Configure the clipboard transfer direction and data types that can be copied in Azure Virtual Desktop

To configure the clipboard using Intune, follow these steps. This process creates an Intune settings catalog policy.

1. Sign in to the Microsoft Intune admin center.

2. Create or edit a configuration profile for Windows 10 and later devices, with the Settings catalog profile type.

3. In the settings picker, browse to Administrative templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource Redirection.

   

4. Check the box for the following settings, making sure you select the settings with the correct scope for your requirements, then close the settings picker. To determine which scope is correct for your scenario, see Settings catalog - Device scope vs. user scope settings:

   • Device scope settings:

     • Restrict clipboard transfer from server to client
     • Restrict clipboard transfer from client to server

   • User scope settings:

     • Restrict clipboard transfer from server to client (User)
     • Restrict clipboard transfer from client to server (User)

5. Expand the Administrative templates category, then toggle the switch for each setting you added to Enabled.

6. Once each setting is enabled, a drop-down list appears from which you can select the types of data that can be copied. Choose from the following options:

   • Disable clipboard transfers from server to client or Disable clipboard transfers from client to server
   • Allow plain text
   • Allow plain text and images
   • Allow plain text, images, and Rich Text Format
   • Allow plain text, images, Rich Text Format, and HTML

7. Select Next.

8. Optional: On the Scope tags tab, select a scope tag to filter the profile. For more information about scope tags, see Use role-based access control (RBAC) and scope tags for distributed IT.

9. On the Assignments tab, select the group containing the computers providing a remote session you want to configure, then select Next.

10. On the Review + create tab, review the settings, then select Create.

11. Once the policy applies to the computers providing a remote session, restart them for the settings to take effect.

12. Connect to a remote session with a supported client and test the clipboard settings you configured are working by trying to copy and paste different types of content.

To configure the clipboard using Group Policy in an Active Directory domain, follow these steps.

1. The Group Policy settings are only available in Windows 11, version 23H2 and later. You need to copy the administrative template files C:\Windows\PolicyDefinitions\terminalserver.admx and C:\Windows\PolicyDefinitions\en-US\terminalserver.adml from a session host to the same location on your domain controllers or the Group Policy Central Store, depending on your environment. In the file path for terminalserver.adml replace en-US with the appropriate language code if you're using a different language.

2. On a device you use to manage Group Policy, open the Group Policy Management Console (GPMC) and create or edit a policy that targets your session hosts.

3. Browse to one of the following policy sections. Use the policy section in Computer Configuration to the session host you target, and use the policy section in User Configuration applies to specific users you target.

   • Machine: Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

   • User: User Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

   

4. Open one of the following policy settings, depending on whether you want to configure the clipboard from session host (server) to client, or client to session host:

   • To configure the clipboard from session host to client, open the policy setting Restrict clipboard transfer from server to client, then select Enabled. Choose from the following options:

     • Disable clipboard transfers from server to client.
     • Allow plain text.
     • Allow plain text and images.
     • Allow plain text, images, and Rich Text Format.
     • Allow plain text, images, Rich Text Format, and HTML.

   • To configure the clipboard from client to session host, open the policy setting Restrict clipboard transfer from client to server, then select Enabled . Choose from the following options:

     • Disable clipboard transfers from client to server.
     • Allow plain text.
     • Allow plain text and images.
     • Allow plain text, images, and Rich Text Format.
     • Allow plain text, images, Rich Text Format, and HTML.

5. Select OK to save your changes.

6. Once you've configured settings, ensure the policy is applied to your session hosts, then refresh Group Policy on the session hosts and restart them for the settings to take effect

7. Connect to a remote session with a supported client and test the clipboard settings you configured are working by trying to copy and paste different types of content.

To configure the clipboard using the registry on a session host, follow these steps.

1. Open Registry Editor from the Start menu or by running regedit.exe.

2. Set one of the following registry keys and its value, depending on whether you want to configure the clipboard from session host to client, or client to session host.

   • To configure the clipboard from session host to client, set one of the following registry keys and its value. Using the value for the machine applies to all users, and using the value for the user applies to the current user only.

     • Key:

       • Machine: HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services
       • Users: HKCU\Software\Policies\Microsoft\Windows NT\Terminal Services

     • Type: REG_DWORD

     • Value name: SCClipLevel

     • Value data: Enter a value from the following table:

       Value Data	Description
       0	Disable clipboard transfers from session host to client.
       1	Allow plain text.
       2	Allow plain text and images.
       3	Allow plain text, images, and Rich Text Format.
       4	Allow plain text, images, Rich Text Format, and HTML.

   • To configure the clipboard from client to session host, set one of the following registry keys and its value. Using the value for the machine applies to all users, and using the value for the user applies to the current user only.

     • Key:

       • Machine: HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services
       • Users: HKCU\Software\Policies\Microsoft\Windows NT\Terminal Services

     • Type: REG_DWORD

     • Value name: CSClipLevel

     • Value data: Enter a value from the following table:

       Value Data	Description
       0	Disable clipboard transfers from client to session host.
       1	Allow plain text.
       2	Allow plain text and images.
       3	Allow plain text, images, and Rich Text Format.
       4	Allow plain text, images, Rich Text Format, and HTML.

3. Restart your session host.

4. Connect to a remote session with a supported client and test the clipboard settings you configured are working by trying to copy and paste different types of content.