I am using an application(Citrix) on Windows Server. Now this application allows users to log into the application using an Active Directory user account and access only Internet Explorer, where a default url is opened. A user can log onto the server as well using this active directory account.
Problem is, users can access the C-Drive from the Internet Explorer address bar by typing:
I do not want to allow any drive access. I did create a group policy setting to disable drive access (see link), but this only works when the user logs onto the server itself, but not when he logs onto Citrix and access the drives via Internet Explorer.
How do you prohibit drive access for an application that is using Internet Explorer?