Citrix Environment + Policies

[Lockstock2SB]

Hi All

I have a domain setup with an NT4 PDC and BDC (dont laugh its not my fault). I have 2 x 2003 Servers (Sp1) Running PS4 that run IE as a published app for my users.

I am having a problem with my policies in the fact that although i removed a specific policy for the Citrix Admins group (my group which sees extra icons in the farm), it appears a policy of some sort is still in affect and i cant get rid of it.

The problem with having this rogue policy in place is that as a Citrix admin, i log into the servers with my own ID and i get a resticted desktop with no start menu icons and no desktop. However when i log in with the administrator account for the domain - i get the full desktop as expected.

How do i get my citrix admins group back to the stage where is displays the same as the administrator account ? I'm very confused now ! I have tried setting my primary group as something else but the outcome is the same.

The is still a polocy in place forthe users (Internet Users) that sets their home page and resticts drives etc.. could that be a problem ? When i remove the internet users group from my account again the problem is still there.

When i deleted my profiles from the citrix servers and PDC aftera reboot the problem was fixed but it seemed to come back after while when it picked a policy up from somewhere.

Any ideas/suggestions much appreciated - its frustrating supporting an environment that was created by someone else who isnt here any more !!

Thanks

Steve

 

[ascotta]

I think you will find that you(user) belong to a group that has this restirction set.

[blue] A perspective from the other side!![/blue]

Cheers
Scott

 

[Lockstock2SB]

Hi Scott

Thanks for the reply - didnt get an email notification
which is odd !
I have the following groups under my user accounts :

Administrators
Citrix Admins
Domain Admins

My Primary group is Citrix admins.

The only Policy in place on the PDC/BDC is for the Internet Users group which i am not a part of - yet i find myself with a restricted desktop !?

The internet users policy does have some restrictions in for the windows desktop but a)they never use a desktop on the citrix servers as they just use IE and b)I am not part of the group.

Any ideas ?

Thanks !

Steve

 

[ascotta]

Firstly read this about sysinternals

thread779-1256082

Then get hold of regmon.

Get the machine to yourself for ten minutes.

Then on one WS login as admin and run Regmon.

On another WS login as you, wait till you get desktop(ish). Then stop the log on admin WS.

Then plow through the log until you spot the offending entry.

Best I can do as my memory is a bit dim on NT 4 policies.

I am assuming you are using thin clients becuase published apps would be the really cool way to go.

[blue] A perspective from the other side!![/blue]

Cheers
Scott