Раздел 1: Managing Citrix XenDesktop 7 Solutions

http://support.citrix.com/proddocs/topic/xendesktop-7/cds-upgrade-catalog.html
Обновлены могут быть только каталоги машин на базе Windows 7 и Windows 8.
Remote PC Access не поддерживается ОС Windows Vista.
Для ОС Windows XP и Vista обновления VDA до версии 7 нет.

While performing a random allocation type catalog update after updating the master image, the only valid options are

Immediately

‘On the next restart’

A restart can be delayed but not scheduled.

XenDesktop > XenDesktop 7 > Manage > Machine
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-update-master-vm-rho.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/update-machines.jpg

1.2

Task Description: Create Citrix Policies

Testing Aspect: How

A policy is assigned to all objects in the site.

Set priority to 1 to over-write existing policies settings.
1 is the highest priority.
Deny mode
Excludes a policy from applying to the assignment.
By default, new policy is created with largest number for priority.
The lowest priority.

XenDesktop > XenDesktop 7 > Manage > Manage Citrix policies > Use multiple policies > Prioritize policies and create exceptions
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-policies-multiple-prioritizing-rho.html

Private Desktop is also called pooled VDI.

Shared Desktop is also called XenApp published desktop.

Private Application is a published application on a VM.

Shared Application is also called XenApp published application.

Please note: The Citrix eDoc site shows the ‘Assignment type’ as ‘Desktop type’ but the actual product shows it as Delivery Group type.

XenDesktop > XenDesktop 7 > Manage > Manage Citrix policies > Apply policies > To apply a policy
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-policies-applying-task-rho.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/09/assign-policy.jpg

1.3

Task Description: Create Citrix policies (including printing policies)

Testing Aspect: When

To utilize auto updating of Controllers, an administrator should use Citrix Studio to create and configure a Citrix policy.

Updating the registry of the master image is a manual self-managed method.

To perform an OU-based Controller discovery, run the Set-ADControllerDiscovery.ps1 PowerShell script on the Controller.

XenDesktop > XenDesktop 7 > Manage > Delivery Controller environment > Automatically update
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-mng-cntrlr-autoupdate.html

1.4

Task Description: Manage license usage

Testing Aspect: How

In the Citrix admins group, to assign permissions to administrator to manage a Citrix license server:

Use Citrix Studio to add Citrix admins in Administrators.
Adding a Citrix admin to Domain admins would be correct only if the license server is co-located on Controllers.
Adding a Citrix admin to Licensing administrators only assigns rights in XenDesktop Citrix Studio, not the licensing portion.

XenDesktop > XenDesktop 7 > License > Manage Licensing > To add a licensing administrator group
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-licensing-management.html

1.5

Task Description: Delegate administrative rights

Testing Aspect: How

To view configuration logs:

Use Citrix Studio.
Select Logging in the left pane.

View Configuration Logs rights.

Full Administrator
Read Only Administrator

Always use ‘Read only’ role when View Configuration Logs and minimum rights are needed.

XenDesktop > XenDesktop 7 > Manage > Delegated Administration
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-manage-delegatedadmin.html

Want a PDF of the full 1Y0-200 study guide?
Enter your email and click Join!

1.6

Task Description: Publish server/desktop OS-hosted applications

Testing Aspect: How

To publish an application installed locally on Master Image:

Use Citrix Studio > Delivery Groups > Applications tab.
Click Create Application.
Select a Delivery Group and click Next.
Select an application and click Next.

XenDesktop > XenDesktop 7 > Deliver > Delivery Groups
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-create-update-desktops-wrapper-rho.html

1.7

Task Description: Modify virtual machine settings (XenServer)

Testing Aspect: How

To isolate Personal vDisk to a new storage:

A new writeable shared storage must be first presented to XenServer pool.
NFS storage

OR
FC storage

When share storage is presented:

Use Citrix Studio > Hosting.
Select the XenServer resource.
Click Add Storage.

CIFS share is a read-only storage type for XenServer.

Personal vDisk cannot be attached to master image.

Please note: eDocs describes the concept of Personal vDisk, which should be separate from master image, so master image can be updated without losing personal settings.

XenDesktop > XenDesktop 7 > Manage > Personal vDisks
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-about-personal-vdisks.html

1.8

Task Description: Create device collections, target devices, and vDisks (using the XenDesktop wizard, PV wizard, and manually)

Testing Aspect: How

Correct steps to create a device collection in PVS Console areIn the Console, right-click the Device Collections folder where the new collection will exist:

Select the ‘Create device collection’ menu option.

OR
Select Device Collections folder, click Action from the menu, and select Create Device Collection.
The Device Collection Properties dialog will appear.
On the General tab, type a name for the new device collection in the Name text box.
A description of the collection in the Description text box.
Click the Security tab.
Under the Device Administrators list, click Add.
The Add Security Group dialog will appear.
To assign a group with the Device Administrator role:
Type or select the appropriate domain and group name in the text box and click OK.
Under the Device Operators list, click Add.
The Add Security Group dialog will appear.
To assign a group with the Device Operator role:
Type or select the appropriate domain and group name in the text box and click OK.
Click OK to close the dialog box.

