Citrix XenApp servers and how to hide or deny save to desktop

We have a citrix XenApp farm.  That farm hosts some apps like Office, Visio, Adobe Acrobat, etc as published apps.

When our users launch a remote app or log into one of the servers directly, and then when they try to save a document, it saves to the desktop sometimes.  Their home folder comes thru and of course they can save to their home folder, but sometimes, people just accidentally save things to the desktop.  The file ends up being saved on the local desktop of the server that is hosting the app.  So, a user might launch Adobe from a server in Phoenix and the user hits save, and the document is saved on the desktop of the server in Phoenix.

What I would like to do is the simplest solution which is to deny the user the ability to save to the desktop, or any local drive for that matter.

Can I hide the Desktop and local drive option when they launch these remote apps or log into the server?  What's the best way to force the user in a remote app to save to their home folder instead of the local desktop of the server?


Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

TemodyPickalbatros, IT ManagerCommented:
You can simply fix that by configure roaming on AD so all users logon XA will redirect to there profile
If you don't want that
On GPO you can restrict users to save any file on desktop

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
David Johnson, CD, MVPOwnerCommented:
standard group policy rules apply for disabling drives.
crp0499CEOAuthor Commented:
Temody, talk to me more about that please.  My users get their H: drive from the profiles tab in AD.  Then there is a GP that is redirecting their MyDocs and child folders to follow their home folder.

THEN, there is a second GP that is redirecting Desktop to yet another location.  I want to edit the GP and redirect their XA desktop to a child folder named XADesktop under their home folder.  

Is that doable?
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

David Johnson, CD, MVPOwnerCommented:
HEN, there is a second GP that is redirecting Desktop to yet another location.  I want to edit the GP and redirect their XA desktop to a child folder named XADesktop under their home folder.   WHY?

a users desktop normally follows their user files.. why you set it up to 2 different locations I have no idea.
TemodyPickalbatros, IT ManagerCommented:
i mean to configure roaming profile for users
this is the basic setup steps
1.  Create a folder under your data partition and call it "profiles".  Go to advanced sharing and share the folder as "profiles" with permissions for everyone set to full control.

2.  Go to active directory users and computers, open the appropriate ou, and select the user account(s) you want to add a roaming profile too.  Right click and go to properties and then the profile tab.  In the user profile path enter the location of your profile directory you created ie \\server08\profiles\%username%

after that every user in XA will be redirect to there local profile in AD.
Set up roaming profiles with special folder redirection.  You can use standard Windows roaming profiles or utilize Citrix's profile management solution.  Either way, use Group Policy to configure the path; don't go into each individual user's account properties to configure the path.  Do it in one spot via GPO.

You'll also want to configure folder redirection as roaming profiles can get very large leading to increased logon time.  Folder redirection helps to minimize the problems associated with profile bloat.  Also configure folder redirection via GPO.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.