Dear All.. Does anyone have any idea whether it's possible to achieve both of the following: 1) Use PN Agent on the Citrix Published Desktop to deploy a 'dynamic' desktop based on users app rights, but to not include the Published Desktop itself. 2) Use PN Agent on the Client PC to use pass-through authentication and deliver the icon for the Published desktop but NOT the rest of the applications. Cheers, Danny