ThinWorld Citrix Knowledgebase

Web Interface showing WFCRUN32 /? when clicking Icon in Firefox

2010-04-26T11:05:00.002+01:00

I had a problem where Web interface could not be used with the mozilla Firefox browser.
When the application icon was clicked the WFCRUN32 help screen displayed instead of launching the application.

This problem occured for me on Web Interface 5.5 and Firefox 3.6.2 and the ICA client v11 and v12.

To correct this i needed to change the file type associations inside firefox to
Use Citrix (default) instead of ICA Client (inside firefox)

This option is under Tools, Options, Applications Tab inside firefox.

Web Interface SAVE AS ICA File

2010-04-26T10:10:00.001+01:00

With Citrix Web Interface v5 or newer the ability to right click icons in web interface and select to SAVE AS has been removed.

This feature was handy as it saved an ICA file showing the connection information. This was great for troubleshooting Web Interface problems.

The customization in the following citrix Article describes how to re-enable this ability.
http://support.citrix.com/article/CTX124414

An Error (607) occured during the action Print

2010-04-23T16:32:00.000+01:00

We had a problem with visio producing this error message when users print to A3 Paper.

this is a known issue when using Visio and the Citrix UPD. The resolution is to install SP3 for the visio product.

Microsoft Office Viewer File Associations

2010-04-20T11:30:00.002+01:00

The following details the per user (HKCU) registry keys that manage the file associations for various office viewer products.

Setting these registry keys at a per User basis allows the delivery of office viewer software to certain users within the environment (eg. users with no licence)

Microsoft Word Viewer File Associations

HKCU\software\Classes\.dot\","Wordview.document.8","REG_SZ
HKCU\software\Classes\.dot\Content Type","application/vnd.openxmlformats-officedocument.wordprocessingml.document","REG_SZ
HKCU\software\Classes\.dot\PerceivedType","Document","REG_SZ
HKCU\software\Classes\.docx\","Wordview.document.8","REG_SZ
HKCU\software\Classes\.docx\OpenWithList","Wordview.exe","REG_SZ
HKCU\software\Classes\.doc\","Wordview.document.8","REG_SZ
HKCU\software\Classes\.doc\OpenWithList","wordview.exe","REG_SZ
HKCU\software\Classes\.rtf\","Wordview.RTF.8","REG_SZ
HKCU\software\Classes\.rtf\Content Type","application/msword","REG_SZ
HKCU\software\Classes\.rtf\OpenWithList","wordview.exe","REG_SZ
HKCU\software\Classes\.rtf\OpenWithList\ShellNew\Data","{\rtf1}","REG_SZ
HKCU\software\Classes\.docm\","Wordview.document.8","REG_SZ
HKCU\software\Classes\.docm\Content Type","application/vnd.ms-word.document.macroEnabled.12","REG_SZ
HKCU\software\Classes\.docm\PerceivedType","Document","REG_SZ"

Microsoft Excel Viewer File Associations

"HKCU\software\Classes\.xls\","ExcelViewer.Sheet.8","REG_SZ"
"HKCU\software\Classes\.xls\","ExcelViewer.Sheet.8","REG_SZ"

Microsoft PowerPoint Viewer File Associations

"HKCU\software\Classes\.ppt\","PowerPointViewer.Show.12","REG_SZ"
"HKCU\software\Classes\.pptm\","PowerPointViewer.ShowMacroEnabled.12","REG_SZ"
"HKCU\software\Classes\.pps\","PowerPointViewer.SlideShow.12","REG_SZ"
"HKCU\software\Classes\.ppsx\","PowerPointViewer.SlideShow.12","REG_SZ"
"HKCU\software\Classes\.ppsm\","PowerPointViewer.SlideShowMacroEnabled.12","REG_SZ"
"HKCU\software\Microsoft\PowerPoint Viewer\12.0\EULAAccepted","1","REG_DWORD"

Microsoft Visio Viewer File Associations

"HKCU\software\Classes\.vsd\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vsd\Content Type","application/vnd.ms-visio.viewer","REG_SZ"
"HKCU\software\Classes\.vss\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vss\Content Type","application/vnd.ms-visio.viewer","REG_SZ"
"HKCU\software\Classes\.vst\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vst\Content Type","application/vnd.ms-visio.viewer","REG_SZ"
"HKCU\software\Classes\.vdx\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vdx\Content Type","application/vnd.ms-visio.viewer","REG_SZ"
"HKCU\software\Classes\.vsx\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vsx\Content Type","application/vnd.ms-visio.viewer","REG_SZ"
"HKCU\software\Classes\.vtx\","VisioViewer.Viewer","REG_SZ"
"HKCU\software\Classes\.vtx\Content Type","application/vnd.ms-visio.viewer","REG_SZ"

HTA - A pretty looking HTA to Edit Text files

2010-03-24T16:47:00.002Z

This is a smart looking HTA template that can be used for most anything.
The one i post here is for editing text files. I used this as part of a solution to control
software with device licences. The tool manages the list of device names that are allowed
to access software like Word and Excel.

Screenshot

HTA File :
ManageLics.hta

Appsense Allow access to Network Drive executables

2010-03-23T13:51:00.002Z

When using Appsense Application Manager to lockdown your environment you may well discover as i have that there is alot of executable code contained on network file shares.

The default Appsense Application Manager config only allows code to be executed from the fixed disks on your device. (eg. C:\ Drive)

To get round this blocking you can either add all the network paths to the "accessible item" list or do as i did and wildcard network shares with the rule \\*

NOTE : Best practice would be to get the code moved to a fixed disk on the server to improve performance. This solution would also prevent appsense from blocking it be default. In my case re-engineering the applications was not in scope of the task.

Find Excel Links Macro

2010-03-17T10:33:00.003Z

This Excel Macro searches a specified path (eg: S:\Shared Documents)
for any Excel spreadsheets that contain links within them to other excel spreadsheets.

This is very handy for identifying spreadsheets that may be impacted by a move of the data share. Hardcoded path locations in spreadsheets may obviously stop working if data is moved to a new location.

Simply open the attatched spreadsheet in Microsoft Excel and follow the oncscreen form.

ScanLinks.xls

VBS Ping check script

2010-03-11T14:28:00.002Z

This simple VBS allow you to check a device is up and running (with a ping check) before it runs code against the device.

This method means your script will not hang running against machines that are powered off.

PINGFlag = Not CBool(ObjShell.run("ping -n 1 " & StrUserID(1),0,True))
If PINGFlag = True Then
' Machine is up and running
Else
' Machine has not responded
End If

Audit Users Manually mapped Drive mappings

2010-03-11T11:40:00.002Z

I needed to create a script to check to see if users had manually mapped network drives to a certain data share in order to perform a successful migration of the share to a new server.

Our central logon script would be easy to amend but obviously manually added mappings would not be effected by that. In our environment it is possible users have manually added a network drive on their local client device (workstation or laptop) or within their Citrix Xenapp sessions.

The drive mapping in citrix were easy to obtain as we have a hybrid profile solution and the drive mappings show as plain text files within their profile.

For Client Devices this task proved much more difficult and the scripts detailed here require scriping knowledge and some management. Also the data returned is reliant on a number of factors , most notable it can only check logged on users. (trying to rip apart NTUSER.DAT files proved fruitless the file is often locked and did not always seems to show the keys for reasons unknown)

Client Device check Script - You Feed the script a list of usernames and their workstation names and in a comma seperated file called workstation.csv
It will then output back to you if any of those users have the drive mapping you need to change. You can amend this script to FIND and REPLACE if required as well. The one posted here is an audit only to identify users who have the mapping.

(eg. User1,Workstation7
User2,Workstation10)

You must retrieve this in any manner you can, I had a list from SMS and also a report from edgesight showing me users and which workstations they had logged onto in the last 30 days.

Client Device check Script.VBS

On error resume Next

Set objShell = CreateObject("WScript.Shell")
Set objFSO = CreateObject("Scripting.fileSystemObject")

Const HKU = &H80000003
Dim StrArray(1000)
Dim StrDog, StrSplit, StrSID, StrText, StrText2, StrUserID, StrreplaceDrive

StrReplaceDrive = "\servername\sharename"

' Get AD group name and membership
StrGroup = Inputbox("Enter AD Group Name ")
Return = objShell.run ("%comspec% /c h:\utils\DSGET group " & CHR(34) & "cn=" & StrGroup & ",OU=Data Access,OU=Groups,DC=thinworld,DC=netUK" & CHR(34) & " -members -expand | h:\utils\dsget user -samid -sid >members.txt" ,0,True)

Set objInputFile = objFSO.OpenTextFile("workstations.csv",1,False,-1)
Set objOutputfile = objFSO.CreateTextFile("Output.txt",2,True)

