Limit device redirection when using Hyper-V Enhanced Session Mode

Source facts

Microsoft documents Enhanced Session Mode as an RDP-based VMConnect connection available for Windows VMs. It enables sharing capabilities such as clipboard, printers, audio, USB devices, and data disks. The documented guest configuration requires Remote Desktop to be enabled. The connection settings let the operator choose devices to share. Microsoft Learn.

Applicability

Identify the session mode, guest purpose, and exact local resources required for the task. Review the difference between viewing the guest and redirecting a device into it. Keep device sharing separate from assigning a physical GPU through DDA.

DSE recommendation

Define a minimal redirection profile for each administrative use case. Ask the data owner to approve access to a local drive or clipboard when the guest is outside the same trust scope. Open the connection settings before the session and verify the selections rather than accepting an accumulated profile. Use a disposable test file for any file-transfer exercise.

Verification

Confirm the displayed session mode and inspect which resources actually appear inside the guest. Test the approved device and check that an excluded drive or printer is unavailable through redirection. Record the profile used and remove temporary sharing after the task. Investigate unexpected resources before reusing the profile elsewhere.

Official references

Microsoft Learn: Share devices with Hyper-V Windows virtual machines. Source reviewed September 8, 2026.