Send usb device over rdp update#
Send usb device over rdp windows#

Similarly to the client computer we will need to update a Group Policy on the server as well. Setting up the Remote Machine Updating the Remote Group Policy You can find the HID device by switching to вЂњDevices by connectionвЂќ in the вЂњViewвЂќ menu and looking for the other entires under the same вЂњUSB Composite DeviceвЂќ.ДЄfter making these changes I recommend rebooting the client computer, although it may not be strictly necessary. The easiest way to find the YubiKey is to look under вЂњSmart card readersвЂќ. To find the ID for other models of Yubikey (or any other device for that matter) look at the вЂњClass GuidвЂќ property of the top level device in Device Manger. You can use the following registry file to automatically add the required entries. I pulled these device IDs from a Yubikey 4 so your mileage may vary using other models.

Send usb device over rdp windows#

By default Windows will not list the Yubikey as a device that can be redirected so we need to add itвЂ™s USB device ID to the list. WeвЂ™ll also need to make some changes to the registry. We can set it to either вЂњAdministrators and UsersвЂќ or вЂњAdministrators OnlyвЂќ depending on the use-case. The policy weвЂ™re looking for is called вЂњAllow RDP redirection of other supported RemoteFX USB devices from this computerвЂќ and is located here in the tree: You can do this via the вЂњLocal Group PolicyвЂќ MMC or if you are domain-joined you can push out the setting with a domain Group Policy Object. The first thing weвЂ™ll need to do on our client computer (the one where the Yubikey physically resides) is make some changes to Group Policy. IвЂ™ll keep playing around with it but if you manage to get it working let me know! Setting up the Client Machine Updating the Local Group Policy The device itself does redirect but the U2F functionality just times out in every browser IвЂ™ve tried.

It looks like a recent update or some change in browser behavior has caused U2F to no longer function properly over RemoteFX redirection. You can use the native RDP smartcard redirection to use PIV and GPG functionality without doing any extra work. ItвЂ™s worth noting that this guide only applies to OTP/U2F functionality. Two factor authentication is great, but what about when you primarily do your work on a virtual desktop or need to sign in to a U2F application remotely? Luckily we can use RemoteFX USB device redirection to solve this problem and successfully authenticate using our local Yubikey on the remote machine.