[THIN] Re: Citrix Lockdowns

Copy/Paste (clipboard) and drive mappings can be controlled via Citrix
policy, so you can do it with any client.

Create a group in AD for the users you don't want to have copy/paste and
drive mappings.  create a citrix policy disabling these and assign the
group.  Make sure you prioritize this group appropriately based on other
policies.
 
It works great, and I do it for mapped drives with 50 or so web client
users.  It's just 1 more check box and a radio button to disable the
clipboard.
 
 
 

________________________________

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Malcolm Bruton
Sent: Tuesday, December 19, 2006 4:29 AM
To: thin@xxxxxxxxxxxxx
Subject: RE: [THIN] Citrix Lockdowns


Easiest way would be to use the java clients only.  Configure Web
interface so the java client will not map local drives and disallow copy
and pasting. etc.  You could change the ICA connection properties to do
this but I would assume that you have internal users connecting to that
same server so that is probably not an option.
 
There are holes in bith citrix polices and MS policies.  We use MS
policies (mainly becuase we are on MF XP still)  Using MS policies does
allow you to get 95% of the easy stuff to be locked down.  To get 100%
you need to use a third party.

________________________________

From: thin-bounce@xxxxxxxxxxxxx on behalf of Angela Smith
Sent: Tue 19/12/2006 04:08
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Citrix Lockdowns



Hi

I am looking at locking down our Citrx farm for all Remote Users.  I
have 2
issues I was hoping to get some information on:

1) Is there a way to restrict users from copying files in a citrix
session
to their local drives.  Here is my scenario..

A user will connect to our Citrix Presentation Server 4 farm using Web
Interface.  If they open Windows Explorer (on Citrix) they can right
click a
file on the corporate network, select copy then minimise the published
application and can paste in their local Windows Explorer.  These users
have
a Citrix client installed.  The Web Interface is setup to use a Citrix
Client with Java as fallback.

2) Has anyone implemented a Software Restriction Policy on Citrix? Does
it
work or should I use the "Don't run specified Windows applications"
GPO?? I
want to restrict all executables except for Internet Explorer and MS
Office
apps.  Whats the best way for me to do this?

Thanks
Angela

_________________________________________________________________
Advertisement: Fresh jobs daily. Stop waiting for the newspaper. Search
Now!
www.seek.com.au
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Ea
u&_t=757263760&_r=Hotmail_EndText_Dec06&_m=EXT

SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com <http://www.f1u.com/> 
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
************************************************

Other related posts: