Smartaccess Disable redirection of client printers by NetScaler user access to virtual desktops

Smartaccess prohibit redirection of client printers via NetScaler user Introduction

Smartaccess and Smartcontrol allow you to change the ICA connection behavior (for example, disabling client device mappings) based on the way the user connects. Decision-making based on NetScaler
Gateway Virtual server name, session policy name, and endpoint analysis scan succeeded or failed. Smartaccess can also control the visibility of application/desktop icons.

Using Smartaccess,netscaler to inform XenDesktop only about user information, police on XenDesktop decides to provide permission to the user or not to supervise the use of the cloud desktop.

After the Smartcontrol is used, NetScaler controls the entire process of cloud desktop use, and once the user is found to be violating the printer or USB storage, it intercepts directly.

Prerequisite

In addition to NetScaler device licenses, both smartaccess and Smartcontrol have the same prerequisites.

• NetScaler Device License-
  The smartaccess is suitable for all versions of NetScaler devices. The Smartcontrol is only available for NetScaler Platinum Edition.

• Gateway Universal License-smartaccess and Smartcontrol all require NetScaler gateway
  Universal License. In 11.1 build 49 and later, NetScaler Standard Edition comes with 500 licenses, NetScaler
  Enterprise Edition comes with 1000 licenses, NetScaler Platinum Edition with an unlimited license.
  
  

NetScaler Configuration

Enable the Gateway Universal license, set the number of licensed users, and cancel the ICA only for AG

XenDesktop Configuration

Enable the Disable printer redirection policy in the DDC policy

Filter conditions Select access control

Enter the field name and access criteria, the * number represents any, if there are multiple gateway Vitrual servers, you need to create a session policy bound to the specified vitrual server

Add callback address to NetScaler device in storefront, callback address is gateway VIP address, need to trust storefront certificate on callback and be able to communicate with each other properly

At this point, users logging on to the desktop test will not be able to redirect the local printer

If you need to exclude some users from being able to redirect local printers, you can set an Allow policy to select multiple conditions in the filter and allow the policy priority to be higher than the prohibit policy.

Smartaccess Disable redirection of client printers by NetScaler user access to virtual desktops