Citrix XenApp 6 Policies Stéphane Thirion / Activlan 20th Sept 2010
Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 What’s New ?
Provisioning XA6 Servers Troubleshoot policies issue Tips
Links Questions
Policies in XenApp 6
Policies in XenApp 5, PS4, PS3, Metaframe XP…
What’s new ?
Citrix Policy extensions
Delivery Services Console
(policies node)
IMA Database
GPMC
GPO Editor Active Directory Group Policies
• Citrix/MS OU policies • Citrix/MS Domain policy • Citrix/MS Site Policies
Directory SysVol (DFS)
Local Server SysVol
Diagram XenApp 6 policy system
ADM/X GPFX
GPFX
Why XenApp has two way to configure settings ?
• Group Policy and IMA Policy contain the same settings • Settings coming from either will merge in a single RSoP
Conflicts ? What will happen ?
Conflicts will occur if the same setting is coming from either Group Policy (GP), IMA or Local Group Policy (LGP)
How does it work ?
\\<domain>\SYSVOL\<domain>\Policies\<guid>\<Machine or User>\GroupPolicy\Policies.GPF
HKLM\Software\Policies\Citrix
XenApp IMA DataStore
Demo
http://www.youtube.com/watch?v=R9UyHjOrjxs&hd=1
Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 ✓ What’s New ? ✓
Provisioning XA6 Servers ✓ Troubleshoot policies issue Considerations
Links Questions
Troubleshoot policies issue
How can I track from where settings are coming from ?
How can I track from where settings are coming from ?
Using the modeling wizard
Summary Worker Groups in XenApp 6 ✓ Policies in XenApp 6 ✓ What’s New ? ✓
Provisioning XA6 Servers ✓ Troubleshoot policies issue ✓ Considerations
Links Questions
Considerations
Should I use Group Policies or configure settings in the CDSC ?
Keep that in mind • The Unfiltered policies affect all servers and all users • Group Policy is a must if you need cross farm policies • Group Policy (Domain) takes over IMA Policy and Local Policy • Group Policy require a clean OU/Server organization • IMA Policy doesn’t require Active Directory • IMA Policy doesn’t require specific rights in Active Directory • IMA Policy is the best fallback option if no access to Active Directory • You can prioritizing Policies and creating exceptions • RSoP doesn’t display settings that policies have not configured
Sources and links
XenApp 6 SDK - Group Policy Provider by Tom M Kludy http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Provider
XenApp 6 SDK - Group Policy Overview by Tom M Kludy http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Overview
Looking to migrate to XenApp 6 soon? What about keeping your old FARM settings? by S. Weizman http://community.citrix.com/pages/viewpage.action?pageId=142673139
Questions ?
Citrix XenApp 6 Policies Stéphane Thirion / Activlan http://www.archy.net or [email protected] Twitter @archynet