At our company, we use RDP sessions to a JumpHost/Gateway to access customer servers and databases and disallow leaking data to employees computers. This is enforced via group policy to disallow clipboard redirection (described here).
But not being able to use the local clipboard to paste into the remote host is somewhat impractical. I've just discovered that the Mac »Microsoft Remote Desktop« app offers to switch between several »Clipboard modes« per host with the values Disabled
, Bidrectional
, Local to Remote only
and Remote to Local only
. So the Local to Remote only
is the mode we need.
But how do we enforce that from the server? Is there a hidden group policy somewhere? I'm out of luck googling it.