Technologies > Provisioning Services > Provisioning Services 7.0 > Provisioning Services Administration > Managing Device Collections > Device Collection Management Tasks
http://support.citrix.com/proddocs/topic/provisioning-7/pvs-collections-create.html

The following are the necessary prerequisites when creating a vDisk:

Enable Windows Automount on Windows Server operating systems.

Disable Windows Autoplay.

Verify adequate free space exists in the vDisk store.

Approximately 101% of used space on the source volumes.

Make a note of which NIC(s) the master target device was bound to when the Provisioning Services software was installed on the target device.

If a message appears during imaging prompting for reboot, ignore the request until imaging has completed successfully.

Technologies > Provisioning Services > Provisioning Services 7.0 > Installing and configuring Provisioning Services > Creating vDisks Automatically
http://support.citrix.com/proddocs/topic/provisioning-7/pvs-vdisks-image-wizard.html

1.9

Task Description: Manage Personal vDisk

Testing Aspect: What (considerations need to be made)

Personal vDisks are only supported with a desktop OS:

Windows XP

Windows 7

Windows 8

Server OS is not supported.

There can be only one personal vDisk per machine.

Personal vDisk can be moved to another machine if needed.

The minimum size of personal vDisk is 3GB.

Personal vDisk can be placed on any hypervisor supported storage.

It does not necessarily have to be on the same storage as the base VDI image.

XenDesktop FAQ – Personal vDisk
http://support.citrix.com/article/CTX131553

1.10

Task Description: Configure/Modify NetScaler Gateway Policies

Testing Aspect: When

A session policy is a collection of expressions and settings that are applied to:

Users

Groups

Virtual servers

Globally

Session policies are used to configure the settings for user connections, such as:

Defining settings to configure users to log on with the NetScaler Gateway Plug-in for Java or NetScaler Plug-in for Windows.

Session policies are evaluated and applied after the user is authenticated.

Traffic policies allow the configuration of settings for user connections, including:

Enforcing shorter time-outs for sensitive applications that are accessed from untrusted networks.

Switching network traffic to use TCP for some applications.

Identifying situations where other HTTP features for NetScaler Gateway Plug-in traffic should be used.

Defining the file extensions that are used with file type association.

File type association allows users to open documents in applications published through Citrix XenApp or Citrix XenDesktop 7.

NetScaler Gateway > NetScaler Gateway 10.1 > Configure > Configuring Policies and Profiles on NetScaler Gateway
http://support.citrix.com/proddocs/topic/NetScaler-gateway-101/ng-policies-profiles-wrapper-con.html

1.11

Task Description: Configure the store (include remote access and access for mobile devices)

Testing Aspect: How

To make a store and other resources on an internal network available through an SSL VPN tunnel.

Select ‘Full VPN tunnel’.

Users require the NetScaler Gateway Plug-in to establish the VPN tunnel.

If an appliance running NetScaler Gateway 10.1, Access Gateway 10, or Access Gateway 9.3 is added, select from the ‘Logon type’ list the authentication method configured on the appliance for Citrix Receiver users.

The information that is provided during configuration of the NetScaler Gateway appliance is added to the provisioning file for the store, which enables Citrix Receiver to send the appropriate connection request when contacting the appliance for the first time.

If users are required to enter both their domain credentials and a token code obtained from a security token, ‘Domain and security token’ should be selected.

Other selections that can be made, depending on the requirements, are:

Domain
‘Security token’
‘SMS authentication’
‘Smart card’

Technologies > StoreFront > StoreFront 2.1 > Manage > Configure stores
http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-manage-store.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/enable-remote-access.jpg

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/change-general-settings.jpg

Section 2: Maintaining Citrix XenDesktop 7 Solutions

2.1

Task Description: Back up/restore the XenDesktop database

Testing Aspect: How

XenDesktop utilizes SQL Server to handle database backup and restore.

To perform a one-time backup a XenDesktop 7 site database:

Verify the name of the database.
Verify the database server name.
Obtain the name of the database server data source.
Obtain the database name.
In Microsoft SQL Server Management Studio > Object Explorer:
Select Tasks > Backup.
Verify the backup is set to Full and click OK.
Verify the backup was successful.

How to Backup and Restore your XenDesktop Database
http://support.citrix.com/article/CTX135207

2.2

Task Description: Update the desktop image

Testing Aspect: What factors should be considered

In order for virtual machines to use an updated master image, the virtual machines must be restarted.

Please note that after updating the master image, the user devices must be restarted through Studio.
For the changes to take effect.
For the changes to be available to the users.

XenDesktop 7 > Manage > Machines > Update a master image
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-update-master-vm-rho.html

2.3

Task Description: Configure power management settings

Testing Aspect: When

To power manage Delivery Groups:

In Studio, select the Delivery Group node.
Select the desired Delivery Group power management settings.
Click Edit Delivery Group.

