ThinWorld Citrix Knowledgebase

VBS Ping check script

2010-03-11T14:28:00.002Z

This simple VBS allow you to check a device is up and running (with a ping check) before it runs code against the device.

This method means your script will not hang running against machines that are powered off.

PINGFlag = Not CBool(ObjShell.run("ping -n 1 " & StrUserID(1),0,True))
If PINGFlag = True Then
' Machine is up and running
Else
' Machine has not responded
End If

Audit Users Manually mapped Drive mappings

2010-03-11T11:40:00.002Z

I needed to create a script to check to see if users had manually mapped network drives to a certain data share in order to perform a successful migration of the share to a new server.

Our central logon script would be easy to amend but obviously manually added mappings would not be effected by that. In our environment it is possible users have manually added a network drive on their local client device (workstation or laptop) or within their Citrix Xenapp sessions.

The drive mapping in citrix were easy to obtain as we have a hybrid profile solution and the drive mappings show as plain text files within their profile.

For Client Devices this task proved much more difficult and the scripts detailed here require scriping knowledge and some management. Also the data returned is reliant on a number of factors , most notable it can only check logged on users. (trying to rip apart NTUSER.DAT files proved fruitless the file is often locked and did not always seems to show the keys for reasons unknown)

Client Device check Script - You Feed the script a list of usernames and their workstation names and in a comma seperated file called workstation.csv
It will then output back to you if any of those users have the drive mapping you need to change. You can amend this script to FIND and REPLACE if required as well. The one posted here is an audit only to identify users who have the mapping.

(eg. User1,Workstation7
User2,Workstation10)

You must retrieve this in any manner you can, I had a list from SMS and also a report from edgesight showing me users and which workstations they had logged onto in the last 30 days.

Client Device check Script.VBS

On error resume Next

Set objShell = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.fileSystemObject")

Const HKU = &H80000003
Dim StrArray(1000)
Dim StrDog, StrSplit, StrSID, StrText, StrText2, StrUserID, StrreplaceDrive

StrReplaceDrive = "\servername\sharename"

' Get AD group name and membership
StrGroup = Inputbox("Enter AD Group Name ")
Return = objShell.run ("%comspec% /c h:\utils\DSGET group " & CHR(34) & "cn=" & StrGroup & ",OU=Data Access,OU=Groups,DC=thinworld,DC=netUK" & CHR(34) & " -members -expand | h:\utils\dsget user -samid -sid >members.txt" ,0,True)

Set objInputFile = objFSO.OpenTextFile("workstations.csv",1,False,-1)
Set objOutputfile = objFSO.CreateTextFile("Output.txt",2,True)

' Read the User IDs from file and then attach the SID on their PC to see the Drive mappings
x=1
Do While Not objinputfile.AtEndOfStream
Strtext = Ucase(objinputfile.ReadLine)
StrUSerID = Split(StrText,",")
GETSID(Struserid(0))

' Check the machine is available before trying to read the registry
PINGFlag = Not CBool(ObjShell.run("ping -n 1 " & StrUserID(1),0,True))
If PINGFlag = True Then
Call READREG(StrUserID(0),StrUserID(1),StrSID(1))
Else
objOutputfile.WriteLine StrUserID(1) & CHR(9) & "Computer Not Online"
End If

x = x + 1
Loop

objOutputfile.Close

' Display the output file
Return = objShell.run ("%comspec% /c notepad.exe output.txt",0,False)
' End the Script
Wscript.Quit

' Get the users SID Name
Sub GETSID(StrUserID)
Set objInputFile2 = objFSO.OpenTextFile("members.txt",1)
Do While Not objinputfile2.AtEndOfStream
Strtext2 = objinputfile2.ReadLine
Pos = Instr(Strtext2,StrUserID)
If Pos > 0 Then
StrSID = Split(Strtext2,"S-1-5")
End If
Loop
objInputFile2.Close
End Sub

' Search the users registry for the drive mapping
Function READREG(StrUserID,Strcomputer,StrSID)
Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")
Set WshSysEnv = ObjShell.Environment("PROCESS")
StrSID = Trim(StrSID)
strKeyPath = "S-1-5" & StrSID & "\Network"
strKeyName = "RemotePath"
objReg.EnumKey HKU , strKeyPath, arrSubKeys

For Each subkey In arrSubKeys
objReg.GetSTRINGValue HKU ,strKeyPath & "\" & subkey,strKeyName,szValue
intLength = Len(szValue)-1
strUncPath = Right(szValue, intLength)
If Ucase(StrUNCPath) = Ucase(StrreplaceDrive) Then
objOutputfile.WriteLine Subkey & " Drive Mapped to " & StrUNCPath & " By User : " & StrUserID & " On Client : " & Strcomputer
End If
Next
End Function

Registry .REG backup Script

2010-03-02T13:58:00.002Z

This Script reads in a .REG file and makes a backup of the registry area that the .REG will change when imported.

This is handy when you are given a .REG file and told to import it. The script will create backup .REG files for you to restore the machine to original values should the import cause issues.

Its not the prettiest of things and will create multiple backup REG files if there are multiple key paths. But you can highlight all the backup reg keys and import in the event of a restore.

'
' Backup Registry before importing a REG file
'
' This script is designed to be run before importing a .REG file
' It will export the current registry key values into a .REG file
' in order to make a restore to the original keys quick and simple.
'
' Input it a .REG file
' It will output to a folder of the same name a .REG file for each required Key
'

On error resume next

Set objFSO = CreateObject("Scripting.fileSystemObject")
Set WshShell = CreateObject("WScript.Shell")
Set objInputFile = objFSO.OpenTextFile(StrScript,1,False,0)

StrFolder = Wshshell.CurrentDirectory
StrScript = "tweak-bundle1.reg"
dim StrKey(1000)

StrPath = StrFolder & "\" & Left(StrScript,Len(StrScript)-4)

objFSO.CreateFolder (StrPath)

i=0
Do Until objInputFile.AtEndOfStream
i = i+1
strData = objInputFile.ReadLine
If Instr(Strdata,"[") > 0 Then
StrData = Left(StrData,Len(Strdata)-1)
StrData = Right(Strdata,Len(Strdata)-1)
StrKey(i) = Strdata
StrCommand = "REGEDIT /E " & CHR(34) & StrPath & "\" & i & ".reg" & CHR(34) & " " & CHR(34) & Strkey(i) & CHR(34)
Wshshell.Run Strcommand
End If
Loop

Appsense DLL rebase problem with Shdocvw.dll

2010-02-24T10:12:00.003Z

We had 2 little problems in our environment.

MS Word 2002 Help did not work as expected.
Services.msc did not display extended view

Both of these problem were due to Appsense Performance Manager v7 performing DLL rebasing on Shdocvw.dll. Appsense does this as part of its memory optimization feature.

We set Appsense Performance Manager to exclude this DLL for memory optimization and the problems were resolved.

SQL script to read application useage from Edgesight Database

2010-02-23T16:29:00.004Z

I had a requirement to extract some data from Edgesight. The standard reports in Edgesight could not provide the data i wanted so a colleague wrote me this SQL script that extracts the info straight out the database.

My requirement was to see all launches of a particular EXE , the user and their workstation ID

eg. (winword.exe , User56, Workstation1001)

This SQL script did the trick for winword instances run in the last 2 days.

select i.filename, convert(char(10),t1.dtperiod,120), c.client_name, p.account_name, count(*)
from usage t1
join ctrx_session c on (c.sessid = t1.sessid)
join image i on (i.imid = t1.imid)
join principal p on (p.prid = t1.prid)
where DATEDIFF(day, t1.dtperiod, GETDATE()) < 2
and filename like '%winword%'
group by i.filename, convert(char(10),t1.dtperiod,120), c.client_name, p.account_name

Citrix Access Gateway VM on XenServer

2010-02-23T14:17:00.002Z

To Install Citrix Access Gateway 4.6.2 onto a Citrix XenServer VM use the following procedure.

Download the install ISO from the citrix download centre
Create a New VM (other install media, 256MB RAM, 1vCPU, 12GB , 2 NIC Cards)
Boot the VM from the ISO Image and it will install the software automatically
Once install is complete unmount the ISO and reboot
From a management PC set the Ip address of the PC to 10.20.30.x 255.255.255.0
Connect from the Management PC to the CAG on 10.20.30.40 USER: root PASS:rootadmin
Click to change the admin password
Click to download the Access Gateway Admin Tool. Install this on your management PC.

From the management console you can change the CAG Ip address and perform all your neccessary configuration.

Thanks to xenappblog.com for this information.

MFCOM Script to detect CAG Access

2010-02-09T09:43:00.002Z

I wanted a script to detect if a users connection was made through CAG (Citrix Access Gateway)

I required this as i wanted to save users default printer only when the connection was made in the office. This is to prevent users saving their home printer information into their profiles.

We use a hybrid profile solution managed by Appsense Environment Manager. Using the following script as a custom rule in Appsense we could tell Appsense to NOT SAVE the default printer for any connections made through the CAG.

Script
'Name of Filter scan expected to pass
ExpectedFilter = "xxx_CWI_Policy"

'Get Server Name
Set objNTInfo = CreateObject("WinNTSystemInfo")
ServerName = lcase(objNTInfo.ComputerName)

Result = 0

'Create MetaFrame Session Object
Set MFSession = Createobject("MetaFrameCOM.MetaFrameSession")

'Initialize the session object with our data
MFSession.Initialize 6, ServerName ,"",-1

'Iterate through the session filters for this session

For Each x in MFSession.SmartAccessFilters
msgbox x
' return true if our filter is found
If x = ExpectedFilter Then
Result = 1
End If
Next
'Return result of script
If Result = 0 Then
'Rule will pass
WScript.Quit 0
Else
'Rule will fail
WScript.Quit 1
End If

Publishing a HTA file in XenApp (citrix)

2010-02-02T12:31:00.002Z

If you wish to directly publish a HTA application in XenApp (Citrix) Then you need to point at the MSHTA.EXE file and pass it the HTA name. Directly publishing the HTA does not work.

eg.

"C:\windows\system32\WSHta.exe" "MyCode.hta"

XenApp Citrix Copy and Paste Problems

2010-01-28T16:58:00.001Z

Ive often had problems with copy and Paste between my ICA delivered applications and also my RDP connections to server desktops. Users report the same issue as well and a logoff and log back on normally sorts it all out. Ive also tried the Repair chain ulities available but with no luck. I came across this registry tweak for v10 or newer ICA clients that may help. Ive just added it to my machine and will monitor to see if i see an improvement.

See the following article for full details
http://support.citrix.com/article/ctx112434

Default Web Browser Registry Keys

2010-01-28T14:26:00.003Z

To change the Default Web Browser setting for a machine via the registry you need to modify the following registry key areas. I got these keys from a RegMon on my Windows XP workstation but it should be the same for Windows 2003 Server.

HKLM\Software\Classes\HTTPS\Shell\Open
HKLM\Software\Classes\HTTP\Shell
HKLM\Software\Classes\FTP
HKLM\Software\Classes\HTTP\.XHTML
HKLM\Software\Classes\HTTP\.XHT
HKLM\Software\Classes\HTTP\.SHTML
HKLM\Software\Classes\HTTP\.HTML
HKLM\Software\Classes\HTTP\.HTM

CMC or XenApp Advanced Configuration Loader fails to Launch after Upgrade

2010-01-28T09:50:00.003Z

After applying an upgrade or patch to your XenApp servers the CMC or XenApp Advanced Configuration Loader fails to start with the error

The Presentation Server Console could not be started because there was an error creating the process. Would you like the details.

Ive seen this problem on XenApp 4.0 to XenApp 4.5 upgrades and now again after installing HRP05 for XenApp 4.5
The problem is due to Java requirements. Pressing the YES to the error message will give you more of a clue.

XenApp 4.0 Resolution
The CMC for PS4 appears to be hardcoded to look for key
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4\JavaHome

Put this old entry back but point the Java Home key to location of the currently installed java (eg. C:\Program Files\Java\jre1.5.0_09)

This fix is discussed on older version of the CMC that had the same type of problem in article CTX102338

XenApp 4.5 HRP05 Resolution
After HRP05 upgrade the newer CMC with stupid name requires at least Java 6. Installing this corrects the launch problem.

Web Interface Single Signon

2010-01-27T16:15:00.003Z

If you want single sign on for web interface where the users AD credentials are pushed through to the web interface page then you need to install the full version of the Client and set the following registry keys on your clients

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials]
"SSOnUserSetting"="true"
"EnableSSOnThruICAFile"="true"
"UseLocalUserAndPassword"="true"
"SSOnCredentialType"="Any,NT,NDS"

Support GUI HTA

2010-01-26T16:16:00.004Z

I wrote this support GUI for my employer. It allows 1st line support to perform a number of quick support actions from a simple GUI Interface. The code is HTA so HTML and VB Script together.

We use a hybrid profile system so the GUI allows the deletion of portions of the profile at the click of a button. (Eg. Delete Printer settings, Delete IE settings)

The program also records it own useage so that trends spotting can be performed.

The code is fairly specific to my current environment so will be of limited use to others , however some of the code may be handy so im posting the whole thing.

Screenshot

SupportGUI2.hta

XenServer Build from USB Stick

2010-01-25T14:44:00.001Z

I saw this interesting post in the citrix blogs , a guide to installing XenServer via a bootable USB stick. I plan to use this method to update my XenServer from v4 to v5 very soon as my Little shuttle XPC has no CD drive. I will post back if i have any problems with the method detailed in this link

http://community.citrix.com/display/ocb/2010/01/17/Install+XenServer+from+USB+Drive

64 Bit Terminal Server Shadow Key

2010-01-05T09:40:00.002Z

64 Bit windows has a 64 bit area for the shadow keys.

HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software

This area works in the same way the old 32 bit versions does. Eg. When in Change User \Install mode HKCU registry key changes are written to this area.

I only noticed a 64 bit version after a small drama where users reported an admin account name in their MS Word username field.
Investigation showed that an admin user had launched MS Word while building a server. The Server for reasons still unclear was still in install mode (deployment failure possibly) and as such the Admins account Name went into the shadow key. When the server went live new users picked up the Admins account name in their Word Username field.

HTA Displaying a ADO Security Warning Message

2009-12-30T10:35:00.004Z

Ive been writing a HTA recently to act as a support GUI for my employer.
I will post all its code in another blog once its completed.

I had an annoying pop up message which was slowing down my testing.

ADO Security Warning
This website uses a data provider that may be unsafe. If you trust the website, Click OK, Otherwise click Cancel

This occured because i was running the HTA from a network drive,the message did not display if i ran the HTA locally on my PC.

The following Internet Explorer restriction is causing the pop up message

Miscellaneous: Access data sources across domains

This security popup can be prevented by setting the following registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1

Change 1406 to value 0 - To Prevent the message

Note : A Great article for details on IE Explorer Security Zone settings in the registry
is the MS Article http://support.microsoft.com/kb/182569

Determine Cirix Lience Server Version

2009-12-25T11:19:00.002Z

The Citrix Licence console (well webpage really) does not seem to tell you what version it is.
If you need to check the version look in the following registry key to find out

HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\LicenseServer\Install

Trusted Sites not working in GPO Setting Internet Explorer Maintenance

2009-12-23T09:04:00.002Z

I had a problem with setting trusted and restricted web sites using the GPO setting under Internet Explorer Maintenance.

