FAQ: Password change over LDAP on Read Only Domain Controller Servers

Question : Can customer change password over LDAP when using Read only Domain controller RODC? Answer : Password change is not possible on RODC servers. Note: We support referrals only for group extraction, it might not be applicable for password resets. For information on password change in a...

During New MAM Enrollment End User Receives - "An error occurred. The enrollment will stop"

During enrollment MDM proceeds successfully, but the MAM enrollment fails with "An error occurred. The enrollment will stop". OnAndroid you may experience the following: Enrollment will successfully complete, however Secure Hub is enrolled only in MDM mode not MAM. Scenarios that Identify failed...

Federated Authentication Service High Availability and Scalability

FAS High Availability Q: How can I restrict the FAS servers available to a particular StoreFront? To do this, you edit the GPO which applies to the StoreFront. You remove unwanted FAS FQDNs from the list, but be sure to replace them with a blank space character. This will ensure that the "index"...

PVS target on ESXi hardware v10 and v11, fails to boot at "Starting Windows"

Target Devices Failing to boot,hanging at "Starting Windows" Wireshark trace shows Single IO phase of boot but BNIStack driver does not get loaded and no MIO Phase starts...

Error: Secure Hub - Couldn't Load Store

There are two scenarios in which this error might occur 1While performing a new enrollment. 2 Tapping on Store for a already enrolled user...

Citrix SCOM MP for StoreFront causes high memory utilization on Windows Server 2008 R2

Citrix SCOM MP for StoreFront causes high memory usage as well as can spawn many cscript.exe and conhost.exe processes...

How to Load Balance XenMobile Server Admin Portal

This article will guide you to load balance the XenMobile admin portal running on port 4443. Load balancing the admin portal will ease your XenMobile administration when you have cluster of XenMobile servers with which you can access the admin portal using one single load balancing IP instead of...

Failed to Promote vDisk from Remote PVS Server

Failed to promote vdisk version from remote PVS server due to error "DeviceIoControl error: A device attached to the system is not functioning." And this vDisk Remote Mount error does not prevent Promotion of a vDisk Version, which will leave the vDisk in an unusable state. Customer will encounte...

XenMobile: What IP address has to be assigned to MAM LB?

XenMobile: MAM LB Configuration Looks like to this day the confusion still exist as to what IP Address has to be assigned to MAM LB on NetScaler which communicates with XenMobile Server. Whether this IP Address should be Internal or External? And what standard has to be followed is the objective ...

"Authentication Failed! (401)" When Trying to Create or Edit a Connector

Unable to create or edit aconnector. When you try to select a Datacenter on a new Connector, or when the page attempts to render an existing Connector, you get this error:...

SecureMail: Configuring Multiple Mailboxes

The requirement is to configure personal mailbox and a shared mailbox on Secure Mail for Android and iOS...

"XenDesktop Site is not reachable, check that the Citrix PVS Soap Server service user has XenDesktop permissions and network connectivity" While Promoting vDisk Version

The following error appears while trying to promote an updated version of a vDisk: "XenDesktop Site f0a65a14-f50b-403a-ba3b-77700c7829b7 is not reachable, check that the Citrix PVS Soap Server service user has XenDesktop permissions and network connectivity." The PVS Soap Server service runs as...

Failed to Start a VM Error : The SR Failed to Complete the Operation

The SR failed to complete the operation...

Published Desktop not launching automatically via Netscaler

Desktop was not launching automatically via Netscaler. When tried internally, the desktop was launching automatically...

USB Devices prompting to connect on each session

USB devices prompting to connect on each session:...

Allow iOS MDM Exchange profile to be set as DEFAULT, and other iOS apps to interact with MAIL

Inform XenMobile Administrators how to allow iOS enrolled users the ability to set the MDM provisioned Exchange profile to be set as default mail account. Users may not see the Exchange account listed in the iOS Mail settings. Additionally users will not be able to send email with this account fr...

PVS Streamed Desktops are Assigned the Same MAC Address

All desktops created by streamed VM setup wizard are assigned with the same MAC address...

In XenMobile Server Command Line Console :The error shows a message"hrtimer: interrupt took * ns"

Opening the XenMobile Server console: The error shows a message "hrtimer: interrupt took ns": This is a system level message, it’s just a info log from the system. It is a generic warning from the kernel, that some hardware interrupt took longer than expected to service...

With StoreFront Authentication only gateway users stuck detecting Citrix workspace app

When the gateway is configured for "Authentication only", when the user goes to the store in their web browser, after opening Citrix Workspace Launcher it gets stuck and does not proceed to the next screen...

Receiver 4.3 /4.4 When Client is Locked via Start Menu, User is Prompted with the Login Screen Twice

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver 4.3 Desktop Lock + Private LC3579 When client is locked via Start Menu Lock, user is requir...

How to sync exchange contacts with Local Contacts from secureMail

How to sync exchange contacts with Local Contacts from secureMail?...

XenMobile 10.x : Addition of shared Mailbox in Secure Mail

Question: Does XenMobile 10.x support the addition of a shared Mailbox in Secure Mail For both iOS and Android ? Answer: Currently this is not supported on Secure Mail ActiveSync protocol officially doesn't support shared access/delegation. Hence, Secure Mail both iOS and Android also doesn’t cla...

Creating a Mandatory Profile Recipe

Windows profiles include the user registry and the file system under c:\users%username%. Windows profiles are where application vendors store setting information particular to a user. What is stored here can be anything the vendors need to store for their applications to work. Many application ru...

Desktop Not Being Deleted from the Delivery Group

Objects not deleting from Citrix Studio XenDesktop 7.6 after deleting in Unidesk 2.9.6.3 via the UMC...

Unidesk Recipe for NP Desktop Logon Time Optimization v3

One very popular use case for VDI is for kiosk or lab machines. Uses for these types of desktops include classroom labs, library access and general computing in schools and corporations. Architects and Administrators of these types of use cases generally want to be able to define default...

App Layering Recipe For Google Chrome 2.6 or Later

Google Chrome by default will install into a user profile which is problematic for mass deployment in a layer. However Google does provide an “offline” installer that installs Chrome into “Program Files” and this installer should be used with Unidesk if installing into a layer. The default way...

UPM - "Most used" section on the start menu not populated correctly

The "Most Used" section in the Start menu is not populated correctly in the user profile when logging on to Windows 8 / Windows 10 / Windows server 2012 VDA...

How to remove or cancel incomplete tasks in Citrix App Layering

This guide covers how to remove and cancel half finished and incomplete tasks in Citrix App Layering. For example, you may have deleted a packaging machine off of your hypervisor, but the action remains incomplete in the management console...

How to resolve "Failed to probe partitions from virtual disk" error while importing an OS Layer

When importing an OS layer, you get this error: Failed to attach the disk /mnt/repository/Unidesk/OsImport Disks/Windows 10.vhd. Failed to probe partitions from virtual disk This is most often seen when importing a XenServer Windows 10 Gold VM that was exported as an OVF. However, it could happen...

FAQ: Limitation on calendar sync with Secure Mail?

Question: Do we have any limitation on calendar sync with Secure Mail? Answer: Secure Mail only syncs 6 months before and 12 months ahead events.It applies to both iOS and Android...

Citrix XenServer Multiple Security Updates

Description of Problem A number of security issues have been identified within Citrix XenServer. These issues could, if exploited, allow a malicious administrator of a guest VM to compromise the host. The issues have the identifiers: CVE-2017-10920, CVE-2017-10921 and CVE-2017-10922 High: Grant...

PVS target and server version compatibility

Q: Can a PVS environment be configured with PVS target version higher than the PVS server version? A: No, The PVS target version should be the same as the PVS server version Configuring PVS environment with PVS target version higher than the PVS server version may work however if there is an issu...

How to Test XenMobile Server Database Connectivity

This article describes how to test XenMobile Server database connectivity...

Troubleshooting Replication Status in Citrix Provisioning Server

NOTE : Provisioning Services does not accomplish file replication. Replication can be completed using a some of the methods in the list: 1. Manual Copy 2. Robocopy 3. DFS Replication Most enterprise environments use automated software to replicate multiple files across servers on-demand or on a...

