1Y0-A03 Citrix Xendesktop 2.0 Enterprise Edition: Administration Study Guide
1Y0-A03 Citrix Xendesktop 2.0 Enterprise Edition: Administration Study Guide
com
Study Guide
Version 1.0
(December 11, 2008)
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. ii
This study guide was created by Citrixxperience.com. The following materials were used to create this study guide. All
are copyrighted by Citrix Systems: CTX-2201AI Citrix XenDesktop 2.0 Enterprise Edition: Administration, CTX-
1259AI Citrix XenApp for Windows 2003: Administration, 1Y0-A03 Exam Enablement Guide, Desktop Delivery
Controller 2.0 Administrator's Guide, Getting Started with Citrix XenDesktop 2.0, Citrix Knowledge Base Articles,
Using XenServer with Desktop Delivery Controller, Web Interface 5.0.1 Administrator's Guide, Citrix Provisioning
Server 5.0 Administrator's Guide, Citrix XenServer 4.1 Administrator's Guide, Citrix XenServer Platinum Edition
Getting Started Guide, Partner and Customer Toolkit XenDesktop 2.0 Implementation Guide, XenApp and XenServer
Implementation Guide, Citrix Application Streaming Guide for Citrix XenApp 5.0 and Citrix Presentation Server 4.5:
Administrator's Guide.
Along with the materials listed above, this study guide is meant to be used in preparation for the 1Y0-A03 Citrix
XenDesktop 2.0 Enterprise Edition: Administration exam. Also suggested for preparation are other books that relate to
the subjects and above all, personal experience with the products. Citrixxperience.com recommends further preparation
by using other 1Y0-A03 products found at www.Citrixxperience.com.
The license for this study guide is for one user only. It is a copyright of Citrixxperience.com and may not be reprinted,
copied, reproduced, distributed, republished, downloaded, displayed, posted or transmitted in any form or by any
means, including but not limited to electronic, mechanical, photocopying, recording, or other means, in full or in part,
without the prior express written permission of Citrixxperience.com.
Citrix, the Citrix logo, Citrix ICA, Citrix MetaFrame, Citrix MetaFrame XP, Citrix Nfuse, Citrix Extranet, Citrix
Program Neighborhood, Citrix WinFrame, and other Citrix product names referenced herein are registered trademarks
or trademarks of Citrix Systems, Inc. in the United States and other jurisdictions. All other product names, company
names, marks, logos, and symbols are trademarks of their respective owners.
Citrixxperience.comisthemosttrustedwebsiteforCitrixcertificationpreparationproducts.
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. iii
TableofContents
Subject Page
DefiningCitrixXenDesktop2.0EnterpriseEditionArchitecture 1
IdentifyingPreInstallConsiderations 7
InstallingCitrixXenDesktop2.0EnterpriseEdition 9
BuildingvDisks 15
ConfiguringCitrixDesktopDeliveryControllerforXenDesktop2.0EnterpriseEdition 19
DeliveringDesktops 25
ManagingaXenDesktop2.0EnterpriseEditionImplementation 26
TroubleshootingDesktopImagesforVirtualizedDelivery 27
DeliveringandManagingApplications 30
Citrixxperience.comisthemosttrustedwebsiteforCitrixcertificationpreparationproducts.
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 1
DefiningCitrixXenDesktop2.0EnterpriseEditionArchitecture
ConsolesandUtilities
MostXenDesktopmanagementtasksareperformedfromtheAccessManagement
Console.
TheDesktopDeliveryConsoleenablessessionmanagementtaskstobeperformed.
ConfiguringofprintingandpoliciesisperformedinthePresentationServerConsole.
XenAppAdvancedConfigurationToolisthenewnameforthePresentationServer
ConsoleinXenApp5.
XenCenterisusedinXenServermanagement,includingthecreationandmanagement
ofresourcepools.
TheProvisioningServerConsoleisusedtomanagecomponentswithinaProvisioning
Serverfarm,includingvDisks.
TheXenDesktopSetupWizardautomatespartsofthecreation,deliveryand
maintenanceoflargeinstallationsofvirtualdesktops.
ThiswizardintegratesCitrixcomponentssothatsystemsadministratorscanquickly
createmultipledesktops.
EndpointDevices
ACitrixReadydesktopappliance:
Isoptimizedforusewithavirtualdesktop.
Providesusersaccesstoasinglevirtualdesktop.
RunsonWindowsXPEmbedded,WindowsCE,Linuxorcustomoperatingsystemslike
WyseThinOS.
ComespreinstalledwiththeDesktopReceiverEmbeddedsoftwaretoaccessavirtual
desktop.
Arepurposedpersonalcomputer:
Providesusersaccesstoasinglevirtualdesktop.
Doesnotrequireaccesstothelocaldesktop.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 2
HastohavetheDesktopReceiverEmbeddedsoftwareinstalledonit.
Isjoinedtoadomain.
RunsonWindowsXPorWindowsXPeoperatingsystems.
Afatclient:
RunsonWindowsVista,WindowsXPProfessional,WindowsServer2003,Windows
2000Professional,Linux,UNIXorMacintoshOSXoperatingsystems.
HastohavetheDesktopReceiversoftwareinstalledonitordownloadedandinstalled
fromawebsite.
Providesusersaccesstothelocaldesktopandprovidesusersaccessandcontrolover
oneormorevirtualdesktops.
Aremotesystem:
ProvidesuserswithaccesstotheirvirtualdesktopsfromoutsideoftheLANthrough
AccessGateway.
RunsonWindowsVista,WindowsXPProfessional,WindowsServer2003,Windows
2000Professional,Linux,UNIXorMacintoshOSXoperatingsystems.
Usesafatclientdevice.
TechnologiesusedwithXenDesktop
XenDesktopusesSpeedScreento:
Ensurethatscreenupdatesaresmooth.
Mouseandkeyboardmovementsareresponsive.
Multimediahasexcellentperformanceoveranynetwork.
TheuniversalprintdriverallowsXenDesktoptodeliveraconsistentandfastprintingexperience
foruserswithoutrequiringspecificlocalprintdrivers.
XenMotionallowsvirtualdesktopsfromoneXenServertoanotherforhighavailabilityand
simplifiedservermaintenance.
SecureremoteaccessisprovidedbyCitrixAccessGatewaytechnologytosecure
communicationsbetweentheclientandtheXenDesktopenvironment.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 3
Sessionreliabilityallowsuserstoresumetheirworkfromwheretheyleftoffafteraconnection
islostandthenreestablished.
Sessionreliabilityusesport2598.
XenDesktopComponents
TheDesktopDeliveryController:
Brokersconnectionrequestsfromendpointdevices.
Assignsadesktoptoeachuserondemand.
Manageslicensing.
Managesthedatastore.
Thedatastorecontainsthepersistentconfigurationinformationforthefarm.
TheVirtualDesktopAgent:
Runsoneachdesktopthatwillbedeliveredtousers.
ProvidestheICAservicethatmanagescommunicationbetweenausersdesktopand
endpointdevice.
TheDesktopReceiverrunsontheendpointdeviceanddisplaysausersdesktop.
TheVirtualMachineInfrastructurecreatesthefoundationfordeliveringvirtualdesktopsand
offersadvancedmanagementfeatures.
ApplicationdeliveryisprovidedbyXenAppforVirtualDesktops.
XenAppforVirtualDesktopsdeliversapplicationstovirtualdesktopsondemand.
ProvisioningServerforDesktopsisusedtostreamasingledesktopimage(vDisk)tomultiple
virtualdesktopshostedintheVMinfrastructure.
DesktopDeliveryProcess
1.TheendpointdevicesubmitsusercredentialstoaWebInterfacesitethroughAccess
Gateway.
2.TheWebInterfacepassestheusercredentialstotheDesktopDeliveryController.
3.TheDesktopDeliveryControllerverifiesuserauthorization.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 4
4.TheDesktopDeliveryControllerqueriesthedatastorefortheusersassigneddesktopgroups.
5.TheDesktopDeliveryControllerqueriestheVMInfrastructureaboutvirtualdesktopstatus.
6.ProvisioningServerforDesktopsbindsavDisktothevirtualdesktop.
7.TheDesktopDeliveryControlleridentifieswhichdesktophasbeenassignedforthissession.
8.WebInterfacesendsan.ICAfiletotheDesktopReceiver.
9.AnICAconnectionisestablished.
10.TheVirtualDesktopAgentverifiesthelicensefilewiththeDesktopDeliveryController.
11.TheDesktopDeliverControllerqueriesthelicenseserver.
12.TheDesktopDeliveryControllersendspoliciestothevirtualdesktop.
13.Thevirtualdesktoprequestsprofiledata.
14.Thevirtualdesktopisdisplayedtotheuser.
15.Applicationsaredeliveredondemand.
UserExperience
UserswhowillonlyneedaccesstoasinglevirtualdesktopandareonthelocalLANconnecting
withadesktopappliance:
Turnontheirlocalappliance>WaitfortheWelcomescreen>Entertheircredentials
andlogon>Waitforthedesktoptoappear.
Usersconnecttoasingle,fullscreenonlymodedesktopbythefollowingprocess:
TurnontheirlocalmachineandconnecttotheXenDesktopServicessite>Waitforthe
Windowslogonscreen>Entertheirdomaincredentials>Waitforthedesktopto
appear.
UsersthathavethechoicetoconnecttomorethanonedesktopfrominsideofWindowsona
LAN:
AftertheyhavealreadyloggedonWindows,theyopenawebbrowserandbrowsetoa
XenDesktopwebsite>WhentheWelcomescreenappears,theytypeintheir
credentialsandlogin>TheywillseeaDesktopstabandhavetheirchoiceofdesktops
tochoosefrom>ThefirsttimetheyconnectitdownloadstheDesktopToolbar>They
choosetheirdesktopanditappearsintheDesktopToolbar>Userscantheninteract
withthedesktopbyusingtheDesktopToolbar.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 5
RemoteusersrunningWindowstoconnecttotheirdesktopsviaXenDesktop:
TheywillalreadybeloggedintoWindows>Openawebbrowserandbrowsetothe
XenDesktopwebsitethatwassecuredbyAccessGateway>Logontothesite>Selecta
desktopfromtheDesktopstab>ClickConnectandthedesktopwillappearinthe
DesktopToolbar>UsetheDesktopToolbartointeractwiththedesktop.
DesktopGroups
DesktopgroupsconsistofusersanddesktopsassignedthroughActiveDirectory.
Thedatastorecontainsthedesktopgroupstowhicheachuserisassigned.
Assigneddesktopgroupsareforusersthat:
Needtoneedtoinstallandmanageapplicationsontheirdesktops.
or
Needtostoredatanotcoveredbyprofilemanagement.
Pooleddesktopgroups:
Areforusersthatdonotneedtoinstallapplicationsorstoredataontheirdesktop.
Areallocatedtousersonapersession,firstcome,firstservedbasis.
Pooleddesktopscantakeadvantageofvirtualdesktopprovisioning,whichstreamsa
singleimagetomultipledesktops.
XenAppforVirtualDesktopsandenduserprofilesareusedtopersonalizethe
applications,settingsanddataforeachuser.
Therearetwotypesofpooleddesktopgroups:
Virtualdesktopsinpreassignedgroupsarepermanentlyassignedtoanindividual
userassoonasthegroupiscreated.
Asaresult,theusercansafelycustomizethedesktoptosuitherneeds.
Virtualdesktopsinassignedonfirstusegroupsarepermanentlyassignedtothe
firstusertoconnecttothem.
Asaresult,theusercansafelycustomizethedesktoptosuittheirneeds.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 6
DesktopDeliveryComponent
TheDesktopDeliveryComponentinstallationprocessautomaticallycreatesmultipleWeb
Interfacesitestoprovideaflexibleuserexperience.
AWebInterfacesitepassestheusercredentialstotheDesktopDeliveryController.
Usingthedesktopgroupthatitobtainedfromthedatastore,theDesktopDeliveryController
queriestheVMinfrastructureaboutthestatusofvirtualdesktopsinthatgroup.
TheDesktopDeliveryController:
CannotbeinstalledonaDomainController.
Brokersconnectionrequestsfromendpointdevices.
Manageslicensingandthedatastore.
VerifiesuserauthorizationbyperformingaMicrosoftActiveDirectoryquerywiththe
userscredentials.
SomeProtocolsusedinXenDesktop
SSL/HTTPS:
Carriessecure,encrypteddatabetweentheDesktopReceiverandthedatacenter,
providingsecureremoteaccessforusersoutsideofthecorporateLAN.
ICA:
Isusedtodeliverhostedapplicationstovirtualdesktopsondemand,separatingthe
applicationlogicfromuserinputandscreenrefreshes.
CommunicationbetweentheDesktopReceiverandtheVirtualDesktopAgentoccurs
overICA,providingPClikeresponsivenessofanycontenttoanylocationanddevice.
SMB:
Streamsapplicationstovirtualdesktops,allowinguserstorunanewapplicationlocally
withoutrequiringanew,customimage.
SomePortsusedinXenDesktop
Port2598isusedtodeliverhostedapplicationswithsessionreliability.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 7
Port1494isusedtodeliverhostedapplicationswithoutsessionreliability.
Port445isusedtostreamapplicationstovirtualdesktops.
IdentifyingPreInstallConsiderations
ActiveDirectory
TheActiveDirectoryConfigurationWizardisintegratedintheDesktopDeliveryController
installation.
ItisaccessibleontheDesktopDeliveryControllerintheStartmenubyselectingAll
Programs>Citrix>AdministratorTools>ActiveDirectoryConfigurationWizard.
