Thursday, February 12, 2009
[THIN] OT - patch your exchange servers...
http://www.microsoft.com/technet/security/bulletin/MS09-003.mspx
In short summation - a client machine could open (or simply preview) a specially formatted RTF message, and that could allow any manner of code to be run against the Exchange server with "service" level permissions.
The potential ramifications of this security issue is rather stunning. If you haven't updated your exchange servers yet, you really really should before this starts getting exploited.
Lan
[THIN] CAG Standard Style Sheet
Systems Engineer
ThedaCare IT
920-735-7615
[THIN] Re: Citrix licensing 11.5 and Rollup 6
so I don't know if that could be a factor.
You got me curious. I just checked and app names that are in folders
combined with the folder name are over that limit and working without
issue. My slightly educated guess is that is that alone is not a
factor.
The web server for the PN Agent or web clients will get Application
Event errors like this. So that would be something to look for.
***
Event Type: Error
Event Source: Program Neighborhood Agent at c:\inetpub\wwwroot\Citrix\PNAgent
Event Category: None
Event ID: 0
Date: 2/3/2009
Time: 2:37:24 PM
User: N/A
Computer: MYHOSTNAME
Description:
The XML document sent by the Citrix servers could not be processed
because it contains invalid XML. This message was reported from the
XML Service at address "http://192.168.1.71:80/scripts/wpnbr.dll
[com.citrix.xml.NFuseProtocol.RequestAppData]". This XML Service
could not be contacted and will be temporarily removed from the list
of active services. [Log ID: 7f6169fd]
***
On Thu, Feb 12, 2009 at 12:32 AM, Joe Shonk <joe.shonk@gmail.com> wrote:
> A published application with more than 37 characters... Wow, that must be
> one monster of an app! Does this character limitation include the folder
> names, etc?
>
> Joe
>
> -----Original Message-----
> From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
> Of Matt Kosht
> Sent: Wednesday, February 11, 2009 9:55 AM
> To: thin@freelists.org
> Subject: [THIN] Re: Citrix licensing 11.5 and Rollup 6
>
> The licensing piece is pretty straightforward and I didn't have an
> issue with that.
>
> The "new" Citrix Management Console requires Java 1.6 to work and it
> performs very poorly for me since this upgrade (anyone else having
> this issue?)
>
> The showstopper I ran into with HFR06 was having a published app with
> more than 37 characters in it's name. This breaks Citrix XML
> connections which means WI and PNA clients won't be able to login.
> This can sneak up on you if you have some servers at other hotfix
> levels they will work but the ones at HFR06 will not. I found out the
> hard way when I upgraded the last server to HFR06. They have a
> private hotfix for this I am just now testing. Workaround is to
> shorten up your app names to this length or less. Hope this helps you.
>
> -Matt
>
> On Wed, Feb 11, 2009 at 11:11 AM, Minero, Hector B CIV NSWCDD, K55
> <hector.minero@navy.mil> wrote:
>>
>> Hi all,
>> I was wondering if anyone has installed Hotfix rollup 6 for Win2k3 PS 4.0.
>> I'm getting ready to test it and would like to know if anyone has run into
>> any issues with it.
>>
>> This rollup requires a Licensing server upgrade to version 11.5. I
>> currently have version 2.0.
>> Does this upgrade work well, too?
>>
>> Thanks in advance.
>>
>> _______________________________
>> Hector Minero
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://www.freelists.org/list/thin
> Follow ThinList on Twitter
> http://twitter.com/thinlist
> Thin List discussion is now available in blog format at:
> http://thinmaillist.blogspot.com
> Thinlist MOBILE Feed
> http://thinlist.net/mobile
> ************************************************
>
> ************************************************
> For Archives, RSS, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://www.freelists.org/list/thin
> Follow ThinList on Twitter
> http://twitter.com/thinlist
> Thin List discussion is now available in blog format at:
> http://thinmaillist.blogspot.com
> Thinlist MOBILE Feed
> http://thinlist.net/mobile
> ************************************************
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
[THIN] OT: Australian Bushfires
Australia has just experienced once of its worst natural disasters in history with over one hundred
lives lost, entire families gone and houses and towns destroyed by a devastating fire. It is a rare
time I use forums such as these to reach out for help, but in this case Australian victims of this
terrible event need everyone's assistance. Australia's are known for their giving attitude, and they
would help anyone, anytime, no matter what. I know the community of the thinlist have the same
giving attitude and I ask on behalf of the Australian's affected by this recent devastation, that if
anyone can donate a small amount, it would help so many. Anyone who wishes to donate to the
Victorian Bushfire Appeal 2009 can do so through the Red Cross at www.redcross.org.au.
Thank you to those who offer any support. It is greatly appreciated.
--
Warren Simondson
Ctrl-Alt-Del IT Consultancy Pty Ltd
Website: http://www.ctrl-alt-del.com.au
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
[THIN] IE Application work in Published Desktop but not as a Published App
Im still having issues with my Web Based Application in that I cannot get them working via a Published Application. The Application in question is Web based and uses JAVA (1.5.0). The Process of the App when working is as follows:
Open IE
IE launches JAVA popup which is used for Application Authentication
When JAVA popup opens, IE automatically closes leaving only JAVA popup on screen
The Application works fine if I Publish a Desktop and manually launch it. When I run it via a Published Application, IE starts then closes as it should but the JAVA popup doesn't open. This issue is really starting to annoy me as Im not allowed to Publish a Desktop in my organisation.
