Monday, June 9, 2008

[THIN] Re: Local vs. Network printers

That may be the problem, Steve.  I don't believe we are 'assigning' them.  At least we have not configured session printers in any policies.
 
Thank you,
 
Jim Medeiros
Citrix Administrator
GMAC Insurance
(336) 770-2858
 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Monday, June 09, 2008 3:37 PM
To: thin@freelists.org
Subject: [THIN] Re: Local vs. Network printers

That is no problem, turning off Citrix remote client printing does not disallow them from printing to LAN printers that are mapped the conventional way in their PS sessions….How are you assign the LAN network printers now?

 

 

Steve Greenberg

Thin Client Computing

34522 N. Scottsdale Rd D8453

Scottsdale, AZ 85266

(602) 432-8649

www.thinclient.net

steveg@thinclient.net

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Medeiros, Jim
Sent: Monday, June 09, 2008 11:43 AM
To: thin@freelists.org
Subject: [THIN] Re: Local vs. Network printers

 

Sorry, Joe and list.  I forgot to mention how I was applying the policy.  The particular policy that I mentioned is applied to Access Control -> Filter based on Access Control -> Apply to connections made through MetaFrame Secure Access Manager (version 4.0 or later).

 

Joe, I want to allow users coming in through our CAG to have the ability to print to Network Printers but NOT local client printers.  e.g. we don't want someone who is connecting from home to print an insurance policy or customer information on their home printers, but there is no reason why, from home, they cannot print to one of our office printers.

 

I hope this helps.

 

Thank you,

 

Jim Medeiros

Citrix Administrator

GMAC Insurance

 

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of   Joe Sh

Sent: Monday, June 09, 2008 2:05 PM
To: thin@freelists.org
Subject: [THIN] Re: Local vs. Network printers

How are you applying this policy?

 

In this case,  I would setup a minimum of two policies… One for internal and one for external and apply those policies based on IP subnet ranges or if you’re using smart access use that as your filter.

Joe

 


From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Medeiros, Jim
Sent: Monday, June 09, 2008 10:59 AM
To: thin@freelists.org
Subject: [THIN] Local vs. Network printers

 

Being an Insurance company, we have a policy that does not allow printing to local printers as the information may be confidential.  We have been able to implement this with a policy in our CMC.  We only block this when users are coming through the CAG, no need to block this behavior when people are connected to the network.

Our intent was never to block users from printing to network printers.  We have just learned that in fact, we are.  Apparently, the policy that we created is blocking all printing - local and network. 

Question:  Is there a way to block the creation and/or mapping of local printers (someone's printer at home or remote office) but allow users to print to network printers (printers on our network and published in AD) and/or add them to their Citrix profile as needed?

Current policy details:

  • Client Devices -> Resources -> Ports -> turn off LPT ports -- Enabled
  • Printing -> Client Printers -> Auto Creation -- Enabled and set to Do not auto-create client printers
  • Printing -> Client Printers -> Turn off client printer mapping -- Enabled

 

I appreciate any help that you have to offer. 

Thank you,
 
Jim Medeiros
Citrix Administrator
GMAC Insurance

--------------------------------------------------------------------------------------------------------

Note:  The information contained in this message may be privileged and confidential and protected from disclosure.  If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited.  If you have received this communication in error, please notify us
immediately by replying to the message and deleting it from your computer.  Thank you.
--------------------------------------------------------------------------------------------------------

No comments: