Citrix XenApp 6 Policies Stéphane Thirion / Activlan 20th Sept 2010

Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 What’s New ?

Provisioning XA6 Servers Troubleshoot policies issue Tips

Links Questions

Policies in XenApp 6

Policies in XenApp 5, PS4, PS3, Metaframe XP…

What’s new ?

Citrix Policy extensions

Delivery Services Console

(policies node)

IMA Database

GPMC

GPO Editor Active Directory Group Policies

•  Citrix/MS OU policies •  Citrix/MS Domain policy •  Citrix/MS Site Policies

Directory SysVol (DFS)

Local Server SysVol

Diagram XenApp 6 policy system

ADM/X GPFX

GPFX

Why XenApp has two way to configure settings ?

•  Group Policy and IMA Policy contain the same settings •  Settings coming from either will merge in a single RSoP

Conflicts ? What will happen ?

Conflicts will occur if the same setting is coming from either Group Policy (GP), IMA or Local Group Policy (LGP)

How does it work ?

\\<domain>\SYSVOL\<domain>\Policies\<guid>\<Machine or User>\GroupPolicy\Policies.GPF

HKLM\Software\Policies\Citrix

XenApp IMA DataStore

Demo

http://www.youtube.com/watch?v=R9UyHjOrjxs&hd=1

Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 ✓ What’s New ? ✓

Provisioning XA6 Servers ✓ Troubleshoot policies issue Considerations

Links Questions

Troubleshoot policies issue

How can I track from where settings are coming from ?

How can I track from where settings are coming from ?

Using the modeling wizard

Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 ✓ What’s New ? ✓

Provisioning XA6 Servers ✓ Troubleshoot policies issue ✓ Considerations

Links Questions

Considerations

Should I use Group Policies or configure settings in the CDSC ?

Keep that in mind •  The Unfiltered policies affect all servers and all users •  Group Policy is a must if you need cross farm policies •  Group Policy (Domain) takes over IMA Policy and Local Policy •  Group Policy require a clean OU/Server organization •  IMA Policy doesn’t require Active Directory •  IMA Policy doesn’t require specific rights in Active Directory •  IMA Policy is the best fallback option if no access to Active Directory •  You can prioritizing Policies and creating exceptions •  RSoP doesn’t display settings that policies have not configured

Sources and links

XenApp 6 SDK - Group Policy Provider by Tom M Kludy http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Provider

XenApp 6 SDK - Group Policy Overview by Tom M Kludy http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Overview

Looking to migrate to XenApp 6 soon? What about keeping your old FARM settings? by S. Weizman http://community.citrix.com/pages/viewpage.action?pageId=142673139

Questions ?

Citrix XenApp 6 Policies Stéphane Thirion / Activlan http://www.archy.net or sthirion@activlan.com Twitter @archynet