Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2679
  • Last Modified:

Creating GPO to prevent users from installing anything on Citrix desktop

We are having problems with users installing applications when connected to a Citrix session. We want to disable the ability for anyone other than admins to install on the Citrix desktop session.. Can someone assist me with this?
0
Sharkgrill
Asked:
Sharkgrill
1 Solution
 
BLipmanCommented:
What rights do they run under?  As a "user" level session much of this is restricted anyway.  If you are making them Power Users or Admins then you have a problem.  You can lock down many, many aspects of Windows for a terminal server session.  See the following:

How to lock down a Windows Server 2003 or Windows 2000 Terminal Server session
http://support.microsoft.com/kb/278295

Locking Down Windows Server 2003 Terminal Server Sessions
http://www.microsoft.com/downloads/details.aspx?FamilyID=7f272fff-9a6e-40c7-b64e-7920e6ae6a0d&DisplayLang=en

Citrix MetaFrame XP Security Design
http://www.brianmadden.com/content/content.asp?ID=96

Topic: Lock Down Published Desktop
http://support.citrix.com/forums/thread.jspa?forumID=1&threadID=56374&messageID=278087&

This can be very upsetting to users and applications so you should test this very well before introducing to users or running as a production system.  In addition, tools such as RegMon and FileMon can be key to tweaking security.  You might need to open some security when the tools show where users need certain access.  Also remember that you need to use Regedt32 and not regedit to apply/change registry security.  
0
 
SharkgrillAuthor Commented:
Excellent.. Thank you
0

Featured Post

Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now