Optimized Content Sharing for Teams and other Platforms
This setting is designed to configure content sharing (Application and Desktop Sharing) for optimized video conferencing and collaboration platforms, including Microsoft Teams, Zoom, and Webex, that utilize the Citrix Virtual Channel SDK (VCSDK).
This configuration ensures seamless content sharing while maintaining security controls in environments with Citrix Virtual Desktop Infrastructure (VDA).
Features
Application Sharing and Desktop Sharing: These features enable users of Unified Communication (UC) applications such as Microsoft Teams, Zoom, and Webex to share either specific application content or their entire desktop with meeting participants.
Requirements
-
Application Sharing: Supported on Citrix Workspace App (Windows, Mac, Linux)
-
VDA: Virtual Desktop Agent (VDA) is required for optimal functionality.
Configuration
-
The option exists to disable both App Sharing and Desktop Sharing via this setting.
-
By default, both App Sharing and Desktop Sharing are enabled.
-
This setting applies specifically to UC applications (For example: Teams, Zoom, Webex) and does not affect Citrix native HDX Screen Sharing.
-
Configuring this setting will override the VDA UseWsProvider registry key.
Note:
- This setting operates independently of the content-sharing policies within individual UC applications (For example: Microsoft Teams).
- The setting applies only when app protection is enabled. If app protection is disabled, this policy will have no effect.
Security Considerations and Bypass Mechanism
When App Protection is enabled, applications like Microsoft Teams and Zoom are unable to share screens because they attempt to capture the VDA screen from the client side, which is restricted. To address this, support has been introduced to allow Teams and Zoom to bypass App Protection and enable screen sharing from the client side.
However, enabling this bypass creates a potential security risk, as it circumvents App Protection controls. To mitigate this, a new policy has been introduced to allow administrators to disable screen sharing for UC applications when App Protection is enabled.
Policy Details
-
App Protection Enabled: If App Protection is enabled, administrators can choose to disable screen sharing for UC applications such as Zoom and Teams.
-
Impact on User Experience: If screen sharing is disabled, users will not be able to share their application or desktop content during meetings in UC apps when App Protection is active.
Action Required
-
Administrators should configure the setting based on their security requirements, ensuring that screen sharing is either enabled or disabled for UC applications as appropriate.
-
When configuring this policy, keep in mind that it only impacts environments with App Protection enabled.