Client Folder Redirection (CFR) provides access to client-side folders in an ICA session while not having to redirect complete client-side drives. Support through Client Drive Mapping (CDM) has enabled end-users access to drives on the client computers. Sometime security requirements require end-uses to have access to only specific folders on the client computer. CFR provides more granularity than CDM and only allows access to specific folders on the client computer.
On the client computer use CtxCFRUI.exe in C:\Program Files (x86)\Citrix\ICA Client to configured CFR. This is a UI to easily select which folders on the client computer the end-user has access to.
The All hard disk and devices with removable storage (default) and Custom are a toggle. If the Custom is selected then CFR is enabled and folders listed on the client are redirected into the user's ICA session. If All hard disk and devices with removable storage (default) is the CDM is enabled and CFR is disabled.
You can verify the setting in the client registry.
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Citrix\ICA Client\Engine]
"CFROnlyMode"=dword:00000001
[HKEY_CURRENT_USER\Software\Citrix\ICA Client\Engine]
[HKEY_CURRENT_USER\Software\Citrix\ICA Client\Engine\Client Folders\<DriveLetter>]
"Folder"="C:\<FolderName>"
You need to enable CFR on the VDA (or XenApp session host) by setting the registry value.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Citrix\Client Folder Redirection]
"CFROnlyModeAvailable"=dword:00000001
The value for CFROnlyModeAvailable is 0 or 1. 0 CFROnlyModeAvailable is disabled. 1 CFROnlyModeAvailable is enabled.
With CFR disabled and CDM enabled, end-users should expect to see their client computers drives in the ICA session.
With CFR enabled end-users should expect to see their CtxCFRUI.exe configured local folder redirected in the ICA session as a drive and *client computer drives* are not listed. Based on the first image where the Z: drive is mapped to the Temp folder. End-users will now have access to the C:\Temp folder only.