Product Documentation

Configuring composite USB device redirection

Nov 27, 2017

Configuring composite USB redirection using the Group Policy Object administrative template

  1. As an administrator, open the Citrix Receiver Group Policy Object administrative template by running gpedit.msc.
    1. If you are applying the policy on a single computer, launch the Citrix Receiver Group Policy Object administrative template from the Start menu.
    2. If you are applying the policy on a domain, launch the Citrix Receiver Group Policy Object administrative template by using the Group Policy Management console.
  2. Under the User Configuration node, go to Administrative Templates > Citrix Components > Citrix Receiver > Remoting client devices > Generic USB Remoting.
  3. Select the SplitDevices policy.
  4. Select Enabled.
  5. Click Apply.
  6. Click OK to save the policy.

To allow or deny an interface using the Group Policy Object administrative template

  1. As an administrator, open the Citrix Receiver Group Policy Object administrative template by running gpedit.msc.
    1. If you are applying the policy on a single computer, launch the Citrix Receiver Group Policy Object administrative template from the Start menu.
    2. If you are applying the policy on a domain, launch the Citrix Receiver Group Policy Object administrative template by using the Group Policy management console.
  2. Under the User Configuration node, go to Administrative Templates > Citrix Components > Citrix Receiver > Remoting client devices > Generic USB Remoting.
  3. Select USB Device Rules policy.
  4. Select Enabled.
  5. In the USB Device Rules text box, add the USB device that you want to allow or deny.
    For example, ALLOW: vid=047F pid= C039 split=01 intf=00,03 //Allowed 00 and 03 interface, restrict others.
  6. Click Apply and OK.

In a desktop session, split USB devices are displayed in the Desktop Viewer under Devices. Additionally, you can view split USB devices from Preferences > Devices.

localized image

In an application session, split USB devices are displayed in the Connection Center.

localized image

The table below provides details on the behavior scenarios when a USB interface is allowed or denied.

To allow an interface:

Split Interface Action

TRUE

Valid number 0 -n

Allow specified interface

TRUE

Invalid number

Allow all interfaces

FALSE

Any value

Allow Generic USB of parent device

Not specified

Any value

Allow Generic USB of parent device

For example, SplitDevices- true indicates that all devices split.

To deny an interface:

Split Interface Action

TRUE

Valid number 0 - n

Deny specified interface

TRUE

Invalid number

Deny all interfaces

FALSE

Any value

Deny Generic USB of parent device

Not specified

Any value

Deny Generic USB of parent device

For example, SplitDevices- false indicates that devices are not split with specified interface number.

Example: My_< plantronics> headset

Interface number

  • Audio Interface Class -0
  • HID Interface Class-3

Sample rules used for My_< plantronics> headset: 

  • ALLOW: vid=047F pid= C039 split=01 intf=00,03 //Allowed 00 and 03 interface, restrict others
  • DENY: vid=047F pid= C039 split=01 intf=00,03 // deny 00 and 03

Limitations:

  1. Citrix recommends that you do not split interfaces for a webcam. As a workaround, redirect the device as a single device using Generic USB redirection. For a better performance, use the optimized virtual channel.