compdigit44
asked on
XenApp 6 Published Desktop
I'm rolling out a small XenApp 6 farm to support 130 users max. I has two physical XenServer runing 5.6 FP2 that how a total of 6 XenApp VM's. I had to create multiple VM since some of my applications so not play nice together. Anyway my XEnAPP server are in there own OU and have their own GP applied to them. I am also using a work group. I have been asked to published a locked down desktop. Here are my questions. Should I create a new XenApp VM for this and seperate Gp becuase I do not want to lock down the admins desktops on my other XenApp VM's. What is the best way to do this
ASKER
All of my servers are in a 2008 AD domain. I already have a custom GP applied to test servers. My question is should I create another GP and Vm so the located down setting do not apply to theother servers?
If you create the OU as a child OU of your other servers, make sure you incorporate loopback. It would be better to keep the existing OU and GPO(s) and set up a sister OU and apply the new GPO to that OU.
ASKER
It sounds like I should create a new XenApp Vm to host the published desktop is this correct? Is this the recommended method from Citrix
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
It would be best to place these locked-down servers in their own OU so that you could lock them down more stringently. The easiest way to do this is as you have described.
However, you could technically apply all the stringent lockdowns to all the servers and then limit applicability to admins, but that could get really messy really fast.