Click ‘Power management’.
Select Weekdays in ‘Power on/off machines’.
For random Delivery Groups, in ‘Machines to be powered on’:
Click Edit.
Specify the pool size during weekdays.
In ‘Machines to be powered on’:
Select the number of machines to power on.
In ‘Peak hours’:
Set the organization’s peak and off-peak hours during weekdays.
Set power state timers for peak and non-peak hours during weekdays.
Select Weekend.

XenDesktop 7 > Manage > Application and desktop delivery > Power manage Desktop OS machines
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-control-power-management-rho.html

2.4

Task Description: Backup/restore XenServer metadata

Testing Aspect: How

To configure a recurring backup of XenServer virtual machine metadata in a XD 7 deployment:

Use the fdisk -l command to determine the device file needed for the USB storage device.
Create the storage repository on the USB storage device.
In the XenServer console (accessible with xsconsole using the command line interface in the XenCenter):
Select ‘Backup, Restore and Update’.
Select Backup Virtual Machine Metadata.
Select the new storage repository created earlier using the xe sr-create command.
Proceed with VM backup using a thumb drive or other USB drive.

How to Back Up Virtual Machine Metadata to a USB Device
http://support.citrix.com/article/CTX121282

2.5

Task Description: Add additional storage to target devices

Testing Aspect: How

Adding a second drive to the master image can be a standard practice for many XenDesktop administrators.

The best method to add a second drive to the master image is to configure a vDisk for the master image and create C: and D: partition.
When the master image is prepared with C: and D: partitions, the administrator can deploy new virtual machines.
The VMs will have local D: drives.
Random Desktop OS machines will drop all of the configurations if rebooted if XenCenter is used to configure a D: drive on all of the VMs.
Use the ‘Net Use’ command to map a network drive; not a local drive.
Citrix policies can control how local Citrix client device drives map to a VDI session.

Although the following source is for a discontinued version of Provisioning Services, multiple partitions on a master image are still created using Provisioning Services.

Archive: How to Create a Two Partition Virtual Disk
http://support.citrix.com/article/ctx116698

Want a PDF of the full 1Y0-200 study guide?
Enter your email and click Join!

2.6

Task Description: Maintain vDisks

Testing Aspect: How

To add Personal vDisks to new hosts when configuring a new XenDesktop site:

Add Personal vDisks and storage for the Personal vDisks to existing hosts.

In Studio:
Click Configuration.
Click Hosting.
Select a host.
Click Add Personal vDisk Storage.
Specify the storage location.

XenDesktop 7 > Manage > Personal vDisks > Manage Personal vDisks
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-manage-personal-vdisks.html

(2.7 and 2.8 intentionally left out. See Citrix Education’s 1Y0-200 Exam Prep Guide)

2.9

Task Description: Configure StoreFront access scenario

Testing Aspect: How

There are three choices for remote access to StoreFront:

None
None means no remote access.
Only users on the internal network with connection to the StoreFront servers can access the store.
No VPN Tunnel
No VPN Tunnel is accessed through NetScaler in ICA Proxy mode.
Full access to the internal network is not provided.
Users do not need an Access Gateway Plug-in.
Full VPN Tunnel
Full VPN Tunnel means that users need Access Gateway Plug-in.
Users can have outside VPN access to the internal network through NetScaler.

Technologies > StoreFront > StoreFront 2.0 > Manage > Configure stores
http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-manage-remote.html

2.10

Task Description: Configure Citrix Receiver updates

Testing Aspect: How

v The options that an administrator can choose when providing users of StoreFront with updates to Citrix Receiver:

Citrix (citrix.com)
Merchandising Server

Technologies > StoreFront > StoreFront 2.1 > Manage > Configure stores
http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-manage-store.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/citrix-StoreFront.jpg

2.11

Task Description: Perform user profile maintenance

Testing Aspect: When

In a pooled VDI, when user login time significantly increases for one user while other users aren’t seeing an increase, the cause is most likely a bloomed or corrupted user roaming profile.

To resolve:

Reset the user’s roaming profile.
When the profile is reset, the user’s login behavior will be restored to normal.

XenDesktop 7 > Monitor > Monitor environment with Director > Troubleshoot user issue
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-help-reset-user-profile.html

Section 3: Monitoring Citrix XenDesktop 7 Solutions

3.1

Task Description: Use Director to monitor the environment

Testing Aspect: How

When troubleshooting a user or virtual desktop issue, the operator is able to shadow the end user by starting a Remote Assistance connection to the virtual desktop machine.

In XenDesktop 7, Citrix Director is the management console.
Remote Desktop is RDP, which can only have one session on Desktop OS, is not used for shadowing.
Shadow Taskbar is used in XenApp, not XenDesktop.

How to Enable Remote Assistance for Citrix Director
http://support.citrix.com/article/CTX127388

XenApp > XenApp 5 Feature Pack for Windows Server 2003 > XenApp Administration > Managing Session Environments and Connections > Viewing User Sessions
http://support.citrix.com/proddocs/topic/xenapp5fp-w2k3/ps-sessions-use-sess-shad-v2.html

Identifying and handling an unregistered VDI:

The administrator should use Citrix Director and filter State is Unregistered.
This shows a VDI’s State is Unregistered and means there is an issue with VDA to DDC communications.
This also includes the situation when Citrix Desktop Service is Stopped or Citrix Desktop Service is Started but still having issues communicating with the DDC.
The Last Connection Failure is historical data.
Using WMI and querying Citrix Desktop Service status is Stopped only shows the VDIs that the VDA service is stopped.
Citrix ICA Service is used to handle ICA sessions, but does not communicate with a DDC.

