asked on

Citrix does not allow local computer save

When I try to save to the local computer (C$ on client (V:)) over Citrix, I get "Access denied" message. When I go into the Citrix Connection Center, the Session Security says "No access." I can change it to "Full Access" (and it works) but when I log off it reverts back to "No Access." Some users cannot change access at all.

Here is what I have tried or set for configuration:
Citrix Presentation server 4.5
Citrix web plugin 12.1.0.30 (Newest Citrix client)
User Access Control is set to Never Notify
User has administer rights to the PC.
Tested affected UserID on a diffrent computer and network and it had Full Access
Tested known working user on affected computer and get the same "No Access" results

So, it seems as though it's the one computer that is limiting access. What local policy could be limit saving to the local drive?

Thanks for your help.

ASKER CERTIFIED SOLUTION

Ayman Bakr

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

Tony J

More likely to be cured in these two KB articles:

http://support.citrix.com/article/CTX568194
http://support.citrix.com/article/CTX124921

Tony J

By the way - RSOP is deprecated and may not include all settings.

You should now use GPRESULT: gpresult /h <filename.html> generates nice HTML reports and you can scope either user or computer or targetd user.

http://blogs.technet.com/b/askds/archive/2011/03/11/getting-the-effective-audit-policy-in-windows-7-and-2008-r2.aspx

(Love the quote "...deprecated and often wrong and generally evil...")

Tony J

Sorry but I don't see how that is the correct answer - changing the client to allow full access does not alter local permissions in any way.

Ayman Bakr

Tony1044 said:

Sorry but I don't see how that is the correct answer - changing the client to allow full access does not alter local permissions in any way

But, I don't see anywhere in my answer to the question that I mentioned he should give full access!

Moreover, the symptoms described in the KB articles that Tony1044 has posted do not resemble the symptoms described in the asker's question.

I reasoned from the asker's question that what is affected is only one computer; whilst what is described in the KB articles posted by Tony1044 is more related to affecting all the clients. As per my reasoning, I thought the affected computer permissions on the drives might be somehow tampered/corrupted where usually in a standard Windows Domain Authenticated Users have to be present with special permissions (create folders, traverse folders, read, write etc... He can get the exact list from non-affected computers).

For what it seems the asker had that issue and was corrected by re-adding the Authenticated Users Domain group and/or granting it the correct permissions on the drives. Once done, users should be able to access the drives from their Citrix sessions. The asker himself can come back on that and describe his experience.

Tony J

We'll have to agree to disagree :-)

The links I provided cure this exact problem by altering the level of access the client has to local drives within a Citrix session. Had the OP tried these I am certain they would have had access. Nor would they necessarily see the relevant information behind it in RSOP.

That said, if the OP is happy that your fix works and is a permanent one then I'm happy for them to leave as is.

thetraveler359

ASKER

The solution was two parts, one was user error and and the other folder permissions. I picked the solution with permissions to the c: drive the closest to fixing this problem. In the origianl question, I stated there were many users affected by this problem. The first person was fixed by a registry setting which was made before I posted this question. With the other two users still experiencing the "no access" (even with the registry setting) when trying to save to the local workstation, I decided to post this question in hopes to get more help with the issue. The users are remote and not accessible except by appointment. So, when I was able to remotely administer assistance, I found that they were trying to save directly to the c:\ root directory, for which they had no permissions to do so. Once they selected another folder or created another folder they were able to save without issue. The first user was not able to save anywhere on the local machine. As soon as they selected (C$ on client (V:) it immediately said access denied.

For what to reward for points or refunds, I don't know. I'll leave that for you to decide. When I picked my solution, that was the closest action to what I fixed my problem.

Sorry to cause such a mess.

Tony J

Given the explanation I'd suggest that neither of us gets points. It sounds more like UAC on the physical client than any permissions or Citrix client related issue.

Having said that, Mutawadi was clearly closer so I'm happy - if you are - to let him have them.