This document discusses policies in Citrix XenApp 6. It explains that XenApp 6 uses both Group Policy and policies configured within the Citrix Delivery Services Console to manage settings. Group Policy takes precedence over Delivery Services Console policies if conflicts exist. The document also demonstrates how to troubleshoot policy precedence issues and consider whether to use Group Policy or Delivery Services Console policies for a given environment.

1. Citrix XenApp 6
Policies
Stéphane Thirion / Activlan
20th Sept 2010

2. Summary
Worker Groups in XenApp 6 ✓
Policies in XenApp 6
What’s New ?
Provisioning XA6 Servers
Troubleshoot policies issue
Tips
Links
Questions

3. Policies in XenApp 6

4. Policies in XenApp 5, PS4, PS3, Metaframe XP…

5. What’s new ?

6. Diagram XenApp 6 policy system
GPO Editor Active Directory ADM/X
Group Policies GPFX
Directory
SysVol
• Citrix/MS OU policies (DFS)
• Citrix/MS Domain policy
GPMC • Citrix/MS Site Policies
Delivery GPFX Local
Citrix Policy IMA
Services Console Server
extensions (policies node) Database SysVol

7. Why XenApp has two way to configure settings ?
• Group Policy and IMA Policy contain the same settings
• Settings coming from either will merge in a single RSoP

8. Conflicts ? What will happen ?
Conflicts will occur if the same setting is coming from either
Group Policy (GP), IMA or Local Group Policy (LGP)

9. How does it work ?
<domain>SYSVOL<domain>Policies<guid><Machine or
User>GroupPolicyPolicies.GPF
XenApp IMA DataStore
HKLMSoftwarePoliciesCitrix

10. Demo
http://www.youtube.com/watch?v=R9UyHjOrjxs&hd=1

11. Summary
Worker Groups in XenApp 6 ✓
Policies in XenApp 6 ✓
What’s New ? ✓
Provisioning XA6 Servers ✓
Troubleshoot policies issue
Considerations
Links
Questions

12. Troubleshoot policies issue

13. How can I track from where
settings are coming from ?

14. How can I track from where
settings are coming from ?

15. Using the modeling wizard

16. Summary
Worker Groups in XenApp 6 ✓
Policies in XenApp 6 ✓
What’s New ? ✓
Provisioning XA6 Servers ✓
Troubleshoot policies issue ✓
Considerations
Links
Questions

17. Considerations

18. Should I use Group Policies or configure
settings in the CDSC ?

19. Keep that in mind
• The Unfiltered policies affect all servers and all users
• Group Policy is a must if you need cross farm policies
• Group Policy (Domain) takes over IMA Policy and Local Policy
• Group Policy require a clean OU/Server organization
• IMA Policy doesn’t require Active Directory
• IMA Policy doesn’t require specific rights in Active Directory
• IMA Policy is the best fallback option if no access to Active Directory
• You can prioritizing Policies and creating exceptions
• RSoP doesn’t display settings that policies have not configured

20. Sources and links
XenApp 6 SDK - Group Policy Overview by Tom M Kludy
http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Overview
XenApp 6 SDK - Group Policy Provider by Tom M Kludy
http://community.citrix.com/display/ocb/2010/05/07/XenApp+6+SDK+-+Group+Policy+Provider
Looking to migrate to XenApp 6 soon? What about keeping your old FARM settings? by S. Weizman
http://community.citrix.com/pages/viewpage.action?pageId=142673139

21. Questions ?

22. Citrix XenApp 6
Policies
Stéphane Thirion / Activlan
http://www.archy.net or
sthirion@activlan.com
Twitter @archynet