App Protection - Advanced

This policy allows additional security by verifying the signature of all the Citrix Workspace App modules. And protects these modules from DLL injection attacks.

Supported on:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client
Value Name	AppProtectionAdvanced
Value Type	REG_SZ
Enabled Value	true
Disabled Value	false

receiver.admx

Administrative Templates (Computers)

Citrix Components
- Citrix Workspace
  - CEIP
    - CEIP Configuration
    - Enable CEIP
  - Citrix Secure Browser
    - Cache
  - Citrix Workspace Updates
    - Citrix Workspace Updates
    - Set the Delay in Checking for Update
  - Client Engine
    - Block Direct ICAFile Launch
    - Do not allow desktop launch when InitialProgram setting is missing or empty in ICA file
    - Enable Engine Error Messages
    - ICA File Settings
  - Compliance
    - Disable sending data to 3rd party
  - Diagnostics
    - Always-On Tracing
  - DPI
    - High DPI
  - Fast Connect API Support
    - Manage FastConnectAPI Support
  - Global App Config Service
    - Manage Global App Config Service
  - HDX MediaStream Flash Redirection - Client
    - Enable HDX MediaStream Flash Redirection on the user device
    - Enable server side content fetching
    - Enable synchronization of the client-side HTTP cookies with the server side
    - URL rewriting rules for client-side content fetching
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
    - Proxy
    - Configure trusted server configuration
    - Session reliability and automatic reconnection
    - TLS and Compliance Mode Configuration
    - Transport protocol for Citrix Workspace
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - SelfService
    - Advance Preferences Options
    - Allow/Prevent users to publish safe content
    - Allow/Prevent users to publish unsafe content
    - Allow users to Add/Remove Account
    - Control when Citrix Workspace attempts to reconnect to existing sessions
    - Enable application PreLaunch
    - Enable Default FTA
    - Enable FTA
    - EnableFTU
    - Local app discovery
    - Manage App Protection
    - Manage App shortcut
    - Manage SelfServiceMode
    - Silent authentication for Citrix Workspace
    - Store authentication tokens
    - vPrefer
  - StoreFront
    - NetScaler Gateway URL/StoreFront Accounts List
  - User authentication
    - Kerberos authentication
    - Local user name and password
    - Manage App Protection
    - Prevent storing persistent cookies
    - Single Sign-on for NetScaler Gateway
    - Smart card authentication
    - Smartcard Removal Policy for x64 machine
    - Smartcard Removal Policy for x86 machine
    - Web Interface authentication ticket
  - User experience
    - Audio through Generic USB Redirection
    - Client audio settings
    - Client display settings
    - Client graphics settings
    - Configure Foreground Status of the Progress Bar
    - H265 Decoding for graphics
    - Hardware Acceleration for graphics
    - Hotkeys for Desktop viewer
    - Keyboard settings
    - Keyboard shortcuts
    - Language bar
    - Local App Access settings
    - Remote applications
  - Allow client connections
  - App Protection - Advanced
  - Host to client redirection settings
- Enable ICA File Signing

Administrative Templates (Users)

Citrix Components
- Citrix Workspace
  - Client Engine
  - HDX MediaStream Flash Redirection - Client
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - User authentication
  - User experience
  - Allow client connections