Troubleshooting XenDesktop brokering process
http://blogs.citrix.com/2012/07/23/troubleshooting-xendesktop-brokering-process-2

XenDesktop 7 > Monitor > Monitor environments with Director > Monitor deployments > Filter data to troubleshoot failures > Filter data to troubleshoot failures
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-use-create-filters.html

3.2

Task Description: Interpret Alerts in Citrix Director

Testing Aspect: How

In Citrix Director, Unavailable Capacity means that the Desktop/Server OS session is not available due to max capacity reached.

When Unavailable Capacity count is greater than 0, it means the VM in a Delivery Group has no more free sessions to hand out.

An administrator should add more VMs to the Delivery Group.

XenDesktop > XenDesktop 7 > Monitor Monitor environments with Director > Monitor deployments on the Dashboard
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-monitor-deployment-wrapper.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/unavailable-capacity-count.jpg

(3.3 intentionally left out. See Citrix Education’s 1Y0-200 Exam Prep Guide)

3.4

Task Description: Monitor Machine Processes and Failures

Testing Aspect: How

View processes running under a user’s VDI session with Citrix Director.

Citrix admins should also use Director to end non-responsive applications or processes.

XenDesktop 7 > Monitor > Monitor environments with Director > Troubleshoot user issues > Resolve application failures
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-help-app-failure.html

3.5

Task Description: Monitor the Virtual Delivery Agent

Testing Aspect: How

Using Citrix Director, administrators can monitor the Usage table.

The Usage table shows whether each machine is:
Off
Ready
Connected
Disconnected
Unregistered
When a machine’s registration state becomes unregistered, there is an issue with virtual delivery agent on the virtual machine.
A user will not be able to login to a VDI.
A disconnected user will not be able to re-connect back to a VDI.

This results in a login failed event.

The Category table can also be monitored for Unregistered machines.

Technologies > Desktop Director > Desktop Director 2.1 > Use > Interpreting the Information Displayed > Dashboard > Usage
http://support.citrix.com/proddocs/topic/director-210/director-dashboard-usage.html

Technologies > Desktop Director > Desktop Director 2.1 > Use > Interpreting the Information Displayed > Dashboard > Machines
http://support.citrix.com/proddocs/topic/director-210/director-dashboard-summary.html

An administrator can monitor machines from Director.

In the Director Dashboard, the Category table lists the machines in the following states, which might require action:

All
Unregistered
High CPU
High Latency
High Profile Load Time
Last Connection Failed
Pending Update

Technologies > Desktop Director > Desktop Director 2.1 > Use > Interpreting the Information Displayed > Dashboard > Machines
http://support.citrix.com/proddocs/topic/director-210/director-dashboard-summary.html

3.6

Task Description: Monitor Configuration Logging

Testing Aspect: How

Configuration Logging is provided through Citrix Studio > Logging.

Anyone that needs to view the logs should be in the Read Only Administrator role.

Don’t allow them the Full Administrator role.

XenDesktop > XenDesktop 7 > Manage > Configuration Logging
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-configlog-wrapper.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/configuration-logging.jpg

Want a PDF of the full 1Y0-200 study guide?
Enter your email and click Join!

3.7

Task Description: Monitor hosted server workload

Testing Aspect: How

IntelliCache is a XenServer host related feature.

The IntelliCache related counter is on a XenServer host.
There are three IntelliCache counters available on a XenServer host Performance tab:
IntelliCache Cache Hits
IntelliCache Cache Misses
IntelliCache Cache Size
Options to monitor Virtual Machine related counters include:
Performance Monitor
Resource Monitor
Selecting a Virtual Machine on a XenServer host’s Performance tab

XenDesktop > XenDesktop 7 > Manage > Connections and resources > Use IntelliCache with XenDesktop
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-manage-hosts-intellicache.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/10/xenserver-intellicache.jpg

The Hosts table in Director contains:

Health status icons
Display alerts about issues with:
XenDesktop Controller’s connection to a host
CPU
Memory
Bandwidth (network usage)
Storage
Alerts are based on thresholds defined by the hypervisor administrator.

Technologies > Desktop Director > Desktop Director 2.1 > Use > Interpreting the Information Displayed > Desktop Groups > Infrastructure
http://support.citrix.com/proddocs/topic/director-210/director-infrastructure-health.html

3.8

Task Description: Monitor System Performance

Testing Aspect: How (to interpret data)

Before an administrator investigates the reason for a user’s extended logon time, the administrator should:

Look at the user’s current and average logon duration.
Look at the Delivery Group average logon duration.

When an administrator needs further investigation for the extended logon time, the administrator should:

Ask the user to log off and log back on to observe the Logon Duration data.

Examine each phase of the logon process.
The total logon time is not an accurate sum of each of the phases.

