First part : Fast Provisioning Citrix Xenapp 6 with Worker Groups and Policies 1/3 Second part : Fast Provisioning Citrix Xenapp 6 with Worker Groups and Policies 2/3 This is now the third and last part, now you know what are Worker Groups and how to manage Policies, I will show a fast XenApp 6 provisioning. Before I would like to focus a bit on how to troubleshot Policies. XenApp Policies Troubleshooting This schema is very important, once you know which policy take over the other one, everything will be clear. This is not really troubleshooting policies but more how to understand you Resultant Set of Policy (RSoP) If you arrive on a Citrix XenApp 6 environment and there are IMA Policies and Group Policies define, if you need to understand and clear it out, there is a way with GPMC.msc and the Group Policy Results : When launching this tool, you will need to follow a very easy step by step wizard to select the XenApp server and the user you want to include in you Resultant Set of Policy and here is the result : You will be able to read in this report : The Resultant Set of Policy, what is really apply to the XenApp server and the user you selected. The Policies, IMA, GP or LGP not apply because of Policies priorities So if you wonder why the new Policy setting you just implement in you Citrix Delivery Services Console is not applying, you can see with this report it might be because a Group Policy is setting the same parameters and whatever what you do with your IMA Policy about this setting, it won't be apply. Should you use Group Policies or IMA Policies ? To this question, some would say, whatever which one you use, you can configure the exact same settings. I answer yes but : If you choose one way, stick with it and don't mix both because you will get lost and lose a lot of time trying to understand which policy is blocking the one you're trying to deploy. If you have rights in the Active Directory to create OU and Policies, I would suggest you use Group Policy only, the you'll will have only one console (GPMC.msc for ex) to manage all your GPOs and XenApp Policies. In the other side, if you don't have any access to…

Now you know a bit more about Worker Groups (cf Fast Provisioning Citrix XenApp 6 with Worker Groups and Policies 1/3) I can continue with the fast provisioning and policies part. What's new regarding Policies ? XenApp 6 policies changed a lot, first change, you don't need to launch a Citrix Management Console (Java old console), you can access it from the Citrix Delivery Services Console, a node named Policies is here, waiting for a click. Here is CDSC (Citrix Delivery Services Console) screenshot : For the non familiar with this management console, I will just point the different sections focusing on the policies part. This is the Policies node, when selected, the right pane popup with Policies informations In XenApp 6, policies have been split in two parts, User Policies and Computer Policies (GPO like) Here is the list of IMA Policies created with for example, the Allow Local Drive Mapping one I created for the example. This is a summary of the parameters set in the selected policy This is the filter apply to the selected policy above (here this policy allow the Worker Group XE_CEC). New feature extended to Active Directory Group Policies But, the new Policies feature extend the new view in the CDSC, you can now set your XenApp Policies in the Active Directory and administer the same way you administer your GPOs. What does it means ? Wherever you set your farm settings, in the CDSC and/or in the Active Directory, possibilities and result are the same. The following diagram has been draw by Juliano Malander and this is the best way to "show" the two new ways to use Policies in XenApp 6. In blue color is the "classic" way using IMA Policies (in the lower part of the diagram) and on the upper part the "new" way to use Policies, in Group Policies stored in the Active Directory (SYSVOL) Only one console was too perfect, as soon as you chose to set your XenApp Policies in the Active Directory, you will need to use another console like Group Policy Management Console (From Microsoft, gpmc.exe) How does it work ? I made the following schema to show where are stored XenApp policies and how it apply to users and computers : When you using Group Policies, information is stored in the SYSVOL share When you are using IMA Policies, information is stored in the DataStore…