Implementing Client Restrictions for Global Entitlements in Horizon 8

You can restrict access to global entitlements to specific client computers. To restrict access, you add the names of the client computers that are allowed to access a global entitlement in an Active Directory security group and then add this group to the global entitlement's users and groups.

The client restrictions features has certain requirements and limitations.

• You must activate the client restrictions policy when you create or modify the global entitlement. By default, the client restrictions policy is deactivated. You can activate this policy only for floating desktop entitlements and global application entitlements.
• The global entitlement client restrictions policy setting overrides the pool-level client restrictions policy setting. As a best practice, if you activate the client restrictions policy on a global entitlement, do not activate the client restrictions policy on the pools that the global entitlement contains.
• You must add the Active Directory security group that contains the names of the client computers that are allowed to access the global entitlement when you create or modify the global entitlement.
• The client restrictions feature allows only specific client computers to access global entitlements. It does not give users access to global entitlements. For example, if a user is not included in a global entitlement (either as a user or as a member of a user group), the user cannot access the global entitlement, even if the user's client computer is allowed to access the global entitlement.
• The client restrictions feature is supported only with Windows client computers in this release.
• When the client restrictions policy is activated for a global entitlement, non-Windows clients and Horizon Web Client cannot launch the global entitlement.

Note: Horizon Web Client is available with Horizon 8 versions 2412 and later. For Horizon 8 versions 2406 and earlier, Horizon Web Client is called "HTML Access." This page uses the name "Horizon Web Client" to refer to both Horizon Web Client and HTML Access.