Azure Active Directory editions

The Free edition of Azure Active Directory is part of every Azure subscription. There is nothing to license and nothing to install. With it, you can manage user accounts, synchronise with on-premises directories, get single sign-on across Azure, Office 365, and thousands of popular SaaS applications like Salesforce, Google Apps, ServiceNow, Dropbox, etc.

Azure AD premium is what you will need for password self service in the cloud and AD write back.

The Microsoft Enterprise Mobility Suite (EMS) discount makes it the most cost-effective way to acquire the included cloud services:

1. Microsoft Azure Active Directory Premium for hybrid identity management, Microsoft Intune and Microsoft Azure Rights Management for information protection

Features	Free edition	Basic edition	Premium edition
Directory as a service	Up to 500K objects	No object limit	No object limit
User and group management using UI or Windows PowerShell cmdlets	Tick	Tick	Tick
Device registration	Tick	Tick	Tick
Access Panel portal for SSO-based user access to SaaS and custom applications	Tick Up to 10 apps per user	Tick Up to 10 apps per user	No app limit
User-based application access management and provisioning	Tick	Tick	Tick
Self-service password change for cloud users	Tick	Tick	Tick
Azure AD Connect – For syncing between on-premises directories and Azure Active Directory	Tick	Tick	Tick
Standard security reports	Tick	Tick	Tick
Features		Basic edition	Premium edition
High availability SLA uptime (99.9%)		Tick	Tick
Group-based application access management and provisioning		Tick	Tick
Customisation logo and colours to the Sign In and Access Panel pages		Tick	Tick
Self-service password reset for cloud users		Tick	Tick
Application Proxy: Secure Remote Access and SSO to on-premises web applications		Tick	Tick
Features			Premium edition
Advanced application usage reporting			Tick
Self-service group management for cloud users			Tick
Self-service password reset with on-premises write-back			Tick
Microsoft Identity Manager (MIM) user licenses – For on-premises identity and access management			Tick
Advanced anomaly security reports (machine learning-based)			Tick
Cloud app discovery			Tick
Multi-Factor Authentication service for cloud users			Tick
Multi-Factor Authentication server for on-premises users			Tick

Multi-Factor Authentication is included with Premium and can secure access to on-premises applications (VPN, RADIUS, etc.), Azure, Microsoft Online Services like Office 365 etc.

Microsoft Identity Manager (MIM) - Premium comes with the option to grant rights to use a MIM server (and CALs) in your on-premises network to support any combination of Hybrid Identity solutions. This is a great option if you have a variation of on-premises directories and databases that you want to sync directly to Azure Active Directory. There is no limit on the number of FIM servers you can use, however, MIM CALs are granted based on the allocation of an Azure.

 

Note, if you have SSPR on prem too?

Q: Can I synchronise data for security questions from on premises?
A: No, this is not possible today, but Microsoft are considering it.

Note2, locked out account?

Q: Do you unlock the local active directory accounts when users reset their passwords?

A: Yes, when a user resets his or her password and password writeback has been deployed with versions of AADSync 1.0.0485.0222 or later, then that user’s account will be automatically unlocked when that user resets his or her password.

Note3 & 4, worries about hackerz?

Q: Do you prevent users from attempting password reset many times in a short time period?

A: Yes, Users may only try 5 password reset attempts within an hour before being locked out for 24 hours. Users may only try to validate a phone number 5 times within an hour before being locked out for 24 hours. Users may only try a single authentication method 5 times within an hour before being locked out for 24 hours.

Q: For how long are the email and SMS one-time passcode valid?

A: The session lifetime for password reset is 105 minutes. This means that from the beginning of the password reset operation, the user has 105 minutes to reset his or her password. The email and SMS one-time passcode are invalid after this time period expires.

