Citrix Client Shutdown menu restricitions - How to?

[Pianomanmjw]

Hello,
I have a W2K server with Citrix Metraframe 1.8 (FR-1) and newest client installed. This week I added SR-2 to our Office 97 published apps. Apparently it overwrote DLL files and changed permissions to these. The result, users could no longer access any Office apps or Outlook (getting error msg "application failed to initialize properly&quot.

I, as ADMIN, could open the apps fine. I found numerous tech articles at Citrix and MSoft about this and tried all the solutions but none worked, except one I found in Q238965, using command line utils (notssid.inf and defltsv.inf). This security template resolved the issue of getting access however, now, Citrix clients have access to SHUTDOWN and RESTART (of the Citrix Server) in their Citrix Client shutdown menu...(in addition to LOGOFF and DISCONNECT). I'm somewhat new to W2K, do you have any suggestions on how to restrict user access to these options? (Prior to the SR-2 patch install I had it working fine.)

Thanks in advance for any assistance or suggestions.

 

[TheOtherKiwi]

If you want to control whether clients have access to the Start Menu items, there are at least two places to check.

Firstly, if the menu item is a shortcut in the users Start Menu or shared Start Menu start by looking in: "C:\Documents and Settings\all users\Start Menu" or "C:\Documents and Settings\insert username here\Start Menu" and see if any of these items should be deleted, changed or moved.

Then, to control other items such as logoff or shutdown you will need to delve into the Group Policy functionality.
Ideally you will have put users into Organisational Units using the Active Directory Users and Computers utility. This means that you can right click the OU and select properties, then click the Group policy tab and create a new Group policy that applies to that OU.
Navigate to: User Configuration/Administrative Templates/Start Menu & Taskbar and configure the following policy items:
Add Logoff to Start Menu - Enable
Disable and Remove the Shutdown command - Enable
...change any others that take your fancy...

Close the Group Policy Editor window, click OK to save the Group Policy changes - you are done.

If you have not configured users in OUs try opening the Default Domain Policy or Domain Controller policy from the Adminstrative Tools menu and do that same thing

Good luck.

 

[Pianomanmjw]

Thanks...I am not running Active Directory so I have no OUs. I am connecting to a NT4.0 network, in which our Exchange Server is the PDC. Regarding the Default Domain Policy - would that still be in place in this scenario (if so, it's not currenlty in my Tools Menu - is this a snap-in I need to add or ?) I have worked with the security templates and experimented with them, but they are global - so if I enable "Restrict Shutdown" - even the Administrator doesn't see it. So that's not the route I want to go either. Thanks. :-I

 

[CitrixEngineer]

The default domain policy is stored in %systemroot%\system32\repl\export\scripts, on the PDC, and is called ntconfig.pol.

You can create a new policy for your Citrix/Terminal Server clients, but you will need to specify in the Computer section of the policy where it is located.

You will need to import a group of users into the policy template in order to set per group policies.

Also, I would recommend using zakwinnt.adm from the NT Resource kit. You can do things like hide server drives with this template.

Hope this helps.