Remote Desktop control

Last published : Nov 10, 2026
Citrix SecurAccess™ ZTNA is integrated with Chrome Enterprise Premium to enable secure RDP sessions directly within the browser. This integration enhances security and streamlines access for administrators and users.
Traditional remote desktop access often relies on native RDP clients, which typically lack browser-based DLP enforcement. This deficiency can increase security risks, especially in unmanaged environments, and make compliance challenging. Organizations require a secure, compliant, and simplified solution for remote access that addresses these concerns.
This integration enables admins to enforce enterprise-grade DLP controls such as clipboard control and screenshot prevention.
Note:
  • This feature is applicable for Chrome Enterprise Premium integrated Citrix SecurAccess ZTNA setup for hybrid and cloud deployments. For details, see the following topics:
  • You must have admin rights to configure Citrix SecurAccess ZTNA and Chrome Enterprise Premium policies.
Unsupported features:
The following features are not supported:
  • Clipboard sharing
  • Audio/WebCam/SmartCard/USB redirection
  • Two-factor and biometric authentication
Related information
Citrix SecurAccess™ extension for Chrome Enterprise Premium

Benefits of this integration

This integration offers the following key benefits:
  • Security: Prevents data leakage during remote sessions by enforcing granular DLP policies.
  • Compliance: Helps meet regulatory requirements for sensitive environments through robust security controls.
  • Ease of use: Eliminates the need for installing separate RDP clients, simplifying user access and deployment.
  • Flexibility: Supports secure RDP access from managed Chrome browsers, providing a consistent and secure experience.

Use cases

This feature supports various use cases such as:
  • Enterprise contractors: Provides secure remote desktop access for third-party vendors without compromising internal security.
  • Healthcare staff: Enables secure access to Windows systems from kiosks or shared workstations in healthcare settings.
  • IT support: Allows IT personnel to troubleshoot remote desktops without requiring additional software installations.

System requirements

Ensure that your environment meets the following requirements:
  • Latest version of Chrome Enterprise Premium.
  • Citrix SecurAccess ZTNA is configured for the integration.
  • Access policies to allow RDP traffic must be created in the Citrix SecurAccess ZTNA admin console.

Prerequisites

Ensure that the following prerequisites are met for enabling secure access to RDP applications:
  • Citrix SecurAccess ZTNA is configured with Google Chrome Enterprise Premium integration. For details, see Integration with Google Chrome Enterprise Premium.
  • The end user has installed the latest Google Chrome browser with the Citrix SecurAccess browser extension.
  • For the deployment specific prerequisites, see the following topics:
    • Cloud deployment - Get started with Citrix SecurAccess ZTNA
    • Hybrid deployment – System requirements and prerequisites

Configure Citrix SecurAccess ZTNA for RDP access

  1. Log in to Citrix Cloud and then click Citrix SecurAccess ZTNA.
  2. In the admin console, Click Applications > App Configuration, and then click Add an app.
  3. Configure the RDP app as a TCP/UDP app within Citrix SecurAccess ZTNA.
    • The app can have an exact IP address or a range, FQDN, or host name of the server.
    • RDP is supported over default and non-default ports.
  4. Assign access to relevant user groups.
For detailed information on creating a TCP/UDP app, see the following topics.
  • Cloud deployment - Support for TCP/UDP apps
  • Hybrid deployment – Support for TCP/UDP apps

Configure the remote desktop policy

  1. Log in to the Citrix SecurAccess ZTNA admin console.
  2. Go to Policies > Browser Policies, and then click Create browser policy.
  3. Select Remote Desktop, and then click Manage.
  4. Click Add Rule to add rules for the users to enable remote desktop.
  5. Enter the name for the rule and click Next.
  6. Select conditions based on your requirement such as user or group. 1. You can also add conditions such as Geo-location, Network location, and Device posture check.
  7. Click Next.
  8. Click Save.
The number of rules configured for the anti-keylogging policy appears in the Browser Policies > Remote desktop tab.