Jump to content

David Clark1709160691

Legacy Group
  • Posts

    236
  • Joined

  • Last visited

  • Days Won

    6

Posts posted by David Clark1709160691

  1. Yes, and I have set the policy appropriately:

     

    BrowserName                : PassportVDI $S34-61
    ColorDepth                 : 
    Description                : Passport Windows 10 1809 Desktops
    DesktopGroupUid            : 34
    Enabled                    : True
    ExcludedUserFilterEnabled  : False
    ExcludedUsers              : {}
    IconUid                    : 
    IncludedUserFilterEnabled  : True
    IncludedUsers              :
    {domain\Passport Users}
    LeasingBehavior            : Allowed
    MaxPerEntitlementInstances : 0
    MetadataMap                : {}
    Name                       : PassportVDI
    PublishedName              : PassportVDI
    RestrictToTag              : 
    SecureIcaRequired          : 
    SessionReconnection        : SameEndpointOnly
    UUID                       : dbfca12f-a474-49e6-b3b6-82ef0d385e36
    Uid                        : 61


    PS C:\Windows\system32> Get-BrokerEntitlementPolicyRule -Name 'Passport-RDSH'


    BrowserName                : Passport-RDSH $S33-59
    ColorDepth                 : 
    Description                : Passport Kiosk Desktops
    DesktopGroupUid            : 33
    Enabled                    : True
    ExcludedUserFilterEnabled  : False
    ExcludedUsers              : {}
    IconUid                    : 
    IncludedUserFilterEnabled  : True
    IncludedUsers              : {domain\Passport Users}
    LeasingBehavior            :
    Allowed
    MaxPerEntitlementInstances : 0
    MetadataMap                : {}
    Name                       : Passport-RDSH
    PublishedName              : Passport-RDSH
    RestrictToTag              : 
    SecureIcaRequired          : 
    SessionReconnection        : SameEndpointOnly
    UUID                       : f21b9338-b89c-498f-a2e0-a58c3acb7ee4
    Uid                        : 59

     

    Here are the settings for the old Win7 DG that's working correctly.  The only difference is the Leasing Behavior, I've tried both with no apparent difference.

     

    BrowserName                : Passport $S10-18
    ColorDepth                 : 
    Description                : 
    DesktopGroupUid            : 10
    Enabled                    : True
    ExcludedUserFilterEnabled  : False
    ExcludedUsers              : {}
    IconUid                    : 
    IncludedUserFilterEnabled  : True
    IncludedUsers              : {S-1-5-21-1218970493-1797260997-794563710-8855, domain\bskalla, 
                                 S-1-5-21-1218970493-1797260997-794563710-1008, domain\bskallaadm...}
    LeasingBehavior            : Disallowed
    MaxPerEntitlementInstances : 0
    MetadataMap                : {}
    Name                       : Passport
    PublishedName              : Passport
    RestrictToTag              : 
    SecureIcaRequired          : 
    SessionReconnection        : SameEndpointOnly
    UUID                       : 1b727201-6dce-4939-b70a-32ae6219946a
    Uid                        : 18

  2. I work in a manufacturing plant where for some employee training, they have about 50 VDI running Windows 7,  All of these machines are accessed via HP Thin Clients that automatically login and launch the desktop.  All sessions share the same UserName and password.  Needing to get these machines off of Win7, I opted to deploy a couple of Win2019 servers to deliver these Desktops rather than a bunch of VDI.  I created an optimized image and successfully tested on a single thin client.  Once I enable the delivery group for everyone, the thin clients launch the Desktop and I can move the mouse pointer around but am unable to click on icons or use the keyboard.  Director shows only one active session.  I've enabled the registry setting to allow Multiple users under the same UserName in Windows.  The GPO 'Restrict Remote Desktop Services users to a Single Remote Desktop Services Session' has been disabled.

     

    Any suggestions on making this work?

  3. Director only updates it's view every few seconds (I don't recall the exact value, maybe 30 seconds). In addition, Director will only reflect what the VDA is reporting back to the Monitor DB so if the VDA last reported a Disconnected session, that is what Director will show.  There may be scenarios where the User Session within Citrix has indeed Disconnected but at the OS level, the session is still active due to some running process holding the session in an Active state.

    • Like 1
  4. After updating the DSN file on the XenApp servers, you stop the IMAservice and run the 'dsmaint config' command to configure the credentials used for the new database.

     

    In the DSN file, the Server entry would be ServerName/DBName.  You might take one server and use the ODBC wizard to create a new DB connection and then copy the DSN file that is created over to the other servers.

     

    Here is a snippet from the PowerShell script I created to do this (substitute  DOMAIN and user name as is appropriate for your environment) I pass the $DBUser and $DBPass variables into the command.   My complete script  queries the farm for a list of servers (You could use get-content to use a text file instead), copies the DSN from a file share, stops the IMA Service, executes the command below and then restarts the IMAservice.

    $DsmaintResult = Invoke-Command {&"C:\Program Files (x86)\Citrix\system32\Citrix\Ima\dsmaint.exe" config /user:DOMAIN\ctx65db /pwd: /dsn:"C:\Program Files (x86)\Citrix\Independent Management Architecture\mf20.dsn"} -Computername $Server -ArgumentList $DBUser, $DBPass

     

  5. You would need to create a GPO that filters the Mandatory profile settings to only that specific user.  You might also need to change the profile type. Assuming you have more than a single Citrix server, you need to determine where the profile will be stored, the location of the profile will be defined in your GPO.  Search Microsoft's documentation on special handling required for Mandatory profiles for the specific details.

     

    Windows treats some aspects of Mandatory profiles in much the same way as a Temp profile, since the profile is Read only, any software that attempts to install/repair within the context of that user will fail.

  6. Do you have the account properties properly defined?   When initially installing Workspace on an 'unmanaged'  computer, you are prompted to create an account which implies that you can provide your email address to Auto-Configure the account.  Your employer has to configured this feature for it to work properly.  Instead of an email address, if you enter the 'External' URL to your Citrix environment, you should then be prompted for your domain credentials. 

     

    There is also the possibility that your credentials were cached incorrectly, Right Click on Workspace in the Notification area and select 'Advanced Preferences.  Select 'Delete Passwords'.

     

    Assuming you're running Windows.

     

     

    • Like 1
×
×
  • Create New...