Citrix Virtual Apps and Desktops

Scenarios and use case examples

September 6, 2025

Contributed by:

Properly configuring clipboard redirection policies is key to balancing user productivity and corporate security. The optimal configuration depends on the specific use cases.

The following are some common use case examples:

Standard knowledge worker

For most users like knowledge workers and the typical office users, the goal is seamless copy-paste of text and simple images between local and remote applications. In this scenario, the default policy configuration is often sufficient.

Configuration:

Client clipboard redirection: Allowed (Default)

Sensitive data use cases

Consider a healthcare or financial institution where users need to paste information into a secure session (e.g., patient data into an EHR) but must be prevented from copying sensitive data out to their local device. This can help prevent accidental data exfiltration via the clipboard:

Configuration:

Client clipboard redirection: Allowed
Restrict client clipboard write: Enabled (Blocks copy from session to client)
For added security, enable Restrict session clipboard write and use Session clipboard write allowed formats to only permit plain text (CF_TEXT).

Alternatively, customers can use the new Cross session clipboard functionality (PREVIEW) to allow clipboard session-to-session while preventing session-to-client redirection.

Developers and IT Administrators

These users often require the ability to copy files, such as scripts, log files, or installers, between their local machine and the VDA. This requires a more permissive configuration.

Configuration:

Client clipboard redirection: Allowed
To enable file copy from session to client, ensure Restrict client clipboard write is Disabled, or if enabled, add the CFX_FILE format to the Client clipboard write allowed formats list.
To enable file copy from client to session, ensure Restrict session clipboard write is Disabled, or if enabled, add CFX_FILE to the Session clipboard write allowed formats list.

Configure these policies to target the relevant groups containing the developer or IT Admins instead of individually adding users to the policy.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Scenarios and use case examples

September 6, 2025

Contributed by:

September 6, 2025

Contributed by:

Scenarios and use case examples

Standard knowledge worker

Sensitive data use cases

Developers and IT Administrators

In this article