XenDesktop > XenDesktop 7 > Monitor > Monitor environments with Director > Troubleshoot user issues > Diagnose user logon issues
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-help-logon-user.html

3.9

Task Description: Use PVS Auditing for Monitoring

Testing Aspect: How

Provisioning Services provides an auditing tool that records configuration actions on components within the Provisioning Services farm, to the Provisioning Services database.

This provides administrators with a way to troubleshoot and monitor recent changes that might impact system performance and behavior.
To enable auditing in the PVS Console:
Right-click on the farm.
Select the farm Properties menu option.
On the Options tab, under Auditing, check the Enable auditing checkbox.

Technologies > Provisioning Services > Provisioning Services 7.x > Provisioning Services Administration > Auditing
http://support.citrix.com/proddocs/topic/provisioning-7/pvs-audit-wrapper.html

3.10

Task Description: Monitor StoreFront logs

Testing Aspect: Monitor Profile Management

When StoreFront tracing is enabled:

Tracing information is written to files in the \Admin\Trace\ directory of the StoreFront installation.
Typically located at C:\Program Files\Citrix\Receiver StoreFront\.
The StoreFront installation log files can be found in C:\Windows\Temp\.
The web.config file for the authentication service, store, or Receiver for Web site, is typically located in the following directories:
C:\inetpub\wwwroot\Citrix\Authentication\
C:\inetpub\wwwroot\Citrix\storename\
C:\inetpub\wwwroot\Citrix\storenameWeb\
Logs created by Windows PowerShell commands are stored in the \Admin\logs\ directory of the StoreFront installation.
Typically located at C:\Program Files\Citrix\Receiver StoreFront\.

Technologies > StoreFront > StoreFront 2.1 > Troubleshoot StoreFront
http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-troubleshoot.html

StoreFront supports Windows event logging for:

The authentication service
Stores
Receiver for Web sites

Any events that are generated are written to the StoreFront application log.

Events can be viewed using Event Viewer under:

Application and Services Logs > Citrix Delivery Services

OR

Windows Logs > Application

Technologies > StoreFront > StoreFront 2.1 > Troubleshoot StoreFront
http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-troubleshoot.html

3.11

Task Description: Monitor Profile Management

Testing Aspect: How (where to find it is implied)

Citrix Profile Manager logs errors in the Windows Event Log.

All other warnings and informational messages are logged in a file named UserProfileManager.log in the directory:

%SystemRoot%\system32\LogFiles\UserProfileManager\

Profile management collects data about the efficiency of a deployment using Microsoft Windows Performance Monitor (Perfmon) counters.

For each session, counters are stored under the object called Citrix Profile Management.

Technologies > Profile Management > Profile Management 3.x > Manage > Performance Optimization > Tuning Profiles > Monitoring and Logging Profile Management
http://support.citrix.com/proddocs/topic/user-profile-manager-kib/upm-perfmon.html

Technologies > Profile Management > Profile Management 3.x > Manage > Performance Optimization > Tuning Profiles > Monitoring and Logging Profile Management > About the Profile Management Log File
http://support.citrix.com/proddocs/topic/user-profile-manager-kib/upm-logging-about-den.html

3.12

Task Description: Monitor the event log for NetScaler

Testing Aspect: How

NetScaler natively supports logging to:

SYSLOG server

AND

NSLOG server
Either server can be running on:
A remote system.

OR

On NetScaler.

Most deployments should have SYSLOG , NSLOG, or both in the environment, so configuring NetScaler to upload logs to one of them is an efficient solution.

NetScaler > NetScaler 10.1 > System > Administration
http://support.citrix.com/proddocs/topic/ns-system-10-1-map/ns-ag-asl-intor-wrapper-con.html

3.13

Task Description: Monitor NetScaler user sessions

Testing Aspect: How

The Citrix NetScaler appliance is a central point of control for all application traffic in the data center.

It collects flow and user-session level information valuable for:
application performance monitoring
analytics
business intelligence applications

AppFlow transmits the information by using the Internet Protocol Flow Information eXport (IPFIX) format.

Using UDP as the transport protocol, AppFlow transmits the collected data, called flow records, to one or more IPv4 collectors.
The collectors aggregate the flow records and generate real-time or historical reports.

NetScaler > NetScaler 10.1 > System > AppFlow
http://support.citrix.com/proddocs/topic/ns-system-10-1-map/ns-ag-appflow-intro-wrapper-con.html

Section 4: Troubleshooting a Citrix XenDesktop 7 Solution

4.1

Task Description: Troubleshoot issues related to communication between the Delivery Controller and other components

Testing Aspect: What is the root cause

Delivery Controllers communicate with XenServer:

Via HTTP on port 80.
Via HTTPs on port 443 when using a secure connection.
Delivery Controllers send commands to XenServer on port 80 or 443 to power on VMs.
If VMs can’t make new connections, chances are the Controllers are unable to communicate with XenServer on port 80 or port 443.
If the Delivery Controllers are unavailable then they can’t connect to XenServer hosts on any port.
New connections and reconnections will be affected.
Connected users will be ok.

