deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

add remotedesktop csp

Browse Source
This commit is contained in:
Aaron Czechowski 2022-12-20 12:48:57 -08:00
parent b87428f557
commit e8617233dd
1 changed files with 103 additions and 80 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

183
windows/client-management/mdm/policy-csp-remotedesktop.md
View File

@ -1,119 +1,142 @@
---
title: Policy CSP - RemoteDesktop
description: Learn how the Policy CSP - RemoteDesktop setting allows you to specify a custom message to display.
title: RemoteDesktop Policy CSP
description: Learn more about the RemoteDesktop Area in Policy CSP
author: vinaypamnani-msft
manager: aaroncz
ms.author: vinpa
ms.topic: article
ms.date: 12/20/2022
ms.localizationpriority: medium
ms.prod: windows-client
ms.technology: itpro-manage
author: vinaypamnani-msft
ms.localizationpriority: medium
ms.date: 09/27/2019
ms.reviewer:
manager: aaroncz
ms.topic: reference
---
<!-- Auto-Generated CSP Document -->
<!-- RemoteDesktop-Begin -->
# Policy CSP - RemoteDesktop
<hr/>
<!-- RemoteDesktop-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!-- RemoteDesktop-Editable-End -->
<!--Policies-->
## RemoteDesktop policies
> [!Warning]
> Some information relates to prerelease products, which may be substantially modified before it's commercially released. Microsoft makes no warranties, expressed or implied, concerning the information provided here.
<!-- LoadAadCredKeyFromProfile-Begin -->
## LoadAadCredKeyFromProfile
<dl>
<dd>
<a href="#remotedesktop-autosubscription">RemoteDesktop/AutoSubscription</a>
</dd>
<dd>
<a href="#remotedesktop-loadaadcredkeyfromprofile">RemoteDesktop/LoadAadCredKeyFromProfile</a>
</dd>
</dl>
<!-- LoadAadCredKeyFromProfile-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :heavy_check_mark: Device <br> :x: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
<!-- LoadAadCredKeyFromProfile-Applicability-End -->
<hr/>
<!-- LoadAadCredKeyFromProfile-OmaUri-Begin -->
```Device
./Device/Vendor/MSFT/Policy/Config/RemoteDesktop/LoadAadCredKeyFromProfile
```
<!-- LoadAadCredKeyFromProfile-OmaUri-End -->
<!--Policy-->
<a href="" id="remotedesktop-autosubscription"></a>**RemoteDesktop/AutoSubscription**
<!-- LoadAadCredKeyFromProfile-Description-Begin -->
<!-- Description-Source-DDF -->
Allow encrypted DPAPI cred keys to be loaded from user profiles for AAD accounts.
<!-- LoadAadCredKeyFromProfile-Description-End -->
<!--SupportedSKUs-->
<!-- LoadAadCredKeyFromProfile-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Windows SE|No|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
This policy allows the user to load the data protection API (DPAPI) cred key from their user profile, and decrypt any previously encrypted DPAPI data in the user profile or encrypt any new DPAPI data. This policy is needed when using [FSLogix user profiles](/fslogix/overview) from Azure AD-joined VMs.
<!--/SupportedSKUs-->
<hr/>
<!-- LoadAadCredKeyFromProfile-Editable-End -->
<!--Scope-->
[Scope](./policy-configuration-service-provider.md#policy-scope):
<!-- LoadAadCredKeyFromProfile-DFProperties-Begin -->
**Description framework properties**:
> [!div class = "checklist"]
> * User
| Property name | Property value |
|:--|:--|
| Format | int |
| Access Type | Add, Delete, Get, Replace |
| Default Value | 0 |
<!-- LoadAadCredKeyFromProfile-DFProperties-End -->
<hr/>
<!-- LoadAadCredKeyFromProfile-AllowedValues-Begin -->
**Allowed values**:
<!--/Scope-->
<!--Description-->
| Value | Description |
|:--|:--|
| 0 (Default) | Not allowed. |
| 1 | Allowed. |
<!-- LoadAadCredKeyFromProfile-AllowedValues-End -->
This policy allows administrators to enable automatic subscription for the Microsoft Remote Desktop client. If you define this policy, the specified URL is used by the client to subscribe the logged on user and retrieve the remote resources assigned to them. To automatically subscribe to Azure Virtual Desktop in the Azure Public cloud, set the URL to `https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery`.
<!-- LoadAadCredKeyFromProfile-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- LoadAadCredKeyFromProfile-Examples-End -->
