XenDesktop Implementation Guide

Transcription

1 Consulting Solutions WHITE PAPER Citrix XenDesktop XenDesktop Implementation Guide Pooled Desktops (Local and Remote)

2 Contents Contents... 2 Overview... 4 Initial Architecture... 5 Installation Guide... 6 SQL Database... 7 Pre-requisites SQL Database... 7 Citrix Licensing Pre-requisites Installation - Citrix Licensing Configuration - Citrix Licensing Citrix XenDesktop Desktop Controller Pre-requisites XenDesktop Controller Installation XenDesktop Controller Configuration Creating a XenDesktop Site Citrix Web Interface Pre-requisites Installation Citrix Web Interface Configuration Citrix Web Interface Citrix Merchandising Server Pre-requisites Installation Merchandising Server Configuration Merchandising Server Pooled Desktop Image Creating a Pooled Desktop Image Virtual Machine Citrix User Profile Manager Page 2

3 Citrix User Profile Manager - Client Side Installation Citrix User Profile Manager - Server Side Configuration Policies Configuration Base Active Directory Policy Configuration Optimized Desktop Policy Citrix Access Gateway Enterprise Edition Importing NetScaler Appliance Installation of Citrix Access Gateway Enterprise Edition Creating A Request, Key, and Certificate Configuring Citrix Access Gateway Enterprise Edition Creating a Web Interface Site for Access Gateway Desktop Groups Configuration Desktop Group Creation Configuration Desktop Group Assignment Validation Scenarios Internal Access Scenario External Access Scenario Product Versions Revision History Page 3

4 Overview Citrix XenDesktop is an enterprise solution, which means it can solve almost any unique design requirement. Because of the flexibility, the implementation can involve significant amount of coordination across infrastructure teams. As such, this Deployment Guide can help accelerate the implementation of a fully functioning XenDesktop site providing for a common Enterprise scenario: local and remote access to pooled desktops supported on XenServer. While the steps in this guide can lead to a fully functioning XenDesktop environment, the installation of XenDesktop should not be performed in a production environment without adequate testing. It is recommended to install in a test lab and conduct thorough systems and user acceptance testing to determine the best configuration for the environment. Success Accelerator kits are available at to help.. This document provides the detailed steps on installing the required components for a fully functioning XenDesktop environment. This guide assumes that no Citrix products have been installed and will walk a System Administrator through the steps to bring many Microsoft and Citrix components online based on the Citrix Consulting recommended configurations. These products include Citrix XenDesktop 5, Citrix Web Interface, Citrix Access Gateway VPX, Citrix User Profile Manager, Citrix Licensing Server 11.9, Microsoft SQL Server 2008 R2, and Citrix Merchandising Server. Page 4

5 Initial Architecture The architecture this deployment guide creates is shown in the following figure: Figure 1: Architecture utilizing using Machine Creation Services The environment consists of the following: Remote access provided by Access Gateway VPX Initial authentication and enumeration operations performed by Web Interface License monitor and allocation via the Citrix License Server Desktop management controlled by the redundant XenDesktop controllers Overall system configuration tracking by SQL Server Virtual desktop hosting provided by Citrix XenServer Desktop image creation and delivery via Machine Creation Services. Page 5

6 Installation Guide In this phase, various components needed to support and ensure a functioning XenDesktop environment will be configured. These components include: Installing Microsoft SQL Server 2008 R2 Installing & configuring Citrix Licensing Server 11.9 Installation of Citrix XenDesktop Controllers & configuring a XenDesktop Site. Installing & configuring Citrix Web Interface Installing and configuring Citrix Merchandising Server Creating a Pooled Desktop master image Installing & configuring server side and client side components of Citrix User Profile Manager Configuring Active Directory for Base and Optimized Desktop policies. Installing & configuring Citrix Access Gateway Creating Desktop Groups Final validations Page 6

7 SQL Database Pre-requisites SQL Database SQL Server 2008 R2 Prerequisites for SQL Server 2008 R2: SQL Server 2008 R2 Enterprise can only be installed on the following Microsoft OS Version: Windows Server 2003 SP2 64-bit x64 Datacenter Windows Server 2003 SP2 64-bit x64 Enterprise Windows Server 2003 SP2 64-bit x64 Standard Windows Server 2003 R2 SP2 64-bit x64 Datacenter Windows Server 2003 R2 SP2 64-bit x64 Enterprise Windows Server 2003 R2 SP2 64-bit x64 Standard Windows Server 2008 SP2 64-bit x64 Datacenter Windows Server 2008 SP2 64-bit x64 Datacenter without Hyper-V Windows Server 2008 SP2 64-bit x64 Enterprise, Windows Server 2008 SP2 64-bit x64 Enterprise without Hyper-V Windows Server 2008 SP2 64-bit x64 Standard Windows Server 2008 SP2 64-bit x64 Standard without Hyper-V Windows Server 2008 SP2 64-bit x64 Web Windows 2008 R2 64-bit x64 Datacenter Windows 2008 R2 64-bit x64 Enterprise Windows 2008 R2 64-bit x64 Standard Windows 2008 R2 64-bit x64 Web Windows Server 2008 R2 x64 for Windows Essential Server Solutions Additionally, SQL Server Setup installs the following software components required by the product::.net Framework 3.5 SP11 SQL Server Native Client SQL Server Setup support files For the purposes of this installation guide, it is assumed that Server 2008 R2 Enterprise will be the OS for the SQL 2008 R2 Database for XenDesktop Appropriate usernames and passwords required to run SQL Database services should be provisioned prior to SQL Server 2008 R2 installation. 1 Connect and authenticate to the server selected to run SQL 2008 R2 for XenDesktop **NOTE** If service accounts are being used to install SQL Server 2008 R2, ensure that this account possesses elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. Page 7

8 SQL Server 2008 R2 2 Navigate to the path where the installation media or files for Microsoft SQL Server 2008 R2 are located. Launch the installer by double-clicking the setup file. 3 In SQL Server Installation Center, select the Installation option Start SQL Server 2008 installation by clicking New Installation or add features to an existing installation 4 Review Support Rules for accuracy Click OK to proceed with installation Page 8

9 SQL Server 2008 R2 5 Select the radio button appropriate to this installation of SQL Server Provide a valid Product Key in the appropriate field Click Next to proceed with installation 6 Review the entire contents of the License Terms. Select the checkbox marked I accept the license terms Click Next to proceed with installation 7 Review the details of the Setup Support Files screen. Click Install to proceed with installation Page 9

10 SQL Server 2008 R2 8 Allow the installation of Support Files to proceed to completion. 9 Review the installation summary and validate that no errors have occurred during the installation of Support Roles. Click Next to proceed with Role setup installation 10 Select the appropriate radio button for SQL Server Feature Installation. Click Next to proceed with installation Page 10

11 SQL Server 2008 R2 11 In the Feature Selection list, select the required features for this SQL Server 2008 installation by checking the boxes of the required items. Required minimum features that should be checked are: Database Engine Services ***NOTE*** Features installed will vary widely depending on the enterprise. Consult with a SQL Server Administrator to ensure that the appropriate selections are made for this specific installation. Click Next to proceed with installation 12 Allow the feature installation to proceed to completion. A completion summary screen will be presented once installation is complete. Review the installation summary for errors. If there are no errors presented in the summary screen, click Next to proceed to Instance Configuration. 13 On the Instance Configuration screen, select the Default Instance for this installation of SQL Server Click Next to continue Page 11

12 SQL Server 2008 R2 14 Validate that the server SQL Server 2008 is being installed to will have enough disk space to complete the installation. Click Next to continue 15 On the Server Configuration pane, provide appropriate usernames and password for the various SQL Server services. ***NOTE*** Service account names will vary widely depending on the enterprise. Consult with a SQL Server Administrator to ensure that the appropriate credentials are provided for this specific installation of SQL Server 2008 Click Next to continue 16 On the Database Engine Configuration pane, select the appropriate Authentication Mode for this SQL Server Installation.. ***NOTE*** Authentication Modes will vary depending on the enterprise. Consult with a SQL Server Administrator to ensure that the appropriate credentials are provided for this specific installation of SQL Server 2008 Click Next to continue Page 12

13 SQL Server 2008 R2 17 Review the Error Reporting Pane summary and mark the check box to report errors to Microsoft if it complies with enterprise security policies. Click Next to continue 18 Review the Installation Configuration file summary screen presented. If no errors are presented, click Next to continue 19 Review the overall Installation Configuration summary. Click Install to proceed with file installation. Page 13

14 SQL Server 2008 R2 20 Allow the installation of all files by the setup wizard. Monitor for any errors that may be presented during the installation. 21 Review the completion screen for any warnings or errors. If no warnings or errors are presented, click Close to exit from the SQL Server 2008 installation. Page 14

15 Citrix Licensing Pre-requisites Citrix Licensing Prerequisites Prerequisites for Licensing Server 11.9: Software System Requirements Citrix License Server can be installed on servers running the following Microsoft operating systems. Citrix recommends that the latest Microsoft Service Pack and updates be installed. Windows Server 2003 Family Windows Server 2008 Family Windows Server 2008 R2 Family Windows 7, 32-bit and 64-bit editions The License Administration Console manages the license server on the computer on which it is installed. It cannot manage remote license servers. License Administration Console requires a supported Web Browser and.net Framework Supported Browsers: Internet Explorer Version 6.0 through 8.0 Mozilla Firefox Version 3.x Microsoft.NET Framework Requirements Microsoft.NET Framework 3.5 is required. For the purposes of this installation guide, it is assumed that Server 2008 R2 is the host for the Licensing Server and License Administrative console. The guide will include guidance on installing a compatible version of Microsoft.NET Framework. 1 Connect and authenticate to the server selected to run Citrix Licensing Server. **NOTE** If using a service account to install Citrix Licensing 11.9, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. Page 15

16 Citrix Licensing Prerequisites 2 Launch Server Manager from the Start Menu. The path to Server Manager is Start > Administrative Tools > Server Manager 3 In the left hand navigation pane, select the Features node in the selection tree. Click Add Features in the Features Summary area. 4 From the Features List, select.net Framework Features in order to begin the installation of pre-requisite features. Page 16

17 Citrix Licensing Prerequisites 5 Agree to the prompt to add role services required for.net Framework Features by clicking Add Required Role Services Hit Next to proceed with the installation ***NOTE*** The Web Server (IIS) Role will be installed as art of.net Framework feature installation. Consult with Web Administrator and Security teams to ensure compliance with enterprise requirements 6 Hit Next at the Web Server (IIS) information pane 7 Ensure that.net Extensability & Request Filtering are selected in the Role Services selection tree. Click Next to proceed with the Web Server (IIS) Role installation. Page 17

18 Citrix Licensing Prerequisites 8 Review the installation summary screen for accuracy. Ensure that all values are correct for the installation being performed. Confirm selections by clicking Install. 9 Allow the installation wizard to proceed to completion. Review for any errors that may be presented. 10 Once the installation wizard has completed, validate that the installation completed without errors. If successful, click Close to complete the installation of.net Exit from Server Manager and return to the system. It is now possible to proceed with the installation of Citrix Licensing 11.9 Page 18

19 Installation - Citrix Licensing 11.9 Installing Citrix License Server Connect and authenticate to the server selected to run Citrix Licensing. **NOTE** If using a service account to install Citrix Licensing Server 11.9, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Locate the Licensing Server 11.9 installation media and launch by selecting CTX_Licensing ***NOTE*** If the installation files cannot be located, Citrix Licensing can be obtained from Use MyCitrix credentials to log in and obtain the required software. 3 Read the Citrix Licensing License Agreement Select the checkbox marked I accept the terms in the License Agreement Click Next to continue Page 19

20 Installing Citrix License Server Specify the path to install Citrix Licensing ***NOTE*** The default installation path will be: C:\Program Files (x86)\citrix\ This path should be used for the majority of installations. Change this value only if there is relevant reason to do so. 5 Allow the installation to proceed to completion 6 Once the installer has completed, click Finish to launch the License Server Configuration Tool Page 20

21 Installing Citrix License Server In the License Server Configuration Tool, validate that the proper ports are specified for Citrix Licensing Server Set a password for the License Administration Console. Ensure that this password is secure and is known to Citrix Administrators responsible for licensing. Click OK to complete License Server Configuration. **NOTE** If Windows Firewall is enabled on this server, ensure that appropriate inbound rules are configured to allow communication on default Citrix Licensing Ports 27000, 7279, and If alternative ports are selected for either License Server, Vendor Daemon, or the Management Console, ensure that Windows Firewall allows for those ports instead. Configuration - Citrix Licensing 11.9 Configuring Citrix License Server Connect and authenticate to the server selected to run Citrix Licensing Server 11.9 **NOTE** If using a service account to install Citrix Licensing 11.9, ensure that the account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Launch the License Administration Console from the Start Menu. The default path should for License Administration Console will be: Start > All Programs > Citrix > Management Consoles > License Administration Console Page 21

