Oo lordy it's the mps4 exam all over again ?!! Glad they didn't ask this one :) Looking at your policies - yes If you've these 2 security groups, and you've configured these policies then zonea users will connect to zonea and never zoneb and vice versa But you said you had users who needed to access across zones for some applications So, I suggested an additional group policy, that applied to the servers hosting these applications that overrode the default settings. But now I write it again I thought - that'd be clever if it worked - then I remembered that you can't use servers as selection criteria for zone policies. D'oh! -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Evan Mann Sent: 03 October 2005 17:53 To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Zone Preference and Failover I assign users to the servers in the different zones based on an AD Security Group. Let say.... Policy Priority 1 (highest) with apply to set to ZoneA SG, with ZoneA primary, and ZoneB Never connect Policy Priority 2 (lowest) with apply to set to ZoneB SG, with ZoneB primary, and ZoneA Never connect The users who need to have access to both servers are in ZoneA SG and ZoneB SG. If a published app they are trying to hit is abailable on servers in ZoneA and ZoneB (such as Outlook), this setup of policies should make it so they only access Outlook from the servers in ZoneA? If a published app is only only available on servers in ZoneB, the lower policy should provide them access to it? There won't be a conflict between the policies with the way they'd be set above? -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Andrew Wood Sent: Monday, October 03, 2005 12:51 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Zone Preference and Failover Why not apply a zone policy with an 'apply to' that also includes the servers that these apps are on? If you put that policy at a higher priority than the standard policies it should kick in with its settings first. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Evan Mann Sent: 29 September 2005 15:16 To: thin@xxxxxxxxxxxxx Subject: [THIN] Zone Preference and Failover Does Zone Preference and Failover only go to a backup group if the servers in the primary zone are physically unreachable? Or will it failover under high load situations? I have a situation where I need to use zone preference to isolate different groups of users to different zones, but I have some users who need to cross both zones. I don't want those users crossing the zones for applications like MS Office, only specific applications made available on each zones servers. Right now, a user who is primary group zone 1 and backup group for zone 2, can launch the app that is only made available on a server in zone 2, but I'm not sure if some situation cause them to start launching applications like Outlook in zone 2 (as that app is available on servers in both zones). ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm