[THIN] Re: Completely stupid shadowing question

Um,  local administrators have permissions to shadow by default.  If your
initiating users are not part of the local admins group then you will need
to modify the ica-tcp permissions to allow them that capability.

 

To script it,  you can use login consultant's tsconsec.exe utility.

 

Joe

 

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeff Pitsch
Sent: Thursday, July 30, 2009 11:34 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Completely stupid shadowing question

 

err permissions that is

On Thu, Jul 30, 2009 at 2:32 PM, Jeff Pitsch <jepitsch@xxxxxxxxx> wrote:

Wasn't there some utility for scripting ICA-TCP permissions?

 

On Thu, Jul 30, 2009 at 2:25 PM, Joe Shonk <joe.shonk@xxxxxxxxx> wrote:

If they are not local administrators on the box then yes.

 

Joe

 

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeff Pitsch
Sent: Thursday, July 30, 2009 11:06 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Completely stupid shadowing question

 

Ok it's been a while since I've setup shadowing but this is a PS4.0 farm.
The citrix policies are setup to allow help desk to shadow any explicit
user.  The policy is at the top of the priority list for policies.  Do I
need to give them shadow permission in the ICA-TCP properties as well?  I
simply can't remember.....

Other related posts: