Issue

Deploy MacroView DMF / Message to lmited users in a Citrix Farm. 

Resolution

​The approach below is a theoretical one and is not officially advocated by Macroview as we would normally expect our clients to purchase a DMF license for each user on the Citrix Farm.

Restricting access to the MacroView DMF Office Add-ins

In order to block users accessing the MacroView DMF office add-ins you will need to apply the following registry changes to user’s profiles that should NOT have access to MacroView DMF:

[HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\AddIns\MacroView.DMF.Outlook.AddinModule]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\MacroView.DMF.Word]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\Excel\Addins\MacroView.DMF.Excel]  "LoadBehavior"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Office\PowerPoint\Addins\MacroView.DMF.PowerPoint]  "LoadBehavior"=dword:00000002

The above settings could be deployed by using Group Policy Preferences.

Restricting access to MacroView PDF Save

To block access to the MacroView PDF Save add-in for Adobe Acrobat you will have to set DENY permissions for READ/EXECUTE on the MacroViewSaveToSharePoint.api file.

Move MacroView DMF Caching Service from all users startup

The MacroView Service shortcut icon is located in the all users start up folder. For example on a Windows 8 workstation it is located in %ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp folder and will need to be moved to the %appdata%\Microsoft\Windows\Start Menu\Programs\Startup folder for all MacroView users

Blocking execution of MacroView Explorer, SharePoint Upload, MacroView Manage-Offline-Files and the DMF Settings Console

To block the execution of the Windows-based MacroView DMF functionality you will need to set DENY permissions for READ/EXECUTE on the executable files in the '\program files\macroview\dmf' folders. Ensure that DMF users do not inherit the DENY settings due to their inherited group membership.

Removing Windows shortcuts to MacroView DMF functionality

In order to remove shortcuts to MacroView DMF functionality, for example a desktop MacroView Explorer shortcut, we recommend using login scripts. 

Note: This article applies to MacroView DMF/Message v7.5 onwards