Cirtix PS 4.5

I have a citrix server where I have added local users in the same server. Presently the remote users are accessing the published application through web interface. They dont have internet access in their local pcs. But when they connect to citrix they can access IE which we need to block. I assume that they can access the desktop icons of citrix server and IE is one of them.

How can I restrict the users.
kurajeshSenior Systems AnalystAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ayman BakrSenior ConsultantCommented:
This means then that you are publishing the desktop. If the published desktop is not necessary then one way to do it is un-publish the desktop and just keep published applications for the users.

A much better way is to use GPO to restrict the use of IE:
1. Open Group Policy Management
2. Navigate to User ConfigurationAdministrative TemplatesSystem
3. Find the setting Don't Run Specified Windows Applications and enable it
4. Add iexplore.exe in the box

You can also play around with GPO to make a hash rule for blocking IE.

The ultimate and best I would consider if security is a concern is to ask your network team to disable access to internet on their appliances per user, per user's device and/or per PS 4.5 server.
This should help:

Create a Organizational Unit (OU) such as “No Internet” or what ever you like, specificaly for the clients. Create a GPO with the same name and link it to the OU.
In the GPO, edit the Proxy Settings under /User Configuration/Windows Settings/Internet Explorer Maintenance/Connection

Set the proxy server IP address and port to a non-existing proxy server. I use the default gateway for my network (IP to my firewall), and then check “Use The Same Proxy Server for all Addresses”.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.