Product Documentation

Configure the Desktop Lock

Mar 19, 2015

Use an administrator account to configure the Desktop Lock. This must be the same account that you used for the installation.

Two .adm files are provided that allow you to do this using policies:
  • icaclient.adm. For information on obtaining this file, see To enable smart card usage.
  • icaclient_usb.adm. The file is located in the following installed folder: <root drive>:\Program Files\Citrix\ICA Client\Configuration\en.

This document assumes you have loaded both files into Group Policy, where the policies appear in Computer Configuration or User Configuration > Administrative Templates > Classic Administrative Templates (ADM) > Citrix Components.

To configure USB preferences

When a user plugs in a USB device, that device is automatically remoted to the virtual desktop. No user interaction is required. The virtual desktop is responsible for controlling the USB device and displaying it in the user interface.

  1. Turn on USB support in XenDesktop deployments by enabling the USB policy rule. For information on this, see the XenDesktop documentation.
  2. In Citrix Receiver > Remoting client devices > Generic USB Remoting, enable and configure as desired the Existing USB Devices, New USB Devices, and USB Devices List In Desktop Viewer policies. You can use the Show All Devices policy to display all connected USB devices, including those using the Generic USB virtual channel (for example, webcams and memory sticks).

To configure drive mapping

In Citrix Receiver > Remoting client devices, enable and configure as desired the Client drive mapping policy.

To configure a microphone

In Citrix Receiver > Remoting client devices, enable and configure as desired the Client microphone policy.

Using the Desktop Lock on multiple monitors

Multiple monitors are fully supported by the Desktop Lock. Up to eight monitors are supported.

A virtual desktop is displayed across all monitors. The primary monitor on the device becomes the primary monitor in the virtual desktop session.

Considerations when configuring the Desktop Lock

Grant access to only one virtual desktop running the Desktop Lock per user.

Do not allow users to hibernate virtual desktops. Use Active Directory policies to prevent this.