;
; This ADM file is for configuring systems running View Agent Direct-Connection.
;
; This file is added to a policy object through the Group Policy Object
; Editor.

CLASS MACHINE

CATEGORY !!VMwareViewAgent

CATEGORY !!VMwareViewAgentDirectConnection

KEYNAME "Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\XMLAPI"

POLICY !!HTTPSPortNumber
    EXPLAIN !!HTTPSPortNumberExplain
    PART !!HTTPSPortNumber EDITTEXT
        REQUIRED
        DEFAULT "443"
        VALUENAME "httpsPortNumber"
    END PART
END POLICY

POLICY !!SessionTimeout
    EXPLAIN !!SessionTimeoutExplain
    PART !!SessionTimeout EDITTEXT
        REQUIRED
        DEFAULT "600"
        VALUENAME "sessionTimeout"
    END PART
END POLICY

POLICY !!DisclaimerEnabled
    EXPLAIN !!DisclaimerEnabledExplain
    VALUENAME "disclaimerEnabled"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!DisclaimerText
    EXPLAIN !!DisclaimerTextExplain
    PART !!DisclaimerText  EDITTEXT
    VALUENAME "disclaimerText"
    END PART
END POLICY

POLICY !!AppsEnabled
    EXPLAIN !!AppsEnabledExplain
    VALUENAME "appsEnabled"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ClientSettingAutoConnect
    EXPLAIN !!ClientSettingAutoConnectExplain
    VALUENAME "autoConnect"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ClientSettingAlwaysConnect
    EXPLAIN !!ClientSettingAlwaysConnectExplain
    VALUENAME "alwaysConnect"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ClientSettingScreenSize
    EXPLAIN !!ClientSettingScreenSizeExplain
    PART !!ClientSettingScreenSize  EDITTEXT
    VALUENAME "screenSize"
    END PART
END POLICY

POLICY !!ExternalPCoIPPort
    EXPLAIN !!ExternalPCoIPPortExplain
    PART !!ExternalPCoIPPort  EDITTEXT
    VALUENAME "externalPCoIPPort"
    END PART
END POLICY

POLICY !!ExternalRDPPort
    EXPLAIN !!ExternalRDPPortExplain
    PART !!ExternalRDPPort  EDITTEXT
    VALUENAME "externalRDPPort"
    END PART
END POLICY

POLICY !!ExternalBlastPort
    EXPLAIN !!ExternalBlastPortExplain
    PART !!ExternalBlastPort  EDITTEXT
    VALUENAME "externalBlastPort"
    END PART
END POLICY

POLICY !!ExternalIPAddress
    EXPLAIN !!ExternalIPAddressExplain
    PART !!ExternalIPAddress  EDITTEXT
    VALUENAME "externalIPAddress"
    END PART
END POLICY

POLICY !!ExternalFWChannelPort
    EXPLAIN !!ExternalFWChannelPortExplain
    PART !!ExternalFWChannelPort  EDITTEXT
    VALUENAME "externalFrameworkChannelPort"
    END PART
END POLICY

POLICY !!USBEnabled
    EXPLAIN !!USBEnabledExplain
    VALUENAME "usbEnabled"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!MMREnabled
    EXPLAIN !!MMREnabledExplain
    VALUENAME "mmrEnabled"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ResetEnabled
    EXPLAIN !!ResetEnabledExplain
    VALUENAME "resetEnabled"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!USBAutoConnect
    EXPLAIN !!USBAutoConnectExplain
    VALUENAME "usbAutoConnect"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ClientCredentialCacheTimeout
    EXPLAIN !!ClientCredentialCacheTimeoutExplain
    PART !!ClientCredentialCacheTimeout EDITTEXT
        REQUIRED
        DEFAULT "0"
        VALUENAME "clientCredentialCacheTimeout"
    END PART
END POLICY

POLICY !!UserIdleTimeout
    EXPLAIN !!UserIdleTimeoutExplain
    PART !!UserIdleTimeout EDITTEXT
        REQUIRED
        DEFAULT "900"
        VALUENAME "userIdleTimeout"
    END PART
END POLICY