I tried to run the Application in a window (non seamless) - same issue, doesn't work.
The Application does not work as a Published App when connecting using RDP.
We are running Windows 2003 with Presentation Server 4 with R04
I hope someone can help as its very annoying
Thanks
Angela
Date: Mon, 19 Jan 2009 08:18:42 -0600
Subject: [THIN] Re: IE Applications work in Published Desktop but not as a Published App
From: cstalhood@gmail.com
To: thin@freelists.org
One thing you can try is launching the application in install mode from the from your published desktop with an admin account and then try the published application. Instead of Filemon, try Process Monitor. It will give you any registry as well as any file problems you have as well.
One other thing I just remembered, when you run it through a published desktop see if you have a Sun directory under your application data folder. Try copying it to your application data folder when you run it through a published application to see if it works then.
Chris
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Angela Smith
Sent: January 19, 2009 6:58 AM
To: thin@freelists.org
Subject: [THIN] Re: IE Applications work in Published Desktop but not as a Published App
Hi Jeremy
Im simply publishing IE sites (iexplore.exe with various Intranet URL's). The sites are all new and require a newer JAVA version which I have already installed (1.50). All the Intranet sites work via a Published Desktop which validates JAVA is OK. The sites all load Java applet on IE startup so Im not sure if this is playing up when run as a Published Application.
I will investigate IntervalsForLogoffCheck setting. Hopefully this setting doesn't affect my other apps that run on my servers..
Thanks
Ang
Subject: [THIN] Re: IE Applications work in Published Desktop but not as a Published App
Date: Mon, 19 Jan 2009 18:23:07 +1100
From: Jeremy.Saunders@datacom.com.au
To: thin@freelists.orgHi Angela,
What are you actually publishing? It sounds like the process is not starting up quick enough, so the session just logs off. This is as designed. There is a registry key to manage this called IntervalsForLogoffCheck. Just google it for a full explanation.
Cheers,
Jeremy.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Angela Smith
Sent: Monday, January 19, 2009 4:03 PM
To: thin@freelists.org
Subject: [THIN] IE Applications work in Published Desktop but not as a Published App
Hi
I have the strangest issue with some JAVA IE based Apps start then will close straight away. This only occurs when IE is Published. If I publish a Desktop, I can manually open IE and can run all my JAVA based IE Apps without any issues. Issue only occurs when IE is published..
I tried running Filemon on the Citrix Server but couldn't see anything obvious. What should I look at in trying to resolve this?
Thanks
AngelaDownload free emoticons today! Holiday cheer from Messenger.
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
Find great deals on eBay Net yourself a bargain
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
Play now to win prizes for you and your friends! Are you a friend magnet?
[THIN] Re: Citrix licensing 11.5 and Rollup 6
one monster of an app! Does this character limitation include the folder
names, etc?
Joe
-----Original Message-----
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf
Of Matt Kosht
Sent: Wednesday, February 11, 2009 9:55 AM
To: thin@freelists.org
Subject: [THIN] Re: Citrix licensing 11.5 and Rollup 6
The licensing piece is pretty straightforward and I didn't have an
issue with that.
The "new" Citrix Management Console requires Java 1.6 to work and it
performs very poorly for me since this upgrade (anyone else having
this issue?)
The showstopper I ran into with HFR06 was having a published app with
more than 37 characters in it's name. This breaks Citrix XML
connections which means WI and PNA clients won't be able to login.
This can sneak up on you if you have some servers at other hotfix
levels they will work but the ones at HFR06 will not. I found out the
hard way when I upgraded the last server to HFR06. They have a
private hotfix for this I am just now testing. Workaround is to
shorten up your app names to this length or less. Hope this helps you.
-Matt
On Wed, Feb 11, 2009 at 11:11 AM, Minero, Hector B CIV NSWCDD, K55
<hector.minero@navy.mil> wrote:
>
> Hi all,
> I was wondering if anyone has installed Hotfix rollup 6 for Win2k3 PS 4.0.
> I'm getting ready to test it and would like to know if anyone has run into
> any issues with it.
>
> This rollup requires a Licensing server upgrade to version 11.5. I
> currently have version 2.0.
> Does this upgrade work well, too?
>
> Thanks in advance.
