Terminal Server & XenApp Tuning Tips Group Policy v1.1

By Trond Eirik Haavarstein 02/06/2009 – 17:55

gpmc 09 300x214 Terminal Server & XenApp Tuning Tips Group Policy v1.1

All credits go to Pierre Marmignon for his excellent post this weekend listing up all the Terminal Server & XenApp Tuning Tips. I have created a Group Policy based on these tips with OS W2K3/W2K8 and XenApp 4.x/5.x. The following is included in the policy :

  • Operations System Tuning & XenApp / Terminal Services
  • Additional Windows Explorer Tuning
  • XenApp Tuning

I am using the GPMC for Windows 2008 so you will need to download Group Policy Preference Client Side Extensions for W2K3 and you install it with this command : start /wait Windows-en-US-KB943729.exe /quiet /norestart

Follow the picture guide for instructions on how to import these settings. The Group Policy can be downloaded here.

gpmc 01 300x196 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 02 300x290 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 03 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 04 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 05 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 05 01 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 06 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc07 300x230 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 08 300x243 Terminal Server & XenApp Tuning Tips Group Policy v1.1

gpmc 091 300x214 Terminal Server & XenApp Tuning Tips Group Policy v1.1

Update 22.06.2009 – XenApp50 Server Tuning Policy v1.1 :

The Group Policy Template has been updated to version 1.1 reflection changes from CitrixTools.net and some minor typos in the RDP-TCP section. I have also added Item-level Targeting for ICA-TCP tuning settings that checks if ICA-TCP exist in registry before applying the policy. The reason for this are because if the ICA-TCP exist there will be problems installing Citrix XenApp.

banner 011 Terminal Server & XenApp Tuning Tips Group Policy v1.1

Click here to get free eBook “Citrix XenApp 5.0 for Windows 2008 – A Hands-On Guide“

  1. 42 Responses to “Terminal Server & XenApp Tuning Tips Group Policy v1.1”

  2. Hi there.
    I tried te install this on Windows server 2003 R2, but at the import i get:
    “The version option is invalid”.
    Installed the Group Policy Preference Client Side Extensions for W2K3 also.
    Will it only work on Windows 2008 server ?

    By Tonny on Jul 31, 2009

  3. This will only work from a Windows 2008 Server or Windows Vista SP1-based computers that have Remote Server Administration Tools (RSAT) installed. The domain controller doesn’t need to be W2K8. So if you have a W2k8 Server in your environment install GPMC or simply use a Vista PC to manage your Group Policy’s.

    More info at Microsoft : http://support.microsoft.com/kb/943729

    Eric

    By admin on Jul 31, 2009

  4. Does this GPO v1.1 support windows 2008 x64 XenApp Servers? I just wanted to make sure that keys will be created in the correct places for x64 servers…

    BTW… you guys are the best…

    Thanks,
    Franco

    By Franco on Sep 4, 2009

  5. Thanks, good to hear you like the webpage. All Registry Hives are provided for x86 platforms. For x64 Platforms, do not forget to add “WoW6432Node” if hive is in HKLM\Software.

    By admin on Sep 4, 2009

  6. Thanks. We are in a Windows Server 2003 environment so we can’t use your Windows Server 2008 template.

    Do you have an ADM version of this wonderful template?

    Thanks in advance,
    Benoit

    By Benoit Bégin on Sep 21, 2009

  7. You can use it, you only have to admin the policy with a Windows Vista Machine. Take a look at the 2nd comment regarding this issue.

    Eric

    By admin on Sep 21, 2009

  8. Hi Eric,

    The thing is that we do not use Windows Vista in our organization. Can you easily export an ADM version of your template?

    By Benoit Bégin on Sep 22, 2009

  9. Nope sorry, you will have to put a virtual machine or something

    By admin on Sep 22, 2009

  10. I try to force the GPO on a windows 2008 xenapp 5.0 farm. i checked that the GPO got apply on the machines. after login the users i found out that the roaming profiles are not loaded correctly. they had load a roaming temporary profile. Any idea how can i solve that.

    thanks

    By George Kentas on Nov 4, 2009

  11. Yes, you will need to delete key HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal ServicesWFDontAppendUserNameToProfile. I will soon update this

    Eric

    By admin on Nov 4, 2009

  12. Hi.
    When I am following your guide to import your admx file to GPO, I keep getting a “No backups found” when I browse to the folder where the admx-file are located. Also tryed to copy the file locally to the server where I am trying from. It is a Win 2008 with Group Policy Management enabled.
    What do I do wrong?

    Thanks

    By Torsten on Jan 28, 2010

  13. Hi Torsten,

    You will need to include the Backups folder. If you download and extract the file to C:\, the path will be “C:\XenApp50 Server – Tuning Policy\XenApp50 Server – Tuning Policy\Backups\”.

    Eric

    By admin on Jan 28, 2010

  14. I set this policy on an OU with a win2008 x86 server in, the policy is applied (i see it in the gpresult), but when i check the registry nothing is added or changed, what am i doing wrong?
    thx, steven

    By Steven on Feb 2, 2010

  15. Hi Steven,

    You will need to delete the key HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\WFDontAppendUserNameToProfile

    This settings is to set Allow Mandatory Profiles Configuration via GPO. I will remove this in the next version.

