timwescott
Technical User
Hello
Sorry if this goes on a bit, but I need to set the scene.
I have a test environment that replicates a live environment with W2k3 AD GPO's and Citrix servers running W2K3 and MPS4. The users desktops are locked with GPO's and applications are published with PN-Agent and PN.
The test environment is on a seperate subnet to another work domain that is seperate from the live environment. (I hope you are with me so far - three environments with seperate domains and only the test and work domain can talk to each other)
Instead of configuring PN or PN-Agent on the work domain I have created ICA files from the CMC, which works fine. However, there are differences in the way the applications behave when accessed directly from the test environment and the ICA files.
Example - in the test environment WM-Player does not play embedded in IE, which I know could be a GPO or Appsense, but if accessed from the ICA file on the work domain it plays?!
I thought that the ICA file would connect to the test domain servers and apply the GPO's on the TS OU and have the same locked functionality?!?
There are lots of variables in this senario, but does and ICA file inherrit permissions from a PC? My initial thought is no.
Any information appreciated.
Sorry if this goes on a bit, but I need to set the scene.
I have a test environment that replicates a live environment with W2k3 AD GPO's and Citrix servers running W2K3 and MPS4. The users desktops are locked with GPO's and applications are published with PN-Agent and PN.
The test environment is on a seperate subnet to another work domain that is seperate from the live environment. (I hope you are with me so far - three environments with seperate domains and only the test and work domain can talk to each other)
Instead of configuring PN or PN-Agent on the work domain I have created ICA files from the CMC, which works fine. However, there are differences in the way the applications behave when accessed directly from the test environment and the ICA files.
Example - in the test environment WM-Player does not play embedded in IE, which I know could be a GPO or Appsense, but if accessed from the ICA file on the work domain it plays?!
I thought that the ICA file would connect to the test domain servers and apply the GPO's on the TS OU and have the same locked functionality?!?
There are lots of variables in this senario, but does and ICA file inherrit permissions from a PC? My initial thought is no.
Any information appreciated.