How do I disable copy paste in Remote Desktop?

If you are actively using remote connections to your workstations, Windows servers or RDS farms using the RDP protocol, it is likely you have come across a problem when the clipboard is not working in a Remote Desktop session. So you cannot transfer [copy/paste] a text or files between your computer and a remote host. The problem occurs both in Windows Server and in desktop Windows versions.

Two scenarios are possible: copying files/data using RDP is not allowed on a remote server or rdpclip.exe process has crashed in the current user session.

RDP Clipboard [Rdpclip.exe] Stops Working in Remote Desktop Session

If the clipboard in RDP session has stopped working unexpectedly, and Paste option in the context menu has become inactive, it is easier to end the current RDP session correctly [logoff] and re-connect. This will fix the Remote Desktop clipboard issue for sure. However, it is not always convenient, because you have to re-open all apps in your RDP session again. Fortunately, there is a way to restore correct clipboard operation in a RDP session without logging off.

Rdpclip.exe is responsible for clipboard operation between your local computer and the Remote Desktop host. A separate rdpclip.exe process is started for each remote user session when they connect to the Remote Desktop. Using the Task Manager, you can kill the rdpclip.exe [RDP Clipboard Monitor] process and run it manually [Task Manager -> File -> Start new task -> rdpclip -> Enter].

Usually it helps to restore the remote clipboard operation quickly. Make sure if copy/paste [Ctrl+C / Ctrl+V] is working in the RDP session.

Remember that in order to copy data via the RDP clipboard, the following conditions must be met:

1. The remote clipboard must be enabled in the settings of the RDP client you are using to connect to a remote computer. Check Clipboard in the Choose the devices and resources that you want to use in your remote session section in the Local Resources tab of the built-in mstsc.exe client;
   
2. Copying and pasting data using the clipboard must also be allowed on the RDP/RDS host [see below for how to do this].

How to Allow/Prevent Copy and Paste via RDP Clipboard on Windows?

You can enable or disable the use of the RDP clipboard on the Windows host for copy and paste operations by using Group Policy or Registry settings.

1. 1. Run the Local Group Policy Editor: gpedit.msc
   2. Go to Computer Configuration -> Administrative Templates -> Windows Components -> Remote Desktop Services -> Remote Desktop Session Host -> Device and Resource Redirection;
   3. To prevent copying data to/from a remote server using the clipboard of a RDP session, set Enabled for the following policies:
      Do not allow Clipboard redirection [Clipboard redirection is used to copy text or files using the clipboard in RDP]
      Do not allow drive redirection [Drive mapping/redirection allows a user to get access to their local drives in a RDP session. It is also used when copying files]
      
   4. If you want to force using the RDP clipboard, change the values of the settings to Disabled [by default, using RDPClip to copy data between a local computer and a remote RDP host is allowed]
   5. Update the Group Policy settings using gpupdate /force. In order new settings to be applied to users, they must end their RDP sessions [using logoff instead of disconnect] or wait for automatic disconnection of user sessions according to RDS timeouts.

If you are using RDS hosts running on Windows Server, you can disable the clipboard and the local drives redirection in the collection settings: Remote Desktop Services -> Collections -> Tasks -> Edit Properties -> Client Settings. Uncheck Clipboard and Drives options in the Enable redirecting for the following section.

If you want to deny copying to/from a RDP session for users only, but not the administrators, you can change the NTFS permissions on the executable  C:\windows\system32\rdpclip.exe. To do it, uncheck Read/Execute permissions for the built-in Users group in the file’s security properties and remove the group from the list [you will have to change the file owner from TrustedInstaller to another one first].

13 users found this article helpful

How to disable clipboard sharing in a remote session?

Resolution

You can configure group policy to prevent clipboard from sharing [on Terminal server locally or enforce it via AD/DC GPO]:

Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource a Redirection: Do not allow Clipboard redirection - enabled

To inhibit clipboard for particular user, please enforce the following policy via AD/DC GPO set on required object:

User Configuration Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Device and Resource a Redirection: Do not allow Clipboard redirection - enabled

Please note that in Server 2003 group policy location is different:

Administrative Templates > Windows Components > Terminal Services > Client/Server data redirection: Do not allow Clipboard redirection - enabled

In this tutorial, you will learn how to disable copy/paste from the local machine to the VM and vice versa for all users INCLUDING the Administrator.

STEP 1

In your Windows search bar menu: type gpedit and select Edit group policy.

Navigate in the left tab to: Computer Configuration – Administrative Templates – Windows Components – Remote Desktop services – Remote Desktop Host – Devices and Resources Redirection.

Double click on Do not allow Clipboard redirection and select Enabled. Click Apply and then OK.