Beforeanadministratorcancreatedesktopgroups,theyneedtocreateandconfigure
theActiveDirectoryOrganizationalUnit(OU)usingthiswizard.
ThetwomainreasonsthattheDesktopDeliveryControllerusesActiveDirectoryare:
1)SecurityConfirmthatanyoutboundcommunicationscomefromauthorized
controllersintheappropriatefarmandmaintainconfidentialityofdataexchangedby
thevirtualdesktopsandthecontrollers.
ActiveDirectorysinbuiltsecurityinfrastructureisusedbyvirtualdesktopstocheck
thatincomingcommunicationsfromcontrollerscomefromauthorizedcontrollersin
theappropriatefarm.
ActiveDirectoryssecurityinfrastructurealsoensuresthatthedataexchangedby
virtualdesktopsandcontrollersisconfidential.
DesktopDeliveryControllerusesActiveDirectory'sinbuiltKerberosinfrastructureto
guaranteetheauthenticityandconfidentialityofcommunication.
2)ControllerdiscoveryActiveDirectoryisusedbyXenDesktoptodiscoverthe
controllersthatconstituteafarm.
Administratorscanaddnewcontrollerstoafarmwithouthavingtoreconfigureall
virtualdesktopsinthefarmbecausethisinformationisautomaticallyupdatedin
ActiveDirectorybycontrollers.
DHCPinaXenDesktopEnvironment
WhenthevDiskbootsfromanetworkusingPXE:
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 8
DHCPsendsarequesttotheProvisioningServerforanIPaddressandbootfileoptions.
ThePXEserverdeliverstheinformationtothevDisk.
InaXenDesktopenvironment,theDHCPservicedeliversthefollowingtothevDisks:
AnIPaddress
Thebootfilelocation
WhenconfiguringbootoptionsforDHCP:
Enableoption066BootServerHostName.
TypeintheIPaddressofthebootserver.
Enableoption067BootfileName.
Enternameofthebootfile.
Configureoption060PXEClientforPXEsupport.
ReducingStorage
Anadministratorcanreducethenumberofuniquedesktopimagesstoredinthedatacenter
through:
Virtualdesktopprovisioning
Virtualdesktopprovisioningreducesstoragebystreamingasingleimagetomultiple
desktops.
Roamingprofiles
BystoringusersprofilesseparatelyfromtheOSandapplications,administrators
candramaticallyreducethenumberofuniqueimageswhilestillprovidinga
personalizeddesktoptoeachuser.
PrivateandStandardImagevDisks
PrivateImagevDisksrequiremorestoragespacethanStandardImagevDisks.
AStandardImagevDiskcanbesharedbyoneormoretargetdevices.
APrivateImagevDiskcanonlyexistforonetargetdevice.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 9
ProvisioningServerCache
TheProvisioningServerwritecachecanbelocated:
Asafileonthetargetdevicesharddrive.
FreesuptheProvisioningServersinceitdoesnothavetoprocesswriterequests
anddoesnthavethefinitelimitationofRAM.
InthetargetdevicesRAM.
Providesthefastestmethodofdiskaccesssincememoryaccessisalwaysfaster
thandiskaccess.
AsafileontheProvisioningServer.
AllwritesarehandledbytheProvisioningServer,whichcanincreasediskIOand
networktraffic.
ProvisioningServerwritecacheneedonlybeenabledforStandardImagevDiskssincetheydont
allowreadandwriteaccessontheimagelikePrivateImagevDisksdo.
InstallingCitrixXenDesktop2.0EnterpriseEdition
InstallingDesktopDeliveryController
ADesktopDeliveryController:
Cannotbeinstalledonadomaincontroller.
Shouldbeinstalledusingadomainaccountwithlocaladministratorrights.
ShouldnotbeinstalledusingRDP.
AutomaticallyinstallsWebInterfaceduringinstallation.
ADesktopDeliveryControllerrequires:
ActiveDirectorytostoreinformationaboutDesktopDeliveryControllersandtodetect
controllersinthefarm.
Adatabasetohostthedatastorethatholdsconfigurationinformationaboutthe
controllersandadministratoraccountinformation.
AccesstoaCitrixLicenseServerwithvalidlicenses.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 10
TheCitrixAccessManagementConsoletoviewandmanagethefarm
TheCitrixPresentationServerConsoletoconfigureprintingandpoliciesforthevirtual
desktops.
CitrixLicensing
Thefollowingmustbelicensedforcontinuedfunctionality:
XenServer
AlthoughXenServerdoesnotusethesamelicenseserverastheothercomponents
intheXenDesktopenvironment,itstillutilizesCitrixlicensing.
ProvisioningServer
XenAppforVirtualDesktops
DesktopDeliveryController
TolicensesomeCitrixproducts,includingtheDesktopDeliveryController:
Installthelicenseserverintheenvironment.
ItisnotrequiredtobeinstalledontheDesktopDeliveryControllerserver,butcan
be.
Downloadthelicensefilefromwww.mycitrix.com.
Copythelicensefiletothelicenseserver.
IfthelicenseserverisinstalledonadifferentserverthantheCitrixproduct,usethe
AccessManagementConsoletoconfiguretheproducttopointtothelicenseserverby
IPaddressornameandspecifytheportnumberbeingusedforthelicenseserver
communications.
UsetheLicenseManagementConsoletomanagelicenses.
XenServer/ProvisioningServerLicensing
AnoverviewofXenServerandProvisioningServerlicensing:
XenServerrequiresinstallationoftwolicenses:
OnefortheXenServerhosts.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 11
AnotherfortheProvisioningServer.
TheXenServerlicensekeysareinstalleddirectlyoneachXenServerhost.
ProvisioningServerusestheCitrixLicenseServertoprovidepooledlicensing
management.
IntheLicenseManagementConsoleyouwillseefourProvisioningServerlicensesfor
eachXenServerPlatinumEditionyouhavepurchased.
ProvisioningServerconsumesoneofthesefortheXenServerhosttowhichthevirtual
machinesarebeingstreamed.
Theremainingthreelicensesareavailableforprovisioningadditionalphysicalmachines.
InstallingXenServerinaXenDesktop/ProvisioningServerImplementation
ToinstallandconfigureXenServerforaXenDesktopimplementationincludingProvisioning
Server:
InstalltheXenServerHostonadedicatedserver.
InstalltheXenCentermanagementconsoleonaseparate,remotecomputer.
UsetheXenCentermanagementconsoletoconnecttheXenCenterHostandinstallthe
licenses.
CreateanewresourcepoolandaddallXenServerHoststoit.
CreatethevirtualmachinesandaddthemtoActiveDirectory.
InstalltheVirtualDesktopAgentonthevirtualmachines.
InstalltheXenServerToolsonthevirtualmachines.
ResourcePools
AresourcepoolcomprisesmultipleXenServerHostinstallations,boundtogetherintoasingle
managedentitywhichcanhostVirtualMachines.
Whencombinedwithsharedstorage,aresourcepoolenablesVMstobestartedonany
XenServerHostwhichhassufficientmemoryandthendynamicallymovedbetweenXenServer
HostswhilerunningwithminimaldowntimeusingXenMotion.
InordertouseProvisioningServertoprovisionvirtualmachinesthatwillbemigrated
withXenMotion,youmustcreatethemwithasmalldiskattached.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 12
IfanindividualXenServerHostsuffersahardwarefailure,thentheadministratorcanrestartthe
failedVMsonanotherXenServerHostinthesameresourcepool.
Resourcepoolmembersmusthavesimilarnetworkingincluding:
NICsacrossallmembersmustconnecttothesamenetworks.
AlthoughtherecanbeadifferentnumberofNICsoneachmachine,theNICsmustbein
thesameorderoneachmachine.
NICsshouldbethesamespeedbutcanbefromdifferentvendors.
Discovery
TheAccessManagementConsolereliesonthediscoveryprocesstochecktheenvironmentfor
theadditionorremovalofdevices.
ThediscoveryprocessrunsautomaticallythefirsttimetheAccessManagementConsoleis
opened.
AnadministratorshouldmanuallyRundiscoveryonaregularbasissothattheinformation
beingviewedisuptodate.
vDisks
BeforecreatingavDisk,anadministratorneedstoknow:
ThetypeofvDiskbeingcreated.
ThedirectoryinwhichthevDiskwillbestored.
Thedisksizerequiredtohosttheoperatingsystemandotherfiles.
TocreateanewvDisk:
OpentheProvisioningServerConsoleontheProvisioningServer.
RightclickaserverintheconsoleandchooseNewVirtualDisk.
AfteravDiskiscreatedusingProvisioningServer,animagecontainingtheoperatingsystem
mustbecopiedtothevDiskusingtheProvisioningServerImageBuilderutility.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 13
ManagingPasswordswithActiveDirectory
ToallowActiveDirectorytomanagepasswords:
DisableActiveDirectorycontrolledautomaticrenegotiationofmachinepasswordsby
enablingtheDisablemachineaccountpasswordchangessecuritypolicy.
EnablemachineaccountpasswordmanagementinthepropertiesofavDiskinthe
ProvisioningServerConsole.
EnableautomaticpasswordmanagementinthepropertiesofaProvisioningServerin
theProvisionServerConsole.
VirtualDesktopAgent
InaXenDesktopimplementationusingXenServerasthehostinginfrastructure,theVirtual
DesktopAgentwillbeinstalledonthevirtualmachines.
TheVirtualDesktopAgentconsistsofthefollowingcomponentsthatresideonthevirtual
desktop:
TheCitrixDesktopService
CommunicateswiththeDesktopDeliveryController.
Handlestheinitialbrokeringofconnectionsandtheinteractionswithsessionsfrom
theAccessManagementConsole.
TheCitrixICAService
CommunicateswiththeDesktopReceiverandhandlesgraphicsandinput.
Supportingservices
Helpwithfeaturessuchasautoreconnection,printingandencryption.
TheVirtualDesktopAgent:
Isusedtofacilitatetheconnectiontoavirtualdesktop.
CanbeinstalledonWindowsXPandVista.
Mustbeinstalledoneachsystemthatwillbecomeavirtualdesktop.
MustbeconfiguredwiththeportnumberusedtocommunicatewiththeDesktop
DeliveryController.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 14
Requiresthatthefirewallonthesystembeproperlyconfigured.
Mustbeconfiguredtopointtoafarm.
VirtualMachineTemplates
AProvisioningServervirtualmachine(VM)templateisadisklesstemplatethatisassociated
withaProvisioningServervDisk.
TocreateavirtualmachinetemplateinXenCenter:
Selectthedesiredresourcepool.
SelectVM>New.
Selectthedesiredoperatingsystemtemplate.
Enterthenameanddescription.
Selectthelocationoftheoperatingsysteminstallationmedia.
SetthenumberofCPUsandmemory.
LeavetheVirtualDiskscreendefault.
Inthevirtualnetworkinterfacesoption,selectthedefault.
DeselectStartVMautomatically.
AfterclickingFinish,selectthenewlycreateVMandselecttheStoragetab.
SelectDeletetoremovethestoragefromtheVM.
Fromthemenubar,selectVMConverttoTemplate.
DisklessVirtualMachines
TocreateadisklessvirtualmachineinXenCenter:
Selectthedesiredresourcepool.
SelectVM>New.
SelectOtherinstallmediaatthebottomoftheoperatingsystemlist.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 15
Enterthenameanddescription.
Selectthelocationoftheoperatingsysteminstallationmedia.
SetthenumberofCPUsandmemory.
Inthevirtualdiskoption,donotaddadisk.
Inthevirtualnetworkinterfacesoption,selectthedefault.
AfterclickingFinish,thevirtualmachinecanbeutilizedorconvertedtoatemplate.
Aftercreatingadisklessvirtualmachine,itmustbesettonetworkboottoproperly
interoperatewithProvisioningServer.
DesktopReceiver
TheDesktopReceiversoftwarecanbeinstalledfrom:
Theproductmedia
AXenDesktopwebsite
ActiveDirectoryGPO
Anothersoftwaredistributionproduct
BuildingvDisks
BuildingOperatingSystemImages
TocreateaWindowsVista,WindowsXP,WindowsServer2003orWindows2008operating
systemimagethatisabletobootfromaXenServervirtualmachineandleverageProvisioning
Serverstreaming:
InstallandconfiguretheProvisioningServerStreamingServerandXenServerPlatinum.
CreateandformataProvisioningServervDiskfortheimagebuildprocess.
Createthemastertargetdevicewiththeappropriateoperatingsystem,updates,
applicationsandconfigurations.
InstallXenServerToolsonthetargetvirtualmachine.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 16
InstallProvisioningServerTargetDeviceonthemastertargetdevice(thedevicethathas
theappropriateoperatingsysteminstalled).
BuildtheimageonthevDiskusingProvisioningServerImageBuilder.
CreateanewvDiskforeachdesiredoperatingsystemtobeusedwithvirtualmachines
inaXenDesktopdeploymentincludingXenServerandProvisioningServer.
CreatingandConfiguringvDisks
ThehighlevelstepsinvolvedincreatingandconfiguringavDiskinclude:
ConfiguringthevDiskmode
PrivateorStandard
FormattingthevDisk
FromthetargetdeviceorProvisioningServer
Creatingthenewtargetdeviceentry.
Settingthebootproperties
AssigningthevDisktoatargetdevice
CreatingvDisksinDiskPool
TocreateavDiskinadiskpool:
IntheProvisioningServerConsole,rightclickonthevDiskPoolwhereyouwanttoadd
thosevDisksandselecttheCreatevDiskmenuoption.
InthedropdownmenuoftheCreatevDiskdialogbox,selectthestorewherethisvDisk
shouldreside
IfcreatingthevDiskfromthestore,thenthesitewouldbeselectedatthisstep.
IntheServerusedtocreatethevDiskdropdownmenu,selecttheProvisioningServer
thatwillcreatethevDisk.
SelectthesizetoallocatetothisvDisk.
TypeafilenameforthisvDiskandadescriptionifdesired.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 17
SelecteitherFixedorDynamicintheVHDFormattextbox.
ClickCreatevDisk.
IntheProvisioningServerConsole,rightclickonthenewtargetdeviceandselect
Properties.
SelectwheretobootfromintheBootfromdropdownlist.
XenDesktopWizard
TheXenDesktopWizard:
Allowstheautomaticcreationoflargeinstallationsofvirtualdesktops.
AddsthesedesktopstoActiveDirectory.
CreatesadesktopgroupintheAccessManagementConsole.
Optimizestheidlepoolcountforthatgroupbasedonthenumberofvirtualdesktops
thatwerecreated.
PooledDesktopGroupSecurity
Ifyouplantoconfigurevirtualmachinesforuseinapooleddesktopgroup,youmustensure
thattheoperatingsystemimageinstalledonthosemachinesisconfiguredtopreventendusers
frommakinganymodifications.Typically,thismeansthat:
EnduserscanbemembersoftheUsersgroup.
EnduserscannotbemembersofthePowerUsersorAdministratorsgroups.
AutomaticallyAddingTargetDevicestoProvisioningServer
TargetdevicescanbeimportedintotheProvisioningServerdatabase:
Froma.CSVfileusingtheImportTargetDeviceWizard.
Thetargetdevicesinheritthepropertiesofatemplate.
UsingtheProvisioningServerConsole,anadministratorcancreatenewtargetdeviceentriesin
theProvisioningServerdatabase:
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 18
ManuallybyselectingCreateDeviceandaddingtheinformation.
Optionallyusingacollectiontemplate.
UsingtheAutoaddfeatureontheFarmPropertiesOptionstab.
Optionallyusingacollectiontemplate.
ToconfigureProvisioningServertoautomaticallyaddallnewtargetdevicestothedatabase:
IntheProvisioningServerConsole,rightclickontheFarmnode,
SelectPropertiesandsetAutoaddontheOptionstab.
Optionally,atemplatecanbeusedsothatallofthenewlyaddedtargetdeviceshave
thesamepropertiesasthetemplate.
TouseImageBuilder:
SelectthedestinationdriveandclickBuild.
Optionally,choosetooptimizevirtualdiskperformanceanddeleteallofthefilesand
foldersinthedestinationpathbeforebuildingtheimage.
CreatingaDisklessVirtualMachine
TheProvisioningServerprovidestheabilitytostreamvDiskstodisklessvirtualmachines.To
createadisklessmachineinXenCenter:
ConnecttoaXenServerandclickontheNewVMicon.
TheNewVMwizardlaunches.
IntheSelectanoperatingsystemforthenewvirtualmachinedialog,selectOther
installmediaatthebottomofthelistandclickNext.
IntheEnteranameanddescriptionforthenewvirtualmachinedialog,typeanamein
theNamefield,optionallytypeadescriptionintheDescriptionfield,andclickNext.
IntheEnterthelocationoftheguestoperatingsysteminstallationmediadialog,select
PhysicalDVDDriveandclickNext.
IntheSetthenumberofCPUsandtheinitialmemoryallocationforthenewVM
dialog,selecttheNumberofvCPUsandInitialmemoryoptionsandclickNext.
IntheEntertheinformationaboutthevirtualdisksforthenewvirtualmachinedialog,
donotaddanewdiskandclickNext.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 19
IntheAddorremovevirtualnetworkinterfacesforthevirtualmachinedialog,keep
thedefaultandclickNext.
IntheYournewvirtualmachineconfigurationiscompletedialog,unchecktheStart
VMautomaticallyboxandclickFinish.
Oncethevirtualmachineiscreateditcanbeutilizedorcreatedintoatemplate.
ToproperlyinteroperatewithProvisioningServerandallowProvisioningServertostreamvDisks
tovirtualmachines,anadministratormust:
Createadisklessvirtualmachine.
Setthevirtualmachinetonetworkboot.
ConfiguringCitrixDesktopDeliveryControllerforXenDesktop2.0EnterpriseEdition
CreatingDesktopGroups
DesktopgroupscanbecreatedusingeithertheXenDesktopSetupWizardortheAccess
ManagementConsole.
TocreateadesktopgroupwiththeXenDesktopSetupWizard:
ClickNextontheWelcomescreen.
SelectadesktopfarmfromtheDesktopFarmdropdownlistandclickNext.
SelectahostinginfrastructurefromtheHostingInfrastructuredropdownlist.
Specifytheaddressofthehostinginfrastructure(IPaddressorFQDN)andclickNext.
TypeaVMinfrastructureusernameandpasswordintheCredentialsdialogboxand
clickNext.
SelectaVMtemplatetouseasthebasedesktopimageandclickNext.
SelectthevDiskthatwillbeassociatedwiththeVMtemplateandclickNext.
TypethenumberofvirtualdesktopstocreateintheNo.ofvirtualdesktopsfield.
TypeabasedesktopnameintheStartofalldesktopnamefield.
TypetheindexnumberofthefirstVMintheStartnumberfieldandclickNext.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 20
SelectanOrganizationalUnitlocationinActiveDirectorytoaddthevirtualdesktops
thatwillbecreatedbythesetupwizardandclickNext.
TypeanameforthenewdesktopgroupandclickNext.
ReviewthesettingsontheDesktopCreationpageandclickNext.
AdministratorscanusetheAccessManagementConsoletocreateadesktopgroupofpre
existingdesktopimages.
TocreateadesktopgroupwiththeAccessManagementConsole:
SelectDesktopGroupsfromtheconsoletree.
ClickCreatedesktopgroupintheCommonTaskspane.
ClickNextontheWelcomescreen.
SelecteitherPooledorAssignedasthedesktopgroupassignment.
IfAssignedischosen,thenselectPreAssignedorAssignonFirstUseandclickNext.
SelectthetypeofVMinfrastructurehostingthevirtualdesktopstobeaddedtothe
groupandclickNext.
SelectNoneforthetypeofVMinfrastructuretocreateaBladePCbaseddesktop
group.
TypetheaddressoftheVMinfrastructureintheAddressfield.
TypetheadministratorusernameandpasswordrequiredtologontotheVM
infrastructureintheUsernameandPasswordfieldsandclickNext.
ClickAddtodisplayavailabledesktops.
Selecteachdesktoptoaddittothedesktopgroup,clickOKandclickNext.
ClickAddtoselectActiveDirectoryusersorgroupstoaddtothedesktopgroup.
UsingtheAccessManagementConsole,ActiveDirectorycomputernamescanbe
mappedtodesktopimagesduringthecreationofadesktopgroup.
TypeanameforthenewdesktopgroupintheDisplaynamefield.
TypeadescriptionintheDescriptionfieldandclickNext.
Optionally,changetheiconandclickNext.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 21
ClickFinish.
SpeedScreen
SpeedScreenImageAcceleration:
Offersatradeoffbetweenthequalityofphotographicimagefilesastheyappearon
clientdevicesandtheamountofbandwidththefilesconsumeontheirwayfromthe
servertotheclient.
Isconfiguredwithoneoffourlossycompressionlevels:
Highcompression
Mediumcompression
ThedefaultsettingisMediumcompression,whichisrecommendedforlower
bandwidthconnectionswhiledesiringgoodimagequality.
Lowcompression
Nocompression
Heavyweightcompression:
AllowsyoutoincreasethecompressionoftheSpeedScreenImageAccelerationand
SpeedScreenProgressiveDisplaywithoutimpactingimagequality.
BecauseheavyweightcompressionisCPUintensiveandaffectsserverscalability,itis
recommendedforuseonlywithlowbandwidthconnections.
Policies
Tocreateapolicy:
RightclickthePoliciesnodeinthePresentationServerConsoleandselectCreatePolicy.
Typeanameandadescription.
Optionally,configurethepolicyforaconnectiontype.
Configurethepolicyrules.
Applythepolicyusingafilter.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 22
Clientnames
Accesscontrol
WhenapolicyisfilteredbyAccessControl,itisappliedtoconnectionsmade
throughAccessGateway.
Usersandusergroups
Servers
ClientIPaddresses
Policypriorityrules:
Eachpolicyreceivesanumberuponcreation.
Bydefault,anewpolicyhasthelowestpriorityofallpolicies.
Thenumberassignedisbasedonthenumberofpoliciesthatexistinaserverfarm.
Toprioritizeapolicy:
InthePresentationServerConsole,clickthePoliciesnode.
RightclickthepolicyintherightpaneandclickPriority.
Ifyouwanttoassignthepolicythehighestpriority,clickMakeHighestPriority.
Ifyouwanttoassignthepolicythelowestpriority,clickMakeLowestPriority.
Ifyouwanttoincreasethepriorityofthepolicyonelevel,clickIncreasePriority.
Ifyouwanttodecreasethepriorityonelevel,clickDecreasePriority.
Whenyoucreatepoliciesforgroupsofusers,clients,orservers,youmayfindthatsome
membersofthegrouprequireexceptionstosomepolicyrules:
Tomoreeffectivelymanageexceptions:
Createnewpoliciesforonlythosegroupmembersneedingtheexceptions.
Rankthenewpolicyhigherthanthepolicyfortheentiregroup.
IfyouchangethenameofadesktopgroupthathasaCitrixpolicyappliedtoit,rememberto
updatetheCitrixpolicyfilterwiththenewname.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 23
LogoffBehaviorofDesktopGroups
Inassigneddesktopgroupsthatbelongtoahostinginfrastructure,thelogoffbehaviorcanbe
configured.
Desktopgroupsthatdonothaveahostinginfrastructure,includingPCbasedandBladebased
desktopgroupsdonothavelogoffbehaviorandidlepoolsettings.
ConfiguringTimeZone
ToallowWindowsXPvirtualdesktopuserstoseetheirlocaltimeinsteadoftheserverslocal
time:
Givethemrightstochangethetimeonthesystemonwhichthedesktopisrunning.
Changethetimezoneregistryarea.
Afteryoudothis,userswhoconnecttoWindowsXPvirtualdesktopsseetheirlocaltime
zonereflectedinthedesktop.
Whentheylogoffordisconnect,thetimezoneofthedesktopisresettowhatitwas
beforetheyloggedon.
ToallowWindowsVistavirtualdesktopuserstoseetheirlocaltimeinsteadoftheserverslocal
time:
MakesuretheyhavetheChangethetimezoneprivilege.
Thisprivilegeisgrantedbydefault.
RDPConnection
IfausermakesanRDPconnectiontoavirtualdesktop,anICAconnectionisnotpossibleuntil
either:
Auserlogsoninteractivelyontheconsoleofthecomputerhostingthevirtualdesktop.
or
Thecomputerhostingthevirtualdesktopisrestarted.
DisconnectingtheRDPsessionorloggingofffromRDPisnotsufficient.
Toavoidthisissue,considerdisablingRDP.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 24
ConfiguringLogoffBehavior
Configurepooledvirtualdesktopstoreverttoacleanstateafteruserslogoff:
Createthevirtualmachinetouseasyourbaseimageandinstall:
CitrixVirtualDesktopAgent
XenServerTools
CitrixProvisioningServerTargetDeviceforx86Platform
UsingtheProvisioningServerVirtualImageBuilder,createaProvisioningServervDisk
basedonthevirtualmachineimage.
SettheaccessmodeforthevDisktoStandardImage(multiclient,writecacheenabled).
AssignthevDisktothevirtualmachinesyouwilluseaspooledvirtualdesktops.
OntheLogoffBehaviorpageoftheCreateDesktopGroupwizard,selectRebooton
logoff.
WhenShutdowntheVMisconfigured,theVMwillberestartedthenexttimetheusertriesto
reconnecttoit.
Choosingthisoptionkeepsdiskusageonthehostinginfrastructuretoaminimum.
Thedisadvantageisthatsubsequentreconnectionswillbeslowerbecausetheyneedto
waitfortheoperatingsystemtostartup.
SincePCbasedandBladebaseddesktopgroupsdonothavelogoffbehaviorsettings,configure
anActiveDirectorypolicytoremovetheshutdowncommandfromthevirtualdesktops.
IdlePoolCount
Idlepoolcountsettings:
Areavailableonlyforpooleddesktopgroupsthatarepartofahostinginfrastructure.
Forexample,XenServer.
EnableyoutoconfigurethenumberofVMstobekeptinapoweredonstatereadyfor
userstoconnect.
Ifidlepoolcountissetat0,thenalloftheVMsarekeptinapoweredoffstateand
takelongertoconnectto.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 25
Ifanadministratordoesnotwanttomaintainanidlepool,theadministrator
shouldsettheidledesktopcountforallperiodsto0.
Whenadesktopgroupiscreatedwiththesetupwizard,theidlepoolsettingsareautomatically
optimizedwiththecorrectnumberofvirtualdesktops.
Ifmoredesktopsareadded,theidlepoolvaluesarenotautomaticallyupdatedand
mustbemanuallyadjusted.
TheIdleDesktopCountisconfiguredforperiodsduringtheday.
Duringthepeakhoursthemostdesktopsaregoingtoneedtobeavailable.
DesktopReceiverModes
Fullscreenonlymode:
Userswhowillconnecttoasingledesktopandwillnothaveachoiceareconfiguredfor
fullscreenonlymode.
FullscreenonlymodeusestheDesktopReceiverEmbeddedsoftwaretoprovideusers
accesstoasinglevirtualdesktop.
Thedesktopisdisplayedautomaticallyontheusersendpointdeviceinfullscreen
mode.
Fullscreenonlymodedoesnotallowuserstocontroltheappearanceoftheirdesktop.
Windowviewmode:
UsersinwindowviewmodeusetheDesktopReceiversoftwaretoprovideaccessto
morethanonevirtualdesktop.
Thevirtualdesktopisdisplayedwithinawindowandthedesktopofthelocaldevice
remainsaccessible.
Usersareallowedtocontroltheappearanceoftheirvirtualdesktops.
DeliveringDesktops
DataStoreDatabase
InalargeXenDesktopimplementation,useeitherMicrosoftSQLServerorOracleforthedata
store.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 26
Whenusingeitherofthesedatabasesforthedatastore,thedatabasemustbeinstalled
beforetheDesktopDeliveryControllercanbeinstalled.
AMicrosoftAccessdatabaseisinstalledlocallyontheDesktopDeliveryControllerandisonly
usedforsmallerXenDesktopimplementations.
ManuallyAddingTargetDevicestoProvisioningServer
AnewtargetdevicecanbemanuallyaddedtotheProvisioningServerdatabaseusingBios
promptswhentheserverisstartedusingthePXEclient.
VirtualDesktopDeliveryProcess
Tomakeavirtualdesktopavailabletousers:
ConfiguretheDesktopDeliveryControllerandActiveDirectory.
InstallandconfigureXenServer.
Includingallcomponentsandlicensing.
AddthevirtualmachinetotheProvisioningServerdatabase.
ImageavDisktobeusedforthevirtualdesktop.
AddthevirtualdesktoptoadesktopgroupintheAccessManagementConsole.
ManagingaXenDesktop2.0EnterpriseEditionImplementation
CreatingaWebInterfaceSite
ForremoteaccessthroughAccessGateway,youneedtocreateanewWebInterfacesite:
InstalltheWebInterfaceandtheAccessManagementConsoleWebInterfaceextension.
AccessGatewayFilters
Inadesktopgroup,thedefaultAccessControlconnectionsallowallconnectionstodesktopsin
thegroup.
AccessControlcanbemodifiedtorestrictconnectionswithcriteriaspecifiedthrough
AccessGatewayfilters.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 27
RemoteAccess
Workerswhoneedremotesecureaccessaretypicallyroutedfromtheirclientdevicesthrough
AccessGatewayandWebInterface.
TroubleshootingDesktopImagesforVirtualizedDelivery
vDiskDoesntAppearinXenDesktopSetupWizard
AvDiskwillnotshowupintheXenDesktopSetupWizardifyouspecifyanameoradescription
thatcontainsoneormoreextendedcharactersorDBCScharacters(suchastheEurosign,
U+20AC).
Toresolvethisissue,youmustchangethevDiskparameterssothattheDescriptionand
theNamefieldscontainonlystandard,printableANSIcharacters.
VirtualDesktopisNotRegistered
IfaVirtualDesktopislistedasNotRegisteredintheunderDesktopStateintheAccess
ManagementConsole,itisprobablybecausetheVirtualDesktopAgenthasfailedtobein
communicationwiththeDesktopDeliveryController.
Accordingtobestpractices,ifavirtualdesktophasfailedtoregisterwithaDesktopDelivery
Controller,theadministratorshould:
1)Checkthevirtualdesktopsfarmmembership.
2)Checkfirewallconfiguration.
3)RunIPCONFIGandPINGonbothmachines.
4)Checkbothsystemstime.
5)Rejoinbothmachinestotheirdomain.
6)InspecttheServicePrincipalNames.
7)Disableallbutonenetworkadapteronthevirtualdesktop.
IftheVirtualDesktopMachineortheDesktopDeliveryControllerseesanincorrectIPaddress
fortheotherparty,registrationwillfail.
ToseeifanincorrectIPaddressisanissue,onbothmachines,launchacommandshellwindow
andrunthefollowingcommands:
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 28
IPCONFIG
PING<OTHERMACHINE.DOMAIN.COM>.
BothmachinesshouldbeabletopingeachothersuccessfullybyFQDN.
TheIPaddressreportedfortheremotemachinebythePINGcommandineachcase
shouldmatchtheIPaddressreportedbytheIPCONFIGcommandontherelevant
machine.
Ifthereisanydiscrepancy,fixtheproblemwithyourDNSconfigurationand
restarteithertheVirtualDesktopMachineand/ortheDesktopDelivery
Controller,asappropriate.
ThecommunicationbetweenVirtualDesktopandDesktopDeliveryControllerissecuredusing
Kerberos,whichreliesuponTicketswithalimitedlifespan.
Ifthedifferenceinsystemtimebetweenthetwoendsofthecommunicationistoo
great,theTicketswillalwaysbeconsideredtohavetimedoutwhentheyareaccessed
andcommunicationfails.
Checkthatthesystemtimeonbothsystemsiswithin5minutes,whichisthedefault
domainwideKerberossetting.
StopError0x0000007B
Differencesinthenetworkinterfacecard,videocardorprocessorontheMasterTargetand
targetdevicearemostlikelythecauseofstoperror0x0000007B.
ThisusuallyoccursonaXenServerthathadmorethanonevirtualnetworkinterface.
Inotherwords,thisissueoccursmostoftenwhenthenetworkIDdoesnotmatch.
IssueswiththeXenDesktopSetupWizard
TohelptroubleshootXenDesktopSetupWizardissues,alogfilekeycanbeaddedtothesetup
wizardexecutable.
ThefollowingissuescanoccurwiththeXenDesktopSetupWizard:
Desktopgroupnotlisted
vDisknotlisted
MMC3Error
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 29
TomakesurethatadesktopgroupshowsupintheXenDesktopSetupWizard:
Usethesametexttoidentifytheconnection.
IftheFQDNwasusedintheAccessManagementConsole,besuretokeepit
consistentbyusingtheFQDNintheXenDesktopSetupWizard.
IftheIPaddresswasusedintheAccessManagementConsole,besuretokeepit
consistentbyusingtheFQDNintheXenDesktopSetupWizard.
TheXenDesktopSetupWizardinstallationprogramgeneratesanerrorifitdetectsthatMMC3is
notalreadyinstalledontheserveronwhichanadministratortriestoinstallthewizardandthe
installationprogramends.
ThisissuecanoccurwhenWindowsServer2003ServicePack2,whichisaXenDesktop
prerequisite,isnotinstalled.
Toresolvetheissue,installWindowsServer2003ServicePack2ontheserveron
whichthewizardwillbeinstalled.
VirtualMachineUnabletoRunonWindows
Ifanadministratorencountersamessagepertainingtoavirtualmachinecannotberunon
Windows,theadministratorshould:
CheckthatthedeviceonwhichXenServerisinstalledhasaCPUthatsupportshardware
virtualization.
MakesuretheBIOSisenabledforhardwarevirtualizationsupport.
