Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 522
  • Last Modified:

Limiting printers displayed by session

Hey everyone,

I am running a Citrix Presentation Server 4.0 on a Windows 2003 R2 box.  This box only supports one published app which, unfortunately, the only way I have been able to get to run correctly is to add the users who use it to the local administrators group.  The side effect of this is that now they all can see every available printer from every session when they go to print.  Is there any way (via GPO perhaps) to limit the printers displayed just to each user session even if they are local admins?

Thanks in advance!

1 Solution
How are your printers configured?  Local admins will see all printers they have access to so maybe if you remove the default security rights to the printers and only add the people you want.  Although I'm not sure how you could do this if you are using auto-created printers.  This obviously isn't a very common practice though, and I think your biggest concern should be getting that app to run without local admin rights.  That is very dangerous in my opinion.  If you post more details about the app maybe we can help solving that problem and then the printers will take care of themselves.
ltrain0104Author Commented:
I am using auto-created printers.  In addition to that I have roaming terminal server profiles for the app for function correctly.  The name of the application is Jonas and the issue that I have when I run the application and the users are not local admins is that I can see that the roaming profile loads, but there is an .ini file in the profile that specifies the user settings won't load and even though I can see that the printers auto-created correctly in windows and the citrix session they don't show up in Jonas.  As soon as I make the users local admins both of these issues are corrected.  Any help is getting this app working without local admin priviliges would be great!


Need to make sure that the users have the correct permissions to Jonas application folder.  If the Jonas is running out of the program files folder users by default do not have the proper permissions to run from citrix.  Try setting everyone full control of the Jonas folder and see if that works.  If it does start scaling back the permissions as much as you can until the application starts failing again.  Even if all users have full control of the program files folder this is still much better than all users having local admin rights.  

Also The Jonas application may have files in the system32 folder that only admins would have rights to.  You will need to set rights for users as well on these files.  

Many applications to run under Citrix and Terminal Server also need files copied from the system32 folder to the windows folder in their own profile to get the application to run correctly.  

Registry keys for the Jonas may also need to be given users rights for the application to run correctly.

Progam files folder, System32 and the registry are all areas that admins have rights to that a local user doesn't on a Citrix server.

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now