When UAC is enabled, the device configuration change log will not be collected when a general user upgrades to the administrator and connects to the network drive.
The device to be recorded will be allocated as a drive (A-Z drive) in Windows.
In the virtual environment, the device configuration change log when a DVD/CD is mounted as the local device will not be collected.
When a USB device on the connection source terminal is mounted in a virtual operating system, the USB device is recognized as either the network drive or the USB device on a virtual operating system. In this case, you can control the USB device by using reading and writing prohibitions for the network drive.
You cannot use the Individual Identification Function for control.
When a USB device on the connection source terminal is mounted in a virtual operating system, assign to a drive the device that is recognized as the network drive on a virtual operating system to obtain device configuration change logs.In this case, the obtained server name and shared name may be blank.
When a user adds a device while multiple users are logged on to a client (CT), even the other users who did not add the device can use it, therefore, a device configuration change log is created for the other users as well. Moreover, the violation classification of device configuration change logs will depend on the user policy for each user.
In Xen Desktop 5.6 or later, recognition and operation of a USB device depend on how the device is connected.
Connection method | Identification by OS | Management Console | CT | |
|---|---|---|---|---|
Device/media registration | Prohibition feature | Log retrieval feature | ||
USB redirect | Removable Device | Can be registered as a USB device | Reading prohibition Reading prohibition | File export log Device configuration change log |
Folder redirection of the connection source terminal | Network | Cannot be registered | Reading prohibition Reading prohibition | File export log Device configuration change log |
Y: Operates normally, N: Cannot operate, -: Not an operation target, OS: Operation depends on the operating system
*1: A USB device is recognized as a network drive (\\serverName\sharedName).
*2: Not mapped to the drive letter
