How to configure peripheral control rules-Elastic Desktop Service-阿里云帮助中心

WUYING Workspace policies include rules that control user experience, security, auditing, peripherals, collaboration, and AI. This topic describes the rules that apply to peripherals.

Scenarios

Peripheral control rules manage access from a WUYING Workspace to data on an on-premises device's disk or to peripherals connected to the on-premises device.

Access data on an on-premises device's disk: You can enable local disk mapping to access data on the disk of the on-premises device from your WUYING Workspace.
Access peripherals connected to an on-premises device: You can configure redirect rules to control access from your WUYING Workspace to peripherals connected to the on-premises device and specify the redirection method. In addition to configuring rules by peripheral classification, you can use blacklists, whitelists, and management rules for fine-grained control.

Configuration details

Configuration item	Description	Requirements or limits
Local disk redirection
Local disk mapping	Maps the disk of an on-premises device to a WUYING Workspace disk. This lets you access data on the local disk from the WUYING Workspace. The options are: Read-only: You can view and copy data from the local disk, but you cannot modify it. Off: You cannot access data on the local disk from the WUYING Workspace. Read/Write: You can view, copy, and modify data on the local disk from the WUYING Workspace.	Support is available only for Windows cloud computers. Only the Windows client and macOS client are supported. Local disk mapping is for accessing file data, not for running programs. Even if local disk mapping is enabled, you cannot run applications installed on the on-premises device from within the WUYING Workspace. If needed, you can run portable applications from the on-premises device within the WUYING Workspace. However, this consumes bandwidth and may affect your experience. Use this feature with caution.
Peripheral redirection
USB redirection switch	When enabled, you can use USB devices connected to the on-premises terminal on the WUYING Workspace. You can also apply controls based on blacklists, whitelists, or device categories. If you disable this switch, peripherals that you configured for "USB redirection" will automatically switch to "Disabled".	The web client does not support USB devices. Therefore, USB redirection is not supported. Linux WUYING Workspaces that use the Adaptive Streaming Protocol (ASP) do not support USB redirection.
Camera	Select a redirect rule for each type of peripheral. The options are: USB redirection: Redirects a local USB peripheral to the WUYING Workspace. You must install the corresponding driver on the WUYING Workspace to use the peripheral. Note You must enable the USB redirection switch to select this method. Device redirection: Redirects a local USB peripheral to the WUYING Workspace. You do not need to install a driver on the WUYING Workspace, but you must install one on the on-premises terminal device. Disabled: Does not redirect the peripheral. The peripheral cannot be used in the WUYING Workspace.	Only Windows WUYING Workspaces that use the ASP protocol are supported. Only device redirection is supported.
Scanner		Only USB redirection is supported.
ADB		No limits.
Printer		Linux WUYING Workspaces that use the ASP protocol do not support printer redirection. For WUYING Workspaces connected through the Windows client, macOS client, or web client, you can enable printer redirection to use printers connected to the on-premises device. If you connect to a WUYING Workspace using a WUYING Terminal, you must configure USB redirection. For more information about how end users can configure peripherals, see Configure a USB printer. If an end user uses an Active Directory (AD) domain account, you must set both the AD group policy and the printer redirection policy to 'Allow' for the end user to use the printer in the WUYING Workspace.
Serial port device		No limits.
Peripheral blacklists and whitelists
Peripheral blacklists and whitelists	After you configure USB redirect rules by peripheral classification, you can also use blacklist and whitelist rules to configure exceptions for specific peripherals. Blacklist and whitelist rules have a higher priority than USB redirect rules configured by peripheral classification. If you add a USB peripheral to the blacklist, the peripheral is allowed even if USB redirection is disabled for its device class. If you add a USB peripheral to the whitelist, the peripheral is blocked even if USB redirection is enabled for its device class.	You can set up to 100 blacklist and whitelist rules. Rules with a lower sort number have a higher priority. You can adjust the sorting. The Vendor ID (VID) and Product ID (PID) must be 4-digit hexadecimal characters, such as a12c. The settings take effect the next time you connect to the WUYING Workspace.
Peripheral management rules
Custom rules	You can create custom rules to manage redirection rules with peripheral-level granularity, identified by Vendor ID (VID) and Product ID (PID).	You can set up to 100 custom rules. The VID and PID must be 4-digit hexadecimal characters, such as a12c. Only WUYING Terminal V6.4.0 and later are supported.
Best practice rules	WUYING Workspace provides best practice rules.	These rules cannot be modified and have a lower priority than your custom rules. Only WUYING Terminal V6.4.0 and later are supported.

References

上一篇: Create and manage peripheral policies 下一篇: Manage drivers