Restricting reprogramming of a redirected usb device

One or more computer storage media storing computer executable instructions which when executed by one or more processors implement a virtual bus driver in a virtual desktop infrastructure (VDI) environment, the virtual bus driver being configured to selectively block USB request blocks (URBs) based on whether the URBs pertain to an attempt to modify firmware of a redirected USB device, the virtual bus driver performing the selective blocking on each received URB by:

• determining whether the URB includes a header indicating that the URB pertains to a vendor specific command, and if so, blocking the URB;
• and
• determining whether the URB pertains to a bulk transfer and defines a command block wrapper having a command block specifying a vendor specific opcode, and if so, blocking the URB.

A system for implementing a virtual desktop infrastructure (VDI) environment comprising:

• an agent that executes on a server and that is configured to establish remote sessions with client terminals including to implement USB device redirection over the remote sessions;
• and
• a virtual bus driver that executes on the server and that is configured to evaluate each USB request block (URB) that targets a redirected USB device to determine whether the URB pertains to an attempt to modify firmware on the target USB device such that, when the virtual bus driver determines that the URB pertains to an attempt to modify firmware on the target USB device, the URB is routed to the agent only if an application or user associated with the URB is authorized to modify the firmware.