Solved

Citrix Web Access - Shared Folders - Windows Explorer

Posted on 2009-03-30
4
1,074 Views
Last Modified: 2013-11-21
Running the latest Citrix Access Essentials on Windows 2008.
Need to publish a shared folder for data access for various users with various rights.
So - C:\DATA to admins
C:\DATA\Users for std. users
Rather than publish Windows Explorer which even gives users rights to the C:\ drive
and opening files I just want to publish a specific folder that they can open and only if they have rights to it.  What would be the best way to publish access to those folders so they can't access the entire C: drive when connnected.
0
Comment
Question by:randyphillips
  • 2
  • 2
4 Comments
 
LVL 11

Expert Comment

by:pfcjoker
ID: 24033598
Technically it's not possible. You can obscure using locked down Explorer settings, but the bottom line is there is no way to truly keep a user from seeing something they have rights to see (such as most users need read access to critical windows system files and folders or they can't login at all). Best bet, make sure they have Read and Execute as needed locking down the critical folders as best as possible - but at the end of the day they will still be able to see the folders in Explorer if you publish it to them.
0
 

Author Comment

by:randyphillips
ID: 24034848
Hmm?  Really    So, there is no way to publish a modified "explorer" with only access to specific folders?  No way to publish shortcuts?  Sorry - we are new to Citrix and don't know all the in's and out's yet.  We simply need to give users access to specific folders and not the whole server drive.  <ugh>  Thanks!
0
 
LVL 11

Accepted Solution

by:
pfcjoker earned 500 total points
ID: 24035889
Sadly while you can force explorer to a folder with a command line switch [explorer /root,c:\data] nothing really stops the user from browsing to say c:\windows. You can use some of the GPOs documented in this Terminal Server lock down guide [http://support.microsoft.com/kb/278295] to try and obscure access or remove the user's ability to do certain things. Even trying to sneaky and launching it using internet explorer using the kiosk mode switch will simply launch windows explorer and you are right back where you started.
0
 

Author Closing Comment

by:randyphillips
ID: 31564657

Thanks - a certified Citrix partner  helped us with this saying we could restrict folder access.  Apparently not - this is a BIG disappointment.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SCCM Microsoft Report 2 47
cannot unmapped a network drive 10 76
Intermittent issues with RDP on domain servers 4 46
local administrator password solution 26 73
After several days of searching and hunting for limited documentation, I wanted to share this guide to hopefully save someone the hassle of trying to figure this out on their own. I have tested this on Xendesktop 7.1 and PS 4.5 running simultaneous…
Citrix policies are the most efficient method to configure and tune XenDesktop environments, allowing organizations to control connection, security and bandwidth settings based on various combinations of users, devices or connection types.  Citrix …
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

947 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now