This message was deleted.

This is by design. Why would you need to hit the Citrix session as an admin? can you not simply elevate within the session?

I agree with James, but if it's a strict requirement, you cAn have them double-hop. Have them get a desktop with their non-admin and launch pub apps from their with their admin

I frequently do this but access a StoreFront web URL and login with privileged credentials there. I do not use CWA directly.

Thans for the inputs,it's a security mechanism that is put in place by citrix to avoid session to be stolen so account logged in netsclaer/storefron can only login to vda server..but we s have strange scenario that we don't have Internal URL,as users login from netsclaer with mfa.so the suggestion from us it to enable run as different user,there is a catch,as we have security policy to allow logon locally enabled only to administrators..so solution is to add them in local administrator group of the vda server or to add in Allow logon locally in user rights assignment GPO policy