https://worldofeuc.com logo
Join Slack
Powered by
This message was deleted.
# _general
s
This message was deleted.
j
Don't think you can. All the Teams stuff is generally handled by Teams policies which are on the Office365 end and therefore apply to users or groups. Maybe you could do something with the JSON files, but it's hokey
a
I’m trying to disable screen sharing as it's possible source of information leak. Unfortunately Citrix App Protection will not protect agains leak via MS Teams :-(
Compatibility with app protection The screen sharing of a specific app is compatible with the app protection feature in HDX optimized Microsoft Teams. You can screen share a specific app, if you’ve launched the app or desktop from a delivery group that has app protection enabled.
j
As I said, you can probably disable it on the tenant end, but it will apply on a user, not a server, level. Have a look at the meeting policies
r
I'm kind of wondering why - if you don't trust a user on one server why trust them on a different server?
k
If I am not mistaken, you can create Teams policies to disable screen sharing per user or per group
a
Per users it's not solution. User should be able to share screen from own desktop/laptop but not from Citrix session with sensitive informations.
k
There's no sensitive information on the desktop/laptop computer?
j
This is the problem with Teams in general. I'd love to be able to disable video on my CVAD servers and have it run on laptops, but the Teams policies only allow per-user or per group. Microsoft are morons
a
Yes - desktop/laptop- different classification.
k
@Rachel Berry I’ve seen clarifications of data/apps per desktop, if your users have. more than one desktop this could potentially be a requirement?
Also, screensharing on a desktop/laptop and preventing it in the remote session would still offer the option to leak data, if the user shares their local session but with a remote session open?
👍 1
⤴️ 1
a
Not with Citrix App Protection.
Still you will be able to do photo of your screen but you will not be able to do screenshots
r
a
XenClient seems to be death. It was very difficult solution to implement because of compatibility issues with HW.
👍 1
r
I do wonder if this is the type of use case Hysolate cover?
j
Maybe something like PolicyPak and hide the setting like it can with UI settings? Not sure if it will work for Teams, but it can hide UI settings in apps.
j
Good point. PolicyPak has a number of Teams settings that aren't easily exposed (like GPU). Ivanti User Workspace Manager could also hide the setting
d
Would be fun proposing to force quit a certain local app (here Teams) when launching specific confidential apps within the Citrix client. If not accepted, the virtual app doesn’t launch. The logic would not be that complicated to implement.
m
Application/Screen Sharing 50,040–50,059 TCP/UDP
👍 1
block those ports
👍 1
a
Worth to test however it's not perfect solution - would be nice to implement something inside of App Protection to inform users example “Feature blocked by Citrix App Protection”. In not many users will report tickets to service desk
m
You’re trying to apply a user based setting to a machine, there’s no perfect solution, it’s all going to be a hack.
👍 1
Open in Slack
PreviousNext
Powered by