From: "Beckett, William (Bill)" <bill.beckett@xxxxxxxxxxxxx>
Reply-To: thin@xxxxxxxxxxxxx
To: <thin@xxxxxxxxxxxxx>
Subject: [THIN] Re: Published Desktop lockdown
Date: Fri, 14 Jul 2006 08:18:03 -0400
Sounds like you should look into loopback processing and put your
terminal servers in a separate OU and pin loopback processing on that
OU.
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Angela Smith
Sent: Friday, July 14, 2006 8:14 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Published Desktop lockdown
We run a fat desktop also. Wouldn't doing this make the Citrix Icons
also appear when they logon to their fat clients? (ie Windows XP
desktops). I want to keep the Citrix icons separate. I don't want the
users to be able to create any shortcuts or folders in their published
desktop. I simply want them to see shortcuts to apps they are entitled
to see (ie based on AD group membership)
>From: cstalhood@xxxxxxxxxxxxx
>Reply-To: thin@xxxxxxxxxxxxx
>To: thin@xxxxxxxxxxxxx
>Subject: [THIN] Re: Published Desktop lockdown
>Date: Fri, 14 Jul 2006 11:58:11 +0000
>
>Have you considered redirecting the Desktop to the user's home
directory?
>
>-----Original Message-----
>From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
>Behalf Of Angela Smith
>Sent: Friday, July 14, 2006 6:43 AM
>To: thin@xxxxxxxxxxxxx
>Subject: [THIN] Published Desktop lockdown
>
>Hi
>
>Ive just built a new farm based on Windows 2003 and Citrix Metaframe
>Presentation Server 4. Ive published a desktop and am looking for the
>best way to lockdown the "published desktop". Im using Group Policy
>and have set several settings to lock the published desktop. I have an
>issue where I don?t want the users to see/access the servers local
>drives. Ive accomplished this via the following settings:
>
>User Configuration\Administrative Templates\windows components\windows
>explorer\Hide these specified drives in My Computer User
>Configuration\Administrative Templates\\windows components\windows
>explorer\Prevent access to drives from My Computer
>
>My issue is that the users can create folders on the desktop but cannot
>delete them (due to the above Group Policy settings). How can I easily
>prevent the users from being able to make any changes to the desktop?
>
>As a side note, how do people control what icons are created on the
>desktop?? I was thinking of using a script that copies icons to the
>desktop based on AD group membership. Is there a better way to do
>this?
>
>Thanks
>
>_________________________________________________________________
>Research and compare new cars side by side at carpoint.com.au
>http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldw
>ide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801459%2Fpi%5F1
>004813%2Fai%5F833884&_t=54321&_r=hotmail_endtext&_m=EXT
>
>************************************************
>For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
>mode use the below link:
>//www.freelists.org/list/thin
>************************************************
>
>************************************************
>For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
>mode use the below link:
>//www.freelists.org/list/thin
>************************************************
_________________________________________________________________
New year, new job - there's more than 100,00 jobs at SEEK
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fninemsn%2Eseek%2Ecom%2Ea
u&_t=752315885&_r=Jan05_tagline&_m=EXT
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation
mode use the below link:
//www.freelists.org/list/thin
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************
