Включить функцию подписания ICA-файлов

С помощью этой политики можно включить и настроить подписание ICA-файлов.

Поддерживается: ADMX Migrator encountered a policy that does not have a supportedOn value.
Включить политику:
Registry PathValue NameValue TypeValue
Software\Policies\Citrix\ICA Client\ICA File SigningversionREG_DWORD1
Software\Policies\Citrix\ICA Client\ICA File SigningenabledREG_DWORD1
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam1REG_SZBorder
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam2REG_SZBackgroundColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam3REG_SZTextColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam4REG_SZDesiredColor
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam5REG_SZClient-Type
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam6REG_SZEnableIPCSessionControl
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam7REG_SZIconIndex
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam8REG_SZIconPath
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam9REG_SZTransportDriver
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam10REG_SZDesiredHRes
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam11REG_SZDesiredVRes
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam12REG_SZScalingMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam13REG_SZTWIMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam14REG_SZConnectionBar
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam15REG_SZRTWIMode
Software\Policies\Citrix\ICA Client\ICA File Signing\Unsigned ParametersdisableCheckForTrustedLaunchersREG_DWORD0
Отключить политику:
Registry HiveRegistry PathValue NameValue TypeValue
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File SigningversionREG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File SigningenabledREG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam1REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam2REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam3REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam4REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam5REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam6REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam7REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam8REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam9REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam10REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam11REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam12REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam13REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam14REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned Parameterscitrixparam15REG_DWORD
HKEY_LOCAL_MACHINESoftware\Policies\Citrix\ICA Client\ICA File Signing\Unsigned ParametersdisableCheckForTrustedLaunchersREG_DWORD

Доверенные сертификаты:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing\Trusted Certificates
Value Namecertificate{number}
Value TypeREG_SZ
Default Value
Политика безопасности:


  1. Разрешать запуск, только если есть подпись (более безопасно)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
    Value NamepromptUser
    Value TypeREG_DWORD
    Value0
  2. Отображать запрос для пользователя, если выполняется запуск и нет подписи (менее безопасно)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
    Value NamepromptUser
    Value TypeREG_DWORD
    Value1

Отключить для доверенных средств запуска
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Citrix\ICA Client\ICA File Signing
Value NamedisableCheckForTrustedLaunchers
Value TypeREG_DWORD
Default Value0
True Value1
False Value0

receiver.admx

Административные шаблоны (компьютеры)

Административные шаблоны (пользователи)