{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "slug": "dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode", "url": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/" }, "title": "Limit device redirection when using Hyper-V Enhanced Session Mode", "summary": "Which local devices should be shared with a Windows VM through VMConnect?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:13:30+00:00", "modified_at": "2026-09-08T18:29:34+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 1, "word_count": 215, "potentially_affected": "Administrators using Hyper-V Enhanced Session Mode with Windows guest VMs.", "dse_recommendation": "Define a minimal redirection profile for each administrative use case.", "primary_source": { "name": "Share devices with Hyper-V Windows virtual machines", "url": "https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. Microsoft Learn.

\n

Applicability

\n

Identify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.

\n

DSE recommendation

\n

Define a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.

\n

Verification

\n

Confirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.

\n

Official references

\n

Microsoft Learn: Share devices with Hyper-V Windows virtual machines. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. Microsoft Learn.\nApplicability\nIdentify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.\nDSE recommendation\nDefine a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.\nVerification\nConfirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.\nOfficial references\nMicrosoft Learn: Share devices with Hyper-V Windows virtual machines. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode).\n\n## Applicability\n\nIdentify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.\n\n## DSE recommendation\n\nDefine a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.\n\n## Verification\n\nConfirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.\n\n## Official references\n\n[Microsoft Learn: Share devices with Hyper-V Windows virtual machines](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "url": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Limit device redirection when using Hyper-V Enhanced Session Mode", "item": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "url": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/", "headline": "Limit device redirection when using Hyper-V Enhanced Session Mode", "description": "Which local devices should be shared with a Windows VM through VMConnect?", "abstract": "Which local devices should be shared with a Windows VM through VMConnect?", "articleBody": "Source facts\nMicrosoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. Microsoft Learn.\nApplicability\nIdentify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.\nDSE recommendation\nDefine a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.\nVerification\nConfirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.\nOfficial references\nMicrosoft Learn: Share devices with Hyper-V Windows virtual machines. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:13:30+00:00", "dateModified": "2026-09-08T18:29:34+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Limit device redirection when using Hyper-V Enhanced Session Mode" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 215, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Share devices with Hyper-V Windows virtual machines", "url": "https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode" } } ] } }