Prevent running applications in the MF XP server

[ortizvh]

I am new administering CITRIX therefor I have a question. How do I prevent the user from running an application in the XP server once they log in via the ICA Client?

Example: I installed Off2k via the +/- programs in the terminal server, at this time the user should only be able to execute Outlook and no more.

 

[lacitrixuser]

Well this can become a complex answer. But to keep it simple...

Simply make Outlook a published application.

The exact process to do that depends on the version of Citrix you are running. If it is MF XP you would publish it from the Citrix Management Console.

Hope that helps.

-- lacitrixuser

 

[CitrixInDallas]

Published app...

Or if you want to continue using the desktop, change security levels on the shortcuts to the app you want to disable (or the actual executable). Remove all rights and they can't launch the app.

 

[ortizvh]

I could not find any in formation on the CITRIX training books on how to prevent the user from executing an application that is install in the CITRIX MF XP/Terminal server.

If the applications are not publish but the user cans still login into the server, the user can use any of the applications install in the server.

Based on the responses, I am assuming the only way to accomplish this would be by using group policies and/or user policies. is this correct or is there still a way for Management Console to control what the user access outside the publish applications?

 

[itsp1965]

You can try securing the directories that execute MS Outlook including the MS Shared components folder. In this way they will receive an error message when they try to execute outlook. I don't know if the result you are looking for, but I still agree with the other folks that publishing apps is easier to manage and maintain than publishing desktops (I have worked with both setups).

 

[DarraghFitzpatrick]

Firstly remove all office icons from the all users start menu. Most users if they cannot see an icon will not know the application exists and therefore will not go look for it.

Secondly, to prevent people looking for it, do not allow user to view the citrix servers local drives. this will prevent them from searching for the exe.

lastly, to definately prevent acces, use NT/W2k file permissions to allow users to only access the programs folders that they require access to i.e any programs that contain a publised app

I have found the first two to work.

hope this helps

 

[Ogi]

Hi,

If you look at AppSense, this is a really powerful tool for locking down Citrix Servers.

Cheers,
Carl.

 

[Binkie]

Hi,

Lakeside Software has developed a new product, SysLock, to help lock down your servers and users. SysLock, allows restrictions of which programs may be executed on monitored systems. This technology can help avoid the installation and execution of unauthorized software, and can reduce the threat posed by some types of viruses by halting their execution.

If you would like additional information about SysLock please contact me.

Good Luck!
Carrie3010@yahoo.com