What Are Trusted Clients?
Applies To: Windows Server 2008
You can limit the types of devices that Terminal Services clients are allowed to redirect when connecting to an internal network resource (computer) through TS Gateway. When you select the option to disable device redirection for specific device types or to disable all device types except for smart cards, the TS Gateway server will send the request back to the client with a list of the device types to be disabled. This list is a suggestion only; it is possible for the client to modify the device redirection settings in the list.
Warning
Because the TS Gateway server relies on the client to enforce the device redirection settings suggested by the server, this feature should not be considered to provide guaranteed security. The suggested device redirection settings can only be enforced for Remote Desktop Connection (RDC) clients; the settings cannot be enforced for clients that do not use RDC. Additionally, it is possible for a malicious user to modify an RDC client so that the client ignores the suggested settings. In such cases, this feature cannot provide guaranteed security, even for RDC clients.
- For information about how to enable or disable device redirection for connections through TS Gateway, see Enable or Disable Client Device Redirection.