' Read the User IDs from file and then attach the SID on their PC to see the Drive mappings
x=1
Do While Not objinputfile.AtEndOfStream
Strtext = Ucase(objinputfile.ReadLine)
StrUSerID = Split(StrText,",")
GETSID(Struserid(0))

' Check the machine is available before trying to read the registry
PINGFlag = Not CBool(ObjShell.run("ping -n 1 " & StrUserID(1),0,True))
If PINGFlag = True Then
Call READREG(StrUserID(0),StrUserID(1),StrSID(1))
Else
objOutputfile.WriteLine StrUserID(1) & CHR(9) & "Computer Not Online"
End If

x = x + 1
Loop

objOutputfile.Close

' Display the output file
Return = objShell.run ("%comspec% /c notepad.exe output.txt",0,False)
' End the Script
Wscript.Quit

' Get the users SID Name
Sub GETSID(StrUserID)
Set objInputFile2 = objFSO.OpenTextFile("members.txt",1)
Do While Not objinputfile2.AtEndOfStream
Strtext2 = objinputfile2.ReadLine
Pos = Instr(Strtext2,StrUserID)
If Pos > 0 Then
StrSID = Split(Strtext2,"S-1-5")
End If
Loop
objInputFile2.Close
End Sub

' Search the users registry for the drive mapping
Function READREG(StrUserID,Strcomputer,StrSID)
Set objReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")
Set WshSysEnv = ObjShell.Environment("PROCESS")
StrSID = Trim(StrSID)
strKeyPath = "S-1-5" & StrSID & "\Network"
strKeyName = "RemotePath"
objReg.EnumKey HKU , strKeyPath, arrSubKeys

For Each subkey In arrSubKeys
objReg.GetSTRINGValue HKU ,strKeyPath & "\" & subkey,strKeyName,szValue
intLength = Len(szValue)-1
strUncPath = Right(szValue, intLength)
If Ucase(StrUNCPath) = Ucase(StrreplaceDrive) Then
objOutputfile.WriteLine Subkey & " Drive Mapped to " & StrUNCPath & " By User : " & StrUserID & " On Client : " & Strcomputer
End If
Next
End Function

Registry .REG backup Script

2010-03-02T13:58:00.002Z

This Script reads in a .REG file and makes a backup of the registry area that the .REG will change when imported.

This is handy when you are given a .REG file and told to import it. The script will create backup .REG files for you to restore the machine to original values should the import cause issues.

Its not the prettiest of things and will create multiple backup REG files if there are multiple key paths. But you can highlight all the backup reg keys and import in the event of a restore.

'
' Backup Registry before importing a REG file
'
' This script is designed to be run before importing a .REG file
' It will export the current registry key values into a .REG file
' in order to make a restore to the original keys quick and simple.
'
' Input it a .REG file
' It will output to a folder of the same name a .REG file for each required Key
'

On error resume next

Set objFSO = CreateObject("Scripting.fileSystemObject")
Set WshShell = CreateObject("WScript.Shell")
Set objInputFile = objFSO.OpenTextFile(StrScript,1,False,0)

StrFolder = Wshshell.CurrentDirectory
StrScript = "tweak-bundle1.reg"
dim StrKey(1000)

StrPath = StrFolder & "\" & Left(StrScript,Len(StrScript)-4)

objFSO.CreateFolder (StrPath)

i=0
Do Until objInputFile.AtEndOfStream
i = i+1
strData = objInputFile.ReadLine
If Instr(Strdata,"[") > 0 Then
StrData = Left(StrData,Len(Strdata)-1)
StrData = Right(Strdata,Len(Strdata)-1)
StrKey(i) = Strdata
StrCommand = "REGEDIT /E " & CHR(34) & StrPath & "\" & i & ".reg" & CHR(34) & " " & CHR(34) & Strkey(i) & CHR(34)
Wshshell.Run Strcommand
End If
Loop

Appsense DLL rebase problem with Shdocvw.dll

2010-02-24T10:12:00.003Z

We had 2 little problems in our environment.

MS Word 2002 Help did not work as expected.
Services.msc did not display extended view

Both of these problem were due to Appsense Performance Manager v7 performing DLL rebasing on Shdocvw.dll. Appsense does this as part of its memory optimization feature.

We set Appsense Performance Manager to exclude this DLL for memory optimization and the problems were resolved.

SQL script to read application useage from Edgesight Database

2010-02-23T16:29:00.004Z

I had a requirement to extract some data from Edgesight. The standard reports in Edgesight could not provide the data i wanted so a colleague wrote me this SQL script that extracts the info straight out the database.

