This article describes how to limit user privileges when they access the application through NetScaler Gateway.
Instructions
To limit the user privileges when they access the application through NetScaler gateway with smart access mode, complete the following steps on XenApp or XenDesktop server:
Note: For smart access mode, users need to uncheck 'ICA only' checkbox on the desired NetScaler Vserver.
1) Create a new policy on XenApp or XenDesktop and select the policy that you want:

2) Click Next and select Access control:

In this example, the farm name and access condition fields are filled in with asterisk '*'.
3) Click Finish to complete.
4) Enter PowerShell on DDC server and verify whether the following key is true value:
“Get-BrokerSite” and look for the line “TrustRequestsSentToTheXmlServicePort=TRUE”
If not, then enter the following command:
“Set-BrokerSite -TrustRequestsSentToTheXmlServicePort $true”
5) Sometimes the policy we just updated will not be deployed in time. Run the following command to ensure that the policy takes effect on the DDC server:
gpupdate /force