 

 

 

 

Azure AD versions: https://msdn.microsoft.com/en-us/library/azure/dn532272.aspx

Azure AD Password writeback: https://msdn.microsoft.com/en-us/library/azure/dn903642.aspx

Setting up SSRP: https://msdn.microsoft.com/en-us/library/azure/dn683881.aspx

XenDesktop 7.6, Windows 2012 R2, Office 365

 

When opening any Office 365 application before opening Internet Explorer 11 (IE11) Office will fail with file permissions error.

It turns out Office 365 uses the temporary internet folder location from IE11 as its path to open temp files into. IE 11 has now got a new path for these files:

%userprofile%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 – this Content.IE5 file does not exist until up have opened up IE11 first.

Even if you change the path in the user profile it ignores it and looks to use IE11 path regardless.

Solution:

Create group policy in IE11 (may have to load the IE11 admx files) which changes the path back to %userprofile%\AppData\Local\Microsoft\Windows\Temporary Internet Files

All works correctly once this applied.

 

Thanks to Andrew Hill – Senior Consultant, Experteq for the tip.

Moving the FIM 2010 R2 (FIM Service, read FIM portal) to a new SQL server

Shutdown the Forefront Identity Manager Service in services.cpl.

Backup the DB from the SQL Manager

Move it, rename it, restore it.

On the new DB server, set the FIM service account you are using as DB_Owner

 

You need to run the following command to enable SQL server service broker for the FIM Service Database since the DB has been restored. Remember that every time you restore FIM Service from a backup or move the DB to a new server, you would need to:

ALTER DATABASE [SQLD0040Q] SET ENABLE_BROKER WITH NO_WAIT

The alter query may fail if there are active connections to the database. You need to fix that if so.

 

On the FIM portal server

Open RegEdit
    Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FIMService

DatabaseServer is the name of the new SQL Server (it would have been blank if the local server was the SQL server)

DatabaseName is the file name in the remote SQL Server

 

Start the FIM Services

Moving the FIM 2010 R2 SQL database (or renaming the database)

Shutdown any jobs on FIM. Shut down the FIM Service in services.cpl.

 

Backup the DB from the SQL Manager

Move it, rename it, restore it.

On the new DB server, set the FIM service account you are using as DB_Owner

 

On the FIM server

Open RegEdit
    Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\FIMSynchronizationService\Parameters

        Server is the name of the new SQL Server (it would have been blank if the local server was the SQL server)

        DBName is the file name in the remote SQL Server

        SQLInstance Property should equal the name of the instance (default instance, then it should be blank)

Start the FIM Services

 

Hat-tip: http://social.technet.microsoft.com/wiki/contents/articles/5465.fimilm-how-to-move-the-backend-sql-server-synchronization-service-database.aspx  (note this says Server Property inferring the key is called “Server Property“ it is just “Server”

FIM portal, the setup needs to run under SharePoint Farm administrator

Well they got an error, it just turns out it is wrong, here is the answer.

Error message text:
To install FIM portal, the setup needs to run under SharePoint Farm administrator account with at least Open permission that allows users to open a Web site, list, or folder in order to access items inside that container. Please make sure you are a SharePoint Farm administrator with Open permission and then click “Retry”. Click “Cancel” to abort setup.
Despite what the message says, you configure the farm administrators group and it does not work. What it really needs is a Site Collection Administrator. The Site Collection Administrators is an individual user (ie not two and not a group)!

Go to, Central Admin (URL:34997), then click on Application Management, then click on Change Site Collection Administrators, change to the user.
 


Hattip: http://blog.msresource.net/2013/01/29/to-install-fim-portal-the-setup-needs-to-run-under-sharepoint-farm-administrator-account-with-at-least-open-permission-that-allows-users-to-open-a-web-site-list-or-folder-in-order-to-access-items-i/

July 29 2015 – Windows 10 - free for the first year

 

Microsoft officials* said Windows 10 Home will be priced at $119usd and Windows 10 Pro will cost $199usd. Windows 10 upgrade $99usd will allow users to move from Windows 10 Home to Pro. You will also need to buy this if you are running Windows XP or Vista.

