# Limit device redirection when using Hyper-V Enhanced Session Mode

> Which local devices should be shared with a Windows VM through VMConnect?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:13:30+00:00
- Modified: 2026-09-08T18:29:34+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 1 minutes

## What you need to know

Which local devices should be shared with a Windows VM through VMConnect?

## Potentially affected

Administrators using Hyper-V Enhanced Session Mode with Windows guest VMs.

## DSE recommendation

Define a minimal redirection profile for each administrative use case.

## Article

## Source facts

Microsoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode).

## Applicability

Identify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.

## DSE recommendation

Define a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.

## Verification

Confirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.

## Official references

[Microsoft Learn: Share devices with Hyper-V Windows virtual machines](https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode). Source reviewed September 8, 2026.

## Primary reference

- Name: Share devices with Hyper-V Windows virtual machines
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/virtualization/hyper-v/enhanced-session-mode
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Limit device redirection when using Hyper-V Enhanced Session Mode,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-221-limit-device-redirection-when-using-hyper-v-enhanced-session-mode/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.