Remove Internet Explorer security warning on terminal servers (Citrix)

Posted on 2009-04-14
Last Modified: 2012-05-06
Hi all!

I have a problem.
When users are searching for a telephone number or a user in Trio Present on a Citrix Desktop server a message appears in Internet Explorer:
"When you send information to the internet, it might be possible for others to see that information. do you want to continue?"

I found the registry setting that disable this message:

0 = do not prompt
1 = Prompt with checkbox checked
101 = Prompt with checkbox unchecked

I made a script:
SET WSHShell = CreateObject("WScript.Shell")

'Removes security warning in Internet Explorer

WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1601","00000000","REG_DWORD"

I have tried this script and it works, it changes the registry so the message do not appear.

I tried to link this script into the GPO for Terminal Servers (User Configuration-Windows Settings-Scripts-Logon), but when a user logs on the registry isn`t changed.
If I try to connect to a Citrix Desktop server via RDP the registry is changed, but not via Citrix. (This is because I use my admin user, not my ordinary user)

This only happens when a user connects to a Citrix desktop server.
If`I try to check the box "don`t show this message again" the message still shows up the next time I log in via Citrix to that Desktop server.

Does anyone have a clue or a solution I would be very pleased.
My customer wants this message to disappear.
Question by:Lazyeyes
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
LVL 18

Expert Comment

ID: 24137340
That key you are setting is in HKLM, try setting the one in HKCU instead. Or you can turn on loop back processing for GPO.

Author Comment

ID: 24137695
My script points to HKCU, so I already tried that.

WshShell.RegWrite "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1601","00000000","REG_DWORD"

Also tried to point the script to HKLM, that works but HKCU still shows wrong value even if I have enabled loopback.
Something is blocking users to edit registry settings, but I have no problems changing registry settings via ICA connection.

The settings getting "restored" each time I login the second time.

LVL 18

Expert Comment

ID: 24138207
Is the GPO applied to the citrix servers or the users? Can you run policy wizard to see which settings actually gets applied?
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.


Author Comment

ID: 24146040
The GPO is applied to the Citrix servers OU. The settings gets applied (tried with an msgbox in the script). I think the problem is that the logon script is running after the script in the GPO

Author Comment

ID: 24146106
If I log on to the desktop server the value in registry is wrong, but if I do a gpupdate the value change in registry. Gotta be the logon script that mess things up. The strange part is that the changes isn`t saved to the registry when I log off.

Accepted Solution

Lazyeyes earned 0 total points
ID: 24156137
I found the policy that messed up the registry setting.
User Configuration- Internet Explorer Maintenance- Security/ Security Zones and Content Ratings- Security Zones and Privacy-Internet- "Submit nonecrypted form data"

Anyway, I put the registry settings into the logonscript, seems to work now.

Author Comment

ID: 24178632
Found it out myself

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

#Citrix #Citrix Policies #XenDesktop #VDI #POC #Citrix Univeral Printer Driver #Citrix UPD
Citrix XenDesktop 7.6 Citrix Policies Audio
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question