RE: Citrix administration security

["Depp, Dennis M." <deppdm () ornl gov>]

Can you please explain this statement 

"I don't want AD to set the policies because the users will have more
access on a regular desktop."

AD can give you very ganular access to lock down the desktop.  Also AD
allows you to apply these settings to an OU.  If you get another Citrix
server (or replace the existing server) you only need to move the server
into the OU to get the security settings you desire.

Dennis

-----Original Message-----
From: Artie Motamed [mailto:artie.motamed () standardhardware com] 
Sent: Tuesday, March 01, 2005 3:52 PM
To: security-basics () securityfocus com
Subject: Citrix administration security

Recently we set up a Citrix presentation server; I want users to access
a "restricted" desktop, consisting of 3 apps, no run option, and be able
to copy and paste between these three apps.  Is there a way of having
the security handled through citrix?  I don't want AD to set the
policies because the users will have more access on a regular desktop.

Thanks,
Artie