微软USB设备重定向

MicrosoftRemoteFX:—USB和设备重定向姓名：张天民职务：高级讲师公司：东方瑞通（北京）咨询服务有限公司RemoteFX中新的USB重定向特性在RDS中所有设备重定向机制VDI部署场景讨论：瘦客户端和胖客户端（Thin&Rich）.用户体验：演示使用新的USB重定向功能81%4本地和远程的一致的体验(ClosetheexperiencegapbetweenLocalandRemote)5IwanttobeabletouseanydeviceIwant,fromanyclientIwant,andhaveitjustwork6RDPHigh-Level设备重定向RemoteFXUSB设备重定向IsochronousRemoteFXUSBRDPHigh-Level客户端是否需要驱动?NoYes服务器端是否需要驱动?YesNo对所有设备是一种定向方法?YesNo在多个会话中可以同时用设备?NoYes网络优化LAN,liketherestofRemoteFXLANandWAN优点NoclientdriversnecessaryWorkswithanydevice缺点OnlyonesessioncanuseaUSBdeviceatatime最佳的结合二者都使用!9在客户端上开启USBredirection在虚拟机上启用RemoteFX配置安全策略(如果需要)用UI选项选择设备或者为USB设备发布一个RDP文件使用RemoteFXUSB重定向功能!客户端支持RDP7.1USBredirection功能必须通过组策略启动组策略刷新，然后重新启动机器ComputerConfiguration\AdministrativeTemplates\WindowsComponents\RemoteDesktopServices\RemoteDesktopConnectionClient\RemoteFXUSBDeviceRedirectionRemoteFX必须启动在ＶＭ端组策略可用来控制USB重定向USBR能被完全启用和禁用ComputerConfiguration\AdministrativeTemplates\WindowsComponents\RemoteDesktopServices\RemoteDesktopSessionHost\DeviceandResourceRedirection更多灵活的重定向设置可以通过[设备安装限制]策略实现ComputerConfiguration\AdministrativeTemplates\System\DeviceInstallationRestrictions演示MostWantedRemoteFXDevicesProvidedby:MicrosoftIHV/ISVRemoteFXUSBHUBFilterRemoteFXUSBHubRDP7.1ClientRemoteFXRedirectedDeviceProxyUSBDeviceDriverUserKernelRemoteFXDevicesEnumerationRemoteFXGenericUSBDriverUSBHUBSessionsNotificationsServerClient17WindowsKernel(I/OMgr,PnP)USBHUB2Providedby:MicrosoftIHV/ISV18USBDeviceDriver1Application34UserKernelWin32I/OAPIUSBDeviceDriverWindowsKernel(I/OMgr,PnP)RDPClientRemoteFXUSBHubFilterUSBHUB243Providedby:MicrosoftIHV/ISV19VMRDPServerRemoteFXGenericUSBDriver5UserKernel1RDP6WindowsKernel(I/OMgr,PnP)RemoteFXDeviceProxyRemoteFXUSBHUB7USBDeviceDriver8Providedby:MicrosoftIHV/ISV20ApplicationWin32I/OAPI9VMRDPServer10UserKernelUSBDeviceDriverRemoteFXUSBHubDataFlowpathsimilarto“claimdevice”InreverseorderAuto-reconnectNochangesuntilallattemptstorestoreconnectionexhaustedDisconnectAlldevicesremoved21VMRDPServerDeviceRemoval稳定性DriverfailuresareisolatedtotheVMApplicationsaretransparenttoredirecteddevicesIntegratewithPnPsubsystemfordeviceinstalls,driverload/unload安全性DriverfailuresareisolatedtotheVMDriverinterfacesshouldbevalidatedObeyallUSB“restriction”policies兼容性WorkforbothKMDFandUMDFdriversAsynchronous,layereddrivers,withservicesorwithout在重定向发生之前，服务器和客户端都有自己的身份验证即便在客户端和服务器端都被验证…从客户端或服务器上的设备返回的数据也被认为“不被信任”为所有在用的IOCTLs和URB接口提供额外的验证，包括:AllIDsreturnedfromthedevicepriortobeusedonserverEveryURBpacketisvalidatedtomeettheUSB2.0specification瘦客户端场景•一次只能一个会话•RemoteFXUSBredirection是主要的设备重定向方式胖客户端场景•一次可以多个会话或者应用•High-Levelredirection将是主要的设备重定向方式BottomLine:It’sallaboutthedrivers!NewRDPfileentry:usbdevicestoredirect:s:Therearefourelements:ProcessingOrderDirectiveMeaning1*Selectalldevicesforredirectionthataren’tpickedupbyhigh-levelredirection{DeviceClassGUID}SelectalldevicesthataremembersofthespecifiedclassUSB\InstanceIDSelectadevice2-USB\InstanceIDDeselectadeviceStartwithusbdevicestoredirect:s:*AddClassGUIDsforthedevicesyouwishtousefromrichclients(v=VS.85).aspx疑问和解答感谢您参与此会场！您的意见与建议对我们非常重要。请您填写反馈表。34相关课程分会场分会场分会场分会场参考资源://microsoft.com/technet©2008MicrosoftCorporation.Allrightsreserved.Microsoft,Windows,WindowsVistaandotherproductnamesareormayberegisteredtrademarksand/ortrademarksintheU.S.and/orothercountries.TheinformationhereinisforinformationalpurposesonlyandrepresentsthecurrentviewofMicrosoftCorporationasofthedateofthispresentation.BecauseMicrosoftmustrespondtochangingmarketconditions,itshouldnotbeinterpretedtobeacommitmentonthepartofMicrosoft,andMicrosoftcannotguaranteetheaccuracyofanyinformationprovidedafterthedateofthispresentation.MICROSOFTMAKESNOWARRANTIES,EXPRESS,IMPLIEDORSTATUTORY,ASTOTHEINFORMATIONINTHISPRESENTATION.