XenApp 6.5 Windows Server Customization

Please check out www.kaztechsolutions.co.uk for more of my technical posts, alternately please call us on 01932 268289. 

These are a list of settings that i change to a XenApp server (6 and above) before i start the install of XenApp, if you have a any additional changes that you make please let me know.  A lot of these configurations are taken from the this XenApp guide, XenAppBlog.com and my own experiences.

Configure Windows 2008 R2 with license and IP information.
Apply SP2 and latest windows updates as required.
Setup the page file to run on a drive that doesn't contain any apps - look here for info on setting up page file.
Change power setting to high performance.

Turn off IE ESC (Enhanced Security) through server manager.

Disable Data Execution Prevention on Windows 2008 : bcdedit.exe /set {current} nx AlwaysOff
Disable Windows animated boot : bcdedit /set bootux disabled

Disable Windows Scheduled tasks

• Application Experience > AitAgent
• Application Experience > ProgramDataUpdater
• Autochk > Proxy
• Customer Experience Improvement Program > everything under this node (Consolidator, KernelCeipTask, UsbCeip, ServerCeipAssistant, ServerRoleCollector, ServerRoleUsageCollector)
• Defrag > ScheduledDefrag
• DiskDiagnostic > Microsoft-Windows-DiskDiagnosticDataCollector
• Power Efficiency Diagnostics > AnalyzeSystem
• Server Manager > ServerManager
• Windows Error Reporting > QueueReporting

Configure GPO's for XA Server - 

• Disable UAC - User Account Control: Detect application installations and prompt for elevation
• Disable Windows Services through GPO - Windows Firewall, Multimedia Class Scheduler, Network List Service, Network Location Awareness, Windows Defender
• Disable Windows Updates - Configure Automatic Updates: Disabled
• Disable Error Reporting - Disable Windows Error Reporting: Enabled
• Disable CEIP - Turn off Windows Customer Experience Improvement Program: Enabled
• Disable System Restore - Turn off System Restore: Enabled
• Disable Printer mappings for RDP sessions - Do not allow client printer redirection: Enabled
• Use Windows Group Policy Preferences to apply the following registry changes.

Hide System Hard Error Messages - HKLM\System\CurrentControlSet\Control\Windows

“ErrorMode”=dword:00000002

Spooler Warning Events - HKLM\System\CurrentControlSet\Control\Print\Providers

“EventLog”=dword:00000001

Paging of the Executive - HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management

“DisablePagingExecutive”=dword:00000001

Registry Lazy Flush Interval - HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager\

“RegistryLazyFlushInterval”=dword:00000060 (dec)

Worker Threads - HKLM\System\CurrentControlSet\Control\Session Manager\Executive\

“AdditionalCriticalWorkerThreads”=dword:00000064 (dec)

SMB 1.0 Client Optimization Note: Tuning SMB 1.0 is required in mixed (2003 / 2008 R2) environments, where SMB 2.0 cannot be used.
HKLM\SYSTEM\CurrentControlSet\Services\Lanmanworkstation\Parameters

"MaxCmds"=dword:00002048 (dec)
HKLM\SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters
"MultiUserEnabled"=dword:00000001
HKLM\SOFTWARE\Microsoft\Windows\ CurrentVersion\Policies\Explorer
NoRemoteRecursiveEvents”=dword:00000001
HKLM\SYSTEM\CurrentControlSet\Services\ Lanmanserver\Parameters
"MaxWorkItems"=dword:00008192 (dec)
"MaxMpxCt"=dword:00002048 (dec)
"MaxRawWorkItems"=dword:00000512 (dec)
"MaxFreeConnections"=dword:00000100 (dec)
"MinFreeConnections"=dword:00000032 (dec)
SMB 2.x Client Tuning - HKLM\System\CurrentControlSet\Services\ LanmanWorkstation\Parameters
“DisableBandwidthThrottling"=dword:00000001
“DisableLargeMtu”=dword:00000000
HKLM\SOFTWARE\Microsoft\Windows\ CurrentVersion\Policies\Explorer
"NoRemoteRecursiveEvents”=dword:00000001
Disable Logon Screensaver - HKEY_USERS\.DEFAULT\Control Panel\Desktop
"ScreenSaveActive"="0"

And remember to optimize your Av as well using the following Citrix guide.


For more XenApp registry changes have a look at XenApp 6 Tuning GPO for Windows 2008 on XenAppBlog.com

NOTE:  Once you have your GPO setup the way you like it take a backup of it using GPMC for future use, as once you have these settings configured within a GPO you can simply import these settings back in.

Disable Language Bar

Please check out www.kaztechsolutions.co.uk for more of my technical posts, alternately please call us on 01932 268289. 

One thing i do like to do on all my XenApps Server's is to disable the language bar through the reistry on each XA server. 

Registry Key: HKEY_LOCAL_MACHINE/System/CurrentControlSet/Control/Citrix/wfshell/TWI
Value Name: SeamlessFlags
Value Type: REG_DWORD
Value: 0x40000

http://support.citrix.com/article/CTX101644 

Enabling Desktop Viewer on XA and XD

Please check out www.kaztechsolutions.co.uk for more of my technical posts, alternately please call us on 01932 268289. 

