User's Manual

8 Chapter 2
• Lo
w-privileged - This is the level assigned to a typical user of the thin client. The
Network selection on the System Setup submenu is disabled (the Network Setup
dialog box cannot be opened). A Low-privileged user cannot reset the device to factory
defaults.
• Non-
privileged - This level of access is typical for kiosk or other restricted-use
deployment. The System Setup selection on the Desktop menu is disabled (the various
dialog boxes available from the System Setup cannot be displayed). The Connect
Manager is not available. The user cannot reset the device to factory defaults. Both the
Dialup Manager and PPTP Manager are disabled.
Note
If you are accessing the enterprise intranet through Dial-up or PPTP VPN,
the Network Setup dialog box is available during the dial-up process to
establish the initial connection to the FTP server. If you then log on as a
Low-privileged or Non-privileged user, however, access to the Network
Setup dialog box is then disabled. The Dialup Manager and PPTP Manager
are also disabled for a Non-privileged user.
User Modes
User Modes define your login state and include the following types of user:
• Guest use
r - This mode logs on using the global profile only (no user profile is
available) and does not need a password. The Guest user will be disabled if no
connection is defined in the global profile. The Guest user cannot access the Network
Setup dialog box and cannot reset the device to factory defaults. Otherwise, all
remaining local resources are available. Although an enterprise file services account
password is not required, individual application servers may require a password.
• S
tand-alone user - This mode makes operation of the thin client possible when user
profiles or PNAgent/PNLite-published applications are not available. No user log-on is
required and network information and connection definitions must be defined locally on
the thin client. Locally entered connection definitions are preserved when the thin client
is turned off or restarted, but individual user accounts are not available and automatic
software updates are not available when the thin client is restarted.
Note
It is possible to have an FTP server which supplies software updates but no
INI files. In this case, software updates would take place but the user would
still be Stand-alone.
• PNAgent/PNLite-only user - This mode is similar to a Stand-alone user, except
applications published by Citrix PNAgent/PNLite services are available (the IP address
of a PNAgent/PNLite server is entered into the Network Setup dialog box). The user
logs on to the PNAgent/PNLite server but does not log on to the file server or use
configuration user profiles. If the PNAgent/PNLite server publishes fewer than the limit
of applications set by the administrator, the user can locally define additional
applications. As long as the domain password for the PNAgent/PNLite server matches
the password in an INI file for the same user on the FTP server, both the PNAgent/
PNLite published applications and the directives in the user.ini file will be processed
(with the PNAgent/PNLite published applications being processed first). However,
other directives from the user.ini file could alter the privilege, the default display
resolution, and so on. With the enable local clause for the connect statement,
connections defined in the user.ini file may be persistent.