I dont know of any sure-fire NT Lockdown tools for Citrix TSE, but the built-in APPSEC tool would probably be a good place to start, along with regini to do the registry permissions update. ( Lock HKLM\Software to Users:R rights only, and audit everything else) For the OS, set all .exe and .dll files to read for users, and Write for Adminstrators and ensure that you audit everything! Ed -----Original Message----- From: Michael Boggan [mailto:MBoggan@xxxxxxxxxxx] Sent: Friday, November 22, 2002 11:32 AM To: THIN (E-mail) Subject: [THIN] Locking a server down Does anyone know of any good technotes, articles on locking down a WinNT TSE/Citix XP server environment using policies and the registry? I know about Tricerat and other programs like that but we are way over budget already and don't have the money to spend on buying software to do this. We need to keep users from adding new programs on there on along with printers, etc. Thanks, -------------------------------------------- Michael Boggan, Network Eng/Citrix Admin Virtual Desktop Inc. Dallas, Tx ph. (972) 960.6400 f. (972) 960.6445 email. mboggan@xxxxxxxxxxx -------------------------------------------- *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor: Wyse Technologies Get a free whitepaper on how to secure your corporate data from Wyse. Click Below. http://thethin.net/wyse.cfm *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm