VM : disable-console-drag-n-drop

Information

Explicitly disable copy/paste operations.

Drag and Drop operations are disabled by default in ESXi. This setting came over from the hosted platforms. (e.g. Workstation/Fusion)

The default value is null. Setting this to true is just for audit. A future update will set this to TRUE explicitly. This will then become an Audit Only setting at that time.

http://pubs.vmware.com/vsphere-65/topic/com.vmware.vsphere.security.doc/GUID-367D02C1-B71F-4AC3-AA05-85033136A667.html

Solution

# Add the setting to all VMs -
Get-VM | New-AdvancedSetting -Name "isolation.tools.dnd.disable" -value $true

See Also

https://www.vmware.com/content/dam/digitalmarketing/vmware/en/files/xls/vmware-6-5-update-1-security-configuration-guide.xlsx

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7

Plugin: VMware

Control ID: da54e7890f75093e80ec1ea11ac0f641e67992268090428ff5c2ca856aa72313