POLICY !!ClientSessionTimeout
    EXPLAIN !!ClientSessionTimeoutExplain
    PART !!ClientSessionTimeout EDITTEXT
        REQUIRED
        DEFAULT "36000"
        VALUENAME "clientSessionTimeout"
    END PART
END POLICY

POLICY !!X509CertAuth
    EXPLAIN !!X509CertAuthExplain
    PART !!X509CertAuth DROPDOWNLIST
    VALUENAME "x509CertAuth"
    ITEMLIST
        NAME "Disabled"   VALUE "0"   DEFAULT
        NAME "Allowed"  VALUE "1"
        NAME "Required"  VALUE "2"
    END ITEMLIST
    END PART
END POLICY

POLICY !!X509SSLCertAuth
    EXPLAIN !!X509SSLCertAuthExplain
    VALUENAME "x509SSLCertAuth"
    VALUEON true
    VALUEOFF false
END POLICY

POLICY !!ClientConfig
KEYNAME "Software\Policies\VMware, Inc.\VMware VDM\Agent\Configuration\XMLAPI\ClientConfig"
   PART !!ClientConfig LISTBOX VALUEPREFIX "Name=Value"
   END PART
    EXPLAIN !!ClientConfigExplain
END POLICY

END CATEGORY

END CATEGORY

[Strings]
;
; View Agent Direct-Connection Settings
;

VMwareViewAgent="VMware View Agent Configuration"
VMwareViewAgentDirectConnection="View Agent Direct-Connection Configuration"

HTTPSPortNumber="HTTPS Port Number"
HTTPSPortNumberExplain="The TCP port number on which View Agent Connect listens for incoming View client HTTPS connections. If this policy is not configured or disabled the default of 443 is used.\n\nNOTE: If you change the port number, you may need to reconfigure the desktop firewall to allow incoming connections to the port."

SessionTimeout="Session Timeout"
SessionTimeoutExplain="Determines how long a user can keep a session open after logging in with a View client. The value is set in minutes, if this policy is not configured or disabled the default is 600 minutes. When a desktop session times out, the session is terminated and the View client is disconnected from the desktop."

DisclaimerEnabled="Disclaimer Enabled"
DisclaimerEnabledExplain="Show disclaimer text for user acceptance at login time. The text is shown from 'Disclaimer Text' if present, or from the GPO 'Configuration\Windows Settings\Security Settings\Local Policies\Security Options' 'Interactive logon: Message text for users attempting to log on'. The default setting is for this to be disabled."

DisclaimerText="Disclaimer Text"
DisclaimerTextExplain="Disclaimer text to be shown to View client users when they log in, requires that the Disclaimer Enabled policy is set. If no text is specified, the default is to take the value from Windows policy 'Configuration\Windows Settings\Security Settings\Local Policies\Security Options' 'Interactive logon: Message text for users attempting to log on'."

AppsEnabled="Applications Enabled"
AppsEnabledExplain="Support Application launch on Remote Desktop Session Hosts. The default setting is for this feature to be enabled."

ClientSettingAutoConnect="Client setting: AutoConnect"
ClientSettingAutoConnectExplain="AutoConnect setting sent to View Client. If this policy is set, it will override any saved client preferences. No value is set by default. Enabling this policy will set the value to true, disabling this policy will set the value to false."

ClientSettingAlwaysConnect="Client setting: AlwaysConnect"
ClientSettingAlwaysConnectExplain="AlwaysConnect setting sent to View Client. If this policy is set, it will override any saved client preferences. No value is set by default. Enabling this policy will set the value to true, disabling this policy will set the value to false."

ClientSettingScreenSize="Client setting: ScreenSize"
ClientSettingScreenSizeExplain="ScreenSize setting sent to View Client. If this policy is enabled, it will override any saved client preferences. If this policy is not configured or disabled, the client preferences will be used."

