Skip to content

Use group policies to customize IAP Desktop

You can use a group policy object (GPO) to configure policies for IAP Desktop. Policies take precendence of user settings: When you configure a policy, users can't change the respectice setting anymore.

For a full list of settings that you can control using group policies, see Group policy reference.

To configure policies, you first have to install the IAP Desktop Policy Templates:

  1. Download the PolicyTemplates package from the downloads page.
  2. Extract the package into the PolicyDefinitions folder of your central store .

You can now use the IAP Desktop Policy Templates to configure policies:

  1. In the Group Policy Management Console, create or select a GPO.

  2. Link the GPO to an organizational unit that contains the users who should be able to use IAP Desktop.

    Note: You can configure policies per-computer or per-user. Computer-based policies take precendence over user-based policies.

  3. Right-click the GPO and select Edit.

  4. Navigate to User (or Computer) Configuration > Policies > Administrative Templates > Google IAP Desktop and customize policies as necessary.

    Policies

  5. Close the Group Policy Management Editor window.

Customize server-side policies

To disallow clipboard sharing or restrict the usage of other Remote Desktop features, configure group policies on the target VM instance. You can configure these policies either by using the Local Group Policy Editor or by using Active Directory to apply a group policy.

You can find Remote Desktop policies under User (or Computer) Configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host.