Microsoft RemoteFX: USB 和设备重定向 姓名 : 张天民 职务 : 高级讲师 公司 : 东方瑞通 ( 北京 ) 咨询服务有限公司

Transcription

1

2 Microsoft RemoteFX: USB 和设备重定向 姓名 : 张天民 职务 : 高级讲师 公司 : 东方瑞通 ( 北京 ) 咨询服务有限公司

3 RemoteFX 中新的 USB 重定向特性 在 RDS 中所有设备重定向机制 VDI 部署场景讨论 : 瘦客户端和胖客户端 (Thin&Rich). 用户体验 : 演示使用新的 USB 重定向功能

4 81% 4

5 本地和远程的一致的体验 (Close the experience gap between Local and Remote) 5

6 I want to be able to use any device I want, from any client I want, and have it just work 6

7 Isochronous RDP High-Level 设备重定向 RemoteFX USB 设备重定向

8 RemoteFX USB 客户端是否需要驱动? No Yes RDP High-Level 服务器端是否需要驱动? Yes No 对所有设备是一种定向方法? Yes No 在多个会话中可以同时用设备? No Yes 网络优化 LAN, like the rest of RemoteFX LAN and WAN

9 优点 No client drivers necessary Works with any device 缺点 Only one session can use a USB device at a time 最佳的结合 二者都使用! 9

10 在客户端上开启 USB redirection 在虚拟机上启用 RemoteFX 配置安全策略 ( 如果需要 ) 用 UI 选项选择设备或者为 USB 设备发布一个 RDP 文件 使用 RemoteFX USB 重定向功能!

11 客户端支持 RDP 7.1 USB redirection 功能必须通过组策略启动组策略刷新, 然后重新启动机器 Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Connection Client\RemoteFX USB Device Redirection

12 RemoteFX 必须启动在 VM 端组策略可用来控制 USB 重定向 USBR 能被完全启用和禁用 Computer Configuration\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Device and Resource Redirection

13 更多灵活的重定向设置可以通过 [ 设备安装限制 ] 策略实现 Computer Configuration\Administrative Templates\System\Device Installation Restrictions

14

15

16 演示 Most Wanted RemoteFX Devices

17 User Kernel RDP7.1 Client RemoteFX Devices Enumeration RemoteFX Generic USB Driver Sessions Notifications USB Device Driver Provided by: Microsoft IHV/ISV RemoteFX USB HUB Filter USB HUB Client 17 RemoteFX Redirected Device Proxy RemoteFX USB Hub Server

18 Application User 4 Win32 I/O API Kernel Windows Kernel (I/O Mgr, PnP) 3 2 USB Device Driver USB HUB Provided by: Microsoft 1 IHV/ISV 18

19 RDP Client 6 RDP VM RDP Server User Kernel 3 4 Provided by: Windows Kernel (I/O Mgr, PnP) Microsoft IHV/ISV 2 1 Remote FX USB Generic Device USB Driver Driver RemoteFX USB Hub Filter USB HUB 19 5

20 User Kernel VM RDP Server Application 10 Win32 I/O API Windows Kernel (I/O Mgr, PnP) 7 9 USB Device Driver RemoteFX Device Proxy Provided by: Microsoft RemoteFX USB HUB 8 IHV/ISV 20

21 VM RDP Server RemoteFX USB Hub USB Device Driver Device Removal Data Flow path similar to claim device In reverse order Auto-reconnect No changes until all attempts to restore connection exhausted Disconnect All devices removed 21

22 稳定性 Driver failures are isolated to the VM Applications are transparent to redirected devices Integrate with PnP subsystem for device installs, driver load/unload 安全性 Driver failures are isolated to the VM Driver interfaces should be validated Obey all USB restriction policies 兼容性 Work for both KMDF and UMDF drivers Asynchronous, layered drivers, with services or without

23 在重定向发生之前, 服务器和客户端都有自己的身份验证 即便在客户端和服务器端都被验证 从客户端或服务器上的设备返回的数据也被认为 不被信任 为所有在用的 IOCTLs 和 URB 接口提供额外的验证, 包括 : All IDs returned from the device prior to be used on server Every URB packet is validated to meet the USB 2.0 specification

24

25 瘦客户端场景 一次只能一个会话 RemoteFX USB redirection 是主要的设备重定向方式 胖客户端场景 一次可以多个会话或者应用 High-Level redirection 将是主要的设备重定向方式 Bottom Line: It s all about the drivers!

26 New RDP file entry: usbdevicestoredirect:s: There are four elements: Processing Order Directive Meaning 1 * Select all devices for redirection that aren t picked up by highlevel redirection {Device Class GUID} Select all devices that are members of the specified class USB\InstanceID Select a device 2 -USB\InstanceID Deselect a device

27

28

29 Start with usbdevicestoredirect:s:* Add Class GUIDs for the devices you wish to use from rich clients

30

31

32 疑问和解答

33 感谢您参与此会场! 您的意见与建议对我们非常重要 请您填写反馈表

34 相关课程 分会场 分会场 分会场 分会场 34

35 参考资源

36

37 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.