How to disable Copy Paste in a VM (From VM to local machines) which is being accessed via Azure VPN

Question

_{Monday, April 2, 2018 11:34 AM}

How to disable Copy Paste in a VM (From VM to local machines) which is being accessed via Azure VPN. We have external parties who access our VM via Azure VPN, we want their copy paste / print screen to be disabled from VM to their local PCs. How to do?

All replies (7)

_{Monday, April 2, 2018 1:38 PM ✅Answered}

Follow the below steps outlined here to Disable Copy/Paste/Print in a vm:

• Run the command in CMD prompt as a administrator: “gpedit.msc” command.
• Navigate to: Computer Configuration \ Administrative Templates \ Windows Components \ Remote Desktop Services \ Remote Desktop Session Hosts \ Device and Resource Redirection \ Do not allow clipboard redirection

• Enable the Rule
• This will not take effect until user sessions have logged off/log back on.  Make sure to fully log off, not just disconnect from RDP
• You need to run the “gpupdate /force” command from an administrator command line to update policy settings.
• To re-enable RDP Copy/Paste. Disable or leave ‘not configured’ then log off/back on

 you can refer the following discussion to disable Print Screen through Group Policy on MSDN forum.

Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

_{Monday, April 2, 2018 7:21 PM ✅Answered}

Will this also apply to any other Windows Server machine? 2012/14/16 etc?

Akshay.

Yes. You can disable the copy/paste options in the clipboard on windows server machines 2012/2016.  

Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

_{Monday, April 2, 2018 6:47 PM}

Will this also apply to any other Windows Server machine? 2012/14/16 etc?

Akshay.

_{Tuesday, April 3, 2018 5:58 AM}

Can we also do this for admin users or this can only be done for non admin users???

Akshay.

_{Tuesday, April 3, 2018 12:13 PM}

Can we also do this for admin users or this can only be done for non admin users???

Akshay.

You can check the similar discussions here on MSDN Forum. See, if this helps.

How to apply Local group policy tweaks to specific user or group.

Disclaimer: This response contains a reference to a third-party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. 

Do click on "Mark as Answer" and “Vote as Helpful” on the post that helps you, this can be beneficial to other community members.

_{Wednesday, April 4, 2018 6:30 AM}

We want a local user to get DC access - it is not permitting, It only permits Admin user to have DC access but we are unable to apply the policy to admin user to disable copy paste and print screen.Pls guide.

Akshay.

_{Wednesday, April 4, 2018 7:38 PM}

You have to link the GPO to an OU that contains the user accounts you want to control. Group policy doesn’t apply to groups. It can be filtered by groups, but the linking must be done against the AD user accounts.

If this is not solved, suggest you post your query on window’s directory services MSDN Forum here, for this specific issue.

Do click on "Mark as Answer" and “Vote as Helpful” on the post that helps you, this can be beneficial to other community members.