Microsoft is making Windows 10 available for FREE for the first year to computers with Windows 7 Service Pack 1 and Windows 8.1 on July 29, 2015. This is a limited time promotion that expires on July 29, 2016. Once the promotion ends, Microsoft will charge Windows 7 and Windows 8.1 users to upgrade to Windows 10.

New today!

If you are using a Windows 7/8.1, you will notice a Windows flag icon in your system tray starting today. This is the “Get Windows 10″ reservation launcher.

To reserve the upgrade, you just need to click the button in the wizard that launches. This will prepare Windows Update for Windows 10 upgrade when it arrives on July 29. So you will need to do this on each PC you intend to upgrade to Windows 10.

* According to to Neowin

FIM Portal (No Display Name)

 

If you did an important and everyone came in a (No display name) here is what to do.

First, set the display name precedence in the FIM Sync Manager console

http://social.technet.microsoft.com/wiki/contents/articles/5140.fim-reference-checking-configuring-attribute-precedence.aspx

Then you need to bulk delete all the crap (this is slow)

http://social.technet.microsoft.com/wiki/contents/articles/2108.how-to-use-powershell-to-delete-all-users-from-the-fim-portal.aspx

And you are ready to start again.

 

Forefront Identity Manager Portal

Robocopy to Onedrive Personal

 

If you are sick of the stupid sync clients for onedrive, map a drive a use robocopy, it runs, it is restartable and can tick away for weeks or months.

First map a drive to onedrive:

Open the outlook.com onedrive link in the web.

This is an example of the link location: https://onedrive.live.com/#cid=a3e4ab99159b06d6

In Windows explorer, map a drive to https://d.docs.live.net/a3e4ab99159b06d6

Connect using different credentials and use your outlook account, if you have two factor, you need an APP password. Once this is done use your robocopy command of choice and site back and wait.

Find the detailed XenServer tools version

 

To get the UUID:

xe vm-list | \
awk '{if ( $0 ~ /uuid/) {uuid=$5} if ($0 ~ /name-label/) \
{$1=$2=$3="";vmname=$0; printf "%s - %s\n", vmname, uuid}}'

Then:

xe vm-param-get uuid=<uuid from above> param-name=PV-drivers-version

 

Example output:

major: 6; minor: 2; micro: 0; build: 6

major: 6; minor: 2; micro: 0; build: 7 (update http://support.citrix.com/article/CTX142219)

 

 

Thanks: http://larryn.blogspot.com.au/2012/02/list-of-vms-on-xenserver-with-uuids.html

XenDesktop 7.6 Feature Pack 1 (Platinum Edition Below) Released

 

Features:

1. Session Recording - Session Recording enhances the ability for admins to actively monitor and record user sessions to simplify troubleshooting, accelerate issue resolution, evaluate personnel for training guidance, and monitor user behavior for compliance purposes.
   
2. Director 7.6.200 - This release includes controls to start and stop session recording (Session Recording is a feature in the Platinum Edition), as well as bug fixes.
   
3. HDX RealTime Optimization Pack 1.7 for Microsoft Lync - offers clear, crisp high-definition video calls in conjunction with Microsoft Lync®. This release adds support for Lync 2013 on Windows and Linux devices, plus new calling features.
   
4. License Server 11.12.1 for Windows - An optional component in Feature Pack 1. This release introduces the opportunity to participate in the Customer Experience Improvement Program.

• Note: that the components listed above are only the new items in Feature Pack 1. Even if you have already deployed 7.6, there are five components (beyond the items listed above) that have been updated or added since the initial 7.6 release.

Removing the Windows update cache

 

If your Windows update is stuck, errors on install or does not download, you can install manually or remove the Windows Update cache and let Windows learn again.

Run ‘cmd’ as Administrator

Either from the command line run ‘net stop wuauserv’ or stop the service in services.msc.

Go to the %windir% folder

run the commad ‘rd /s SoftwareDistribution’ to delete the contents

Restart the wuauserv (Windows update) service.

Microsoft detail this here.

