Avatar of damejen
damejen
 asked on

Hide & Restrict Access to Citrix XenApp 6.5 server local drives

Hi all,

I've been trying to hide and restrict access to Citrix XenApp 6.5 local drives from users, though I'm having a bit of difficulty with it. The farm is on a Server 2008 R2 SP2 OS, I've created a GPO to hide the drives though this doesn't appear to be working, I have also read that creating a GPO specifically for user Group Policy loopback processing mode. "Replace"

Is there any straightforward way of hiding and restricting access to these drives from users with these GPO's?

This was rather a simple process in PS 4.5
Citrix

Avatar of undefined
Last Comment
damejen

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Daniel Borger

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Ayman Bakr

Why don't you try the Citrix policy by disabling Client Drive Redirection?
Jayanta Sarmah

as Mutawadi suggested using the citrix policy is the best way to achieve this.
joharder

If you only want to restrict access to a particular drive, you can also use the icaclient.adm and apply it as a GPO.  This file is included within Citrix Receiver and installed on every client computer, so it's just a matter of copying it into AD or the local server and configuring as a GPO.
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck
damejen

ASKER
1. Downloaded the hidecalc tool.
2. Launched the tool, chose which drives and other settings (Hide & Restrict Citrix Server local drives i.e C, D, E )
3. Created .adm file
4. Imported the file into Administrative Templates from the GPO I created.
5. Linked the GPO to OU ( denied GPO applying to Domain Admins)
6. Waited for replication ( I could have forced replication with gpupdate /force but thought it best to let it replicate on replication schedule)
7. Tested with test account.

Works like a charm.

Thanks dborger..