Local user name and password

Use this policy to instruct the client to use the same logon credentials (pass-through authentication) for the Citrix XenApp server as the client computer.

When this policy is enabled, the client can be prevented from using the current user's logon credentials to authenticate to the remote server by clearing the "Enable pass-through authentication" check box.

The client imposes certain restrictions specifying when pass-through authentication can occur (for details, see Citrix eDocs at http://support.citrix.com/proddocs/). If these restrictions are too strict for your environment, select the "Allow pass-through authentication for all ICA connections" check box to bypass the pass-through authentication restrictions.

When run in a Novell Directory Server environment, selecting the "Use Novell Directory Server credentials" check box requests that the client uses the user's NDS credentials.

Troubleshooting:
To enable pass-through authentication, the client must have been installed by an administrator, and the "Allow Local Credential Pass-through" option must have been selected at that time.

Each user can choose to disable pass-through authentication through the client registry settings, the Program Neighbourhood window, or by editing their copy of AppSrv.ini. To enable pass-through authentication, the user's copy of AppSrv.ini must contain the setting "EnableSSonThruICAFile=true".

Enable pass-through authentication

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value Name	UseLocalUserAndPassword
Value Type	REG_SZ
Default Value	true,false
True Value	true,false
False Value	false

Enable policy:

Registry Path	Value Name	Value Type	Value
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials	SSOnUserSetting	REG_SZ	true,false
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials	EnableSSOnThruICAFile	REG_SZ	true

Disable policy:

Registry Path	Value Name	Value Type	Value
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials	SSOnUserSetting	REG_SZ	false
Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials	EnableSSOnThruICAFile	REG_SZ	false

Allow pass-through authentication for all ICA connections

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value Name	LegacyLocalUserNameAndPassword
Value Type	REG_SZ
Default Value	false
True Value	true
False Value	false

Use Novell Directory Server credentials

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
Value Name	SSOnCredentialType
Value Type	REG_SZ
Default Value	Any,NT,NDS
True Value	NDS
False Value	Any,NT,NDS