Windows Workspace App - Policies

Hello,

Group Policy Objects (GPOs) are currently on our roadmap for inclusion in the next major version. While Remote Desktop Manager (RDM) includes a wide range of policies, we will not be able to implement all of them initially. For the first phase, the following policies are planned:

• Locking options (e.g., lock on idle)
• Disable automatic updates
• Disable access to the update menu
• Disable the ability to add a new Space

Are there any additional policies that you would consider essential in the short term?

Best regards,

Hello,

The policies you listed are a great choice for the first few policies to add and are also the ones I would choose to add first.

These policies would be nice to have:

1. Disable the license expiration message in the Overview
2. Force refresh before edit entry

Would i be possible to limit the amount of time that credentials are available in the clipboard?

Best regards and thank you in advance,
Ben

Hi, absolutely. I will add these items to our list. Thank you!

Hi,

Can you clarify what you mean by "Disable the license expiration message in the Overview" please? Where do you get the message and on which entries?

Thank you

Hello,

i did not get in in the workspace app, i was just looking at the policies that we set for RDM.

Best regards,
Ben

Hello,

Is there an estimated release date for the next major version yet?

Thanks and Best regards,
Ben

Hi, the version 2025.2.0 should be out in the first half of june.

Best regards,

Hello,

Version 2025.2.0.0 of Workspace introduces the new Policies feature. To access the corresponding ADMX and ADML files, please run the application with Administrator privileges; this will generate a 'Policies' folder within the Workspace installation directory.
A dedicated documentation page will be available online shortly. In the meantime, we remain at your disposal for any assistance you may require.

EDIT: Here is the Documentation page: https://docs.devolutions.net/workspace/kb/workspace-desktop-app/application-policies-workspace/

Best regards,

Hello,

I already tested the regkey and the work perfectly.
Thank you again for the quick implementation of my feature request.

Best regards,
Ben

Hello,

I have a quick question regarding the forceLockOnIdlre RegKey.

If i change the LockOption in the WorkspaceApp to None the RegKeys will not override it again.
If i change the Clear Clipboard settings in the WorkspaceApp the RegKeys override it.

Can you test that on your end?

Best regards
Ben

Hello Ben,

Could you please clarify your question? From what I understand, when you configure the policy in the Group Policy Management Console to deactivate auto-lock (i.e., set it to "false" in order to prevent the user from enabling it), the policy does not seem to take effect—am I interpreting this correctly?

Best regards,

Hello,

I configured the auto-lock setting to active (true, with the value 300seconds) for all our users.

I wanted to test if it is still possible to work around this feature.
I opened the workspace app and under settings > security and privacy > Locking options i was able to just disable the "Locking options" even though the regkey is still active.

I tested the same workaround with the "enableClipboardTimeLimit"-RegKey.
I can still edit the time but the regkey resets the time to the set value of the regKey.


To sum it all up:
forceLockOnIdle can be overwritten by every user and WILL NOT be set back to the regKey value.
enableClipboardTimeLimit can be overwritten by every user and WILL be set back to the regKey value.

Best regards,
Ben

Hello,

Thank you for the clarification. Could you please confirm whether you configure the policies under 'Computer Configuration' or 'User Configuration'? We have observed that the configuration may vary depending on how the deployment is performed through your RMM. Would you be able to specify which RMM you are using, or whether the policies are installed locally for testing purposes?
In any case, the policies should ideally be applied under the 'Computer Configuration' section within the Group Policy Management Console.

Thank you,

Hello,

It is under 'User Configuration'.
The regkeys all get distributet to the users by the microsoft group policy management console.
All the regkeys are correctly set if I look into my RegEditor the values are correct.


The Workspace app appies every RegKey except the "forceLockOnIdle"

Hello Ben,

we will review the issue and provide you with an update as soon as a fix is available.

Best regards,