RE: Citrix Terminal Service for Remote Connections

From: Lynn, Samara (Samara@MenorahHome.com)
Date: 10/19/01


Message-ID: <57D874A37662D411A42000508B444D7B1FE2FE@MHHNET2>
From: "Lynn, Samara" <Samara@MenorahHome.com>
To: 'Roubik Arthur F Jr NNSY' <RoubikAF@nnsy.navy.mil>, "'focus-ms@securityfocus.com'" <focus-ms@securityfocus.com>
Subject: RE: Citrix Terminal Service for Remote Connections
Date: Fri, 19 Oct 2001 15:10:49 -0400

I worked with Citrix on an NT box a while ago. Citrix has quite a few
Management tools. You can customize the way a desktop appears when a remote
user connects to the server, and also you can also control which apps that
user can run. You can restrict access to the server's local drives as well
through these tools. Citrix also integrates pretty nicely with NT security,
so if you are using accounts form your network, whatever restrictions they
have to that server Citrix is running on will apply. One note: I had a real
hassle with getting Citrix to autocreate clients' printers within their
session. A way around this is to re-create the client printer object while
they are logged in. From that point on Citrix will be able to autocreate.
But you have to do that initially.
I loved Citrix. Good luck!

Samara Lynn
Network Administrator
Menorah Home and Hospital

 -----Original Message-----
From: Roubik Arthur F Jr NNSY [mailto:RoubikAF@nnsy.navy.mil]
Sent: Friday, October 19, 2001 1:22 PM
To: 'focus-ms@securityfocus.com'
Subject: Citrix Terminal Service for Remote Connections

Hi Everyone,

I want to implement Citrix Terminal Services on a Windows NT server to allow
contractors to remotely connect to the server in order to retrieve and edit
certain data in a Java application. I also need very tight security and am

fairly new to Citrix. I have the same questions as Andrew:

1. Can I restrict access to certain drives (particularly C:) so that a user
may not interact with that drive?
2. Can I take icons such as My Computer, My Network Places from the desktop
as well as options such as "Run..." from the Start menu?
3. I don't want any user to be capable of accessing or deleting/editing
administrative tools, critical system files, etc.

Thanks,

Arthur F. Roubik Jr.
INFOSEC Analyst
SRA International, Inc
(757) 396-3841
(757) 396-2500 - fax
arthur_roubik@sra.com



Relevant Pages

  • Re: Allow Log on Locally Rights
    ... You've got to allow users to establish remote connections to your Citrix ... > server is a windows 2003 standard server while the domain ...
    (microsoft.public.windows.group_policy)
  • Re: Cant Mount Mailbox Store or Publick Folder Store
    ... My citrix is working now using ICA Client but after I tried to restart my Mail Server. ... "Mukesh" wrote: ... Either there are network problems or the Microsoft Exchange Server computer is down for maintenance. ...
    (microsoft.public.exchange.admin)
  • Re: How does Citrix run it faster? was Re: Microfocus COBOL 3.2.43 (16bit)
    ... over 25 sites) runs on Citrix served up from servers here in Austin. ... have moved a lot of stuff to zLinux, and in the process would up writing ... When Word loads for the ... doing anything else but managing the screen, while the server is pretty much ...
    (comp.lang.cobol)
  • Re: Long and quite bizzare network problem
    ... Is Admin3 the master browser on the network? ... setting on all computers except for the main server (which should be online ... > the remote location are using Citrix over a nailed T1.Main and Citrix ...
    (microsoft.public.win2000.networking)
  • RE: Windows Remote Desktop
    ... SSL/HTTPS then use the Citrix ICA encryption on top of that, ... Citrix can be more secure then RDP. ... change the server information and harder for it to connect to a 'wrong' ... >We provide Ethical Hacking, Advanced Ethical Hacking, Intrusion ...
    (Security-Basics)