    Also make sure you have a Loopback processing GPO configured, it’s not part of this template.

    http://support.microsoft.com/kb/231287

    Eric

    By admin on Feb 2, 2010

  16. Great Policy testing it right now as we speak. Had a quick question have you ever seen or heard of a document out there for best practices on user lockdown inside of a full published desktop for Xenapp. We are looking to deploy this to about three hundred end users, and just trying to understand the best ways to do profile redirection, locking down of admins tools, and also making sure server manager doesn’t launch on login.. Thanks again for your blog

    By James Briggs on Mar 21, 2010

  17. Hi James,

    I’m not aware of any documents on user lockdown. If you have Citrix XenApp Enterprise license I would recommend using the Citrix Profile Management. Within policy you will need to remove run, hide drives, disable registry, disable manage computer e.g. Take a look at this great blog Group Policy Center.

    By admin on Mar 21, 2010

  18. Looks great. I was ondering if there an older version of this gpo in .adm format anywhere. Small shop not ready to switch our AD servers to 2008. Thanks

    By Daniel on Apr 13, 2010

  19. Hi Daniel,

    You do not have to switch your AD to W2K8, you can administrate the policy’s with Windows Vista / Windows 7 with the RSAT tool installed.

    Eric

    By admin on Apr 14, 2010

  20. Thank you so much for compiling this into an ADMx for us!

    Excuse my ignorance, but could you elaborate on why a loopback policy needs to be set and also expand a little on my farm running on 64bit 2008 and your statement “do not forget to add “WoW6432Node” if hive is in HKLM\Software.”? Can you push me in the right direction to tie things up so I can use this?

    Thanks so much,

    Chris

    By Chris Evensen on May 3, 2010

  21. Loopback Policy Explained : How to apply Group Policy objects to Terminal Services servers
    WoW6432Node : Nicolas Dille, Helge Klein and MSDN

    Eric

    By admin on May 3, 2010

  22. Version 1.1 works very well with x86 servers. How do I go about changing it to work correctly on 64bit 2K8 R2 domain controllers for 64bit 2K8 R1 XenApp servers? Cheers GB

    By Glen_B on Jun 30, 2010

  23. Hi Glenn,

    If your are going to use this policy on Windows 2008 x64 Remote Desktop Services (RDS) you’ll need to edit each string to point to the new Wow6432Node location.
    In Windows 2003 x32 and x64 the Software registry keys are located e.g. like this : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AeDebug.
    In a Windows 2008 x64 environment they are located here : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\AeDebug

    I don’t know when I’ll have time to create new W2K8×64 templates, but hopefully they will be finished after the summer vacation.

    By Trond Eirik Håvarstein on Jun 30, 2010

  24. Hi there,

    My environment as below:

    windows 2003 AD
    Windows 2008 Xenapp 5 Server

    windows XP workstations

    How can I implement this group policy?
    what do I need to download / install?
    Is that possible a little bit details please?

    Thanks
    Johnson

    By Johnson on Jul 21, 2010

  25. Hi Johnson,

    All you have to do is to install Group Policy Management Console on one/all of your W2K8 XenApp 5 Server’s. Remember that you from now on need to administrate Group Policy from these servers. Start – Run – “ServerManagerCmd.exe -i GPMC”.

    If you sign up for the eBook you’ll find all the information you need.

    By Trond Eirik Haavarstein on Jul 21, 2010

  26. We have installed XenApp 6.0 on Windows 2008 R2. Will this tuning policy work with XenApp 6 as well?

    Thanks,

    By Tuck on Aug 6, 2010

  27. Hi Tuck,

    No, you’ll need to take a look at this post : XenApp 6 Tuning Group Policy for Windows 2008 R2

    By Trond Eirik Haavarstein on Aug 7, 2010

  28. Hi

    LogoffCheckSysModules is not supported in XenApp 5.0 and 6.0 on Windows 2008 x64. Do you any other way of sorting process not closing at logoff?

    Regards,
    Brian

    By Brian Anderberg on Aug 20, 2010

  1. 15 Trackback(s)

  2. Jun 2, 2009: www.virtualdesktop.fr | Terminal Server & XenApp Tunin…
  3. Aug 22, 2009: XenDesktop Tuning Tips Group Policy v1.0 | citrix xenapp | xenserver | xendesktop | terminal server blog
  4. Oct 13, 2009: XenDestkop & XenApp Tuning Tips Group Policy « Unofficial Citrix Blog
  5. Jan 14, 2010: Using Group Policy to tune XenApp and Microsoft Terminal Services «
  6. Jun 23, 2010: How To Backup and Restore Group Policy
  7. Aug 8, 2010: HDX Monitor for XenDesktop - Better User Experience
  8. Aug 8, 2010: How To Setup The Citrix Universal Print Driver
  9. Aug 8, 2010: Citrix Receiver for Apple iPad - First Look
  10. Aug 8, 2010: Why Internet Explorer will kill your memory - Part I
  11. Aug 8, 2010: XenDesktop problem with Windows 7 N / KN version
  12. Aug 18, 2010: Using Group Policy to hide and map specified drives
  13. Aug 18, 2010: Remote Desktop Services & XenApp 6 Tuning Tips ADMX Group Policy
  14. Aug 18, 2010: Interview with Pierre Marmignon - Virtual User Environment Manager
  15. Aug 18, 2010: Turn your Windows 7 laptop into a Wi-Fi hotspot
  16. Aug 18, 2010: Get the news from Citrix Synergy 2010

Post a Comment

©Copyright 2009 xenappblog.com | Privacy Policy | Terms Of Use | Contact