Communication ports used by Citrix Technologies
http://support.citrix.com/servlet/KbServlet/download/2389-102-704421/CTX101810_28th_June_2013.pdf

4.2

Task Description: Troubleshoot Virtual Delivery Agent/client issues

Testing Aspect: What is the root cause

A Virtual Desktop Machine (VDM) must have an IP address to communicate on the network, so issues with registration can be attributed to:

A DHCP server being down.
Firewall changes.
The names of the DCs being changed.
Other changes in Group Policies.

A Virtual Delivery Agent (VDA) communicates with the Delivery Controllers (DCs) on port 80.

A VDA must be able to resolve the IP addresses of the DCs in order to register successfully.
If a VDA can’t resolve the IP address of the DCs due to DNS communication issue, registration will fail.
Blocking port 1494 will prevent Receiver from connecting to a VDM.
Kerberos settings allow for 5 minutes of time difference.
A lesser number of minutes delay between a VDM and DC will not cause registration issues.

Troubleshooting Virtual Desktop Agent Registration with Controllers in XenDesktop
http://support.citrix.com/article/ctx117248

4.3

Task Description: Troubleshoot Virtual Delivery Agent/client issues

Testing Aspect: How to resolve the issue

The Citrix Desktop Service manages communication between the Delivery Controller and Virtual Desktop Machines (VDMs). It handles:

initial brokering of connections.
settings for connections.
interaction with sessions.

Restarting the Citrix Desktop Service will cause a VDM to re-register with a Delivery Controller.

The Citrix Desktop Service is the display name.
BrokerAgent is the actual service name.

Used at the command line.
The Citrix ICA Service manages communication between the endpoint device and the VDM.
It does not handle the registration with the Delivery Controllers.
PorticaService is the actual service name for the Citrix ICA Service.

Troubleshooting XenDesktop brokering process
http://blogs.citrix.com/2012/07/23/troubleshooting-xendesktop-brokering-process-2

4.4

Task Description: Troubleshoot licensing issues

Testing Aspect: How to resolve the issue

Citrix license files are allocated on MyCitrix.com using the case sensitive license server name.

When license files are installed on a license server, any change to the server name or to the license file will invalidate them.
If a server name changes, an administrator must:
go to MyCitrix.com.
return the licenses.
reallocate the licenses using the new server name.

Technologies > Licensing Your Product > Citrix Licensing 11.11.1 > Backing up the license server
http://support.citrix.com/proddocs/topic/licensing-1111/lic-backup.html

Technologies > Licensing Your Product > Citrix Licensing 11.11.1 > Frequently Asked Questions for Licensing
http://support.citrix.com/proddocs/topic/licensing-1111/lic-faq.html

4.5

Task Description: Troubleshooting common printing issues

Testing Aspect: What is the root cause

When ‘Auto-create client printers’ is added to a policy, by default, all client printers are auto-created.

This setting only takes effect if ‘Client printer redirection’ is set to Allowed.

XenDesktop > XenDesktop 7 > Reference > Policy settings reference > ICA policy settings > Printing policy settings > Client Printers policy settings
http://support.citrix.com/proddocs/topic/xendesktop-7/ps-console-policies-rules-printer-clients-v2.html

4.6

Task Description: Troubleshoot user connectivity issues related to Application and Desktop launch

Testing Aspect: What is the root cause

If a user logs on to StoreFront Receiver for Web using a web browser while on the internal network and is presented with a list of applications, clicks an application, and receives a Citrix Receiver error message…

The issue is most likely that the user’s machine cannot communicate with the server running the application over port 2598.
Port 2598 is used when Session Reliability is enabled.
Session Reliability is enabled by default in XenDesktop 7.
If Session Reliability was disabled, port 1494 would be used.

Explaining ICA Session Reliability, Common Gateway Protocol, on TCP Port 2598
http://support.citrix.com/article/CTX104147

XenDesktop > XenDesktop 7 > Reference > Policy settings reference > ICA policy settings > Session Reliability policy settings
http://support.citrix.com/proddocs/topic/xendesktop-7/ps-ref-policies-session-reliability.html

XenDesktop Administration Guide, Page 191
http://citrix.edocspdf.com/media/output/en.xendesktop.cds-xd-7landing-page.pdf

4.7

Task Description: Troubleshoot user connectivity issues related to Application and Desktop launch

Testing Aspect: How to resolve the issue

With first time users, to avoid a machine taking an extra-long time before the login screen appears…

Select the Microsoft SVGA video driver for new dedicated virtual desktops.
When the WDDM video driver is installed and used on certain VDMs, users might experience:
a blank screen.
being unable to connect.
connecting briefly and then losing connection.
a long startup time if it’s their first time logging in Logging on to Windows 8.
a black screen might be presented to users during this process before the Start screen appears.

These issues will most likely be experienced with dedicated desktops when they are first assigned or with pooled-random desktops created with Provisioning Services.
To resolve any of these issues, uninstall the WDDM video driver and use the Windows SVGA video driver instead.