Hat tip to…

Need to run Windows XP? do it safely

 

There are still plenty of Windows XP machines needed, so pull them out of virtualisation platforms, rip them off hardware and put them somewhere safe, on a VDI environment with read only, stateless disks !

If you try install the current version of the Virtual Desktop Agent (VDA) v7.6 on a machine running Windows XP or Windows Vista; however, you can install an earlier VDA version on these.

Setup your XenDesktop VDA environment, your PVS servers and once ready.

Downloading the older VDA for your VDI platform:

• XenDesktop Platinum: https://www.citrix.com/downloads/xendesktop/product-software/xendesktop-56-feature-pack-1-platinum.html 
• XenDesktop Enterprise: https://www.citrix.com/downloads/xendesktop/product-software/xendesktop-56-feature-pack-1-enterprise.html
• XenDesktop VDI: https://www.citrix.com/downloads/xendesktop/product-software/xendesktop-56-feature-pack-1-vdi.html

Install VDA as described in Installing and Upgrading the Virtual Desktop Agent.

Installing the latest VDA Hotfix Rollup, the latest rollup is available at:

• For x86-bit: Hotfix Rollup XD560VDAWX86400 (Version 5.6.400)
• For 64-bit: Hotfix Rollup XD560VDAWX64400 (Version 5.6.400)

 

Link to article http://support.citrix.com/article/ctx140941

Why you should move to Office 365

 

If you have an email administrator and you have less then 1000 users, what are you thinking?

• You could move just the contractors to Office 365, and keep your staff internal or any mix you like?
• You dont need to worry what device people want email delivered to, Office 365 is everywhere and on every device
• When you get Office 365 each users gets a minimum of 1TB of cloud storage so you can kill off the DropBox accounts
• It has a 99.9% uptime guarantee
• Lync is already setup for you are ready to go. If you have never setup lync you wont know why that is great
• SharePoint and applications on top like WIKIs etc are already built in
• The data can now be hosted in Sydney and Melbourne so the latency issues with Singapore are largely gone
• You could sack that lazy good for nothing email administrator, of get them doing something more interesting
• It is updated in the background for you
• Web access, mobile phones, outlook client are all ready to go
• Unless you have thousands of high security users, it will be cheaper then on-prem Exchange
• Archiving is built in – oh and it works

Now if you want help call me and I will setup some time with you….

 

Dave@Colv.in or call me 0411 COLVIN

Working with Powershell locked down? Unlock it…

 

If the machine you are running on and locked down there are several options to running the scripts shown below.

Via PowerShell - Get-Content AScript.ps1 | Invoke-Expression

Via DOS (note the spurious characters coming from the piped file) – TYPE AScript.ps1 | PowerShell.exe -noprofile

Or via a script to disable the execution policy by removing the AuthorizationManager in the current PowerShell session:

function Disable-ExecutionPolicy {($ctx = $executioncontext.gettype().getfield("_context","nonpublic,instance").getvalue( $executioncontext)).gettype().getfield("_authorizationManager","nonpublic,instance").setvalue($ctx, (new-object System.Management.Automation.AuthorizationManager "Microsoft.PowerShell"))} Disable-ExecutionPolicy

I found this here: –> https://blog.netspi.com/15-ways-to-bypass-the-powershell-execution-policy/

Citrix PVS device BSOD 0x0000007B via SCCM build

 

After installing the Citrix PVS Target Device software via SCCM or some other command line tool the Provisioning Services Target Device software:

%drive%\%folder%\PVS_Device_X64.exe /s /v /qn /norestart

What can happen is via the command line installation (not via the GUI) the files are not copied to the correct place. The quick fix is after the install, via a new command line:

Copy “C:\Program Files\Citrix\Provisioning Services\drivers\*.*”  to “%windir%\System32\Driver”

Then copy the image to the PVS and good to go.

 

 

"Dave Colvin"

PVS Automation with PowerShell

 

The script support installs when you install the Desktop Delivery Controller and PVS console.

