NetScaler binding ad restricts access to user-LDAP configuration

NetScaler restricting user access to cloud desktops with AD
-LDAP Configuration

A Background
In the XenDesktop Cloud Desktop delivery platform, NetScaler is the most common security gateway used to deliver cloud desktops to the public network. Many times the customer's access to the Cloud Desktop public network also has a public network bandwidth and information security considerations, so you want to be able to cloud desktop public access can restrict and specify that special personnel have access.

Two Principle
When a user types credentials and presses the ENTER key on the login page of the NetScaler Gateway virtual server, NetScaler first searches for the entered user name in Active Directory (LDAP). If an LDAP search filter is not defined in LDAP policy/server, NetScaler will search all Active Directory user names to find matches. When a match is found, NetScaler extracts the user's full distinguished name (DN) and authenticates Active Directory with the user's DN and password.
If an LDAP search filter is defined, only the user name that matches the LDAP search filter is searched to find the user name match. For example, if you construct an LDAP search filter to search only members of an Active Directory group, the user name entered by the user must match the members of that group.

Three Configuration steps
3.1 Enter AD, open active Director user and computer

3.2 Click to view, open "advanced Features"

3.3 Right-click the Allowed Users group and select "Properties"

3.4 Select "Property Editor" and double click "distinguishedname"

3.5 Copying the value of a property

3.6 Log in to NetScaler's administration page, select "NetScaler gateway–virtual Servers-"

3.7 Select the virtual server on the right, click Edit;

3.8 Locate "LDAP Policy" under "Basic Authentication" and click Configure

3.9 In the Edit drop-down menu, select "Edit Server"

3.10 in the "Search Filter" box below other settings, enter "memberof=cloudusers,ou= production user, ou= user, ou= Cloud Desktop test Platform, dc=home,dc=local" (Note that " Memberof= "+" Allow access to the user group's property values "), click OK to save the configuration. To this configuration is complete.

?
Four Refer to KB links
https://support.citrix.com/article/CTX111079

NetScaler binding ad restricts access to user-LDAP configuration