> For the complete documentation index, see [llms.txt](https://docs.parallels.com/landing/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/user-device-management-and-client-policies/client-policies/configure-client-policy-options.md). # Configure client policy options The **Client options** node allows you to configure client policy options. Select the node and then select and configure individual items under it as described below. ### Connection On the **Connection** pane, specify the following options: * **Connection Banner**. Select a banner to display while establishing a connection. * **Automatically refresh connected RAS connections every \[ ] minutes**. Select this option and specify the time interval to automatically refresh a connection. This will refresh the published resources list in Parallels Client. * **When all sessions are closed**. Specifies what happens when all user sessions are closed: * **Do nothing**. Nothing happens. * **Lock workstation**. The computer is locked. * **Sign out from workstation**. The current user is signed out from their account. {% hint style="info" %} **Note:** The **Lock workstation** option is not supported on the [devices managed in the Kiosk mode](/landing/ras-admin-guide/parallels-ras-21-administrators-guide/user-device-management-and-client-policies/managing-widows-devices.md). {% endhint %} ### Logging Specify a log level for Parallels Client. Choose from the following options: * **Standard** * **Extended** * **Verbose** You should normally use the Standard logging. When you have an issue with Parallels Client, you can temporarily raise the log level by selecting Extended or Verbose and setting the start date/time and a duration. Note that the start date and time correspond to the local client time zone. Parallels Client must be running in order for the logging to take place. If Parallels Client is launched when Extended or Verbose levels are supposedly already in effect, the level will stay on for the remainder of the original duration setting. If a policy changes during this time, the actual log level settings will be reapplied accordingly. ### Update Select **Check for updates on startup** and specify an update URL if you want Parallels Client to check for updates when it starts. The URL can point to the Parallels website, or you can store updates on your local network and use this local URL. For the information on how to configure a local update server, please read . The section **Azure Virtual Desktop Client** allows you to configure settings related to how resources published in Azure Virtual Desktop are launched using the Parallels Client for Windows. * **Use Azure Virtual Desktop client.** If this option is selected, the Microsoft Azure Virtual Desktop (Remote Desktop) client will be installed and used to connect to resources published in Azure Virtual Desktop. * **Use Windows App (verified version).** If this option is selected, the latest Parallels-verified version of the Microsoft Windows App client will be downloaded and used to connect to resources published in Azure Virtual Desktop. The latest Parallels-verified version of the Microsoft Windows App client is specified in the XML file hosted by Parallels at * **Use Windows App custom (unverified version).** If this option is selected, a specific version of the Microsoft Windows App client will be downloaded and used to connect to resources published in Azure Virtual Desktop. You can use a specific version of the Microsoft Windows App by hosting your own custom version of the XML file. Note that the URL you specify needs to be accessible from all client devices targeted by this policy. {% hint style="info" %} **Note:** These options work with Parallels Client for Windows only. Parallels Client for Mac can be updated only from the App Store. Parallels Client for Linux does not support this feature. {% endhint %} ### PC keyboard These settings control the on-screen software keyboard used by Parallels Client for iOS, Parallels Client for Android, and the User Portal (HTML5). When the PC keyboard is enabled, Parallels Client displays a custom on-screen keyboard that sends scancodes to the remote session. When it is not enabled, the default operating system keyboard is used, which sends Unicode characters instead. Specify the following options: * **Force use PC keyboard**. Select this option to force the use of the PC keyboard on supported clients. End users can also enable this manually in the client (for example, in Parallels Client for Android under **Settings** > **User input** > **Use PC keyboard**). * **Keyboard layout**. Select a keyboard layout from the drop-down list. Note that the selected layout can and will only be used in a Parallels Client version that supports this particular layout. {% hint style="info" %} **Note**: These settings apply to Parallels Client for iOS, Parallels Client for Android, and the User Portal (HTML5) only. Desktop clients (Parallels Client for Windows, Mac, and Linux) always send scancodes, and there is no policy option to apply a keyboard layout to them. {% endhint %} ### **macOS Keyboard Mapping** To determine whether local macOS shortcut keys are mapped to the remote session and the corresponding Microsoft keyboard shortcuts, set the shortcuts here. If you enable the policy, be sure to set at least one shortcut key, or users may lose functionality.
