How can I stop users from performing clipboard and printer redirection from the Windows 2000 Server Terminal Services client?

A. Many people consider clipboard and printer redirection a security risk. Clipboard redirection lets users cut and paste data from their Terminal Services sessions to their local sessions. Printer redirection makes users' local printers accessible from their Terminal Services sessions. You can add two registry values on your users' local machines to disable clipboard and printer redirection.

1. Start regedit.exe.
2. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft. If a Terminal Server Client key doesn't exist, you need to create it.
3. From the Edit menu, select New, Key.
4. Enter a name of "Terminal Server Client" (without the quotes), and press Enter.
5. Select the new key.
6. From the Edit menu, select New, DWORD Value.
7. Enter a name of "DisableClipRedirection" (without the quotes) to disable clipboard redirection or "DisablePrinterRedirection" (without the quotes) to disable printer redirection. Press Enter.
8. Double-click the new value and set it to 1. Click OK.
9. Close regedit.exe.

You don't need to reboot the machine. Clipboard/printer redirection will no longer work from the normal or advanced Terminal Services client.

You can also stop clipboard/printer redirection on the server side from the Terminal Services Configuration, Connect, Client Settings tab.

End of Article