ExternalPCoIPPort="External PCoIP Port"
ExternalPCoIPPortExplain="Port number sent to View Client for destination TCP/UDP port number used for the PCoIP protocol. A '+' character in front of the number indicates a relative number from the port number used for HTTPS. Only set this value if the externally exposed port number does not match the port the service is listening on, typically this will be in a NAT environment. No value is set by default."

ExternalRDPPort="External RDP Port"
ExternalRDPPortExplain="Port number sent to View Client for destination TCP port number used for the RDP protocol. A '+' character in front of the number indicates a relative number from the port number used for HTTPS. Only set this value if the externally exposed port number does not match the port the service is listening on, typically this will be in a NAT environment. No value is set by default."

ExternalBlastPort="External Blast Port"
ExternalBlastPortExplain="Port number sent to View Client for destination TCP port number used for the Blast protocol. A '+' character in front of the number indicates a relative number from the port number used for HTTPS. Only set this value if the externally exposed port number does not match the port the service is listening on, typically this will be in a NAT environment. No value is set by default."

ExternalIPAddress="External IP Address"
ExternalIPAddressExplain="IP v4 address sent to View Client for destination IP address used for secondary protocols (RDP, PCoIP, Framework channel, Blast ...). Only set this value if the externally exposed address does not match the address of the desktop machine, typically this will be in a NAT environment. No value is set by default."

ExternalFWChannelPort="External Framework Channel Port"
ExternalFWChannelPortExplain="Port number sent to View Client for destination TCP port number used for the Framework Channel protocol. A '+' character in front of the number indicates a relative number from the port number used for HTTPS. Only set this value if the externally exposed port number does not match the port the service is listening on, typically this will be in a NAT environment. No value is set by default."

USBEnabled="USB Enabled"
USBEnabledExplain="Determines whether desktops can use USB devices connected to the client system. The default value is enabled. To prevent the use of external devices for security reasons, change the setting to disabled."

MMREnabled="Multimedia redirection (MMR) Enabled"
MMREnabledExplain="Determines whether MMR is enabled for client systems. MMR is a Microsoft DirectShow filter that forwards multimedia data from specific codecs on View desktops directly through a TCP socket to the client system. The data is then decoded directly on the client system, where it is played. The default value is disabled.\n\nMMR does not work correctly if the client system's video display hardware does not have overlay support. Client systems may have insufficient resources to handle local multimedia decoding."

ResetEnabled="Reset Enabled"
ResetEnabledExplain="Ability for an authenticated View client to perform an operating system level reboot. The default setting is disabled."

USBAutoConnect="USB AutoConnect"
USBAutoConnectExplain="Connect USB devices to the desktop when they are plugged in. If this policy is set, it will override any saved client preferences. No value is set by default."

ClientCredentialCacheTimeout="Client Credential Cache Timeout"
ClientCredentialCacheTimeoutExplain="How long in minutes a View client should allow a user to use a saved password for. 0 means never, -1 means forever. View clients will offer users the option of saving their passwords if this is set to a valid value. The default is 0 (never)."

UserIdleTimeout="User Idle Timeout"
UserIdleTimeoutExplain="The maximum length of time in seconds that a user can be idle before the service takes measures to protect the session. A value of -1 indicates that the session will never be considered idle. The default is 900 seconds (15 minutes)."

ClientSessionTimeout="Client Session Timeout"
ClientSessionTimeoutExplain="The maximum length of time in seconds that a session will be kept active if a client is not connected. The default is 36000 seconds (10 hours)."

X509CertAuth="X509 Certificate Authentication"
X509CertAuthExplain="Determines if Smart Card X.509 certificate authentication is disabled, allowed or required."

X509SSLCertAuth="X509 SSL Certificate Authentication Enabled"
X509SSLCertAuthExplain="Determines if Smart Card X.509 certificate authentication is enabled via a direct SSL connection from a View Client. This is not required if X.509 certificate authentication is handled via an intermediate SSL termination point. View Agent must be restarted if this value changes."

ClientConfig="Client Config Name Value Pairs"
ClientConfigExplain="List of values to be passed to the client in the form name=value e.g. clientCredentialCacheTimeout=1440."