Local App Access settings

Use this policy to control how the client presents local applications inside a hosted desktop.

Local App Access enables the integration of locally installed applications within a hosted desktop. When users launch locally installed applications using shortcuts, applications appear to be running on their hosted desktop even though it is running on their local device.

When this policy is enabled, client presents locally installed applications inside hosted desktop as shortcuts.
When disabled, client doesn't present local apps inside hosted desktop. URL redirection is also disabled.

Allow URL Redirection:

When this is checked, client allows URLs to be redirected from hosted desktop browser to locally installed browser or vice versa. URL blacklist and whitelist on host determine which URLs would be redirected. Browser add-ons, extensions and plugins required for this feature would also need to enable.
When unchecked, URLs are not redirected from hosted desktop to client or vice versa. Browser add-ons, extensions and plugins are not disabled.

Supported on:

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Control
Value Name	ClientHostedAppsShortcuts
Value Type	REG_SZ
Enabled Value	true
Disabled Value	false

Enable policy:

Registry Path	Value Name	Value Type	Value
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Control	ClientHostedApps	REG_SZ	*
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Seamless Windows	RTWIMode	REG_SZ	*

Disable Policy:

Registry Hive	Registry Path	Value Name	Value Type	Value
HKEY_LOCAL_MACHINE	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Control	ClientHostedApps	REG_SZ	false
HKEY_LOCAL_MACHINE	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Seamless Windows	RTWIMode	REG_SZ	false

Allow URL Redirection

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Control
Value Name	ClientHostedAppsURLEnabled
Value Type	REG_SZ
Default Value	false
True Value	true
False Value	false

receiver.admx

Administrative Templates (Computers)

Citrix Components
- Citrix Workspace
  - CEIP
    - CEIP Configuration
    - Enable CEIP
  - Citrix Secure Browser
    - Cache
  - Citrix Workspace Updates
    - Citrix Workspace Updates
    - Set the Delay in Checking for Update
  - Client Engine
    - Block Direct ICAFile Launch
    - Do not allow desktop launch when InitialProgram setting is missing or empty in ICA file
    - Enable Engine Error Messages
    - ICA File Settings
  - Compliance
    - Disable sending data to 3rd party
  - Diagnostics
    - Always-On Tracing
  - DPI
    - High DPI
  - Fast Connect API Support
    - Manage FastConnectAPI Support
  - Global App Config Service
    - Manage Global App Config Service
  - HDX MediaStream Flash Redirection - Client
    - Enable HDX MediaStream Flash Redirection on the user device
    - Enable server side content fetching
    - Enable synchronization of the client-side HTTP cookies with the server side
    - URL rewriting rules for client-side content fetching
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
    - Proxy
    - Configure trusted server configuration
    - Session reliability and automatic reconnection
    - TLS and Compliance Mode Configuration
    - Transport protocol for Citrix Workspace
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - SelfService
    - Advance Preferences Options
    - Allow/Prevent users to publish safe content
    - Allow/Prevent users to publish unsafe content
    - Allow users to Add/Remove Account
    - Control when Citrix Workspace attempts to reconnect to existing sessions
    - Enable application PreLaunch
    - Enable Default FTA
    - Enable FTA
    - EnableFTU
    - Local app discovery
    - Manage App Protection
    - Manage App shortcut
    - Manage SelfServiceMode
    - Silent authentication for Citrix Workspace
    - Store authentication tokens
    - vPrefer
  - StoreFront
    - NetScaler Gateway URL/StoreFront Accounts List
  - User authentication
    - Kerberos authentication
    - Local user name and password
    - Manage App Protection
    - Prevent storing persistent cookies
    - Single Sign-on for NetScaler Gateway
    - Smart card authentication
    - Smartcard Removal Policy for x64 machine
    - Smartcard Removal Policy for x86 machine
    - Web Interface authentication ticket
  - User experience
    - Audio through Generic USB Redirection
    - Client audio settings
    - Client display settings
    - Client graphics settings
    - Configure Foreground Status of the Progress Bar
    - H265 Decoding for graphics
    - Hardware Acceleration for graphics
    - Hotkeys for Desktop viewer
    - Keyboard settings
    - Keyboard shortcuts
    - Language bar
    - Local App Access settings
    - Remote applications
  - Allow client connections
  - App Protection - Advanced
  - Host to client redirection settings
- Enable ICA File Signing

Administrative Templates (Users)

Citrix Components
- Citrix Workspace
  - Client Engine
  - HDX MediaStream Flash Redirection - Client
  - Multi-Stream ICA
    - Multi-Stream ICA
  - Network routing
  - Remoting client devices
    - Generic USB Remoting
    - Client drive mapping
    - Client hardware access
    - Client microphone
    - Client printers
    - Clipboard
    - DragDrop
    - Image capture
    - USB Plug-n-Play Devices
    - USB Point of Sale Devices
  - User authentication
  - User experience
  - Allow client connections