macOS KeyTextWindows Key Mapping
⌃ Left ControlLeft Control
⌃ Right ControlRight Control
⌘ Left CommandLeft Windows
⌘ Right CommandRight Windows
⌥ Left OptionLeft Alt
⌥ Right OptionRight Alt (AltGr)
⇧ Left ShiftLeft Shift
⇧ Right ShiftRight Shift
### Single sign-on Parallels Client for Windows comes with its own SSO component that you can install and use to sign in to Parallels RAS. If you already use a third-party credential provider component on your Windows computers, you first need to try whether the single sign-on works right out of the box. If it doesn't, you need to configure Parallels RAS and Parallels Client to use the Parallels RAS SSO component to function as a wrapper for the third-party credential provider component. To use Parallels RAS SSO as a wrapper, specify a third-party component, select the **Force to wrap third party credential provider componen**t option and specify the component's GUID in the field provided. You can obtain the GUID in Parallels Client as follows: 1. Install Parallels Client on a computer that has the third-party component installed. 2. In Parallels Client, navigate to **Tools** > **Options** > **Single Sign-On** (tab page). 3. Select the "Force to wrap..." option and then select your provider in the drop-down list. 4. Click the **Copy GUID to Clipboard** button to obtain the component's GUID. You will also need to specify the component's GUID when setting up an invitation email in the RAS Console. If you haven't set up an invitation email yet, you can do it as follows: 1. In the RAS Console, select the **Start** category and then click the **Invite Users** item in the right pane. 2. On the second page of the wizard (target platform and connection options), click the **Advanced** button. 3. In the dialog that opens, select the **Force to wrap third party SSO component** option and specify the GUID of the component. For more information, see the [**Invite users**](/landing/ras-admin-guide/parallels-ras-21-administrators-guide/getting-started-with-parallels-ras/set-up-a-basic-parallels-ras-farm/invite-users.md) section. After the policies are applied to Windows computers, Parallels Client will be automatically configured to use the specified third-party credentials provider. ### Advanced Use this pane to specify advanced client options, as described below. ### Global * **Always on Top.** With this feature enabled, other applications will no longer mask the launcher. * **Show connection tree**. Displays the connection tree. * **Minimize to tray on close or escape.** Enable this feature to place the Parallels Client into the System Tray when you click on the **Close** button or hit escape. * **Enable graphic acceleration (Chrome client)**. * **Do not warn if server certificate is not verified.** When connected to a RAS Secure Gateway over SSL, and the certificate is not verified, a warning message will be displayed. You can disable this warning message by enabling this option. * **Swap mouse buttons.** When enabling this setting, the mouse buttons will be swapped on the remote computer. * **DPI aware**. This will force a published application to be DPI-aware depending on the client's DPI settings. This feature works on Windows 8.1 or higher. * **Add RAS Connection automatically when starting web or shortcuts items**. This option will add the connection preferences in the Parallels Client when starting an item contained in a connection that is not yet listed. * **Do not show prompt message for auto add RAS connection**. Enable this option to disable prompt messages when adding auto connections. * **Close error messages automatically.** When a session disconnects because of an error, the error is automatically dismissed after 15 seconds. * **Clear session cookies on exit.** When a user logs on, a Parallels RAS logon cookie is kept on the client side. This will allow the user to connect again with Parallels RAS without re-authenticating. Check this option to delete any cookies when the user closes the Parallels Client. * **Enable extended logging**. Enables extended logging. * **Turn off UDP on Client**: Turns off UDP traffic from Parallels Client for Windows. ### Language Specify a language that Parallels Client should use. The **Default** option uses the main language used by the client's operating system. ### Printing * **Install missing fonts automatically.** If automatic fonts are installed on the server, they will be available when a session connects. * **Raw printing support.** When enabling this setting, printing will still work for applications sending data in RAW format. * **Convert non distributable fonts data to images**. During RAS Universal Printing, if a document includes non-distributable fonts, each page is converted to an image. * **Dynamic printer redirection**. This feature allows you to change your redirected printers without signing out of Parallels Client. * **Cache RAS Universal Printing embedded fonts**. Caching of embedded fonts locally to speed up the RAS universal printing process time. ### Windows client * **Hide Launcher when application is launched**. If this option is enabled, the launcher will be minimized in the system tray after an application is launched. * **Launch automatically at Windows startup.** This option will place a shortcut in the start menu folder of the client and the Parallels Client will launch automatically on Windows startup. ### RemoteFX USB redirection * **Allow RDP redirection of other supported RemoteFX USB devices to all users**. This setting applies to Parallels Client for Windows only. Outside Parallels RAS, the standard RemoteFX USB redirection feature must be enabled via Group Policy in order to work. When you select the "Allow RDP redirection ..." option on this screen, it will do the same as GPO, which is update the corresponding registry setting in Windows on a client machine. Parallels Client for Windows relies on this feature to be enabled in Windows registry in order to redirect USB devices. When the policy containing this setting is applied on a client machine, the user will see a message that RemoteFX USB redirection was enabled and that they will need to restart Windows. ### Customer Experience Program * **Participate in Customer Experience Program**. This setting allows you to join Parallels Customer Experience Program. For more information about Parallels Customer Experience Program, see . --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.parallels.com/landing/ras-admin-guide/parallels-ras-21-administrators-guide/user-device-management-and-client-policies/client-policies/configure-client-policy-options.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.