:::: MENU ::::

Geursen.net

Citrix Receiver – Security Warning

Uncategorized

Citrix Receiver – Security Warning

When you start a Citrix Session and open an explorer window the following message appears.
Citrix Receiver – Security Warning.

This message is caused by the Citrix Receiver. The Receiver is trying map the local drives and is trying to access them.
In case of a writable profile this is not a big issue. If you choose to Permit all access the settings are saved in the registry thus in the profile. When working with mandatory profiles these setting will not be preserved. Also in a ThinClient environment this behavior is not wanted. Because this will generate some helpdesk calls.

After some searching on the internet en in the registry I came to the following solution.
In the registry under the key “HKEY_CURRENT_USER\Software\Citrix\ICA Client\Client Selective Trust” you will find a number of UID’s. Underneath this UID’s you will find the key HKEY_CURRENT_USER\..\..\..\..\\IcaAuthorizationDecision\FileSecurityPermission and the default value will be set to “3”. This value will generate the Warning message. Change this value to “2” and Permit all Access will be set. At the Citrix Support Site I found this explanation for the registry value.
Access Values: 0 = No Access 1 = Read Only Access 2 = Full Access 3 = Prompt User for Access.

The above settings can also be done for.

  • Microphone And Webcam Security Permission
  • Scanner And Digital Camera Security Permission
  • Pda Security Permission

8 Comments

  1. Brian

    Hi,
    Thanks your solution.that’s very nice.
    but I don’t know where to find this registry.
    my xenapp is version 6.5 for windows server 2008 R2.
    and my client receiver is 3.2 or 3.3 .
    how can i do this from where? xenapp server? every client?
    I don’t want my user to look security warning window.
    how can i pre-disable it ?
    Thanks a lot!!!

    Reply
    • nielsgeursen

      Hi Brian. Thanks for reading my blog.
      This registry setting can be found on the client which has the receiver installed in it. If you want to automate these settings you need to create a script that set these settings for all the UID’s.

      Reply
      • Ben

        Hi,

        i have found a similar solution but is there an example somewhere of such a script ?

        We have +-200thin clients using citrix and they all need this adjustment..

        Regards,
        Ben

        Reply
        • nielsgeursen

          Hi Ben, first off all thanks for visiting my blog. I don’t have a script for this. Maybe you can use the following command to add, change or delete a registry entry: reg add HKLM\Software\Test /v /t /d
          Nice blog about this can be found here
          If you still have some questions please don’t hesitate to contact me.

          Reply
  2. Ajit

    It is not working on windows xp. Can u give fix it for windows xp & IE 8

    Reply
    • nielsgeursen

      This fix is not OS related but Citrix receiver related. I never tested this on Windows XP. If you search on the title of my article you will find a lot of interesting hits.
      Thanks.

      Reply

Leave a comment