Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a Citrix setup enabling users to access our applications from home. Basically, they login to our site using the Windows Authentication. Once, the are successfully logged in, they see the following icons Desktop - Full Screen (which provides them the Desktop as they would see when the login in our office)

We now have a requirement where we would like to publish a web application, hxxp://ourlibrary on Citrix with the following security requirement. (this application is already accessible if the users launch the desktop and launch IE within it and navigate to it) The requirement is this -

  1. When the are successfully authenticated to our site, they should be able to see The Internet Explorer icon only, NOT the Dekstop - Full Screen icon.

  2. On clicking on the icon, Internet Explorer should open up and should automatically navigate to hxxp://ourlibrary

  3. They should not be able to access any other URL, such as Google, Hotmail etc.,

  4. They should not be able to go File>Open> and Browse

  5. They should not be able to do File>Save> and Browse

In effect, they should be able to view the site and that should be it. Any ideas on how to accomplish the security feature? We have already published the application.

share|improve this question

If you want to have user to use only on web site for eg; then publish as

iexplore.exe -k

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.