Link to home
Start Free TrialLog in
Avatar of Eva
Eva

asked on

Citrix desktop session local printer block

Citrix xenapp 6.7 windows 2008 .Our users login Citrix Desktop login(citrix receiver) at home .  I want to block their local printer. I do not want they can use their Local printer under citrix Desktop sesssion.

Can you please help?

Thank you
Avatar of ☠ MASQ ☠
☠ MASQ ☠

Do you want to block all printers or just remote printers?
How are they connecting from home?
If they are using VPN the simplest option would be to disable split tunnelling in the VPN connection so local resources aren't visible to Citrix Receiver

So no need to alter Citrix settings for this, just change VPN settings.
Using Citrix you will prevent them using local resources at any location even if they are physically at work.
Avatar of Eva

ASKER

I just want to block local usb printer.
Example:

our useers connect to Citrix from home : Https://company.domain.com (citrix receiver). They have our thinclient or laptop from us.They have USB connected printer at home and they say that when they connect their home USB printer ,THEY CAN PRINT. We do not want thet.

Actually they use Citrix desktop session(rdp) and there are all our Network Printers automatically connected(batch file).

We do not want they use their LOCAL PRINTER.

Thank you
This is not difficult, but it does require some policy configuration.  You'll probably also need duplicate published applications.
1. Configure your duplicate apps, The duplicates will not have printing
2. Configure the Smart Access policies so that your internal copies are not visible externally.  
3. As a nicety, you can hide your external copies from the inside

The key to this policy is the setting to allow access through the gateway.  Your Internal copies will have it turned off, your externals will have it turned on.

There *are* other ways to do this, but they are more complicated.  This is the kind of situation where you will be best off hiring a remote consultant to help you do this.  It will not take very long.  (For example, you can set printing policies based on the networks, so that it is only enabled on your corporate networks, you can look at the clientnames to allow/disallow printing, look at machine security groups, etc.)


Coralon
Avatar of Eva

ASKER

is there a screenshots or link can i look at and learn?
If you look at https://docs.citrix.com; in fact this PDF should have the policy settings in there: https://docs.citrix.com/en-us/legacy-archive/xenapp.html.

With the retirement of XenApp 6.5, I don't have a test server for it anymore.  A big part of this is what kind of gateway you have. If you have a Netscaler, it becomes more complicated, but more flexible. (Don't need duplicate apps)
https://support.citrix.com/article/CTX212210

Coralon
Avatar of Eva

ASKER

yes netscaller we use from external
ASKER CERTIFIED SOLUTION
Avatar of Coralon
Coralon
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial