Restricting privilege=low or using ConnectionManager w/ none

  • This topic is empty.
Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • December 1, 2009 at 8:45 pm #5510
    MHzBurglar
    Member
    • Total Post: 10
    • Regular Joe
    • ★★

    I’m trying to configure an old S10 which has been sitting around the office since late 2007 to use as a proof-of-concept for a switch-over to WTOS, however I’ve run into a serious problem with configuring user rights on the system.

    I need each user account defined by a .ini file to use the connection manager to launch their Citrix sessions. I also don’t want them to have access to any configuration options other than their mouse speed, volume, and some basic system info (IP address, etc) for troubleshooting.

    Unfortunately, there appears to be only three pre-defined privilege levels with little-to-no room for customization. When I set the privilege level to privilege=none, it disables all configuration options. This is fine, as adjusting the mouse speed and volume are just niceties anyway, but it also disables the connection manager, which is a crucial part of the user interface. I have tried using HideConnectionManager=no with this privilege setting, but it does not seem to change anything.

    When I set the privilege level to privilege=low, the connection manager appears, but it also gives the users access to change several things I do not want them touching. Even with HidePPP=yes, HidePN=yes and ShowDisplaySettings=no set, the user can still change the timezone settings, character set, keyboard language, default ICA options, screensaver settings, serial and printer port settings, and most important/dangerous of all, the terminal’s hostname!

    So my question is this: Is there a way to either a) enable the connection manager when the privilege level is set to privilege=none, or b) disable/lock out the additional configuration settings listed above when the privilege level is set to privilege=low?

    I am running WTOS 5.3.0_09 on this terminal, if it makes any difference.

    Any help and/or information would be greatly appreciated.

    Thanks.

    December 2, 2009 at 9:16 pm #17130
    MHzBurglar
    Member
    • Total Post: 10
    • Regular Joe
    • ★★

    Here are my .ini files, in case it helps:

    wnos.ini

    ;****************************
    
;*     General Settings     *
    
;****************************
    
AutoLoad=101
    
AutoPower=no
    
DisableDomain=no
    
EnableGKey=no
    
FileServer=172.16.20.10 username=anonymous
    
Rootpath=/rapport/s10_files/
    
RapportServer=172.16.20.10 Retry=5
    
RapportDisable=no
    
SignOn=yes ConnectionManager=maximize EnableOK=yes DisableGuest=yes
    
Timeserver=10.30.60.11 Timeformat="12-hour format" 
    
Dateformat=mm/dd/yyyy
    
TimeZone='GMT - 05:00' ManualOverride=yes daylight=yes start=030207 
    
end=110107 TimeZoneName="Eastern Standard Time" 
    
DayLightName="Eastern Daylight Time"
    
LongApplicationName=yes
    
MaxVNCD=1
    
VncPrompt=No Accept=10 ViewOnly=no
    
FactoryDefault=no
    
FixLicense=clean
    
Privilege=none LockDown=yes HideSysInfo=yes HidePPP=yes HidePN=yes 
    
HideConnectionManager=no EnableNetworkTest=yes 
    
EnableKeyboardMouseSettings=yes KeepDHCPRequestIP=yes
    
ShutdownCount=10
    
SysName=DNS
    

    

    
;****************************
    
;*     Display Settings     *
    
;****************************
    
DeskColor=
    
Resolution=DDC
    
ScreenSaver=10 LockTerminal=0 Type=0
    
Seamless=no
    
ShutDownInfo=yes
    

    

    
;****************************
    
;*     Device Settings      *
    
;****************************
    
Device=keyboard numlockoff=no
    
Device=audio volume=0 mute=2
    
DisableMouse=no
    

    

    
;****************************
    
;*     Citrix Settings      *
    
;****************************
    
AltCacheDisable=no
    
Alternate=no
    
AutoSignoff=no
    
FastDisconnect=no
    
FastDisconnectKey=F11
    
IcaBrowsing=HTTP
    
SessionConfig=ICA DesktopMode=Fullscreen SessionReliability=yes 
    
ProgressiveDisplay=yes

    user.ini


    

    
;****************************
    
;*     General Settings     *
    
;****************************
    
PASSWORD=
    
Privilege=none HideConnectionManager=no HideSysInfo=yes HidePPP=yes 
    
HidePN=yes EnableNetworkTest=yes EnableTrace=yes 
    
ShowDisplaySettings=no
    
AutoSignOff=no
    

    

    
;****************************
    
;*     Device Settings      *
    
;****************************
    
Device=audio volume=0 mute=2
    

    

    
;****************************
    
;*  "Citrix User" Settings  *
    
;****************************
    
CONNECT=ICA 
    
BrowserIP=172.16.50.254 
    
Application="user" 
    
Description="Citrix User" 
    
Colors=high 
    
Fullscreen=yes 
    
Resolution=default 
    
HTTPBrowsing=yes 
    
Mapdisks=no 
    
UnmapPrinters=yes 
    
UnmapSerials=yes 
    
Disablesound=yes 
    
LocalCopy=no

    According to the WTOS 6.0 admin guide, using HideConnectionManager=no with Privilege=none is supposed to enable the connection manager when none is set, however this does not seem to work in 5.3.0_09. Is there a workaround, or am I stuck with this the way it is unless I pay for an upgrade?

    December 7, 2009 at 6:01 am #17161
    aLiE
    Participant
    • Total Post: 310
    • Jacked into The Matrix
    • ★★★★★★

    Yeah a firmware update will help, as far as i know the option “HideConnectionManager=no” has been introduced but only works with firmware “i don’t know” (if it’s 5.3.xx you could get a free update)

    I know this because it was one of my request at Wyse.

    December 7, 2009 at 7:51 am #17162
    ConfGen
    Keymaster
    • Total Post: 10696
    • Jedi Master
    • ★★★★★★★

    aLIE is right. The parameter “HideConnectionManager” was introduced back in september 2008 with firmware versions 6.0.1_14 and 6.1.0_22.

    CG

  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.