Desktop lockdown

[gerbieIT]

I will be publishing desktops to everyone (different users will recure different desktops). How can i lock them down? We are running Windows 2003 AD and Presentation server 3.0.

Thanks for any help!

 

[Leeus]

Create a new GPO and place the citrix servers within this. Turn on loopback processing and then configure things like removing the shutdown within the GPO.

 

[gerbieIT]

Thanks for the help Leeus!!

This may be a dumb question but what is loopback processing?

How would I do this if I wanted to creat a couple of different desktops?

 

[Leeus]

Well... because you dont want to lock down the fat client desktops to the same level what loopback processing does is applies user policies even though they should only apply computer policies. Not sure if that makes too much sense!!

As for different desktop lockdowns you could filter them using the security permissions by "denying apply group policy

 

[gerbieIT]

Thanks for the help!