Thursday, October 26, 2017

Published application not launching in seamless mode

Published application not launching in seamless mode

 Issue-

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs"="C:\PROGRA~2\Citrix\System32\mfaphook64.dll,mfaphook64.dll" HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs"="C:\PROGRA~2\Citrix\System32\mfaphook.dll,mfaphook.dll"



Resolution -


Instead of having the full mapping for AppInit_DLLs, only use "mfaphook64.dll" and "mpafhook.dll," respectively. I've done this on two servers now with success.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs"="mfaphook64.dll" HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows "AppInit_DLLs"="mfaphook.dll"

Sunday, October 22, 2017

Communication flow during the different stages of the Citrix XenApp/XenDesktop logon process






1. The user device submits credentials to the Web Interface
(WI) or StoreFront (SF) web server.

2. For StoreFront, the credentials are verified directly to
a Domain Controller (Similar to Step 3 below). The
SF then passes the validation over to the Citrix Delivery
Controller (DDC) to begin resource enumeration
(Step 4). For Web Interface, the username and password
is passed to the DDC.

3. The DDC then queries a Domain Controller with the
end user’s credentials to verify user authorization.

4. Next, the DDC then queries the site SQL database
for the end user’s assigned Delivery Groups. The resources
defined by the Delivery Groups are sent to
the WI or SF server and presented to the user (enumeration).

5. When the User clicks on one of the resource icons
to start a desktop or application session, using the
Delivery Group obtained from the database, the DDC
queries the hypervisor about the status of resources
within that group.

6. The DDC identifies to Web Interface/StoreFront the
virtual machine it assigned for this particular session
(in the case of XenDesktop).

7. The Web Interface/StoreFront creates and sends an
ICA file to the Citrix Receiver pointing to the virtual
machine that hypervisor identified.

8. The Citrix Receiver establishes an ICA connection to
the specific virtual machine that the DDC allocated
for this session.

9. The Virtual Delivery Agent (VDA) verifies the license
file with the DDC.

10. The DDC queries the Citrix License server to verify
that the end user has a valid ticket.

11. The DDC then passes session policies to the VDA,
which in turn applies session policies to the virtual
machine. Profile loading, GPO processing, loading of
scripts, drivers, printers, etc. all occur at this stage.

12. The Citrix Receiver displays the selected resource to
the end user.

Monday, October 9, 2017

Citrix Ports

Citrix Ports 

ICA#1494
RDP#3389
CGP#2598
IMA#2512
AMC#2513
XML#8080
License Manager Daemon#27000
Citrix Vendor Daemon#7279
License Management Console#8082
Citrix Receiver#80
Citrix Receiver#443
Offline Plug-in-SMB#445
Power & Capacity Management Agent#11161
SQL#1433
Hyper-V#8100
SSH#22
VNC#5900
NTP#123
DNS#53
AD#389
NetBIOS#139
ISO Store: Microsoft-DS#445
End device communication with LabManager Server User interface#8443
LDAP#389
LDAPS#636
Communication of StorageLink Manager to StorageLink Service#21605
CLI Admin (encrypted)#22
GUI Admin (encrypted )#3008
GUI (no encryption)#3010
RADIUS connection#1812
HA-Exchange of Hello packets for communicating UP/DOWN status (heartbeat)#3003
Secure High Availability configuration synchronization#3008
Secure command propagation and MEP#3009
High Availability configuration synchronization plus web-logging and audit server logging#3010
Command propagation and MEP#3011
Administration Website#9001
Admin Desktop (until 4.5)#9002
AAC#9005
EdgeSight Agent internal communication (client-side database)#9036
Communication with RSCorSvc on EdgeSight Agent#9035
PSync#8443
EasyCall Gateway communicates with the SIP trunk over port 5060#5060
RPC#135
Contacting GoToMeeting service broker via the Endpoint Gateway (EGW)#8200
Connection to remote runtime(WorkflowStudio)#8010
PVS_WriteCachce#10802
PVS_WriteCachce#10803
TargetDeviceLogon#6910
ZENworks communication#524
LDAP connection to Global Catalog#3268
LDAP SSL connection to Global Catalog#3269