XenDesktop > XenDesktop 7 > About this release > Known issues
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-70-known-issues.html

Unable to Connect to XenDesktop Virtual Desktop Agent on Vista or Windows 7 with WDDM Driver
http://support.citrix.com/article/CTX124877

4.8

Task Description: Troubleshoot Citrix policies

Testing Aspect: How they are taking effect

If a policy is configured that doesn’t allow connections to client drives for an OU group and no one can connect to client drives…

The policy was probably configured with ‘Assign to all objects in a site’.
When assigning a policy to a defined group, avoid using ‘Assign to all objects in a site’ option.

XenDesktop > XenDesktop 7 > Manage > Manage Citrix policies > Create policies
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-policies-creating-rho.html

Image
https://citrixxperience.com/content/wp-content/uploads/2013/11/assign-to-all-objects-in-site.jpg

4.9

Task Description: Troubleshoot issues with application performance

Testing Aspect: What is the root cause

If a user tries launching an application hosted on a XenDesktop 7 App Edition Server and they receive an error that informs them that the application failed to start, a likely cause is…

Third-party software is using cmstart.exe and it modified environment variables to point to that executable.
Because XenDesktop 7 uses an executable named cmstart.exe for the launch of published applications, it might confuse and locate the cmstart.exe of the third party software instead.
By using the wrong version of cmstart.exe the launch process breaks.
XenDesktop 7 also modifies the environment variables to locate cmstart.exe for published application launch process.
The variables provided by the third party software get the priority.

Application Launch Error: The Citrix server is unable to process your request to start this published application at this time.
http://support.citrix.com/article/CTX132243

4.10

Task Description: Troubleshoot XenServer networking issues

Testing Aspect: What is the root cause

When a XenServer host is added to a pool, it inherits most network settings from the pool, particularly:

VLANs
bonds
external networks
A new host can’t have an external network configured with a VLAN different than all other hosts.
If connections to VDMs on all the other hosts are working, there is obviously an issue outside of the pool.
The issue is most likely on the switch to which the new host is connected.
A wrong VLAN on the physical switch or a speed mismatch could be causing the problem.

Network Interface Card Bonds in XenServer
http://support.citrix.com/article/CTX137599
Want a PDF of the full 1Y0-200 study guide?
Enter your email and click Join!

4.11

Task Description: Troubleshoot Provisioning Services related issues

Testing Aspect: What is the root cause

If a user running a recently rolled out Windows 8 virtual desktop, while waiting for a virtual desktop machine (VDM) to start…

It might take an extra-long time
The user might be staring at a blank screen, not sure if it the desktop is starting up.
A likely issue is that:
The virtual desktop was created with Provisioning Services.

This issue will likely be experienced with:
dedicated desktops when they are first assigned.
pooled-random desktops created with Provisioning Services.

XenDesktop > XenDesktop 7 > About this release > Known issues
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-70-known-issues.html

4.12

Task Description: Troubleshoot Provisioning Services related issues

Testing Aspect: How to resolve the issue

If a Citrix administrator is using the Provisioning Services Streamed VM Setup Wizard to deploy a streamed vDisk to several cloned virtual machines on a XenServer host and is unable to create new computer accounts in Active Directory (AD)…

An Active Directory administrator will need to delegate rights to the Citrix administrator to allow Active Directory account creation.

Technologies > Provisioning Services > Provisioning Services 7.x > Provisioning Services Administration > Using the Streamed VM Setup Wizard
http://support.citrix.com/proddocs/topic/provisioning-7/pvs-vm-wizard-using.html

4.13

Task Description: Troubleshoot personal vDisk failures

Testing Aspect: How to resolve the issue

If the value of the Personal vDisk registry key EnableProfileRedirection is set to 1 or ON, and later, while updating the image, it is changed to 0 or OFF…

the entire Personal vDisk space might get allocated to user-installed applications.
Leaves no space for user profiles.
The profiles remain on the vDisk, not being redirected to a file server.
To prevent this issue, do not adjust the registry key when updating the image.

XenDesktop > XenDesktop 7 > About this release > Known issues
http://support.citrix.com/proddocs/topic/xendesktop-7/cds-70-known-issues.html

4.14

Task Description: Troubleshoot Machine Creation Services

Testing Aspect: What is the root cause

A requirement to utilize MCS is that a master image must be on each shared storage.

An NFS share is OK for MCS.
FC storage is OK for MCS.
Intellicache utilizes local storage on the hosts so is not OK.

Machine Creation Services Primer – Part 1
http://blogs.citrix.com/2011/06/28/machine-creation-services-primer-part-1

4.15

Task Description: Troubleshooting Machine Creation Services

Testing Aspect: How to resolve the issue

One of the most overlooked design elements involving IntelliCache is XenServer host local storage.

When IntelliCache is enabled…
most of the I/O is shifted from the enterprise storage array to local host storage.
resulting in I/O bottleneck if there is a high density of running VMs on each host.
Low resource utilization (10%) on enterprise storage array shows an indication of I/Os that are shifted to the hosts’ local storage.
An indication that IntelliCache is enabled.
To resolve the issue, an administrator should:
replace local storage with SSD drives to handle the I/O demand.

OR

disable IntelliCache so the VDI will utilize the enterprise storage array, which is being underutilized.

