This can be done per server in the ICA protocol config. Open "citrix Connection configuration", double click ICA, go to Advanced, look on the right side for a check box for : -inherit client / user config. - only launch published applications Setting the checkbox for only launch pub apps will block direct ICA connections to the desktop. HTH Lan On 8/22/07, Paul Bergson (ALLETE) <pbergson@xxxxxxxxxx> wrote: > > Not sure if this can or can't be done and hope someone from this group > might have some thoughts on it. > > > > We are running Citrix Metaframe XPa and it has been discovered that a user > can make an ica connection to create a desktop session to a Citrix server. > This is something I would like to prevent. Obviously I can't go in and > block users from remote connections since they would then be unable to > connect to a published session. > > > > Is there a way to prevent users from creating a desktop session yet allow > them to connect via a published session? > > > > Thanks > > Paul > > >