My requirement was to see all launches of a particular EXE , the user and their workstation ID

eg. (winword.exe , User56, Workstation1001)

This SQL script did the trick for winword instances run in the last 2 days.

select i.filename, convert(char(10),t1.dtperiod,120), c.client_name, p.account_name, count(*)
from usage t1
join ctrx_session c on (c.sessid = t1.sessid)
join image i on (i.imid = t1.imid)
join principal p on (p.prid = t1.prid)
where DATEDIFF(day, t1.dtperiod, GETDATE()) < 2
and filename like '%winword%'
group by i.filename, convert(char(10),t1.dtperiod,120), c.client_name, p.account_name

Citrix Access Gateway VM on XenServer

2010-02-23T14:17:00.002Z

To Install Citrix Access Gateway 4.6.2 onto a Citrix XenServer VM use the following procedure.

Download the install ISO from the citrix download centre
Create a New VM (other install media, 256MB RAM, 1vCPU, 12GB , 2 NIC Cards)
Boot the VM from the ISO Image and it will install the software automatically
Once install is complete unmount the ISO and reboot
From a management PC set the Ip address of the PC to 10.20.30.x 255.255.255.0
Connect from the Management PC to the CAG on 10.20.30.40 USER: root PASS:rootadmin
Click to change the admin password
Click to download the Access Gateway Admin Tool. Install this on your management PC.

From the management console you can change the CAG Ip address and perform all your neccessary configuration.

Thanks to xenappblog.com for this information.

MFCOM Script to detect CAG Access

2010-02-09T09:43:00.002Z

I wanted a script to detect if a users connection was made through CAG (Citrix Access Gateway)

I required this as i wanted to save users default printer only when the connection was made in the office. This is to prevent users saving their home printer information into their profiles.

We use a hybrid profile solution managed by Appsense Environment Manager. Using the following script as a custom rule in Appsense we could tell Appsense to NOT SAVE the default printer for any connections made through the CAG.

Script
'Name of Filter scan expected to pass
ExpectedFilter = "xxx_CWI_Policy"

'Get Server Name
Set objNTInfo = CreateObject("WinNTSystemInfo")
ServerName = lcase(objNTInfo.ComputerName)

Result = 0

'Create MetaFrame Session Object
Set MFSession = Createobject("MetaFrameCOM.MetaFrameSession")

'Initialize the session object with our data
MFSession.Initialize 6, ServerName ,"",-1

'Iterate through the session filters for this session

For Each x in MFSession.SmartAccessFilters
msgbox x
' return true if our filter is found
If x = ExpectedFilter Then
Result = 1
End If
Next
'Return result of script
If Result = 0 Then
'Rule will pass
WScript.Quit 0
Else
'Rule will fail
WScript.Quit 1
End If

Publishing a HTA file in XenApp (citrix)

2010-02-02T12:31:00.003Z

If you wish to directly publish a HTA application in XenApp (Citrix) Then you need to point at the MSHTA.EXE file and pass it the HTA name. Directly publishing the HTA does not work.

eg.

"C:\windows\system32\MSHTA.exe" "MyCode.hta"

XenApp Citrix Copy and Paste Problems

2010-01-28T16:58:00.001Z

Ive often had problems with copy and Paste between my ICA delivered applications and also my RDP connections to server desktops. Users report the same issue as well and a logoff and log back on normally sorts it all out. Ive also tried the Repair chain ulities available but with no luck. I came across this registry tweak for v10 or newer ICA clients that may help. Ive just added it to my machine and will monitor to see if i see an improvement.

See the following article for full details
http://support.citrix.com/article/ctx112434

Default Web Browser Registry Keys

2010-01-28T14:26:00.003Z

To change the Default Web Browser setting for a machine via the registry you need to modify the following registry key areas. I got these keys from a RegMon on my Windows XP workstation but it should be the same for Windows 2003 Server.

HKLM\Software\Classes\HTTPS\Shell\Open
HKLM\Software\Classes\HTTP\Shell
HKLM\Software\Classes\FTP
HKLM\Software\Classes\HTTP\.XHTML
HKLM\Software\Classes\HTTP\.XHT
HKLM\Software\Classes\HTTP\.SHTML
HKLM\Software\Classes\HTTP\.HTML
HKLM\Software\Classes\HTTP\.HTM

CMC or XenApp Advanced Configuration Loader fails to Launch after Upgrade

2010-01-28T09:50:00.003Z

After applying an upgrade or patch to your XenApp servers the CMC or XenApp Advanced Configuration Loader fails to start with the error

The Presentation Server Console could not be started because there was an error creating the process. Would you like the details.

