Access to Start/Logoff

[pkailas]

We have a client that runs Citrix. Currently the users log in and have access to one published application. When they closes this application, citrix will kill the session successfully.

Now we have installed another application that gets launched when they log in. When a users closes the original application, Citrix will not end the session. However, if the user also closes this added application, the session will end.

The problem is that the added application is used to fire off an image retrieval program on demand. If the user has used the application and an image has been retrieved, a 3rd application is now running. The way the policies are set and the security at this company, the users do NOT have access to the 3rd applications exit control. Therefore there is no way to kill this application. Citrix never ends the session when the user exits the original application and the added application because the 3rd app is running.

I've seen a registry modification that's supposed to kill specified applications, but this doesn't work for them. So, I was wondering if there is a way to grant users the access to the START button and the LOGOFF command only. My contact at the company thinks that the users can only ever have access to the published applications. Is this true, or is there a way to log off?

Thanks in advance.


_______
I love small animals, especially with a good brown gravy....

 

[aco636]

Hi there

THere are various hacks you could apply. It is possible to remove the disconnect options and set the shutdown to admin only.

This can be done by adding
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: NoDisconnect
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = display, 1 = remove)
(Pinched from Winguides.com)

The shutdown command is set either by domain policy or local machine policy depending on you network.

However, you might mean you want everything removed from the start menu. I suggest you take a look at winguides since they have hacks to remove all start menu items etc. Mostlikely best done in Group Policy in AD

Hope this helps

Regards ACO

 

[pkailas]

ACO,

Thanks for your reply. What I need is kinda what you think. I do indeed to make sure there is nothing in the start menu, *except* for "LOGOFF". This is running on a Windows 2003 machine.

Is it possible to have only LOGOFF option?

_______
I love small animals, especially with a good brown gravy....

 

[aco636]

Yep, but dont ask me for all the Hacks
If ou apply them to the current user as they login you should be able to restrict them.

I think all the hacks are in the same place

http://www.winguides.com/registry/category.php/42/

I guess yo will have to be carefull how you apply these. I.e. you might remove options from workstations
Regards ACO

 

[pkailas]

I'm hoping that they can just apply these kinds of things just to the Citrix Server(s). That way it won't effect their workstations.

_______
I love small animals, especially with a good brown gravy....