Local user name and password

Use this policy to instruct the client to use the same logon credentials (pass-through authentication) for the Citrix XenApp server as the client computer.

When this policy is enabled, the client can be prevented from using the current user's logon credentials to authenticate to the remote server by clearing the "Enable pass-through authentication" check box.

The client imposes certain restrictions specifying when pass-through authentication can occur (for details, see Citrix eDocs at http://support.citrix.com/proddocs/). If these restrictions are too strict for your environment, select the "Allow pass-through authentication for all ICA connections" check box to bypass the pass-through authentication restrictions.

When run in a Novell Directory Server environment, selecting the "Use Novell Directory Server credentials" check box requests that the client uses the user's NDS credentials.


Troubleshooting:
To enable pass-through authentication, the client must have been installed by an administrator, and the "Allow Local Credential Pass-through" option must have been selected at that time.

Each user can choose to disable pass-through authentication through the client registry settings, the Program Neighbourhood window, or by editing their copy of AppSrv.ini. To enable pass-through authentication, the user's copy of AppSrv.ini must contain the setting "EnableSSonThruICAFile=true".

Supported on: All Receiver supported platforms

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value NameUseLocalUserAndPassword
Value TypeREG_SZ
Enabled Valuetrue,false
Disabled Valuefalse
Enable policy:
Registry PathValue NameValue TypeValue
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsSSOnUserSettingREG_SZtrue,false
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsEnableSSOnThruICAFileREG_SZtrue

Enable pass-through authentication
Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value NameUseLocalUserAndPassword
Value TypeREG_SZ
Default Valuetrue,false
True Valuetrue,false
False Valuefalse
Enable policy:
Registry PathValue NameValue TypeValue
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsSSOnUserSettingREG_SZtrue,false
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsEnableSSOnThruICAFileREG_SZtrue
Disable policy:
Registry PathValue NameValue TypeValue
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsSSOnUserSettingREG_SZfalse
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local CredentialsEnableSSOnThruICAFileREG_SZfalse
Allow pass-through authentication for all ICA connections
Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value NameLegacyLocalUserNameAndPassword
Value TypeREG_SZ
Default Valuefalse
True Valuetrue
False Valuefalse
Use Novell Directory Server credentials
Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value NameSSOnCredentialType
Value TypeREG_SZ
Default ValueAny,NT,NDS
True ValueNDS
False ValueAny,NT,NDS

receiver.admx

Administrative Templates (Computers)

Administrative Templates (Users)