1. Install the Desktop Delivery Controller and PVS consoles (or the powershell MSIs)
2. Add-PSSnapin *Citrix*,*PVS*
3. Installing Microsoft’s Remote Server Administration Tool(RSAT) Active Directory Support
4. Import-Module ActiveDirectory

The Provisioning Services cmdlets are installed via a 2 step process.

1. Run the following command to install the MCLIPSSnapin for the PVS cmdlets:
2. C:\Windows\Microsoft.NET\Framework\v4.0.30319\Installutil.exe “C:\Program Files\Citrix\Provisioning Services Console\MCLiPSSnapin.dll”
3. Add-PSSnapin MCLiPSSnapin

Now you have come this far some interesting commands:

Get all Devices in

Mcli-Get Device

Get devices in collection

MCLI-Get Device -p collectionName=”COLLECTIONNAME”,siteName=”SITENAME”

Add a device

MCLI-add Device –r devicename=xxxx1, deviceMac=00-xx-00-xx-00-xx, description=”something”, collectionName=”coll name”, siteName=”your site”

Get device details

MCLI-get Device –p devicename=xxxx1

Delete a device

MCLI-delete Device –p devicename=xxxx1

Add existing vDisk to store

MCLI-Add diskLocator -r diskLocatorName=”VDISKNAME”,siteName=”SITENAME”,storename=”STORENAME”

Add the target device to its device collection and create a computer object

Mcli-Add Device -r deviceName=$VM_Name, collectionName=$collection, siteName=$site_1, deviceMac=$MAC, description=$description, copyTemplate=1
Mcli-Run AddDeviceToDomain -p deviceName=$VM_Name, organizationUnit=$OU

Tips and Trick for Citrix PVD

 

• Is PvD compatible with XenApp?
• No only XenDesktop

 

• Is a PvD the same as a differential disk?
• No, PvD operates at the object level (files, folders, and registry). This enables all the changes that have been captured to persist across a base image updates whereas a differential disk would become invalidated in the case of a base image update.

 

• Can multiple PvDs be associated to a device/user?
• There can only be one PvD per Virtual Machine. The PvD is assigned to a Virtual Machine when building the catalogue of desktops. The pool type for a PvD catalogue is a pooled static, which the desktop is assigned to the user on first use.

 

• Is the PvD a 1-1 mapping per user?
• It is a 1:1 mapping to a Virtual Machine in a catalogue (assigned to the user on first use). The administrator can move a PvD to a new virtual machine in a recovery situation.

 

• If you create a catalogue for pooled with PvD, it does not mean that the user is always required to be assigned to that Virtual Machine defeating one of the benefits of a pooled?
• The base image is still shared and updated across the pool. However, once the user makes an initial connection to a Virtual Machine, the Virtual Machine is kept assigned to the user.
  Note: You must connect early in the starting stage long before you know who the user is in order to maximise the application compatibility for services, devices etc.

 

• Should the paging file be captured on the PvD?
• No. If you try to configure it this way, then the PvD will ignore this and will use the base Virtual Machine image (or Diff disk).

 

• Do I still require Profile Management?
• Personal vDisk does not roam. So if you have users that require profile roaming, you must use a roaming profile solution with PvD. It has been tested and supported with Citrix Profile Management.

 

• Does a PVD roam or is it assigned to single desktop?
• A PvD is attached to a Virtual Machine or machine, which is then assigned to the user. The administrator might move a PvD to a new machine in recovery situations.

 

• How do you configure Personal vDisk later if you choose not to enable it during the Virtual Desktop Agent (VDA) meta-installer?
• Run the inventory updater in the base image through the start menu shortcut (or “Ctxpvd –s inventory”), which results in the service being started or inventory taken. At this point, the service is enabled and ready to run inventory and manage the PvDs.

 

• Is the drive letter used by PvD able to be hidden?
• PvD currently uses two drive letters. The v: drive is hidden and is a blended view of the c: drive.
  The P: drive is not hidden.

 

• I cannot see v: drive; is there a way to see it?
• v: is only visible at a command prompt window. However, it is a blended view of the c: drive and appears to be identical. There is no way within the OS to see what is really on the base c: drive and what is on the PvD (P: drive).

 

• Is the UserData.vhd file inside the P: drive mounted as v:?
• The disk that is attached at the hypervisor is mounted as P:. The P: drive is where the user profile is redirected and captured. Also located on that P: drive is a UserData.vhd that is mounted as v:.
• The V: drive is where all the non-profile data attempting to write to the base Virtual Machine is redirected and stored. v: is visible from command prompt windows but not from Windows Explorer.

 

• How do I change PvD to use different drive letters?
• The P: drive might be changed in Desktop Studio when creating the catalogue. This should only be changed before usage since changing afterwards might lead to various errors (same as changing the c: drive to another letter after installation). 
  The v: drive must be changed in base image before being used in a catalogue:

KEY: HKLM\SOFTWARE\Citrix\personal vDisk\Config

VALUE: VHDMountPoint
Example: V:\

Note: Drive conflicts leads to failures.

• What is captured on the v: drive and what is capture on the P: drive?
• The P: drive is the vDisk that is attached to the hypervisor to the Virtual Machine. It contains the user’s profile is redirected (c:\users … ). It also contains the UserData.vhd file that is in turn mounted as the v: drive.

 

• The v: drive is where the applications and machines state is captured.
• When resetting the PvD, you are resetting the v: drive (which is really restoring the UserData.vhd file on the P: drive to its original empty or template state.

To reset, the machine with the Personal vDisk must be running; however, the user does not have to be logged on to it.

When you reset the disk, the settings revert back to their factory default values and all data on it is deleted, including applications. The profile data is retained unless you modified the Personal vDisk default (of redirecting profiles from the C: drive).

From the Help Desk view, choose the targeted Desktop OS machine.
From this view or in the Personalisation panel of the User Details view, click Reset Personal vDisk.
Click Reset. After the user is logged off (if the user was logged on), the machine restarts.

If the reset is successful, the Personal vDisk status field value in the Personalization panel of the User Details view is Running. If the reset is unsuccessful, a red X to the right of the Running value appears. When you point to this X, information about the failure appears.

To reset the PvD from the Desktop Director console or run the following command from elevated command prompt on the VM:

“C:\Program Files\citrix\personal vdisk\bin\ctxpvd –s reset”

This would reset all User Data excluding Profile information, so in effect, a user would lose any applications installed.

 

If antivirus products are installed on your desktops, ensure the VHD is big enough to store antivirus definition files, which are typically large.

The presence of antivirus products can affect how long it takes to run the inventory or perform an update.

Target (w7):

• \Program Files\Citrix\Provisioning Services\BNDevice.exe
• \Program Files\Citrix\Provisioning Services\TargetOSOptimizer.exe
• \Windows\System32\drivers\bnistack6.sys
• \Windows\System32\drivers\CfsDep2.sys
• \Windows\System32\drivers\CVhdBusP6.sys
• Exclude scanning of Write Cache

Target – Personal vDisk:

• \Program Files\Citrix\personal vdisk\bin\CTXPVD.exe
• \Program Files\Citrix\personal vdisk\bin\CTXPVDSVC.exe
• \Program Files\Citrix\Personal vDisk\BIN\WIN7\

 

 

http://support.citrix.com/proddocs/topic/xendesktop-7/cds-manage-personal-vdisks.html

http://support.citrix.com/article/CTX131553

https://literallyvirtual.wordpress.com/?s=vdisk

http://blogs.citrix.com/2013/09/22/citrix-consolidated-list-of-antivirus-exclusions/

Copy a Citrix PVS Versioned Disk

 

If try and just cope the .VHD of a versioned vDisk you’ll get an error message about not disk found. What you need to do is copy more, rename, export and then import.

