Thursday 6 December 2007


Had an issue recently where a certain application was causing issues alongside other apps on a Citrix Server.
The only option was to isolate the app on its own server but I wanted to make this as seamless as possible.
The customer was using a published locked down desktop, i looked at PNAgent but i was probably going to hit problems with the locked down desktop so avoided it.
I instead wanted to have .ica files on the desktop that used pass-thru to launch the dodgy app on the isolated ctx server and also would accept command parameters so in effect creating my own content redirection.
Heres what i had to do... a little messy but you will get the idea.

Webica.ini add the following to prevent prompt for client security:
[Access]
GlobalSecurityAccess=405



Add the following to get rid of full screen mode prompt:
[HKEY_CURRENT_USER\Software\Citrix\ICA Client\Keyboard Mapping\Tips] "In full screen mode"=dword:01324326

Heres the template for the ICA FILE
[WFClient]
Version=2

[ApplicationServers]
Client Desktop=

[Client Desktop]
Address=nameofctxserver
InitialProgram=#publishedappnamegoeshere
ClientAudio=Off
Compress=On
DesiredColor=2
TransportDriver=TCP/IP
WinStationDriver=ICA 3.0
TWIMode=On
DesiredWinType=8
DesiredHRES=800
DesiredVRES=600




For single sign on:
1. In the Appsrv.ini file of the users profile, add the following lines at the bottom of the [wfclient] section:
···SSOnUserSetting=On
···EnableSSOnThruICAFile=On


2. In the .ica file you want to use, add the following line in the [Application] section (this is the section where all the settings like resolution or encryption are stored):
···UseLocalUserAndPassword=On

3. Delete %appdata%\ica client folder if required and md new one.
4. Create new appsrv.ini that contains the following and copy to %appdata%\ica client:
[WFClient]
LogFileWin32=C:\Documents and Settings\agreen\Application Data\ICAClient\wfcwin32.log
PersistentCachePath=C:\Documents and Settings\agreen\Application Data\ICAClient\Cache
DesiredColor=2
ScreenPercent=0
DesiredHRES=640
DesiredVRES=480
PNCacheVersion=1
EnableSSOnThruICAFile=On
SSOnUserSetting=On
SSOnCredentialType=Any

No comments: