Fast Provisioning Citrix Xenapp 6 with Worker Groups and Policies 3/3

First part : Fast Provisioning Citrix Xenapp 6 with Worker Groups and Policies 1/3

Second part : Fast Provisioning Citrix Xenapp 6 with Worker Groups and Policies 2/3

This is now the third and last part, now you know what are Worker Groups and how to manage Policies, I will show a fast XenApp 6 provisioning. Before I would like to focus a bit on how to troubleshot Policies.

XenApp Policies Troubleshooting

This schema is very important, once you know which policy take over the other one, everything will be clear. This is not really troubleshooting policies but more how to understand you Resultant Set of Policy (RSoP)

If you arrive on a Citrix XenApp 6 environment and there are IMA Policies and Group Policies define, if you need to understand and clear it out, there is a way with GPMC.msc and the Group Policy Results :

When launching this tool, you will need to follow a very easy step by step wizard to select the XenApp server and the user you want to include in you Resultant Set of Policy and here is the result :

You will be able to read in this report :

  • The Resultant Set of Policy, what is really apply to the XenApp server and the user you selected.
  • The Policies, IMA, GP or LGP not apply because of Policies priorities

So if you wonder why the new Policy setting you just implement in you Citrix Delivery Services Console is not applying, you can see with this report it might be because a Group Policy is setting the same parameters and whatever what you do with your IMA Policy about this setting, it won’t be apply.

Should you use Group Policies or IMA Policies ?

To this question, some would say, whatever which one you use, you can configure the exact same settings. I answer yes but :

If you choose one way, stick with it and don’t mix both because you will get lost and lose a lot of time trying to understand which policy is blocking the one you’re trying to deploy.

If you have rights in the Active Directory to create OU and Policies, I would suggest you use Group Policy only, the you’ll will have only one console (GPMC.msc for ex) to manage all your GPOs and XenApp Policies.

In the other side, if you don’t have any access to Active Directory or if there is no Active Directory, you can use the “classic” way through the CDSC, you’ll be able to configure the same settings as you were using Group Policies.

Citrix XenApp 6 (very fast) Provisioning

Now you now what is a Worker Group, you understood a WG can be assign to a published application as well a Policy can be deploy on a WG. WG are now a central point. In the following video, the WG is based on a OU in Active Directory, the XenApp 6 virtual machine will be provisioned directly deployed in this OU. At the same time this video will show you how a Group Policy is taking over an IMA Policy.


Here are the different steps to Provision a XenApp 6 server.

  1. OU Creation in AD
  2. Worker Group creation in CDSC – The Worker Group is based on the OU we just created in the previous step
  3. IMA Policy creation to allow local drives mapping, based on the Worker Group we create in step number 2
  4. Desktop publish application creation, published by the Worker Group (step number 2)
  5. XenApp 6 provisioning with XenServer 5.6 and Provisioning Services 5.6 –> VM CReation base on a XenServer template –> VM Provisioning with PVS 5.6
  6. XenApp 6 VM start up –> Check – XenApp 6 server is available in the XenApp 6 farm –> Check – XenApp 6 server is in the Worker Group
  7. Publish Desktop application launch through Web Interface
  8. Check if Local Drives Mapping is Allowed – it is 🙂 so IMA Policy is working
  9. Group Policy creation to block Local Drives Mapping
  10. GPUpdate command line
  11. Publish Desktop application launch through Web Interface
  12. Check if local Drives Mapping is Blocked – it is 😉 So GP took over the IMA Policy

This is it the new XenApp 6 server is online, with GPOs and published application without any admin. action. Now I would be able to create 1000 XenApp Servers and each of them would be up and running without having anything to do instead of watching 😉

I hope it bring some light, at least to some of you, about Citrix XenApp 6 cool new features.

Post author