Troubleshooting and identifying data storage performance bottlenecks
http://searchstorage.techtarget.com/report/Troubleshooting-and-identifying-data-storage-performance-bottlenecks

4.16

Task Description: Troubleshoot issues related to user being unable to access desktops and/or apps through StoreFront

Testing Aspect: What is the root cause

When accessing a store website on StoreFront and the following error message is displayed: ‘Cannot complete your request. You can log on and try again, or contact your help desk for assistance’…

A likely cause is that the Citrix Credential Wallet Service is not started.
Ensure the Citrix Credential Wallet Service is started on the StoreFront server.
If it is already started, restart the service.
Note: Change this service Startup Type to Automatic (Delayed Start) and restart the server.

StoreFront Error: Cannot complete your request
http://support.citrix.com/article/CTX133904

4.17

Task Description: Troubleshoot issues related to user being unable to access desktops and/or apps through StoreFront

Testing Aspect: How to resolve the issue

To integrate pass-through authentication through StoreFront:

Enable the Domain Pass-through authentication method in StoreFront.
On the domain workstation, install CitrixReceiver.exe with the /includeSSON switch from the command line.
Install the icaclient.adm template.
Configure ‘Enable pass-through authentication’.
‘Allow pass-through authentication for all ICA connections’.
After enabling the policies in the icaclient.adm template, run the command ‘gpupdate/force’.
Add the StoreFront FQDN to the Local Intranet zone in Internet Explorer.
Restart the workstation.

How to Configure Desktop Pass-Through with StoreFront and Receiver 3.x
http://support.citrix.com/article/CTX133855

4.18

Task Description: Troubleshoot issues related to NetScaler and load balancing StoreFront servers

Testing Aspect: What is the root cause

While monitoring back end servers, NetScaler uses various probes, with ping being one of them.

Ping is not recommended to monitor a server as it doesn’t account for applications running on the server.
StoreFront relies on Internet Information Services (IIS).
If IIS is down and ping is running, NetScaler will continue to send traffic to the server and users may be unable to connect.

Citrix StoreFront 2.0 Proof of Concept Implementation Guide
http://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/citrix-storefront-2.0.pdf

4.19

Task Description: Troubleshoot Receiver issues

Testing Aspect: What is the root cause

If a user tries to add a StoreFront URL “http://thecx-storefront.com” to Citrix Receiver but fails and receives the following warning: The specified URL is not secure…

The cause of the failure of adding the URL is most likely:
The default configuration requires SSL communication to a store.

Citrix Receiver 3.1 does not allow a non-secure URL to StoreFront by default.

To force Receiver to allow a non-secure URL, the client registry must be modified.

Citrix Receiver 3.1 does not Allow you to Add Non-Secure URL
http://support.citrix.com/article/CTX131857

4.20

Task Description: Troubleshoot Receiver issues

Testing Aspect: How to resolve the issue

If a user running Citrix Receiver on a Windows machine is connected to a published desktop and is unable to save a file to a folder on the local hard drive but is able to copy files to the folder when disconnected from the published desktop, two ways an administrator can resolve the issue are:

On the client machine:
Configure Read and Write in Desktop Viewer Preferences > File Access.
Configure Full Access in Citrix Connections Center > Session Security > Files.
Users sometimes unknowingly change the settings on their local machine.
Although an error message might seem to be user permission related, it is not.
The user most likely received a pop-up message asking to choose the level of access to grant to local files and the user selected ‘Read-only access.’
This would not allow files to be saved to the client drive.
This access issue can be resolved either by configuring Read and Write in Desktop Viewer Preferences > Files.

OR
Configuring Full Access in Citrix Connections Center > Session Security > Files.

How to Configure Default Device Access Behavior of Receiver 3.x, XenDesktop and XenApp
http://support.citrix.com/article/CTX133565

4.21

Task Description: Troubleshoot user profile issues

Testing Aspect: How to resolve the issue

When changes are made to a Group Policy setting but it is not operative on the server running the Citrix Profile Management Service…

This might be because Group Policy does not refresh immediately.
Instead it is based on events or intervals specified in the deployment.
To refresh the Group Policy immediately:
Run gpupdate /force on the Profile Management server.

Technologies > Profile Management > Profile Management 5.x > Troubleshoot > Troubleshooting Common Issues Technologies > Profile Management > Profile Management 5.x > Troubleshoot > Troubleshooting Common Issues
http://support.citrix.com/proddocs/topic/user-profile-manager-5-x/upm-troubleshoot-specifics.html

Windows Library: Gpupdate
http://technet.microsoft.com/en-us/library/bb490983.aspx

4.22

Task Description: Troubleshoot issues related to NetScaler and ICA proxy

Testing Aspect: How to resolve the issue

When ICA proxy is enabled on Access Gateway, if users connecting to XenDesktop attempt to open a published application…

The Secure Ticket Authority (STA) issues a session ticket with an invalid format.
The connection fails.
To resolve this issue:
Disable ICA proxy on Access Gateway.

NetScaler Gateway > Access Gateway 10 > About This Release > Known Issues
http://support.citrix.com/proddocs/topic/access-gateway-10/agee-known-issues-10-con.html