PASSPORT Knowledge Base
PASSPORT PC TO HOST and Citrix/Terminal Sever

Date Published: November 12, 2004
Date Updated: December 8, 2008

Title

Installing and Deploying on Terminal Server or Citrix Server

Product

PASSPORT PC TO HOST

Emulation Types

TN3270, TN5250, VT, SCO ANSI, Wyse 60

Issue

When PASSPORT is installed in a Terminal Server or Citrix environment and the partition is formatted with NTFS, there are security implications that must be considered.  For example, you may not want the users that are logged in to the server to be able to change any PASSPORT configuration settings.  Yet, in order for the users to launch a session, they must have permissions to write to the PASSPORT folder.

Solution

Below are the recommended permission settings on a Windows 2000 Terminal Server (with or without Citrix):

 

Folder/File(s)

Permissions

..\Program Files\PASSPORT\

Modify, Read & Execute, List Folder Contents, Read, Write

All Files in the above folder

Read & Execute, Read

 

 

Note: If the above permissions are not set, the user will get the following error message:

 

zepkmap.jpg

 

 

After clicking OK, the user will get the following error:

 

unnamed.jpg

 

 

These errors occur because the user does not have permission to write to the PASSPORT folder.  Each time a session is launched, a temporary file is created in the PASSPORT folder called ZepKmapA$$$$.$$$
 

 

Note:  with the above permission settings, each user will still get the following message when exiting PASSPORT (if any changes, including window size or position, are attempted):

 

access_denied.jpg

 

This is because the users do not have permission to write to the PASSPORT configuration file (PASSPORT.ZWS).  

More Information

Keywords

citrix, terminal server, install, permissions, access denied, unnamed file