how do I deny client access to local server drives

[ma424]

Hello. I am new to citrix metaframe. I have published visio 2000, and users can access it without trouble. however, when they attempt to save a visio document, they are able to browse to the local server drives and save it there! I don't want them to be able to do this. how do I correct this problem?

 

[OzDog]

The only way to stop them being able to write is using NTFS File Permissions.

You could hide the drives from Windows Explorer, but this won't prevent writing to them. To do so, create a new DWORD value called "NoDrives" under HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.

The value is calculated as follows (copied from Winguides.com)...

The "NoDrives" value uses a 32-bit word to define local and network drive visibility for each logical drive in the computer. The lower 26 bits of the 32-bit word correspond to drive letters A through Z. Drives are visible when set to 0 and hidden when set to 1.

If you're not happy working in Hex, add these decimal numbers to hide the drive(s):

A: 1, B: 2, C: 4, D: 8, E: 16, F: 32, G: 64, H: 128, I: 256, J: 512, K: 1024, L: 2048, M: 4096, N: 8192, O: 16384, P: 32768, Q: 65536, R: 131072, S: 262144, T: 524288, U: 1048576, V: 2097152, W: 4194304, X: 8388608, Y: 16777216, Z: 33554432, ALL: 67108863

For example to hide drive A and drive D, you would add 1 (A) + 8 (D) which equals "9". Cheers,
Sam

Please let members know if you found their posts helpful.

 

[irishnick]

If you are using windows 2000 server you can set a local security policy on the citrix server to deny access to the server's drives.