Performahardwareresetofthehostserver.
Restarttheinstallation.
CheckthesupportsiteforthehardwaremanufacturerforBIOSupgrades.
LargeNumberofVirtualDesktopsandPoolsinaDesktopGroup
Ifyouwanttocreateadesktopgroupcontainingalargenumberofvirtualdesktopsand
multipleCitrixXenServerpools,atoolisprovidedwiththatallowsseveralpoolstobeusedby
onedesktopgroup:
%ProgramFiles%\Citrix\VmManagement\XenMultiPool.exe.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 30
NotethatallCitrixXenServerhostsmusthavethesameusernameandpasswordto
configurethemforusewithonedesktopgroup.
DeliveringandManagingApplications
PrinterPolicies
Someprinterpoliciesandtheiruses:
Autocreateallclientprintersautomaticallyconnectsalltheprintersonaclientdevice.
Useuniversaldriveronlymakessurethatonlytheuniversalprinterdriverisused.
Donotautomaticallyinstalldriversmakessurethatthenativedriversarenotinstalled
intheenvironment.
Insomeinstances,itmightbepreferabletonotautocreateclientprinters.
AnadministratorcanusetheTurnoffclientprintermappingruletoautocreate
onlynetworkprintersorprintersconnecteddirectlytotheserver.
Donotautocreateclientprintersturnsofftheautocreateoptionforallclient
printerswhenuserslogon.
Noclientprinterswillbecreated.
ByenablingtheUniversaldriverruleUseonlyprintermodelspecificdrivers,the
administratormakessurethatonlythemanufacturersdriversthatsheinstalledwillbe
usedforthefiveprinters.
Bynotallowingnativeprintdriverstoautomaticallybeinstalledfromautocreated
printers,anadministratorcanmakesurethatnoroguedriversmakeitintothefarm.
Byusingadrivercompatibilitylist,anadministratorwillcontrolwhichdriversare
allowedinthefarm.
Ifanadministratorknowsthedriversthatareallowed,butdoesntknowwhichdrivers
mighttrytoinstalllater,theadministratorcanselectAllowonlydriversinthelistand
addtheknownacceptabledriverstothelist.
ByselectingtheUseuniversaldriveronlyiftherequesteddriverisunavailablerule,an
administratorcanmakesurethatthereisalwaysadriveravailable,whetheritsthe
manufacturersdriverortheuniversaldriver.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 31
ByusingtheruleAutocreatelocalclientprintersonly,onlytheprintersconnected
directlytotheusersclientdevicethroughanLPTorotherlocalportwillbe
automaticallyconnected.
Enablingthissettingensuresanynetworkprintersdefinedontheclientdeviceare
notautocreatedwithintheICAsessionandlogontimeswillbereducedforthose
whohaveseveralnetworkprintersconfiguredontheirclientdevice.
Toallowthemanufacturersprintdriverstobeusedinthefarm,thepolicyNativedriver
autoinstallcanbesettotheruleInstallWindowsnativedriversasneeded.
Toallowtheprinterstofirsttrytousethemanufacturersdrivers,butfallbackonthe
universaldriveriftheyarenotavailable,thepolicyUniversaldrivercanbesettothe
ruleUseuniversaldriveronlyifrequesteddriverisunavailable.
TheSessionprinterspolicyruleallowsanadministratortocontroltheassignmentof
networkprinters.
Administratorscanassignthedefaultprinteraswellasdesignatetheconnectionto
networkprintersbasedonthedesiredpolicyfilter.
ThePrintjobroutingruledetermineswhetherornotaclientprinterisautoconnected.
WhenthisruleisconfiguredtoConnectdirectlytonetworkprintserverifpossible,
theprintjobsarerouteddirectlyfromthePresentationServertothenetworkprint
server.
IfAlwaysconnectindirectlyasaclientprinterisconfigured,printjobsarerouted
throughtheclientdeviceviatheICAprotocolandredirectedtothenetworkprint
server.
Toensurethatusersinaworkareaareassignedtoprintersintheirarea,an
administratortypicallyfilterstheprinterpolicybyclientIPaddress.
ApplicationStreaming
Thetwomaincomponentsofapplicationstreamingare:
TheCitrixStreamingProfiler
Usedtopackageanapplication.
Configuresaprofilethatmatchestheoperatingsystem,servicepacklevel,drive
letterandlanguageoftheclientdevice.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 32
Afteranapplicationprofileiscreateditcanbemadereadytostreamtousersby
publishingitusingtheAccessManagementConsole.
TheCitrixStreamingClient
Locatesthestreamingapplication.
Setsupanisolationenvironmentontheclientdevicefortheapplication.
Streamstheapplicationondemand.
SupportedApplicationStreamingClients
Astreamedapplicationcanberequestedthrough:
TheProgramNeighborhoodAgent
or
AWebInterfacesite
ConfiguringApplicationStreaming
Accessedfromserverenables:
AnapplicationinstalledandpublishedonaPresentationServertobelaunchedand
accessedinanICAsession.
AnapplicationtobeinstalledbytheInstallationManageroranapplicationtobe
streamedtotheserver.
Streamedifpossible,otherwiseaccessedfromserverisalsocalleddualmodestreaming.
Anadministratorcanmakesure:
TheapplicationwillbestreamedtothosethathavetheCitrixStreamingClient.
TheapplicationwillbeavailableonaPresentationServeras
Apublishedapplication
AnapplicationtobeinstalledbytheInstallationManager
AnapplicationtobestreamedtotheservertothosethatdonthavetheCitrix
StreamingClient.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com
VisitCitrixxperience.comformoreCitrixcertificationpreparationproducts. 33
Streamedtoclientenablesanapplicationtobestreamedfromafileservertothevirtual
desktopsouserscanlaunchtheapplicationlocally.
Ifanadministratorwantsto:
StreamapplicationsthroughtheWebInterfaceusingXenApp:
TheXenAppWebsiteischosenasthetypeofsitetocreate.
StreamapplicationsthroughtheCitrixXenAppPluginusingXenApp:
TheXenAppServicessiteischosenasthetypeofsitetocreate.
CitrixStreamingProfiler
Beforepublishingastreamingapplication,youmustpreparetheapplicationwiththeCitrix
StreamingProfiler:
OntheworkstationwiththeStreamingProfilerinstalled,makesuretheapplications
setupprogramisavailablefromtheprofilingworkstation.
FromtheStartmenu,opentheStreamingProfilerandselecttocreateaNewProfile.
Intheprofilingwizard,selecttheoperatingsystemsthatmatchyourendusers'
operatingsystems.
Thisistheinitialtargetintheprofile.
Followthewizardstepstoinstalltheapplicationinthestreamingapplicationprofile.
Finally,savethecompletedprofileonanetworkfilesharethatyourenduserscan
access.
ThemosttrustedwebsiteforCitrixcertificationpreparationmaterial,Citrixxperience.com