Kitaab

We use citrix gateway Plugin+ nedsacler as our full VPN solution . The gateway is configured to check for device certificate issued by the PKI infrsatructre In one of the machines we found that the gateway plugin was not requesting to choose the certificate the first time it was opened. So it was failing the EPA check. We tried uninstall and resinstall of the plugin however it still would not open request to choose the device certifciate . We manullay edited the config.js at C:\Users\ User01 \AppData\Local\citrix\AGEE  and placed the dummy devCert highlighted in bold in the example: {"auto open homepage":false,"connectingTo":"https://vpn.domain.com","connections":[{ "devCert":"1846168a1880868155848661825646166a1868868155848a8c664e6f121468284f606c28416f6d18666e10166a186086815584818c624e4f412846151468656e1460616614606f6e,a88212e0808f64e4aa5e500e88", "name":"vpn.domain.com","url":"https://vpn.d...

Citrix XenApp 6.5 Service account password change caused console discovery to fail and we saw event ID 3989 in System Event logs "Citrix XenApp failed to connect to the Data Store. ODBC error while connecting to the database: 28000 -> [Microsoft][ODBC SQL Server Driver][SQL Server]Login failed. The login is from an untrusted domain and cannot be used with Windows authentication." After changing the service account password needed to run the following command on the delivery controllers. DSMAINT CONFIG /user:abc\ABCSVCCitrix /pwd:nP@ssword /dsn:"C:\Program Files (x86)\Citrix\Independent Management Architecture\mf20.dsn" Restart IMA service You should now be able to run the discovery successfully Hope this helps

Recently we had to change Citrix Edgesight Service account Password I am not sure if this is the correct way , but this is how i accomplished it in our setup Make note of the current password Check which services on the edgeSight server are running under this account Change service account password in AD Set the service account password on the ES server following accounts ( in my case) Citrix RSSH Admin Service Citrix RSSH Application Manager Restart the services Set the password in the IIS Application Pool for Edgesight , Start the Application Pool Login to Edgesight console using the SupportEamilID account Configure Reporting server to use the new password Hope this helps

In our XenApp 6.5 HRP 4 Farm  ,we had 1 server behaving oddly Somehow it always showed load of 20000  (licensing) Error during login:  "Citrix XenApp is unable to retrieve the license server location" I tried a lot of things like recreating LHC Restarting server a couple of times Editing License server configuration using Role Manager However it Still kept staying on Load 20000 In the end i had to export the following Keys from a working XenApp Server and import it in the affected one , since the problematic server was missing these keys. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\IMA] [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Citrix\IMA Hope this Helps 

If you have recently upgraded your MacBook to 10.11 (OS  El  Capitan  ) you may face an issue with Citrix Web Interface 5.4 with Safari 9.0 Users when logging through Netscaler can get error 404 This only happens Safari 9.0 , if we use Firefox on the Same MacBook we don't have such issues. For now what i have seen is if you upgrade the OS X to 10.11.1 (Safari 9.0.1) it fixes the issue. Hope this Helps

Sometimes we need to find which SQL server hosts the XenDesktop 7 database. Try this Powershell command on XenDesktop controller : Get-ConfigDBConnection This will tell you the following details: Server name hosting the DB,Database Name,Security Type Hope this helps

Sometimes when you build a new storefront Group with 2 or more servers in it and have them load balanced using Netscaler . As soon as you try and access you XenDesktop site,you will get redirected to one of the load balanced storefront servers. It may happen that when you add NetScaler to the storeFront site for Remote access the changes might not have been propagated to the secondary StoreFront servers. You wont be able to access the resources and at this point you will see this event on the secondary Storefront. Event Id 1 Task Category : 2007 A request was sent to service 'ABCStoreFront' that was detected as passing through a gateway. However no gateways are configured for this service.  Request details: X-Citrix-Gateway: X-Citrix-Via: test.domain.com X-Citrix-Via-VIP: Remote Address: Your NetScaler MIP X-Forwarded-For: Some IP ,Your NetScaler MIP Resolution was simple : Propagate changes to all storefront servers. Hope this helps

Found out on the new Windows 7 VDI (using Xendesktop 7) the folder options show a check box on everything when we click or hover the mouse pointer over an object. We need to go to the folder options and uncheck the following : Hope this helps.

When we add server to the Citrix storefront 2.0 server gropup , it may happen that the Propagate changes give us an error You will see the following events on the Primary StoreFront 2.0 Server Event Id 0: Error in retrieving synchronization information. Citrix.DeliveryServices.PowerShell.Command.Runner.Exceptions.PowerShellExecutionException: An error occured running the command: 'Get-DSClusterConfigurationUpdateState' ---> System.Management.Automation.ActionPreferenceStopException: Command execution stopped because the preference variable "ErrorActionPreference" or common parameter is set to Stop: There was no endpoint listening at net.tcp://storefront02/Citrix/ConfigurationReplication that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details. Event Id 1: Citrix.DeliveryServices.PowerShell.Command.Runner.Exceptions.PowerShellExecutionException, Citrix.Delive...

We are facing an issue with Storefront 2.0 . Everything seemed to be slow, authentication , enumeration , launch etc. The events we saw were: Event Id 17 An error occurred while contacting the Discovery Service. System.Net.WebException, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 The operation has timed out Url: http://StoreSRV01/Citrix/XD7PoC/discovery ExceptionStatus: Timeout Event ID 12 An error occurred while contacting the Discovery Service. System.Net.WebException, System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 The operation has timed out Url: http://StoreSRV1/Citrix/XD7PoC/discovery ExceptionStatus: Timeout It supposedly was caused by McAfee VSE 8.8 Update 2. We tried uninstalling McAfee VSE 8.8 U2 and installing the older 8.7 version and it does make some difference. Not sure what the perfect solution is as of now. Hope this helps.

