I now have a need to give a vendor file acces, specifically a certain folder on the network, but want to lockdown access to drives when I publish explorer.exe.

Currently I have simple OU's in AD with users, and no seperate GP for the Citrix server itself.

Every domain user has default access to Citrix via Security Groups linked to applications. So when a user needs an application published, I add the associated Security Group to their profile. This is how it was setup and didn't feel the need to re-invent the wheel. 

What I have done so far is create a OU in AD and placed the PS server in there. I created a GPO "Citrix" and added the OU, and made the loopback connection changes.

So far this isn't working for me, and with my current setup, I'm not sure this is the proper way to approach.

Suggestions greatly appreciated, thanks in advance!

 



Software/Hardware used:
Citrix Presentation Server 4.0