<!--/Description-->
<!-- LoadAadCredKeyFromProfile-End -->
<!--/Policy-->
<!-- AutoSubscription-Begin -->
## AutoSubscription
<hr/>
<!-- AutoSubscription-Applicability-Begin -->
| Scope | Editions | Applicable OS |
|:--|:--|:--|
| :x: Device <br> :heavy_check_mark: User | :x: Home <br> :heavy_check_mark: Pro <br> :heavy_check_mark: Enterprise <br> :heavy_check_mark: Education <br> :heavy_check_mark: Windows SE | :heavy_check_mark: Windows 10, version 2004 [10.0.19041.1370] and later <br> :heavy_check_mark: Windows 10, version 2009 [10.0.19042.1370] and later <br> :heavy_check_mark: Windows 10, version 21H1 [10.0.19043.1370] and later <br> :heavy_check_mark: Windows 10, version 21H2 [10.0.19044.1370] and later <br> :heavy_check_mark: Windows 11, version 21H2 [10.0.22000] and later |
<!-- AutoSubscription-Applicability-End -->
<!--Policy-->
<a href="" id="remotedesktop-loadaadcredkeyfromprofile"></a>**RemoteDesktop/LoadAadCredKeyFromProfile**
<!-- AutoSubscription-OmaUri-Begin -->
```User
./User/Vendor/MSFT/Policy/Config/RemoteDesktop/AutoSubscription
```
<!-- AutoSubscription-OmaUri-End -->
<!--SupportedSKUs-->
<!-- AutoSubscription-Description-Begin -->
<!-- Description-Source-ADMX -->
Controls the list of URLs that the user should be auto-subscribed to
<!-- AutoSubscription-Description-End -->
|Edition|Windows 10|Windows 11|
|--- |--- |--- |
|Home|No|No|
|Pro|Yes|Yes|
|Windows SE|No|Yes|
|Business|Yes|Yes|
|Enterprise|Yes|Yes|
|Education|Yes|Yes|
<!-- AutoSubscription-Editable-Begin -->
<!-- Add any additional information about this policy here. Anything outside this section will get overwritten. -->
<!--/SupportedSKUs-->
<hr/>
This policy lets you enable automatic subscription for the Microsoft Remote Desktop client. If you define this policy, the client uses the specified URL to subscribe the signed-in user and retrieve the remote resources assigned to them.
<!--Scope-->
[Scope](./policy-configuration-service-provider.md#policy-scope):
To automatically subscribe to [Azure Virtual Desktop](/azure/virtual-desktop/overview) in the Azure public cloud, set the URL to `https://rdweb.wvd.microsoft.com/api/arm/feeddiscovery`.
> [!div class = "checklist"]
> * Device
<!-- AutoSubscription-Editable-End -->
<hr/>
<!-- AutoSubscription-DFProperties-Begin -->
**Description framework properties**:
<!--/Scope-->
<!--Description-->
This policy allows the user to load the DPAPI cred key from their user profile, and decrypt any previously encrypted DPAPI data in the user profile or encrypt any new DPAPI data. This policy is needed when using FSLogix user profiles from Azure AD-joined VMs.
| Property name | Property value |
|:--|:--|
| Format | chr (string) |
| Access Type | Add, Delete, Get, Replace |
| Allowed Values | List (Delimiter: `|`) |
<!-- AutoSubscription-DFProperties-End -->
<!--/Description-->
<!-- AutoSubscription-GpMapping-Begin -->
**Group policy mapping**:
<!--SupportedValues-->
The following list shows the supported values:
| Name | Value |
|:--|:--|
| Name | AutoSubscription |
| Friendly Name | Enable auto-subscription |
| Location | User Configuration |
| Path | AutoSubscription |
| Registry Key Name | SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services |
| Registry Value Name | AutoSubscription |
| ADMX File Name | TerminalServer.admx |
<!-- AutoSubscription-GpMapping-End -->
- 0 (default) - Disabled.
- 1 - Enabled.
<!-- AutoSubscription-Examples-Begin -->
<!-- Add any examples for this policy here. Examples outside this section will get overwritten. -->
<!-- AutoSubscription-Examples-End -->
<!--/SupportedValues-->
<!-- AutoSubscription-End -->
<!--/Policy-->
<!-- RemoteDesktop-CspMoreInfo-Begin -->
<!-- Add any additional information about this CSP here. Anything outside this section will get overwritten. -->
<!-- RemoteDesktop-CspMoreInfo-End -->
<hr/>
<!-- RemoteDesktop-End -->
## Related articles
<!--/Policies-->
## Related topics
[Policy configuration service provider](policy-configuration-service-provider.md)
[Policy configuration service provider](policy-configuration-service-provider.md)