Ive seen this problem on XenApp 4.0 to XenApp 4.5 upgrades and now again after installing HRP05 for XenApp 4.5
The problem is due to Java requirements. Pressing the YES to the error message will give you more of a clue.

XenApp 4.0 Resolution
The CMC for PS4 appears to be hardcoded to look for key
HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.4\JavaHome

Put this old entry back but point the Java Home key to location of the currently installed java (eg. C:\Program Files\Java\jre1.5.0_09)

This fix is discussed on older version of the CMC that had the same type of problem in article CTX102338

XenApp 4.5 HRP05 Resolution
After HRP05 upgrade the newer CMC with stupid name requires at least Java 6. Installing this corrects the launch problem.

Web Interface Single Signon

2010-01-27T16:15:00.003Z

If you want single sign on for web interface where the users AD credentials are pushed through to the web interface page then you need to install the full version of the Client and set the following registry keys on your clients

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials]
"SSOnUserSetting"="true"
"EnableSSOnThruICAFile"="true"
"UseLocalUserAndPassword"="true"
"SSOnCredentialType"="Any,NT,NDS"

Support GUI HTA

2010-01-26T16:16:00.004Z

I wrote this support GUI for my employer. It allows 1st line support to perform a number of quick support actions from a simple GUI Interface. The code is HTA so HTML and VB Script together.

We use a hybrid profile system so the GUI allows the deletion of portions of the profile at the click of a button. (Eg. Delete Printer settings, Delete IE settings)

The program also records it own useage so that trends spotting can be performed.

The code is fairly specific to my current environment so will be of limited use to others , however some of the code may be handy so im posting the whole thing.

Screenshot

SupportGUI2.hta

XenServer Build from USB Stick

2010-01-25T14:44:00.001Z

I saw this interesting post in the citrix blogs , a guide to installing XenServer via a bootable USB stick. I plan to use this method to update my XenServer from v4 to v5 very soon as my Little shuttle XPC has no CD drive. I will post back if i have any problems with the method detailed in this link

http://community.citrix.com/display/ocb/2010/01/17/Install+XenServer+from+USB+Drive

64 Bit Terminal Server Shadow Key

2010-01-05T09:40:00.002Z

64 Bit windows has a 64 bit area for the shadow keys.

HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software

This area works in the same way the old 32 bit versions does. Eg. When in Change User \Install mode HKCU registry key changes are written to this area.

I only noticed a 64 bit version after a small drama where users reported an admin account name in their MS Word username field.
Investigation showed that an admin user had launched MS Word while building a server. The Server for reasons still unclear was still in install mode (deployment failure possibly) and as such the Admins account Name went into the shadow key. When the server went live new users picked up the Admins account name in their Word Username field.

HTA Displaying a ADO Security Warning Message

2009-12-30T10:35:00.004Z

Ive been writing a HTA recently to act as a support GUI for my employer.
I will post all its code in another blog once its completed.

I had an annoying pop up message which was slowing down my testing.

ADO Security Warning
This website uses a data provider that may be unsafe. If you trust the website, Click OK, Otherwise click Cancel

This occured because i was running the HTA from a network drive,the message did not display if i ran the HTA locally on my PC.

The following Internet Explorer restriction is causing the pop up message

Miscellaneous: Access data sources across domains

This security popup can be prevented by setting the following registry key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1

Change 1406 to value 0 - To Prevent the message

Note : A Great article for details on IE Explorer Security Zone settings in the registry
is the MS Article http://support.microsoft.com/kb/182569

Determine Cirix Lience Server Version

2009-12-25T11:19:00.002Z

The Citrix Licence console (well webpage really) does not seem to tell you what version it is.
If you need to check the version look in the following registry key to find out

HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\LicenseServer\Install

Trusted Sites not working in GPO Setting Internet Explorer Maintenance

2009-12-23T09:04:00.002Z

I had a problem with setting trusted and restricted web sites using the GPO setting under Internet Explorer Maintenance.

I was adding sites to the IE trusted zones but the policy setting failed to take effect.

Resolution
If the GPO setting "Site to Zone Assignment" is used it can prevent settings in Internet explorer maintenance taking effect (see MS Articles 919748 & 918915)

The site to Zone assignment can be set in both user and computer config area.
Note : Computer config has a setting to ignore User settings (a gotcha)