How To Configure a Custom Per-AppVPN XML for WIP protected Win10 and Win10 Phone Endpoints

With the current variety of Windows 10 Endpoints like Laptops, Hybrids, Tablets and Smartphones. You see organizations moving to a Unified Endpoint Management Solutions to provide Endpoint security to these types off devices which are not managed by the traditional management tools. The user will...

Huawei Android User cannot Launch Secure Mail on Home Screen

Partial Android user cannot launch Secure Mail on desktop, error "This app requires a newer version of Secure Hub.Please update Secure Hub to run this app": Besides, Secure Mail can be launched via Secure Hub...

RSA Login Links Do Not Show as Hyperlinks in E-mail in Secure Mail

Secure mail app is unable to open hyperlinks from RSA site. The app is capable of opening other URL links but not this hyperlink. com.rsa.securid://ctf?ctfData=12345...... It shows up as regular text instead of a hyperlink...

How to Configure NetScaler MAS for readonly access via TACACS using Cisco ACS

Configure NetScaler MAS and Cisco ACS to provide readonly access to users for MAS...

Published desktop is launched in background of local applications

Setting registry key: ForegroundLockTimeout to 0 makes published desktop window to launch in foreground in most cases. HKCU\Control Panel\Desktop name: ForegroundLockTimeout type: REGDWORD data: 0 default: 200000 In some cases, there are applications that set this value to a non 0 value, which...

FAQ: XenMobile Derived Credentials

What are Derived Credentials? Derived credentials provide strong authentication for mobile devices. The credentials, derived from a smart card, reside in a mobile device instead of the card. The smart card is either a Personal Identity Verification PIV card or Common Access Card CAC. The derived...

High memory usage UPM

There is high memory usage of process userProfileManager.exe on all servers after upgrading to UPM 5.7...

Gstreamer 1.x Support on Receiver for Linux (Rfl)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Receiver for Linux Rfl leveraged Gstreamer components to decode and play the data streams, which is ...

How do I Set Specific SSL Protocols on XenMobile Server 10.6

With our strong emphasis in security, the ability to specify the SSL protocols supported by XenMobile Server is critical to our customers to help them to control which SSL Protocols they allow to access XenMobile. With XenMobile Server 10.6, we introduce a new CLI option that allows the...

Configure VMAC on Channel Group

To demonstrate how to configure Virtual MAC on NetScaler Interface Channel LACP or LR. The primary reason for using VMACs is that GARP may not be honored by Layer 3 devices in your Network. This can cause communication issues which will present during fail-over of a NetScaler. The resolution to...

XenMobile Policy State Pending or Failed on Windows Devices

This purpose of this article is to help XenMobile administrator troubleshoot issues related to windows policy deployment failures and also provide additional information on settings up XenMobile server with right values...

What is the Order of XenMobile Timeouts

Question: What is the order of XenMobile Timeouts? Answer: Forced Time Out under NetScaler gateway Session policies Background Service Ticket Session Timeout NetScaler gateway OS session policies Max Offline PeriodMDX app Inactivity Timerclient properties on XMS. Setting| Component| Default...

Clicking Outlook 2016 search field prompts for install and hangs

Every time the search field in Outlook 2016 is clicked on in an elastically layered image, a prompt for credentials is displayed and an installer launches & hangs. This completely disables the search functionality of Outlook. This error can also occur on Outlook 2013...

UserProfileManger.exe periodically crashes while UPM 5.8 running in a Windows 32-bit OS

While running UPM 5.8 in a Windows 32-bit OS, customer may suffer a periodical UserProfileManger.exe crash, every 7 days exactly. Windows Application Event will log event 1000 for that crash with exception code 0xc0000005, which indicates memory Access Violation...

How to check PVS target device write cache size remotely

...

Unable to send mails with attachment via Secure Mail.

Unable to send mails with attachments. Error in logs : "failed due to http 413" Error on device : "Can't Send Mail. Your message has been moved to the outbox. Please go to the outbox and try again."...