management Console Remote Workstation Card

The PCoIP Management Console 1.x, 2.x and 3.x can push predetermined profiles to PCoIP Zero Clients and PCoIP Remote Workstation Cards. Inside the profile USB policies that control USB authorized and unauthorized devices. In many organizations it is desirable to limit USB access to corporate systems. By allowing only Human Interface Devices you can block all other devices. Human Interface Devices (HID) is the USB class for keyboards, mice and other input devices. By default the PCoIP Zero Client should terminate HID devices locally and not pass them to the remote PCoIP system.

 

Steps to enable only HID devices in the PCoIP Management Console 1

  1. Click Add New profile.
  2. Enter a name and description (optional) of the new profile.
  3. Click Save.
  4. Click Set Properties of the new profile.
  5. Expand Profile Zero Client USB Authorization.
  6. Click Erase the device's existing USB authorizations and replace them with an empty set.
  7. Click Add New.
  8. Select the following:
       Device Class: Human Interface Device
       Sub Class: Any
       Protocol: Any
       (Leave other selections at defaults).
  9. Click Add.
  10. Expand Profile Zero Client USB Unauthorization.
  11. Click Erase the device's existing USB unauthorizations and replace them with an empty set.
  12. After creating the profile, apply the profile to a group.

 

Steps to enable only HID devices in the PCoIP Management Console 2 & 3

  1.  Click NEW PROFILE or edit existing profile in the Profile page of Management Console.
  2.  Enter Name & Description for new profile.
  3. Select the Profile you would like to add/choose: dual or quad.
  4. Scroll down to PERIPHERAL section of profile.
  5. Select "Authorized devices" section.
  6. Click ADD New.
  7. Select the following:
         Device Class: Human Interface Device
       Sub Class: Any
       Protocol: Any 
       (Leave other selections at defaults).
  8. Click Add.
  9. Remove any existing USB authorization/unauthorization settings in the profile.
  10. Save the Profile and apply to any group or any specific client.

 

Pertains to:
  • mc.1.x
  • PCoIP Management Console 2.0.0
  • PCoIP Management Console 2.0.1
  • PCoIP Management Console 2.0.2
  • PCoIP Management Console 2.1.0
  • PCoIP Management Console 2.1.1
  • PCoIP Management Console 2.2.0
  • PCoIP Management Console 2.3.0
  • PCoIP Management Console 2.4.0
  • PCoIP Management Console 2.5.1
  • PCoIP Management Console 3.0.0
  • PCoIP Management Console 3.0.1