I was adding sites to the IE trusted zones but the policy setting failed to take effect.

Resolution
If the GPO setting "Site to Zone Assignment" is used it can prevent settings in Internet explorer maintenance taking effect (see MS Articles 919748 & 918915)

The site to Zone assignment can be set in both user and computer config area.
Note : Computer config has a setting to ignore User settings (a gotcha)

Citrix Logoff Sessions Tool

2009-12-14T14:39:00.002Z

Another tool I came across today which looks very handy is the "Citrix Logoff tool"
This single EXE needs to be run on a XenApp server and then performs a search of the farm
for all the sessions open by a user. You can then select to to perform the following actions
on that users session

Logoff
Disconnect
Processes
Send Message

This is the same function that can be performed from within the AMC (Access Management Console) but saves a bit of the hassle and also saves a few clicks as the AMC search for me always seems to forget what to search and you have to set it back to Presentation Server every time.

Download the tool from ctx121653

Citrix Quick Launch

2009-12-14T14:08:00.002Z

Citrix has released a standalone Quick Launcher executable.

This can perform a direct ICA connection to a server like the "Quick Connect" box in the old program neighbourhood. It also allows connections to published applications to be made.

The reason for this release is that PN has been removed from the newer client installs and this feature was very handy for admins who need to quickly connect to a server with ICA.

The tool and full details are available on
http://support.citrix.com/article/ctx122536

Screenshot

MFCOM To List Servers Silo

2009-12-07T09:35:00.003Z

A collague asked me for a script to list all the servers and their assigned silo into a text file so he can put the information into a change control.

Here's the script.

StrOutputfilename = "server_silo.txt"
Set fso = CreateObject("Scripting.FileSystemObject")
Set Output_File = fso.CreateTextFile(stroutputFileName, True)

Set farm=CreateObject("MetaframeCOM.MetaframeFarm")
farm.initialize 1

for each server in farm.servers
Output_File.Writeline server.Servername & " " & server.ParentFolderDN
Next

Outputfile.Close

Citrix ICA Client Hot Keys and Keyboard Mapping

2009-12-01T14:25:00.004Z

Client Side Citrix hotkeys are controlled by the contents of the file APPSRV.INI
Full information of the syntax of the file is contained in article CTX331178

Some Handy hot keys are :

SHIFT + F2 = Seamless on/off
SHIFT + F3 = Disconnect
CTRL + F1 = Windows Security
CTRL + F3 = Task Manager

Inside the appsrv.ini you should see entries similar to the default set below.

Hotkey1Char=F1
Hotkey1Shift=Shift
Hotkey2Char=F3
Hotkey2Shift=Shift
Hotkey3Char=F2
Hotkey3Shift=Shift
Hotkey4Char=F1
Hotkey4Shift=Ctrl
Hotkey5Char=F2
Hotkey5Shift=Ctrl
Hotkey6Char=F2
Hotkey6Shift=Alt
Hotkey7Char=plus
Hotkey7Shift=Alt
Hotkey8Char=minus
Hotkey8Shift=Alt
Hotkey9Char=F3
HotKey9Shift=Ctrl

The fields on the Hotkeys tab are

• 1 The Task List hotkey displays the Windows Task List for the local Windows desktop on the client computer. The default value for the Task List hotkey is SHIFT+F1. You can also use CTRL+ESC to display the Windows Task List on the client computer if you are not using SHIFT+F1 as an ICA Win16 Client hotkey.

• 2 The Close Remote Application hotkey disconnects from the Citrix server and exits the ICA Win16 Client. Using this hotkey will either leave the associated application in a disconnected state on the Citrix server or exit the application on the Citrix server depending on how the application is configured. The default value for the Close Remote Application hotkey is SHIFT+F3.