To simplify the process you can merge the VHD chain of the source vDisk or just copy more files now and do it after? Here is how:

• Copy all the versioned vDisk in the chain (*.vhd, *.ahvd, *.pvp NOT the *.lok)
• Rename the copied files as required

• Open the PVS console, right click the source vDisk, and choose ‘Export vDisk…’

• Choose the latest version in the ‘Export versions starting at’
• This creates a XML (manifest file) containing the entire information about the versions of that vDisk

• Rename the XML file
• Edit the XML file change all references of the source vDisk to the copied vDisk name
• You should have a set of VHD/AVHD/PVP/XML files with the same file name. And an XML which refers to the new VHD files
• Open the PVS console, right click the vDisk store, and choose ‘Add or Import Existing vDisk…’

• After a short delay a popup appears saying that the import was successful

Job Done.

 

Cheers Dave Colvin

http://dave.colv.in 

http://twitter.com/DaveColvin

Hat tip: http://www.out-web.net/?p=1177

Raspberry Pi + Windows 10 = IoT (at home)

 

The new Raspberry Pi 2. 6x the power, 1 GB RAM, Windows 10 support and the same price.

This Broadcom CPU has two distinct improvements over the BCM2835 of the RPi B+. First, it has quadrupled the cores, each running at 900 MHz. (PI B+'s single-core 700 MHz). Also included a small tweak that allowed them to support 1 GB of RAM, double the 512 MB on the other models.

Microsoft announced today that Windows 10 would run on the Pi 2 free for the developer community via the Windows Developer Program for IoT later this year. Windows 10 on the Raspberry Pi 2 will be the IoT SKU of Windows 10, not the full version, but that’s exactly what the device was designed for.

Microsoft says that it sees the developer community as the foundation of the next wave of computing. By offering Windows 10 at no cost Microsoft has guaranteed that Windows 10 will be used in all manner of cheap projects that it would have never been considered for if the OS was selling at prices like previous generations of Windows.

Register with Microsoft. Buy some Pi.

+ =

Updated Citrix Receiver 4.2 PNA like experience

 

This is what the new PNA like experience looks like in the Start Menu of Windows 7. You can also get this on the desktop (but I have not shown this).

To get this you need to install the 4.2 receiver with the following command line. I cant stress enough how specific the CAPS, format and order this command line is.

Replace the section in yellow with your storefront server, ALSO note the /discover in the command line (see below where you can get this exact link from the Storefront server .CR file).

CitrixReceiver.exe /silent ADDLOCAL="ReceiverInside,ICA_Client,SSON,AM,SELFSERVICE,USB,DesktopViewer,Flash,Vd3d" ENABLE_DYNAMIC_CLIENT_NAME=Yes ALLOWADDSTORE=S ALLOWSAVEPWD=S STARTMENUDIR=\CitrixXenApps\ /INCLUDESSON /STORE0="Store1;https://storefront.COLV.IN/Citrix/Store1/discovery;On;Store1"

REBOOT, you need this as the SSOSVR.EXE needs to be running as seen below.

Additionally you need all the following:

1. TO BE USING HTTPS and a valid Cert.
2. You need the XML trust in both XenDesktop OR older XenApp
3. Your StoreFront server needs to be in ‘Local Intranet’ or ‘Trusted Sites’ in IE
4. Enable “Automatic Logon with current user name and password” is enabled in local Intranet if that is what you are in (see above).
5. Enable “Automatic Logon with current user name and password” is enabled in Trusted Sites if that is what you are in (see above).

 

Once it works, IE should auto logon as shown below.

 

If you don't know the URL above in yellow download the .CR file and it is highlighted below

 

This is the connection receiver once installed.

 

To get the Start Menu to populate this is the command line. It should do it automatically on reboot.

"C:\Program Files (x86)\Citrix\SelfServicePlugin\SelfService.exe" –showAppPicker

Once working correctly the Citrix Receiver in the notification area should logon automatically.

 

This is an update from the older article http://davestechnology.blogspot.com.au/2013/12/you-want-back-pna-program-neighbourhood.html