Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Creating GPO to prevent users from installing anything on Citrix desktop

Posted on 2006-10-27
2
Medium Priority
?
2,654 Views
Last Modified: 2008-01-09
We are having problems with users installing applications when connected to a Citrix session. We want to disable the ability for anyone other than admins to install on the Citrix desktop session.. Can someone assist me with this?
0
Comment
Question by:Sharkgrill
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 19

Accepted Solution

by:
BLipman earned 2000 total points
ID: 17821190
What rights do they run under?  As a "user" level session much of this is restricted anyway.  If you are making them Power Users or Admins then you have a problem.  You can lock down many, many aspects of Windows for a terminal server session.  See the following:

How to lock down a Windows Server 2003 or Windows 2000 Terminal Server session
http://support.microsoft.com/kb/278295

Locking Down Windows Server 2003 Terminal Server Sessions
http://www.microsoft.com/downloads/details.aspx?FamilyID=7f272fff-9a6e-40c7-b64e-7920e6ae6a0d&DisplayLang=en

Citrix MetaFrame XP Security Design
http://www.brianmadden.com/content/content.asp?ID=96

Topic: Lock Down Published Desktop
http://support.citrix.com/forums/thread.jspa?forumID=1&threadID=56374&messageID=278087&

This can be very upsetting to users and applications so you should test this very well before introducing to users or running as a production system.  In addition, tools such as RegMon and FileMon can be key to tweaking security.  You might need to open some security when the tools show where users need certain access.  Also remember that you need to use Regedt32 and not regedit to apply/change registry security.  
0
 
LVL 1

Author Comment

by:Sharkgrill
ID: 17821811
Excellent.. Thank you
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After several days of searching and hunting for limited documentation, I wanted to share this guide to hopefully save someone the hassle of trying to figure this out on their own. I have tested this on Xendesktop 7.1 and PS 4.5 running simultaneous…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question