Can I keep a user w/ a valid ID and password from sign on?

[MISAdmin]

If a user has a valid ID and Password, we're running a published desktop, and he sets up a clinet at home to connect to the Domain and login, can I prevent access to Citrix without disabling the whole account?

(2000 Servers in AD; Metaframe XPs)

If I go into active directory, go to the Terminal Services tab on the properties of the user and uncheck the "allow login to Terminal Services" box, will this keep the TS License server from validating the license and letting him in???

 

[xs4citrix]

How does he connect from home to your internal network?

Stefan

http://www.printingsupport.com

 

[MISAdmin]

Sorry, I was typing while doing a bunch of oter things this morning. re-reading my post, it doesn't seem to clear.

I have clients who are connecting to our Citrix Server via the internet from home. These clients are running Program Neighborhood v7. The have an ICA connection created there that allows them to login to a published desktop.

These users have been accessing the system that way for awhile, and now, things have changed a bit and we want to limit who is able to login to Citrix and who isn't.

If we're running a Published Desktop, the end user has the Citrix Client installed, and they have a valid User ID and Password, I'm not sure how to prevent them from logging into Citrix remotely. They still use that same ID and Password to gain access to the Domain when they are in the office, so I can't just disable the account.

I was wondering if unchecking the "allow login to Terminal Services" box on the clients properties page (Terminal Services tab) under active directory would keep them from getting into Citrix. I didn't know if that would cause the user to not be able to get a TS Cal when they connect, and, therefore, no CAL, no Citrix... Or would this only effect RDP connections?

If that isn't the solution, is there some other way?

Thanks, hope thats more clear.

 

[xs4citrix]

The fact that they use the PN client to connect, gives me the asumption that you allow direct connections from the internet to your local lan citrix server, which is not safe computing anyway.

Add a WI/CSG server to your DMZ.
Then filter out the bad guys via WI, by using

http://www.citrix4ge.de/wim/wimawi.htm

Stefan

http://www.printingsupport.com

 

[rjs]

Remove them from the group you assigned in the published desktop

R.Sobelman

http://www.tracklogins.com