At our company, we use RDP sessions to a JumpHost/Gateway to access customer servers and databases and disallow leaking data to employees computers. This is enforced via group policy to disallow clipboard redirection (described here).
But not being able to use the local clipboard to paste into the remote host is somewhat impractical. I've just discovered that the Mac »Microsoft Remote Desktop« app offers to switch between several »Clipboard modes« per host with the values
Local to Remote only and
Remote to Local only. So the
Local to Remote only is the mode we need.
But how do we enforce that from the server? Is there a hidden group policy somewhere? I'm out of luck googling it.