Archive for March 31, 2011

Citrix: Citrix PVS and BSOD when booting target VM from vDisk

Yesterday I spend the day setting up a PoC for Citrix Provisioning Services (5.6.1 SP1) with XenDesktop, XenApp 6 and XenApp 5. But we discovered that all of the target VM’s would give a BSOD (0x0000007b meaning: inaccessible boot device) when booting from the vDisk while the master didn’t have any problems.

citrix pvs

image source: Lako-Home

After investigating this we cloned the master and removed the hard drive. After creating the device in the Citrix PVS console we where able to boot successfully from this vDisk. So the VM was created manually and somewhere along the road there was a misconfiguration. We took the clone and converted it to a template. After this we installed CTX128726 for PVS so we can use the wizard to create XenApp VM’s with this vDisk from the PVS console


Citrix: Collection of XenDesktop 5 Documents, KB Articles, Whitepapers etc

Ronald Grass just posted a really good collection of reference material for XenDesktop:

I don’t know how you feel about all the different sources of information around XenDesktop 5. To me it’s confusing where all the XenDesktop infos are stored and what are the keywords to find the right content. So I decided to create a collection of links to all the stuff I know of, may it be eDocs, Citrix Kits,  HowTos, Whitepapers, KB Articles, Videos, etc.

XenDesktop MasterClass Videos available ( hey and don’t forget )

Very good XenDesktop 5 PowerShell Blog posts 5 PowerShell SDK Primer Part 3 Creating Pooled Catalogs that Leverage Machine Creation Services

Whitepapers FAQ *HOT! Licensing FAQ XenDesktop 5.0 Quick Start Guide 5 – Reference Architecture Guide: XenDesktop 5 Migration Optimization Guide 5 Database Sizing and Mirroring Best Practices Design-Handbook

HowTos to Create a VMWare User Account with Minimum Permission to Manage Machine Creation Services on XenDesktop 5.0 to Deploy and Configure XenDesktop 5 Virtual Desktop Agents with Active Directory Group Policy to Repair a Site and Unlock Active Directory Accounts if Virtual Machine Creation is Interrupted to Enable Remote Assistance for Desktop Director to Enable Controller Service Logging in XenDesktop 5 to Implement High Availability Features in XenDesktop 5 to Create ICA Launch Files for High Availability Mode to Enable Persistent CDF Tracing in XenDesktop 5 to Deploy and Configure XD 5 VDA with AD Group Policy to Configure XD 5 with Microsoft Hyper-V and SCVMM to Change the XML Port in XenDesktop 5 to Change Virtual Channel Priority in XenDesktop 5 to Manually Install XenDesktop Web Access to Reconfigure a XenDesktop Site to Use a Mirrored Database to Configure XenDesktop for SQL Database Mirroring to Use a Specific SQL port with XenDesktop 5 to Redeploy XenDesktop Without Re-Installing to configure logoff behavior of a Desktop Group in XenDesktop 5 to configure XenDesktop 5 VDA for VLAN tagging in Hyper-V

Tools 2.0* NEW for XenDesktop 5 SQL Profiler Template Session State Monitor Tool Citrix XnapShot

additional XD KB Articles XenDesktop 5 PowerShell online reference *HOT Getting started with PowerShell in XenDesktop 5 XenDesktop 5 – Issues Fixed in This Release 5 Services Overview Access and Permission Model for XenDesktop 5 Entries Used by XenDesktop 5 Broker Service XenDesktop Error: The hosting infrastructure could not be reached at the specified address *READ carefully, MCS needs additional editing of “/” section Sign-On and Xendesktop 5 Recovery Guide for XenDesktop 5 using NetScaler Issues with Active Directory Policies in XenDesktop 5 5 Database Transaction Log Growing Excessively Citrix XenDesktop 5 Support Statement for Microsoft KMS activation with Machine Creation Services (MCS) 5 Downloads Reference List Wizard (now as Hotfix for PVS 5.6 SP1) Studio Logging Options for XenDesktop 5

He also posted:

XenDesktop 4 is still very popular out there and there is a Installation Sequence Recommendation for all the hotefixes released yet

Citrix XenDesktop 4 – Installation Sequence Recommendations for XenDesktop 4 Hotfixes

But keep my earlier blogpost in mind, there’s no supported configuration possible for XenDesktop 4 with MS SQL.

Citrix: XenDesktop Planning Guide – XenDesktop Scalability

Citrix just released the XenDesktop Planning Guide – XenDesktop Scalability and these are the results (also from the PDF):

Read more

Citrix: Logon Optimization

Citrix released another good read on how the logon process and logon optimization in Citrix XenApp and/or XenDesktop works and how to optimize this:

Read more

Citrix: Guidelines for Antivirus Software Configuration

Citrix just put the CTX127030 online containing:

Read more

RES Workspace Manager: Launch after Citrix published desktop

Because one of our customers was planning to use the Citrix Desktop Appliance Lock, we needed to publish a Citrix desktop and start RES Workspace Manager after the launch of the desktop. While Microsoft has GPO’s for running a program after logging in, Citrix prohibits this.


Upon installation, Citrix adds tabs to the RDP-TCP Listener Properties in the Terminal Services Configuration. By default, the Environment tab has the “Run initial program specified by user profile and Remote Desktop Connection or Terminal Services client” radio button selected. Also, the Citrix Settings tab has “Only allow administrators to create desktop connections” selected.



When leaving this setting default you will get an error message when logging in:

“To log on to this remote computer, you must have Terminal Server User Access permissions on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop User group does not have these permissions, you must be granted these permissions manually.”

To correct this you can manually clear the “Only allow administrators to create desktop connections” check box like stated in CTX109925 but you can also create a custom ADM template to clear this check box. The key that’s used for this is:

HKLM\SYSTEM\ControlSet001\Control\Terminal Server\WinStations\ICA-tcp\fDisableExe

Where 0 is cleared and 1 is checked.

To create a custom ADM file I used the following PDF, the ADM template contained the following information:

;Configure The only allow admins to create desktop connections settings.
CLASS Machine

CATEGORY “Server Based Computing”
CATEGORY “Citrix Presentation Server”

KEYNAME “SYSTEM\ControlSet001\Control\Terminal Server\WinStations\ICA-tcp”
POLICY !!fDisableExe
EXPLAIN !!ExplainWords
PART “Disable the only allow admins to create desktop connections settings?” TEXT
PART “Clear the ‘Only allow administrators to create desktop connections’ check box?”
VALUENAME “fDisableExe”


fDisableExe=”Allows published desktops for users”
ExplainWords=”This policy enables/disables published desktops with autostart programs for users”

I’ve applied this policy to my Windows 2003 w/ XenApp 5 farm and the check box is cleared and I can start a Citrix published desktop (while using the Desktop Appliance Lock) and start RES Workspace Manager after the desktop launch.  This way I can have the best of both worlds!

I denied the GPO on the Administrator accounts so when somebody with an administrator accounts connects via this Citrix Desktop they won’t get this policy and thus Workspace manager won’t get started.

If you’re using XenApp 6 you can use the following policies:

  • ICA\Desktop launches : “Allows or prevents non-administrative users to connect to a desktop session on the server.
    When allowed, non-administrative users can connect. By default, non-administrative users cannot connect to desktop sessions.”
  • ICA\Launching of non-published programs during client connection : “Specifies whether to launch initial applications or published applications on the server. By default, only published applications are allowed to launch.”

Your policies should look like the following image: