Workstation User’s Manual
412 VMware, Inc.
Setting USB Device Policies
YoucansetUSBdevicepoliciestorestricttheACEuser’saccesstoUSBdevices.The
policiesaredynamic.ThismeansthatyoucanchangethesettingsondeployedACE
instancesbypublishingapolicyupdatetoACEManagementServer.
Access Levels for USB Devices
Youcansetrestrictionsatvariouslevelsofspecificity,andyoucanmixlevelsof
restrictioninapolicysetting.Thelevelsofrestrictionare:
SpecificUSBdevice–Forexample,allowuseofaspecifictypeofdigitalcamera
butdisallowuseofiPodmobiledigitaldevices.
Ifaruleexistsforaspecificdevice,thatruleoverridesanyrulessetfordevice
classesinwhichthedevicebelongs.
AllentriesinthelistofspecificUS
Bdevicesarem
aintainedinadevicedatabase
thatisincludedwiththefilesforthisACE‐enabledvirtualmachine.Youcancopy
andsharethedatabase.Itisnotwrite‐protected.Thedefaultlocationforthefileis:
OnWindowsXP: C:\Documents and Settings\All Users\Application
Data\VMware\VMware Workstation\usbhistory.ini
OnWindowsVistaandWindows7:C:\ProgramData\VMware\VMware
Workstation\usbhistory.ini
Deviceclass–Forexample,allowuseofhumaninputdevices(HIDs),suchasmice
andkeyboards,butdisallowuseofcommunicationsdevices,suchasmodemsand
cellphones.
Ifnospecificdeviceruleexistsforadeviceandmorethanonedeviceclassrule
appliestothatdevice,themostrestrictiveruleisapplied.Forexample
,adevice
mightincludebothafaxfunctionandaprintfunctionandthereforecanbelongto
morethanoneclass.Ifoneruleblocksafaxdevicebutanotherruleallowsaprint
device,thecombinationfaxandprintdeviceisblocked.
AllUSBdevices–AllowordenyaccesstoallconnectedUSBdevices.Deviceclass
rulesandspecificdevicerulesoverridegeneralaccessrules.
Set an Access Policy for USB Devices
YoumightwanttosetapolicythatpreventsendusersfromconnectingsuchUSB
devicesasmassstoragedevices,printers,ormodemstotheACEinstance.
Comentarios a estos manuales