>
> _______________________________
> Hector Minero
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
Wednesday, February 11, 2009
[THIN] Re: USB devices on Windows based clients
----- Original Message -----From: Rick MackSent: Wednesday, February 11, 2009 10:52 AMSubject: [THIN] Re: USB devices on Windows based clientsHi David,One thing has to be made clear. Citrix do not support USB redirection with XenApp server. Not for USB storage devices, nor USB Activesync nor USB printers. XenDesktop now supports USB redrection using the new HDX USB Virtual hub, XenApp doesn't.Plugging in a USB storage device on a Windows system initiates the USBSTOR driver and mounts that USB device as a local drive. When you initiate an ICA or RDP session and have client drive remapping enabled, the client's local drives, including the USB storage device will be visible in the terminal services session.But only when you start your terminal services session, not if the USB drive is plugged in later. DynamicUSB gets around this problem by dynamically linking USB storage drives to a subdirectory on the local user's C: drive. So all you're doing when you plug in a drive during a session is changing the contents of a directory. This is actually pretty elegant since it nicely gets around the need to restart a session to see a new local drive.It turns out that USB redirection on a terminal server is both very easy and actually nearly impossible. Creating a redirected USB virtual hub isn't all that hard, but that's visible to every user on a terminal server. Session isolation and the incorporation of stuff like virtual loopbacks etc to support Activesync gets quite difficult.To date the only company to support true isolated USB redirection on terminal services is Quest's provision Networks division (USB-IT). Trouble is USB-IT was only aimed at specified relatively low speed PDA devices and not a lot else (though it was extensible). We're working on something totally generic for USB-IT V2 but that's still a few months away before we've got something to show.Otherwise there's always Server 2008/Windows 7 but from what I can tell I don't think that's going to be generic USB redirection either. But I could definitely be wrong.It might be worthwhile to persevere with DynamicUSB. If it let you use a folder off a RAM disk on an embedded XP device it'd be perfect.regards,Rick--
Ulrich Mack
Quest Software
Provision Networks Division
On Wed, Feb 11, 2009 at 8:16 AM, David Demers <David.Demers@sos.state.co.us> wrote:
Sorry, specifically we are mostly dealing with USB portable drives.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Tuesday, February 10, 2009 3:14 PM
To: thin@freelists.org
Subject: [THIN] Re: USB devices on Windows based clients
What type of USB device are you attaching?
Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of David Demers
Sent: Tuesday, February 10, 2009 12:36 PM
To: thin@freelists.org
Subject: [THIN] USB devices on Windows based clients
Hi guys,
I've been fighting with an issue with USB devices on my Windows XP Embedded devices. The problem is (as I'm sure many of you have experienced) that if a user plugs in a device after the ICA session has begun, the session does not detect the device being added. When we used Linux based thin clients this was not an issue, but it appears that the windows based ICA client is unable to provide this feature.
We found a nifty little utility called DynamicUSB (http://support.citrix.com/article/CTX112588) that sort of addresses this issue, but the basic premise and the assorted workarounds to make it palatable in our environment is frankly a bit cludgy. I was wondering if others are experiencing similar issues and/or what other methods have been employed to address this.
-David
P.S. Sorry if this is a double post… wasn't sure if the first one went to the correct address
[THIN] Re: USB devices on Windows based clients
Greg pretty much covered why they're banned.
I agree with Greg with regards to using USB keys in a corporate setting and the risk they pose,
and it does become ever so boring to hear yet another spiel about how Citrix doesn't really have it
right and of course there is a certain third party vendor that "almost" has the solution, but not
quite – and of course we should all buy this solution in anticipation for what is about to come.
Having said that, I know that XP embedded devices were mentioned here as the chosen device,
but I have found great success in using plug and play USB keys through Citrix by using WYSE S10
and V10L devices – using WTOS of Course.
Provided you have client drive mapping on, and you have your wnos.ini with the following setting,
you can have most plug and play USB storage drives operate dynamically without logging in and
out of a Citrix session. In other words you can pull a USB key in and out during an active session
and it will read it without issues. Some key drive do not work however, but I have found about
80% do in my tsting so far.
This line must be in the WNOS.ini
WNOS.ini
;*************************************************************
;* General Session *
;*************************************************************
SessionConfig=ALL MapDisks=yes
;*************************************************************
If you use WYSE terminals with WTOS and you aren't sure how to modify the WNOS.ini, just use
CONFGEN, a great tool that lets you build a wnos.ini with a simple GUI. Download it from:
http://www.technicalhelp.de/download.htm - latest version is ConfGen 5.0.02.
Also for the programmers among us, Windows 2008 WTSAPI has a new reference which probably
has already been discussed at some stage. It's called Dynamic Virtual Channels and it has the
ability to create plug and play USB "mappings" with it's various reference calls. I have written one
example that dynamically maps a USB memory stick in a Terminal Server 2008 Session, but I
haven't released it yet because it was a quick whip up for a customer and I'm sure there's more to
do to it. But just as an example, it can be done.
--
Warren Simondson
Ctrl-Alt-Del IT Consultancy Pty Ltd
Website: http://www.ctrl-alt-del.com.au
> > P.S. Sorry if this is a double post… wasn't sure if the first one
Quoting Greg Reese <gareese@gmail.com>:
> I've been watching this thread. I don't see anything wrong with
> simply
> telling users that if they want to access their thumbdrive, then they
>
> need to insert it before initiating their session. Yes it is
> inconvenient but it is low impact. Remember, not all solutions are
> technical. If the users don't like it then tough $hit, usb drives
> spread viruses and steal corporate secrets anyway.
>
> That said, It also might be worth testing to connect back to it as a
>
> network drive. We're talking about and xpe thin client here so the
> drive configuration should remain predictable. So mapping a drive to
> \
> \clientname\d$ should circle back to that USB drive. You could wrap
>
> that up in a batch file for the user to run after they plug in the
> drive. Client name or client ip is a session variable you can access
>
> so one script should do it.
>
> Greg
>
>
> Sent from my iPhone
>
> On Feb 11, 2009, at 4:52 AM, Rick Mack <ulrich.mack@gmail.com>
> wrote:
>
> > Hi David,
> >
> > One thing has to be made clear. Citrix do not support USB
> > redirection with XenApp server. Not for USB storage devices, nor
> USB
> > Activesync nor USB printers. XenDesktop now supports USB redrection
>
> > using the new HDX USB Virtual hub, XenApp doesn't.
> >
> > Plugging in a USB storage device on a Windows system initiates the
>
> > USBSTOR driver and mounts that USB device as a local drive. When
> you
> > initiate an ICA or RDP session and have client drive remapping
> > enabled, the client's local drives, including the USB storage
> device
> > will be visible in the terminal services session.
> >
> > But only when you start your terminal services session, not if the
>
> > USB drive is plugged in later. DynamicUSB gets around this problem
>
> > by dynamically linking USB storage drives to a subdirectory on the
>
> > local user's C: drive. So all you're doing when you plug in a drive
>
> > during a session is changing the contents of a directory. This is
>
> > actually pretty elegant since it nicely gets around the need to
> > restart a session to see a new local drive.
> >
> > It turns out that USB redirection on a terminal server is both very
>
> > easy and actually nearly impossible. Creating a redirected USB
> > virtual hub isn't all that hard, but that's visible to every user
> on
> > a terminal server. Session isolation and the incorporation of stuff
>
> > like virtual loopbacks etc to support Activesync gets quite
> difficult.
> >
> > To date the only company to support true isolated USB redirection
> on
> > terminal services is Quest's provision Networks division (USB-IT).
>
> > Trouble is USB-IT was only aimed at specified relatively low speed
>
> > PDA devices and not a lot else (though it was extensible). We're
> > working on something totally generic for USB-IT V2 but that's still
>
> > a few months away before we've got something to show.
> >
> > Otherwise there's always Server 2008/Windows 7 but from what I can
>
> > tell I don't think that's going to be generic USB redirection
> > either. But I could definitely be wrong.
> >
> > It might be worthwhile to persevere with DynamicUSB. If it let you
>
> > use a folder off a RAM disk on an embedded XP device it'd be
> perfect.
> >
> > regards,
> >
> > Rick
> >
> > --
> > Ulrich Mack
> > Quest Software
> > Provision Networks Division
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On Wed, Feb 11, 2009 at 8:16 AM, David Demers
> <David.Demers@sos.state.co.us
> > > wrote:
> > Sorry, specifically we are mostly dealing with USB portable
> drives.
> >
> >
> >
> > From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org]
>
> > On Behalf Of Steve Greenberg
> > Sent: Tuesday, February 10, 2009 3:14 PM
> > To: thin@freelists.org
> > Subject: [THIN] Re: USB devices on Windows based clients
> >
> >
> >
> > What type of USB device are you attaching?
> >
> >
> >
> >
> >
> > Steve Greenberg
> >
> > Thin Client Computing
> >
> > 34522 N. Scottsdale Rd D8453
> >
> > Scottsdale, AZ 85266
> >
> > (602) 432-8649
> >
> > www.thinclient.net
> >
> > steveg@thinclient.net
> >
> >
> >
> > From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org]
>
> > On Behalf Of David Demers
> > Sent: Tuesday, February 10, 2009 12:36 PM
> > To: thin@freelists.org
> > Subject: [THIN] USB devices on Windows based clients
> >
> >
> >
> > Hi guys,
> >
> > I've been fighting with an issue with USB devices on my Windows XP
>
> > Embedded devices. The problem is (as I'm sure many of you have
> > experienced) that if a user plugs in a device after the ICA session
>
> > has begun, the session does not detect the device being added. When
>
> > we used Linux based thin clients this was not an issue, but it
> > appears that the windows based ICA client is unable to provide this
>
> > feature.
> >
> > We found a nifty little utility called DynamicUSB
> (http://support.citrix.com/article/CTX112588
> > ) that sort of addresses this issue, but the basic premise and the
>
> > assorted workarounds to make it palatable in our environment is
> > frankly a bit cludgy. I was wondering if others are experiencing
> > similar issues and/or what other methods have been employed to
> > address this.
> >
> > -David
> >
> we************************************************
> > nt to the correct address
> >
> >
> >
> >
>
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
[THIN] Re: Citrix licensing 11.5 and Rollup 6
issue with that.
The "new" Citrix Management Console requires Java 1.6 to work and it
performs very poorly for me since this upgrade (anyone else having
this issue?)
The showstopper I ran into with HFR06 was having a published app with
more than 37 characters in it's name. This breaks Citrix XML
connections which means WI and PNA clients won't be able to login.
This can sneak up on you if you have some servers at other hotfix
levels they will work but the ones at HFR06 will not. I found out the
hard way when I upgraded the last server to HFR06. They have a
private hotfix for this I am just now testing. Workaround is to
shorten up your app names to this length or less. Hope this helps you.
-Matt
On Wed, Feb 11, 2009 at 11:11 AM, Minero, Hector B CIV NSWCDD, K55
<hector.minero@navy.mil> wrote:
>
> Hi all,
> I was wondering if anyone has installed Hotfix rollup 6 for Win2k3 PS 4.0.
> I'm getting ready to test it and would like to know if anyone has run into
> any issues with it.
>
> This rollup requires a Licensing server upgrade to version 11.5. I
> currently have version 2.0.
> Does this upgrade work well, too?
>
> Thanks in advance.
>
> _______________________________
> Hector Minero
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
[THIN] Citrix licensing 11.5 and Rollup 6
Hi all,
I was wondering if anyone has installed Hotfix rollup 6 for Win2k3 PS 4.0.
I'm getting ready to test it and would like to know if anyone has run into any issues with it.
This rollup requires a Licensing server upgrade to version 11.5. I currently have version 2.0.
Does this upgrade work well, too?
Thanks in advance.
_______________________________
Hector Minero
[THIN] Re: USB devices on Windows based clients
and it does become ever so boring to hear yet another spiel about how Citrix doesn't really have it
right and of course there is a certain third party vendor that "almost" has the solution, but not
quite – and of course we should all buy this solution in anticipation for what is about to come.
Having said that, I know that XP embedded devices were mentioned here as the chosen device,
but I have found great success in using plug and play USB keys through Citrix by using WYSE S10
and V10L devices – using WTOS of Course.
Provided you have client drive mapping on, and you have your wnos.ini with the following setting,
you can have most plug and play USB storage drives operate dynamically without logging in and
out of a Citrix session. In other words you can pull a USB key in and out during an active session
and it will read it without issues. Some key drive do not work however, but I have found about
80% do in my tsting so far.
This line must be in the WNOS.ini
WNOS.ini
;*************************************************************
;* General Session *
;*************************************************************
SessionConfig=ALL MapDisks=yes
;*************************************************************
If you use WYSE terminals with WTOS and you aren't sure how to modify the WNOS.ini, just use
CONFGEN, a great tool that lets you build a wnos.ini with a simple GUI. Download it from:
http://www.technicalhelp.de/download.htm - latest version is ConfGen 5.0.02.
Also for the programmers among us, Windows 2008 WTSAPI has a new reference which probably
has already been discussed at some stage. It's called Dynamic Virtual Channels and it has the
ability to create plug and play USB "mappings" with it's various reference calls. I have written one
example that dynamically maps a USB memory stick in a Terminal Server 2008 Session, but I
haven't released it yet because it was a quick whip up for a customer and I'm sure there's more to
do to it. But just as an example, it can be done.
--
Warren Simondson
Ctrl-Alt-Del IT Consultancy Pty Ltd
Website: http://www.ctrl-alt-del.com.au
Quoting Greg Reese <gareese@gmail.com>:
> I've been watching this thread. I don't see anything wrong with
> simply
> telling users that if they want to access their thumbdrive, then they
>
> need to insert it before initiating their session. Yes it is
> inconvenient but it is low impact. Remember, not all solutions are
> technical. If the users don't like it then tough $hit, usb drives
> spread viruses and steal corporate secrets anyway.
>
> That said, It also might be worth testing to connect back to it as a
>
> network drive. We're talking about and xpe thin client here so the
> drive configuration should remain predictable. So mapping a drive to
> \
> \clientname\d$ should circle back to that USB drive. You could wrap
>
> that up in a batch file for the user to run after they plug in the
> drive. Client name or client ip is a session variable you can access
>
> so one script should do it.
>
> Greg
>
>
> Sent from my iPhone
>
> On Feb 11, 2009, at 4:52 AM, Rick Mack <ulrich.mack@gmail.com>
> wrote:
>
> > Hi David,
> >
> > One thing has to be made clear. Citrix do not support USB
> > redirection with XenApp server. Not for USB storage devices, nor
> USB
> > Activesync nor USB printers. XenDesktop now supports USB redrection
>
> > using the new HDX USB Virtual hub, XenApp doesn't.
> >
> > Plugging in a USB storage device on a Windows system initiates the
>
> > USBSTOR driver and mounts that USB device as a local drive. When
> you
> > initiate an ICA or RDP session and have client drive remapping
> > enabled, the client's local drives, including the USB storage
> device
> > will be visible in the terminal services session.
> >
> > But only when you start your terminal services session, not if the
>
> > USB drive is plugged in later. DynamicUSB gets around this problem
>
> > by dynamically linking USB storage drives to a subdirectory on the
>
> > local user's C: drive. So all you're doing when you plug in a drive
>
> > during a session is changing the contents of a directory. This is
>
> > actually pretty elegant since it nicely gets around the need to
> > restart a session to see a new local drive.
> >
> > It turns out that USB redirection on a terminal server is both very
>
> > easy and actually nearly impossible. Creating a redirected USB
> > virtual hub isn't all that hard, but that's visible to every user
> on
> > a terminal server. Session isolation and the incorporation of stuff
>
> > like virtual loopbacks etc to support Activesync gets quite
> difficult.
> >
> > To date the only company to support true isolated USB redirection
> on
> > terminal services is Quest's provision Networks division (USB-IT).
>
> > Trouble is USB-IT was only aimed at specified relatively low speed
>
> > PDA devices and not a lot else (though it was extensible). We're
> > working on something totally generic for USB-IT V2 but that's still
>
> > a few months away before we've got something to show.
> >
> > Otherwise there's always Server 2008/Windows 7 but from what I can
>
> > tell I don't think that's going to be generic USB redirection
> > either. But I could definitely be wrong.
> >
> > It might be worthwhile to persevere with DynamicUSB. If it let you
>
> > use a folder off a RAM disk on an embedded XP device it'd be
> perfect.
> >
> > regards,
> >
> > Rick
> >
> > --
> > Ulrich Mack
> > Quest Software
> > Provision Networks Division
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > On Wed, Feb 11, 2009 at 8:16 AM, David Demers
> <David.Demers@sos.state.co.us
> > > wrote:
> > Sorry, specifically we are mostly dealing with USB portable
> drives.
> >
> >
> >
> > From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org]
>
> > On Behalf Of Steve Greenberg
> > Sent: Tuesday, February 10, 2009 3:14 PM
> > To: thin@freelists.org
> > Subject: [THIN] Re: USB devices on Windows based clients
> >
> >
> >
> > What type of USB device are you attaching?
> >
> >
> >
> >
> >
> > Steve Greenberg
> >
> > Thin Client Computing
> >
> > 34522 N. Scottsdale Rd D8453
> >
> > Scottsdale, AZ 85266
> >
> > (602) 432-8649
> >
> > www.thinclient.net
> >
> > steveg@thinclient.net
> >
> >
> >
> > From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org]
>
> > On Behalf Of David Demers
> > Sent: Tuesday, February 10, 2009 12:36 PM
> > To: thin@freelists.org
> > Subject: [THIN] USB devices on Windows based clients
> >
> >
> >
> > Hi guys,
> >
> > I've been fighting with an issue with USB devices on my Windows XP
>
> > Embedded devices. The problem is (as I'm sure many of you have
> > experienced) that if a user plugs in a device after the ICA session
>
> > has begun, the session does not detect the device being added. When
>
> > we used Linux based thin clients this was not an issue, but it
> > appears that the windows based ICA client is unable to provide this
>
> > feature.
> >
> > We found a nifty little utility called DynamicUSB
> (http://support.citrix.com/article/CTX112588
> > ) that sort of addresses this issue, but the basic premise and the
>
> > assorted workarounds to make it palatable in our environment is
> > frankly a bit cludgy. I was wondering if others are experiencing
> > similar issues and/or what other methods have been employed to
> > address this.
> >
> > -David
> >
> > P.S. Sorry if this is a double post⦠wasn't sure if the first one
> we
> > nt to the correct address
> >
> >
> >
> >
>
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://www.freelists.org/list/thin
Follow ThinList on Twitter
http://twitter.com/thinlist
Thin List discussion is now available in blog format at:
http://thinmaillist.blogspot.com
Thinlist MOBILE Feed
http://thinlist.net/mobile
************************************************
[THIN] Re: USB devices on Windows based clients
Sent from my iPhone
Hi David,One thing has to be made clear. Citrix do not support USB redirection with XenApp server. Not for USB storage devices, nor USB Activesync nor USB printers. XenDesktop now supports USB redrection using the new HDX USB Virtual hub, XenApp doesn't.Plugging in a USB storage device on a Windows system initiates the USBSTOR driver and mounts that USB device as a local drive. When you initiate an ICA or RDP session and have client drive remapping enabled, the client's local drives, including the USB storage device will be visible in the terminal services session.But only when you start your terminal services session, not if the USB drive is plugged in later. DynamicUSB gets around this problem by dynamically linking USB storage drives to a subdirectory on the local user's C: drive. So all you're doing when you plug in a drive during a session is changing the contents of a directory. This is actually pretty elegant since it nicely gets around the need to restart a session to see a new local drive.It turns out that USB redirection on a terminal server is both very easy and actually nearly impossible. Creating a redirected USB virtual hub isn't all that hard, but that's visible to every user on a terminal server. Session isolation and the incorporation of stuff like virtual loopbacks etc to support Activesync gets quite difficult.To date the only company to support true isolated USB redirection on terminal services is Quest's provision Networks division (USB-IT). Trouble is USB-IT was only aimed at specified relatively low speed PDA devices and not a lot else (though it was extensible). We're working on something totally generic for USB-IT V2 but that's still a few months away before we've got something to show.Otherwise there's always Server 2008/Windows 7 but from what I can tell I don't think that's going to be generic USB redirection either. But I could definitely be wrong.It might be worthwhile to persevere with DynamicUSB. If it let you use a folder off a RAM disk on an embedded XP device it'd be perfect.regards,Rick--
Ulrich Mack
Quest Software
Provision Networks Division
On Wed, Feb 11, 2009 at 8:16 AM, David Demers <David.Demers@sos.state.co.us> wrote:
Sorry, specifically we are mostly dealing with USB portable drives.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Tuesday, February 10, 2009 3:14 PM
To: thin@freelists.org
Subject: [THIN] Re: USB devices on Windows based clients
What type of USB device are you attaching?
Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of David Demers
Sent: Tuesday, February 10, 2009 12:36 PM
To: thin@freelists.org
Subject: [THIN] USB devices on Windows based clients
Hi guys,
I've been fighting with an issue with USB devices on my Windows XP Embedded devices. The problem is (as I'm sure many of you have experienced) that if a user plugs in a device after the ICA session has begun, the session does not detect the device being added. When we used Linux based thin clients this was not an issue, but it appears that the windows based ICA client is unable to provide this feature.
We found a nifty little utility called DynamicUSB (http://support.citrix.com/article/CTX112588) that sort of addresses this issue, but the basic premise and the assorted workarounds to make it palatable in our environment is frankly a bit cludgy. I was wondering if others are experiencing similar issues and/or what other methods have been employed to address this.
-David
P.S. Sorry if this is a double post… wasn't sure if the first one went to the correct address
[THIN] Re: USB devices on Windows based clients
Worth noting that Quest vWorkspace 6 updates USB-IT also supports TWAIN scanners, not just PDAs (Though of course that is relatively low-speed as well).
>
To date the only company to support true isolated USB redirection on terminal services is Quest's provision Networks division (USB-IT). Trouble is >USB-IT was only aimed at specified relatively low speed PDA devices and not a lot else (though it was extensible). We're working on something >totally generic for USB-IT V2 but that's still a few months away before we've got something to show.
On Wed, Feb 11, 2009 at 8:16 AM, David Demers <David.Demers@sos.state.co.us> wrote:
Sorry, specifically we are mostly dealing with USB portable drives.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Tuesday, February 10, 2009 3:14 PM
To: thin@freelists.org
Subject: [THIN] Re: USB devices on Windows based clients
What type of USB device are you attaching?
Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of David Demers
Sent: Tuesday, February 10, 2009 12:36 PM
To: thin@freelists.org
Subject: [THIN] USB devices on Windows based clients
Hi guys,
I've been fighting with an issue with USB devices on my Windows XP Embedded devices. The problem is (as I'm sure many of you have experienced) that if a user plugs in a device after the ICA session has begun, the session does not detect the device being added. When we used Linux based thin clients this was not an issue, but it appears that the windows based ICA client is unable to provide this feature.
We found a nifty little utility called DynamicUSB (http://support.citrix.com/article/CTX112588) that sort of addresses this issue, but the basic premise and the assorted workarounds to make it palatable in our environment is frankly a bit cludgy. I was wondering if others are experiencing similar issues and/or what other methods have been employed to address this.
-David
P.S. Sorry if this is a double post… wasn't sure if the first one went to the correct address
SUBJECT TO CONTRACT
[THIN] Re: USB devices on Windows based clients
Ulrich Mack
Quest Software
Provision Networks Division
Sorry, specifically we are mostly dealing with USB portable drives.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Steve Greenberg
Sent: Tuesday, February 10, 2009 3:14 PM
To: thin@freelists.org
Subject: [THIN] Re: USB devices on Windows based clients
What type of USB device are you attaching?
Steve Greenberg
Thin Client Computing
34522 N. Scottsdale Rd D8453
Scottsdale, AZ 85266
(602) 432-8649
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of David Demers
Sent: Tuesday, February 10, 2009 12:36 PM
To: thin@freelists.org
Subject: [THIN] USB devices on Windows based clients
Hi guys,
I've been fighting with an issue with USB devices on my Windows XP Embedded devices. The problem is (as I'm sure many of you have experienced) that if a user plugs in a device after the ICA session has begun, the session does not detect the device being added. When we used Linux based thin clients this was not an issue, but it appears that the windows based ICA client is unable to provide this feature.
We found a nifty little utility called DynamicUSB (http://support.citrix.com/article/CTX112588) that sort of addresses this issue, but the basic premise and the assorted workarounds to make it palatable in our environment is frankly a bit cludgy. I was wondering if others are experiencing similar issues and/or what other methods have been employed to address this.
-David
P.S. Sorry if this is a double post… wasn't sure if the first one went to the correct address
[THIN] Re: License server across WAN Link
Dear all,
As of my book I used to qualify for my CCA on MPS 4.0
This is how it is described :
Some of you already replied parts of it.
You have an Initial Metaframe Server connection phase :
1°) This takes place when an MPS boots up, it will look for the License Server address , whilst retrieving it from the datastore.
2°) It will start to communicate with the License Server Daemon on the License Server which is by default indeed port 27000.
Then the Citrix Vendor daemon on the License Server replies with an randomly chosen port at startup (though there are means to hardcode it, there are means to
Change the listening ports)
3°) The MPS then starts a communication with the Citrix Vendor Daemon (on its randomly port) and this connection remains up as long as the MPS is running.
Its at this stage That the startup license is checked out. Without this the MPS can’t check out Citrix CALs.
What already has been mentioned it that returning CALs in My Citrix does not modify your Citrix License File (*.lic). The Citrix Startup License for MPS4
Was called Citrix_startup.lic , this and the whatever you called your Cals license file are located in \program files\Licensing\My files on the License Server.
Note : I can’t assess if this does apply to Xenapp as I’ve never worked with it. Metaframe XP is yet another story since it does not have a separate License Server.
If you want to change the Listening port (reason firewalls) , make a backup of your license files and then start editing specific parts of EACH license file.
This applies to both ports. Here is the way to do it in MPS3 & MPS4 (I assume that XenApp 4.5/5 did not change this)
http://www.brianmadden.com/blogs/brianmadden/archive/2005/02/10/understanding-citrix-metaframe-presentation-server-3-0-licensing-port-usage.aspx
As to handing out CALs, the MPS server continues to hand out CALs, actually to the extend of handing out CALs as many as the set License Limit but each server having
The max set license limit applied to it. So if you have 50 Cals, each Server could potentially hand out 50 Cals on its own in the absence of the License Server.
After the initial startup license has been retrieved , the MPS can survive the absence of an MPS for as long as 30 days. Its only 96hours (on Metaframe XP I think, and
When you didn’t have any initial license files (like when you are testing your application on a new farm, without an licenses) .
So to me there is not much of a risk loosing you WAN connection for a while or up to 30 days, unless your company doesn’t pay his bills and gets cut off by its provider.
Also traffic is very limited. 200 bytes heartbeat data.
Regards,
Stefan Timmermans
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Angela Smith
Sent: maandag 9 februari 2009 13:20
To:
Subject: [THIN] Re: License server across WAN Link
Hi Jeremy
Thanks for your reply. The WAN link is 30Mb so Im hoping the Citrix Servers will have a reliable connection to the License Server at all times. I will give it a go. I read a few Citrix documents but I have a few questions.
1) I need to get my licenses re-issued as the server name in the UK is different to the existing License Server. If I return existing licenses will my Production farm stop working? There may be a gap of a few days before the new license file is added to the new Licensing Server. I want to ensure existing Citrix Production users are not impacted when the licenses are returned.
2) Are there any issues with setting 1 Citrix Server to use the new Licensing Server in the UK whilst the other Citrix servers point to local License Server? Id like to do this for testing purposes to ensure the Citrix Servers are working off the remote UK License Server before moving the entire farm to the remote License Server.
3) If the Citrix Server looses connectivity to the License Server, will the existing Citrix User sessions be dropped or would they be given a grace license automatically until the connectivity to the Citrix License Server is restored? Is this seamless to the user?
Thanks
Ang
Subject: [THIN] Re: License server across WAN Link
Date: Mon, 9 Feb 2009 19:34:46 +1100
From: Jeremy.Saunders@datacom.com.au
To:
Hi Ang,
The short answer is that this will most probably cause problems and is a bad design. There are some awesome whitepapers from Citrix on how the licensing service works. But basically this is what I typically write in my design documents (taken straight from the whitepapers)…
“At startup, a XenApp server talks to the License Server and gets a startup license. This action will consume 9.87Kb of bandwidth. If the License Server is not available, the server goes into the grace period and the IMA (Independent Management Architecture) Service reports an error to the Event Log. The process of getting a startup licenses also occurs if the IMA Service is restarted at any point.
Every 2 to 5 minutes the XenApp will exchange a heartbeat with the license server to determine if the license server is still available. The amount of bandwidth in this transaction is 462 bytes for each server. The heartbeats are randomised between 2 to 5 minutes from when the server checks out a start-up license.
Every 24 hours the XenApp server will request a refresh of the license server data, this is to check if license allocation has been increased or decreased. The amount of bandwidth in this transaction is 9.87Kb for each server.
When a user logs on, the XenApp server tries for 5 seconds to request a license; if this process fails the user gets a grace period license (30 days).”
So you can see that communication to the licensing server is important, otherwise your servers may continually (or randomly) dish out grace period licenses, which also causes delays in the logon time.
At the end of the day you can only try it and see. You can set the UK license server at the server level in the Access Management Console on one of your servers and see how this behaves.
Cheers,
Jeremy.
From: thin-bounce@freelists.org [mailto:thin-bounce@freelists.org] On Behalf Of Angela Smith
Sent: Monday, February 09, 2009 3:10 PM
To:
Subject: [THIN] License server across WAN Link
Hi
Our organisation is looking at utilising a "centralized" Citrix Licensing server in another country (UK) across a decent sized WAN Link. We currently have a local Citrix Licensing Server. Will there be any performance issues with accessing the new license server across the WAN? Should the license server be on the same LAN as the Citrix Servers? Are there any gotchas in changing licensing servers?
Setup is Windows 2003 with Presentation Server 4
Thanks
Ang
Combine your email accounts here! Want to marry your mail?
Confidentiality and Privilege Notice
This document is intended solely for the named addressee. The information contained in the pages is confidential and contains legally privileged information. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone, and you should destroy this message and kindly notify the sender by reply email. Confidentiality and legal privilege are not waived or lost by reason of mistaken delivery to you.
Let ninemsn property help! Need a new place to rent, share or buy?
