Skip to main content
MacroView branding and product names have changed. Learn more.

Search

How can we help?

Restricting access to DMS/DMS Pro in Citrix

MacroView Support
  • Updated

Issue

Deploy MacroView DMS / DMS Pro to limited users in a Citrix Farm. 

Resolution

​The approach below is a theoretical one and is not officially advocated by Macroview as we would normally expect our clients to purchase a DMS / DMS Pro license for each user on the Citrix Farm.

Restricting access to the MacroView DMF Office Add-ins

In order to block users accessing the MacroView DMS office add-ins you will need to apply the following registry changes to user’s profiles that should NOT have access to MacroView DMS:

[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\AddIns\MacroView.DMF.Outlook.AddinModule]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\MacroView.DMF.Word]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\Excel\Addins\MacroView.DMF.Excel]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\MacroView.DMF.PowerPoint]  "LoadBehavior"=dword:00000002

The above settings could be deployed by using Group Policy Preferences.

 

Restricting access to MacroView PDF Save

To block access to the MacroView PDF Save add-in for Adobe Acrobat you will have to set DENY permissions for READ/EXECUTE on the MacroViewSaveToSharePoint.api file.

 

Move MacroView DMS Caching Service from all users startup

The MacroView Service shortcut icon is located in the all users start up folder. For example on a Windows 8 workstation it is located in %ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp folder and will need to be moved to the %appdata%\Microsoft\Windows\Start Menu\Programs\Startup folder for all MacroView users

 

Blocking execution of MacroView Explorer, SharePoint Upload, MacroView Manage-Offline-Files and the DMS Settings Console

To block the execution of the Windows-based MacroView DMS functionality you will need to set DENY permissions for READ/EXECUTE on the executable files in the '\program files\macroview\dmf' folders. Ensure that DMF users do not inherit the DENY settings due to their inherited group membership.

 

Removing Windows shortcuts to MacroView DMF functionality

In order to remove shortcuts to MacroView DMS functionality, for example a desktop MacroView Explorer shortcut, we recommend using login scripts. 

 

Note: This article applies to MacroView DMS / DMS Pro v7.5 onwards