• 3 The Toggle Title Bar hotkey causes the Citrix ICA Client window to display or hide its Windows title bar. The default value for the Toggle Title Bar hotkey is SHIFT+F2.

• 4 The CTRL-ALT-DEL hotkey sends the standard Windows hotkey CTRL+ALT+DEL to the Citrix server running the remote application. This hotkey displays the Windows NT Security desktop in the ICA session. The default value for the CTRL-ALT-DEL hotkey is CTRL+F1.

• 5 The CTRL-ESC hotkey sends the standard Windows hotkey CTRL+ESC to the Citrix server running the remote application. When using this hotkey during an ICA session on a WinFrame server, the remote Task List appears. If the ICA session is running on a MetaFrame server, the remote Windows NT Start menu appears. The default value for the CTRL-ESC hotkey is CTRL+F2.

• 6 The ALT-ESC hotkey sends the standard Windows hotkey ALT+ESC to the Citrix server running the remote application. This hotkey is used to cycle the focus through maximized and minimized windows of programs that have been opened in an ICA session. The default value for the ALT-ESC hotkey is ALT+F2.

• 7 The ALT-TAB hotkey sends the standard Windows hotkey ALT+TAB to the Citrix server running the remote application. Use this hotkey to cycle through applications that have been opened in the ICA session. A popup box appears and displays the programs as you cycle through them. The selected application receives keyboard and mouse focus. The default value for the ALT-TAB hotkey is ALT+PLUS.

• 8 The ALT-BACKTAB hotkey sends the standard Windows hotkey ALT+SHIFT+TAB to the Citrix server running the remote application. Like the ALT+TAB hotkey, this key sequence cycles through applications that have been opened in the ICA session but in the opposite direction. The chosen application receives keyboard and mouse focus. The default value for the ALT-BACKTAB hotkey is ALT+MINUS.

• 9 The CTRL-SHIFT-ESC hotkey sends the standard Windows hotkey CTRL+SHIFT+ESC to the MetaFrame server running the remote application. (This hotkey is not used by ICA sessions on WinFrame servers.) This hotkey displays the Windows NT Task Manager in the ICA session. The default value for the CTRL-SHIFT-ESC hotkey is CTRL+F3.

• 10 The CTRL-F5 hotkey Toggles the zero latency mode between On and Off. Use this hotkey to either enable or disable the zero latency mode.

Protocol Driver Error on application launch

2009-12-01T11:39:00.005Z

We had reports that some users were receiving the following error message

Cannot connect to Citrix XenApp Server
Protocol Driver Error

A scan of the number of connection on all servers showed an suspicious server with no connections. Closer inspection of this server showed it had no ICA listener displaying in the AMC console. Also telnet on port 1494 to the server failed. The event log of the server had a large number of the following messages

Event ID 118
Unable to connect to the CGP Tunnel destination (127.0.0.1:1494)

Solution
We simply restarted the server and it corrected the fault. If we needed to we were going to recreated the ICA listener which is detailed in the following Citrix Article CTX115152

Non Seamless applications on a per application basis

2009-12-01T10:14:00.003Z

A colleague came across this handy solution for delivering a non-seamless application to users.
Normally a user can choose to have non seamless applications via their web interface options but this effect all their applications. This solution allows a single problematic application to be delivered non seamless to users.

To set a single application to non-seamless edi the Default.ICA file on the web interface server.
(The following is for web Interface 4 thru 4.6 for older versions see the Citrix Article)

[ApplicationServers]
application=

Create a new line and add the following.

[Notepad]
TWIMode=Off

For full info see the following Citrix Article CTX116357

Session Reliability Limit of 150 users per server

2009-11-26T16:31:00.002Z

XenApp has a limitation of 150 sessions per server when session reliability is enabled.
This is applicable on XenApp 4.5 (32 and 64 Bit) and XenApp 5.0 (32 Bit)

This default maximum can be overridden with the following registry key

HKLM\Software\Citrix\XTEConfig

Add MaxThreads (REG_DWORD) with the increased value