Eva
asked on
Citrix desktop session local printer block
Citrix xenapp 6.7 windows 2008 .Our users login Citrix Desktop login(citrix receiver) at home . I want to block their local printer. I do not want they can use their Local printer under citrix Desktop sesssion.
Can you please help?
Thank you
Can you please help?
Thank you
ASKER
I just want to block local usb printer.
Example:
our useers connect to Citrix from home : Https://company.domain.com (citrix receiver). They have our thinclient or laptop from us.They have USB connected printer at home and they say that when they connect their home USB printer ,THEY CAN PRINT. We do not want thet.
Actually they use Citrix desktop session(rdp) and there are all our Network Printers automatically connected(batch file).
We do not want they use their LOCAL PRINTER.
Thank you
Example:
our useers connect to Citrix from home : Https://company.domain.com (citrix receiver). They have our thinclient or laptop from us.They have USB connected printer at home and they say that when they connect their home USB printer ,THEY CAN PRINT. We do not want thet.
Actually they use Citrix desktop session(rdp) and there are all our Network Printers automatically connected(batch file).
We do not want they use their LOCAL PRINTER.
Thank you
This is not difficult, but it does require some policy configuration. You'll probably also need duplicate published applications.
1. Configure your duplicate apps, The duplicates will not have printing
2. Configure the Smart Access policies so that your internal copies are not visible externally.
3. As a nicety, you can hide your external copies from the inside
The key to this policy is the setting to allow access through the gateway. Your Internal copies will have it turned off, your externals will have it turned on.
There *are* other ways to do this, but they are more complicated. This is the kind of situation where you will be best off hiring a remote consultant to help you do this. It will not take very long. (For example, you can set printing policies based on the networks, so that it is only enabled on your corporate networks, you can look at the clientnames to allow/disallow printing, look at machine security groups, etc.)
Coralon
1. Configure your duplicate apps, The duplicates will not have printing
2. Configure the Smart Access policies so that your internal copies are not visible externally.
3. As a nicety, you can hide your external copies from the inside
The key to this policy is the setting to allow access through the gateway. Your Internal copies will have it turned off, your externals will have it turned on.
There *are* other ways to do this, but they are more complicated. This is the kind of situation where you will be best off hiring a remote consultant to help you do this. It will not take very long. (For example, you can set printing policies based on the networks, so that it is only enabled on your corporate networks, you can look at the clientnames to allow/disallow printing, look at machine security groups, etc.)
Coralon
ASKER
is there a screenshots or link can i look at and learn?
If you look at https://docs.citrix.com; in fact this PDF should have the policy settings in there: https://docs.citrix.com/en -us/legacy -archive/x enapp.html .
With the retirement of XenApp 6.5, I don't have a test server for it anymore. A big part of this is what kind of gateway you have. If you have a Netscaler, it becomes more complicated, but more flexible. (Don't need duplicate apps)
https://support.citrix.com /article/C TX212210
Coralon
With the retirement of XenApp 6.5, I don't have a test server for it anymore. A big part of this is what kind of gateway you have. If you have a Netscaler, it becomes more complicated, but more flexible. (Don't need duplicate apps)
https://support.citrix.com
Coralon
ASKER
yes netscaller we use from external
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
How are they connecting from home?
If they are using VPN the simplest option would be to disable split tunnelling in the VPN connection so local resources aren't visible to Citrix Receiver
So no need to alter Citrix settings for this, just change VPN settings.
Using Citrix you will prevent them using local resources at any location even if they are physically at work.