Some times you may notice that the desktop viewer bar is not avaliable when you connect to a XD or XA but you can enable this with the following to ensure that the Desktop Viewer bar is always used for XD session while you have implemented the preceding change for a single Web Interface site that contains both XenDesktop farm and XenApp farm.

Ensure that the c:\inetpub\wwwroot\citrix\SiteName\conf\default.ica file does not contain a line ConnectionBar=0 or ConnectionBar=1
If you require an app to show as a desktop change the following .conf file







Ensure that the c:\inetpub\wwwroot\citrix\SiteName\conf\webinterface.conf file has the line, ShowDesktopViewer=On. The default content for this line could be #ShowDesktopView=Off.

XenApp 6.5 Planning

Please check out www.kaztechsolutions.co.uk for more of my technical posts, alternately please call us on 01932 268289. 

I always find when doing any kind of Citrix deployments whether it be test labs, pre-production or live systems there is an awful lot to consider before you even start to plan your roll out - and rightly so. A lot of this is for my own use and just to jog my memory form time to time and also to make sure i don't miss anything out of the planning side of things. If you would like to add something to this or let me know the way you go about planning a XenApp 6.5 please let me know.


Hardware and Software considerations

• What hardware will you be using? How much RAM does the server, what are the CPU's and their spec, what disks are going to be used and their speed.
• Windows licensing? What edition of OS are you going to be using? Std, Ent or DataCenter.
• Do you have your Windows RDS licensing?
• What OS do you plan to install XenApp on and is it 32bit of 64bit?
• What hypervisor do you plan on using? XenServer, VMware, Hyper-V?
• What Citrix Licensing do you have and what model do you have? Concurrent or user/device? 

Application/User Considerations

• How many users do I anticipate will want to connect to each application during peak and off-peak hours?
• Is there any compliance or security concerns/issues around your apps?
• Will any of the apps be graphically intensive?
• Do your apps require any USB peripherals? Digital dictation, scanners, CD burners, WebCams?
• How are you planning to deliver your apps?  All of which have pro's and con's.

• Do you required UAC?  If so do you need it to prompt or not?

Networking Considerations 

• What's your network topology like?
• Do you have any high latency links?
• What if any security measures are required?
• Consider your AD requirements if any and if there will be any trusts involved.
• If two-factor authentication required?
• Do you require single sign-on?
• Is pass-through authentication required?
• Will you require Branch Repeater?

XenApp Server Configuration Considerations

• How many farms are required? Do you have high latency?
• How many zones are required? Do you have multiple sites?
• What database product are you going to use?  SQL or Oracle?  Remember SQL Express cannot be used if you have more than one site.  Also consider your database hardware and your database maintenance - replication and backups. 
• Plan server loads and location that apps are installed.
• How many XenApp server's will be required?  Use Load Testing Services on the XenApp servers to simulate how your users run applications on your servers.
• How are you going to setup your XML broker and web interface?  What port will they run on and will they be installed on the same server?
• How are you going to setup your Data Collector? Do you need more than one?
• Where are you going to place your Apps?
• What server functions will be installed where? Will you install the license server on the same server as your Web Interface for example?
• 
  

Installing XenApp

• Will you be using the wizard based or command line installation?
• What roles will be installed on each XenApp server?  Will you put the data collector with the installation of AppCenter?
• Before you install XenApp have you meet the following? Latest updates are installed, no other instance of XenApp is installed and what are you doing with Citrix XML and IIS Integration.
• If you are using SQL or Oracle have you setup a DNS?
• Have you decided on a server mode?  Are all XenApp server's going to be a data collector's and available for election or are you going to use session-only servers?
• Do you want to Windows Desktop Experience Integration? Do you want a Windows 7 look and feel if you offer a desktop via XenApp?
• Have you setup a License server yet or are you going to use an existing License server?

Configuring XenApp

• When it comes to configuring XenApp make sure you have information such 

- Are you joining an existing farm or a new one?

- If creating a new farm have the name and domain ready.

- Select the data store database type and connection information.

- Do you have the database credentials?

- Are you going to use shadowing?

- What server mode and zone name?

- Do you have the licensing information?

• Do you want to configure XenApp via the comman-line?
• Are you going to use provisioning services as a XenApp server deployment method?
• How are you going to maintain, backup and restore the data store database?
• Who are going to be your Citrix administrators?
• If you are a service provider will you need the App Delivery Setup Tools?  This allows you to deploy XenApp farms quickly.
• What Citrix policies are you going to use? How are you going to apply the policies?

• How are you going to define the user environment?  Consider things like change user logons, what devices can they access, any folder redirections, audio.
• Are you going to enable workspace control?
• How are you going to maintain session activity?  Session Reliability, auto-reconnect and ICA keep alive.
• Are you going to use session linger?  This manages the launch times between apps.
• How are you going to optimize the users sessions?  HDX config, Flash content, video and audio playback.

XenApp Security

• Do you need to mark your data store secure? 
• Are you going to require SecureICS and SSL/TSL?
• Do you need to provide a Secure Gateway?
• Are smart cards a requirement?
• Do you need to log administrative changes?

Migration Considerations

• Do you plan migrate apps from an old farm such as a XenApp 5/6 farm.