设备管理_微软usb设备重定向

Microsoft RemoteFX: USB和设备重定向 姓名 ： 张天民 职务 ：高级讲师 公司 ：东方瑞通（北京）咨询服务有限公司 RemoteFX中新的USB重定向特性 在RDS中所有设备重定向机制 VDI部署场景讨论：瘦客户端和胖客户端 （Thin&Rich）. 用户体验：演示使用新的USB重定向功能 81% 4 本地和远程的一致的体验 (Close the experience gap between Local and Remote) 5 I want to be able to use any device I want, from any client I want, and have it just work 6 RDP High-Level 设备重定向 RemoteFX USB 设备重定向 Isochronous RemoteFX USB RDP High-Level 客户端是否需要驱动? No Yes 服务器端是否需要驱动? Yes No 对所有设备是一种定向方法? Yes No 在多个会话中可以同时用设备? No Yes 网络优化 LAN, like the rest of RemoteFX LAN and WAN 优点 No client drivers necessary Works with any device 缺点 Only one session can use a USB device at a time 最佳的结合 二者都使用! 9 在客户端上开启 USB redirection 在虚拟机上启用 RemoteFX 配置安全策略(如果需要) 用UI 选项选择设备 或者 为USB设备发布一个RDP 文件 使用RemoteFX USB 重定向功 能! 客户端支持RDP 7.1 USB redirection功能 必须通过组策略启 动 组策略刷新，然后 重新启动机器 Computer ConfigurationAdministrative TemplatesWindows ComponentsRemote Desktop ServicesRemote Desktop Connection ClientRemoteFX USB Device Redirection RemoteFX 必须启 动在端 组策略可用来控制 USB重定向 USBR 能被完全启 用和禁用 Computer ConfigurationAdministrative TemplatesWindows ComponentsRemote Desktop ServicesRemote Desktop Session HostDevice and Resource Redirection 更多灵活的重定向设置可以通过设备安装限制 策略实现 Computer ConfigurationAdministrative TemplatesSystemDevice Installation Restrictions 演 示 Most Wanted RemoteFX Devices Provided by: Microsoft IHV/ISV RemoteFX USB HUB Filter RemoteFX USB Hub RDP7.1 Client RemoteFX Redirected Device Proxy USB Device Driver User Kernel RemoteFX Devices Enumeration RemoteFX Generic USB Driver USB HUB Sessions Notifications Server Client 17 Windows Kernel (I/O Mgr, PnP) USB HUB 2 Provided by: Microsoft IHV/ISV 18 USB Device Driver 1 Application 3 4 User Kernel Win32 I/O API USB Device Driver Windows Kernel (I/O Mgr, PnP) RDP Client RemoteFX USB Hub Filter USB HUB 2 4 3 Provided by: Microsoft IHV/ISV 19 VM RDP Server Remote FX Generic USB Driver 5 User Kernel 1 RDP 6 Windows Kernel (I/O Mgr, PnP) RemoteFX Device Proxy RemoteFX USB HUB 7 USB Device Driver 8 Provided by: Microsoft IHV/ISV 20 Application Win32 I/O API 9 VM RDP Server 10 User Kernel USB Device Driver RemoteFX USB Hub Data Flow path similar to “claim device” In reverse order Auto-reconnect No changes until all attempts to restore connection exhausted Disconnect All devices removed 21 VM RDP Server Device Removal 稳定性 Driver failures are isolated to the VM Applications are transparent to redirected devices Integrate with PnP subsystem for device installs, driver load/unload 安全性 Driver failures are isolated to the VM Driver interfaces should be validated Obey all USB “restriction” policies 兼容性 Work for both KMDF and UMDF drivers Asynchronous, layered drivers, with services or without 在重定向发生之前，服务器和客户端都有自 己的身份验证 即便在客户端和服务器端都被验证 从客户端或服务器上的设备返回的数据也被认为 “不被信任” 为所有在用的IOCTLs 和 URB接口提供额外的 验证，包括: All IDs returned from the device prior to be used on server Every URB packet is validated to meet the USB 2.0 specification 瘦客户端场景 一次只能一个会话 RemoteFX USB redirection 是主要 的设备重定向方式 胖客户端场景 一次可以多个会话或 者应用 High-Level redirection 将是主要的设备重定 向方式 Bottom Line: Its all about the drivers! New RDP file entry: usbdevicestoredirect:s: There are four elements: Processing Order Directive Meaning 1 * Select all devices for redirection that arent picked up by high- level redirection Device Class GUID Select all devices that are members of the specified class USBInstanceID Select a device 2 -USBInstanceID Deselect a device Start with usbdevicestoredirect:s:* Add Class GUIDs for the devices you wish to use from rich clients /en-us/library/ff553412(v=VS.85).aspx 疑问和解答 感谢您参与此会场！ 您的意见与建议对我们非常重要。 请您填写反馈表。 34 相关课程 分会场 分会场 分会场 分会场 参考资源 /teched /learning /technet /msdn 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Micr