- This topic has 8 replies, 2 voices, and was last updated 4 years, 10 months ago by
.
-
Posts
-
Hi All
I’m trialing some new Dell WYSE 3040 and 5070, we are looking at moving over from another thin client to the Dell models.
I have been searching for a solution for a few days and unable to find an answer and hoping someone can assist.
We run a pretty secure XenApp environment with USB drives completely locked down for all users expect for some. I have currently got XenApp policies set in place that if your a member of the AD group for USB access then USB will be granted via Citrix. Our current terminals are configured to allow USB access, but if user A logs into XenApp and isn’t a member of the USB Allow group in AD then they dont see the USB drives even if they plug them in, they simply don’t show. However if user A logs out and user B logs in which is in that AD group to allow USB then they see the USB drives in Citrix.
With the new Dell’s I have them configured to allow USB access and map the drive to F, however the issue is that user A logs in which shouldn’t see the USB drive sees the USB drive as well as user B. How can I stop this from happening?
The other terminals that this configuration works on are Ncomputing N series and IGEL thin clients. Does anyone have some suggestions?
Thanks in advance.
Jason
Sounds pretty straight forward.
There are two ways to map mass-storage devices.
One is USB device redirection and the other is mass-storage mapping.
For me it sound like you are doing latter.
Could you post you config?CG
Thanks for the assistance GC, this is the config.
TimeZone="GMT + 10:00" ManualOverride=Yes TimeZoneName="AUS Eastern" daylight=No Signon=Yes SaveLastDomainUser=no LastUserName=No TimeServer=172.25.199.230 DateFormat=dd/mm/yyyy TimeFormat="24-hour format" DisableDomain=No DomainList=QC EnableGKey=No PlatformConfig=All EncryptFS=Yes WDMService=No QuickMode=No ThinPrintEnable=No MaxVNCD=No FastDisconnect=No AddCert=qc.cer AdminMode=Yes Username=admin Password=***** ShowAdmin=No Privilege=low EnableTrace=No LockDown=No ShowDisplaySettings=Yes EnableKeyboardMouseSettings=Yes DisableChangeDateTime=No SignOn=Yes ExpireTime=0 RequireSmartCard=No SCRemovalBehavior=0 IconGroupStyle=Default DisableGuest=Yes MaxVNCD=1 VNCD_8bits=No VNCD_Zlib=No VNCPrompt=yes accept=10 ViewOnly=No ActiveVisible=No VncPassword=********* SecurityPolicy=warning SecuredNetworkProtocol=No TLSMinVersion=1 TLSMaxVersion=3 DNSFileServerDiscover=Yes TLSCheckCN=Yes DesktopColorDepth=32 Screen=1 Resolution=DDC Rotate=None refresh=60 device=mtouch mult_touch=No mult_jitter=30 Dualhead=Yes Mainscreen=1 Align=Bottom Swap=No Taskbar=mainScreen Orientation=hort MonitorAutoDetect=Yes ScreenSaver=0 LockTerminal=1 Type=None PictureTimer=6 PictureOrder=Default PictureCheck=Default PictureLayout=stretch Sleep=10 Unit=No Screen=2 Resolution=ddc refresh=60 rotate=none DeskColor=#106424 AutoSignoff=10 Shutdown=no Reboot=no ShutdownCounter=0 SysMode=VDI Toolbardisablemouse=no Toolbardelay=0 toolbarautoquit=Yes Toolbar_no_conmgr=No Toolbardisablehotkey=No ToolbarEnableOneSession=No toolbarstay=1 toolbarclick=No ToolBarAutoQuit=No EnableLogonMainMenu=Yes Desktop=DELLDEFAULT AutoLoad=2 VerifySignature=yes PNliteServer=https://storefront.qc.com.au StoreFront=no CustomStoreName="" DefaultSettings="" ReconnectFromButton=0 RequestIconDataCount=10 ReconnectAtLogon=0 Timeout=0 CAGExternal=no CAGUserAsUPN=no PasswordServer="" AccountSelfService=yes SessionConfig=ica \ ondesktop=all PasswordExpireNotify=yes HttpUserAgent="" ClientName="" AudioQuality=high DiskMapTo=F DesktopMode=fullscreen SessionReliability=yes USBRedirection=hdx HDXFlashUseFlashRemoting=Always HDXFlashEnableServerSideContentFetching=Disabled EnableRTME=yes FlipByTimer=0 MultiFarm=no MultiDomain=no MultiLogon=no SequentialDomain=no SessionConfig=all \ unmapprinters=no unmapserials=no smartcards=no disablesound=no mapdisks=yes disksreadonly=no unmapusb=no VUSB_DISKS=yes VUSB_AUDIO=yes VUSB_PRINTER=yes VUSB_VIDEO=yes MultiMonitor=yes FullScreen=yes ondesktop=all Reconnect=0 NoReducer=no LowBand=no FastDisconnect=no DEVICE_SECURITY=No Seamless=yes fullscreenreserved=yes EnableRAVE=yes Alternate=no IcaBrowsing=HTTP KeyboardLayout=Au Charset=ISO-8859-1 Device=keyboard \ repeatdelay=2 repeatrate=1 KeySequence=yes Ctrl+Alt+Del=yes Ctrl+Alt+Up=no Ctrl+Alt+Down=no Ctrl+Alt+Left=no Ctrl+Alt+Right=no Win+L=yes Alt+Tab=no Device=vusb \ ForceRedirect="" ForceLocal="" Type=HDX InterfaceRedirect=no EnableLocal=no HideDefault=yes NoGlobalIni=Yes EnableLocal=yesThanks CG, but still no luck. Regarding the setup and USB drives, what is the difference between map disks and USB redirect?
If I turn off all USB redirect and selected map disk and map to F drive the USB drive shows up inside Citrix XenApp, this is regardless of whether the user has access to USB via Citrix Policies or not.
My XenApp policies for USB access is setup as follows:
Client drive redirection – Allowed
Client USB device redirection – Prohibited
Auto connect client drives – Enabled
Client removable drives – AllowedThanks Jason
mapdisks=yes is Citrix mass-storage mapping
VUSB_disks=yes is USB redirectionCG
It seems like when doing your original solution:
mapdisks=yes to =no
and
remove DiskMapTo=FIt was working but inside Windows I had to refresh the Windows Explorer for the USB drive to appear. I updated the ThinOS to the 8.6_028 that seems to have resolved it. Not sure if just a coincidence or not, however it seems that using USB direction is as per other brands of terminals.
Thanks Jason
- You must be logged in to reply to this topic.