Client hardware access

Use this policy to specify maximum number of serial ports supported by the client platform.

Also, use this policy to enable and restrict the remote application or desktop's access to the client's serial, USB, and parallel ports. This allows the server to use locally attached hardware.

Troubleshooting:
Remote PDA synchronization uses "virtual COM ports". These are serial port connections that are routed through USB connections. It is necessary to enable serial port access to use PDA synchronization for this reason.

Supported on: All Receiver supported platforms

Disable Policy:

Registry Hive	Registry Path	Value Name	Value Type	Value
HKEY_LOCAL_MACHINE	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port	COMAllowed	REG_SZ	false
HKEY_LOCAL_MACHINE	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port	VirtualCOMPortEmulation	REG_SZ	false
HKEY_LOCAL_MACHINE	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port	CPMAllowed	REG_SZ	false

Maximum serial ports

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port
Value Name	MaxPort
Value Type	REG_SZ
Default Value

Map serial ports

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port
Value Name	COMAllowed
Value Type	REG_SZ
Default Value	true,false
True Value	true,false
False Value	false

Allow PDA synchronization

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Serial Port
Value Name	VirtualCOMPortEmulation
Value Type	REG_SZ
Default Value	true,false
True Value	true,false
False Value	false

Map parallel ports

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Printing
Value Name	CPMAllowed
Value Type	REG_SZ
Default Value	true,false
True Value	true,false
False Value	false

receiver.admx

Administrative Templates (Computers)

Citrix Components
- Citrix Workspace
  - CEIP
    - CEIP Configuration
    - Enable CEIP
  - Citrix Secure Browser
    - Cache
  - Citrix Workspace Updates
    - Citrix Workspace Updates
    - Set the Delay in Checking for Update
  - Client Engine
    - Block Direct ICAFile Launch
    - Do not allow desktop launch when InitialProgram setting is missing or empty in ICA file
    - Enable Engine Error Messages
    - ICA File Settings
  - Compliance
    - Disable sending data to 3rd party
  - Diagnostics
    - Always-On Tracing
  - DPI
    - High DPI
  - Fast Connect API Support
    - Manage FastConnectAPI Support
  - Global App Config Service
    - Manage Global App Config Service
  - HDX MediaStream Flash Redirection - Client
    - Enable HDX MediaStream Flash Redirection on the user device
    - Enable server side content fetching
    - Enable synchronization of the client-side HTTP cookies with the server side
    - URL rewriting rules for client-side content fetching
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
    - Proxy
    - Configure trusted server configuration
    - Session reliability and automatic reconnection
    - TLS and Compliance Mode Configuration
    - Transport protocol for Citrix Workspace
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - SelfService
    - Advance Preferences Options
    - Allow/Prevent users to publish safe content
    - Allow/Prevent users to publish unsafe content
    - Allow users to Add/Remove Account
    - Control when Citrix Workspace attempts to reconnect to existing sessions
    - Enable application PreLaunch
    - Enable Default FTA
    - Enable FTA
    - EnableFTU
    - Local app discovery
    - Manage App Protection
    - Manage App shortcut
    - Manage SelfServiceMode
    - Silent authentication for Citrix Workspace
    - Store authentication tokens
    - vPrefer
  - StoreFront
    - NetScaler Gateway URL/StoreFront Accounts List
  - User authentication
    - Kerberos authentication
    - Local user name and password
    - Manage App Protection
    - Prevent storing persistent cookies
    - Single Sign-on for NetScaler Gateway
    - Smart card authentication
    - Smartcard Removal Policy for x64 machine
    - Smartcard Removal Policy for x86 machine
    - Web Interface authentication ticket
  - User experience
    - Audio through Generic USB Redirection
    - Client audio settings
    - Client display settings
    - Client graphics settings
    - Configure Foreground Status of the Progress Bar
    - H265 Decoding for graphics
    - Hardware Acceleration for graphics
    - Hotkeys for Desktop viewer
    - Keyboard settings
    - Keyboard shortcuts
    - Language bar
    - Local App Access settings
    - Remote applications
  - Allow client connections
  - App Protection - Advanced
  - Host to client redirection settings
- Enable ICA File Signing

Administrative Templates (Users)

Citrix Components
- Citrix Workspace
  - Client Engine
  - HDX MediaStream Flash Redirection - Client
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - User authentication
  - User experience
  - Allow client connections