You can set the INI file read only to prevent any changes. But obviously that prevents any changes. And it still won't prevent the users from trying to connect to a server outside of the preconfigured site list. You should make such restrictions on firewall-level.

Hi everyone,

Due to security concerns we want to give certain users only a pre-populated list of sessions rather than allowing them to add additional servers/hosts through "New Site". So we just give those an ini file that holds x amount of sessions to login to.

Is there a way to remove or prohibit this through a setting with the winscp.ini?

Thanks,
Mave