We faced an issue with xendesktop 7 director. When the admin user logged on to the director server and launched it from the start menu it opens http://localhost/Director As soon as the user provides credentials , he's returned back to logion screen for Director. There is no error in the event log or IIS logs. We got it fixed by using  http://servername/Director  instead of  http://localhost/Director You can change the Shortcut in Start menu to http://servername/Director This may have something to do with the IIS , but not sure. If you face this issue , you can try the above steps and see if that works for you Hope this helps.

Sometimes you might have a situation wherein you have a dedicated Catalog with 100's of machines. You set the delivery group for Peak hours and do not want any machines to be turned off. However you will notice that machines are still shutting down during the peak hours  Set-BrokerDesktopGroup "Your Delivery Group Name" -PeakBufferSizePercent 100 e.g Set-BrokerDesktopGroup "ABCDesktops" -PeakBufferSizePercent 100 You may want to test with different values for PeakBufferSizePercent In our case i choose 100 Hope this helps.

Sometimes when  you configure Storefront 2.0 and you create a store to access your apps for your current XenApp 6.5 Farm .You may not see any of your published applications. And the page looks like: Just a message: "There are no apps or desktops assigned to you at this time" You need to make sure that while Creating the store you need to specify the correct port for XML broker for your farm. Like in our case it is 8080 Also in case if you want to show the Apps by default on the Logon page you can use the following keywords while publishing the applications in the AppCenter These keywords are : Auto Featured TreatAsApp Auto -- Will show the published application by default Featured --To add to the featured list There are others you can add as well Then it will show as: Hope this helps.

While Installing Storefront 2.0 , you may get a warning in the Storefront console . "The Management console is Unavailable because a root certificate is missing" It happens if - VeriSign Class 3 Primary CA - G5  Certificate is missing under the trusted Root certification Authorities Container  on the machine where storefront is installed. Download the root certificate from  http://www.symantec.com/page.jsp?id=roots Look for the certificate that is missing as this page has a lot of them. Save it somewhere . And then import it in the Trusted Root Certification Authorities store  of the local Computer. Hope this helps.

In XenApp 6.5 in case you want to drain the sessions so that eventually you could reboot the server for maintenance. there is an option in the XenApp console , where in you can do the following: This is same as the (drain mode) of Microsoft RDS 2008 R2. However i have had mixed results with this and sometimes when i prohibit logons it changes it back to Allow logons . Also this disables the functionality of RDP as well. I have found using load Evaluator is a better and good option to accomplish maintenance mode for Citrix Xenapp Servers. In XenApp 6.5 we cant assign load Evaluators to Servers directly , so have to use Worker Groups. Firstly I created a Load Evaluator (named it Full Load) and used Scheduling Rule. This Load evaluator if applied to a Worker Group , will apply Full Load (10000) to all servers in the Worker Groups. I then Created a Worker Group and Named It -- Full Load Worker Group I used Farm Server as Select Source instead...

Needed to make a SCCM collection for machines that do not have Citrix Client / receiver installed. After a lot of modifications there is what my final wql - query looked like (Sub -Select) select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System  inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId  where SMS_G_System_COMPUTER_SYSTEM.Name not in  (select distinct SMS_G_System_COMPUTER_SYSTEM.Name  from SMS_R_System  inner join SMS_G_System_COMPUTER_SYSTEM on SMS_G_System_COMPUTER_SYSTEM.ResourceID = SMS_R_System.ResourceId  inner join SMS_G_System_ADD_REMOVE_PROGRAMS on SMS_G_System_ADD_REMOVE_PROGRAMS.ResourceID = SMS_R_System.ResourceId  where SMS_G_System_ADD_REMOVE_PROGRAMS.DisplayName like  " Citrix Online plug-in %") We can utilize this query to crea...

Sometimes on the Citrix Xenapp servers (which are based on windows 2008 R2  RDS) , we face WMI issues which we get notified by users trying to Launch applications and getting errors: When we check the %temp% folder for the user on the server where they are launching the apps from we see the log file for Logon Script showing entries like Error: 424 Object required Machine details 27-11-2012 10:31:46 0 (0x0000) The detected IP (Computer is Unreachable!) is not the expected value, switching to alternate IP discovery method Machine details 27-11-2012 10:31:46 0 (0x0000) Also you may see the event 1065 in System Event log on the Server. The processing of Group Policy failed. Windows could not evaluate the Windows Management Instrumentation (WMI) filter for the Group Policy object  When we try to connect to WMI , we see error as shown. Basic Steps: -Ensure that the Windows Management Instrumentation (WMI) service is runni...

Today we had a request to publish SCCM 2007 Console through Citrix I installed the SCCM Console on a couple of XenApp 6.5 servers While Publishing the Console i faced an issue of the ICON file not getting applied while i choose the msc file Below Images Shows the error: "Failed to Read Icon File from" While Searching for dlls in the install directory for the SCCM Console, i found a dll for smssnapinresources.dll i guessed it might have the Icon embedded somewhere in it :) And it did have it. So i choose the icon And it finally worked while publishing the application. Hope this Helps