22 Configuring Citrix License Server Navigate to the Administration link on the topright corner of the License Administration Console. 4 Provide administrative credentials to authenticate. The default username will be admin and the password will be what was established in Installation Citrix Licensing 11.9 Step 7 5 Once successfully authenticated, navigate to the Vendor Daemon Configuration tab on the left-hand side of the License Administration Console Select Import License to being the process of importing the license file. Page 22

23 Configuring Citrix License Server Click Browse and use the file browser to navigate to where license files are located. Select the appropriate license file and click Open Click Import License to begin the process of importing the license into the Licensing Server 7 If the license import is successful, a confirmation message will be presented.. Click OK to proceed. Configuration of Citrix Licensing Server 11.9 is now complete Exit the License Administration Console by clicking the X in the upper right hand corner of the console window. Page 23

24 Citrix XenDesktop Desktop Controller Pre-requisites XenDesktop Controller Desktop Controller Pre-requisites The requirements for installing XenDesktop Controllers include the Controller software, a database, Desktop Studio, Desktop Director & Active Directory accounts. Active Directory & SQL Databse account validations have already been performed as part of Section 1 Environment Validation. This section will focus on prerequisites for installing XenDesktop Controller software, Desktop Studio, and Desktop Director. XenDesktop Controllers must be installed on one of the following operating systems: Microsoft Windows Server 2008, Standard or Enterprise Edition, with Service Pack 2 installed (32- and 64-bit) Microsoft Windows Server 2008 R2, Standard or Enterprise Edition (64-bit only) Disk space requirements: 100 MB for the Controller and SDKs 50 MB for Desktop Studio 50 MB for Desktop Director This scenario will be performed on Windows Server 2008 R2 Enterprise with Controller & SDK installation, Desktop Studio on all Controllers, & Desktop Director installed on one Controller. Microsoft.NET Framework, Version 3.5, with Service Pack 1 is required to be installed on the operating system. If Microsoft.NET Framework Version 3.5 is not installed on this server, it is installed automatically by XenDesktop. The XenDesktop installation media will also contain this installer in the Support\DotNet35 folder. Microsoft Internet Information Services (IIS) and ASP.NET 2.0. IIS are required for Desktop Director. Therefore, it will only be installed on the first Controller in this scenario. For Windows Server 2008, Microsoft IIS Version 7.0. For Windows Server 2008 R2, Microsoft IIS Version 7.5. As Desktop Director will be installed on a Desktop Controller, this guide will be outlining the addition of IIS Version 7.5 with the appropriate roles. Other components may be required depending on variations to the enterprise system environment. Refer to Citrix edocs for XenDesktop 5 Controllers to gather specifics on Microsoft Visual J# 2.0 Redistributable Package, Second Edition. Microsoft Visual C with Service Pack 1 Redistributable Package. Microsoft Windows PowerShell version 2.0. Internet Explorer 7.0 or later. 1 Connect and authenticate to the server selected to run the Desktop Controller. **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. Page 24

25 Desktop Controller Pre-requisites 2 Launch Server Manager from the Start Menu. The path to Server Manager is Start > Administrative Tools > Server Manager 3 Select the Roles tree node in the left hand navigation pane. Click Add Role 4 Agree to the Introductory Screen for the Add Roles Wizard by clicking Next Select Web Server role from the checkboxes available Page 25

26 Desktop Controller Pre-requisites 5 Agree to the screen that introduces IIS by selecting Next 6 Ensure that all appropriate checkboxes are selected. Many of these will be selected by default. Checkboxes include: Web Server > Common HTTP Features > > Static Content > Default Document > Directory Browsing > HTTP Errors Web Server > Application Development > > ASP.NET >.NET Extensibility > ISAPI Extensions > ISAPI Filterss Web Server > Health and Diagnostics > > HTTP Logging >.Request Monitor Web Server > IIS Management Console 7 Confirm installation selections by selecting Install at the prompt. Page 26

27 Desktop Controller Pre-requisites 8 Allow the installation to proceed to completion 9 Validate that the installation completed If successful, click Close to complete the installation the IIS Server Role. Close out Server Manager and return the system. It is now possible to to the installation of Desktop Controller(s) Page 27

28 Installation XenDesktop Controller Installing a XenDesktop Controller 1 Staying on the server selected to be the Desktop Controller, navigate to the location of the XenDesktop Installer Media and launch via AutoPlay Run AutoSelect.exe 2 Select Install XenDesktop **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 3 Read the entire Licensing Agreement. Select the checkbox for I accept the terms and conditions and select Next to continue. Page 28

29 Installing a XenDesktop Controller 4 **NOTE** In this scenario for XenDesktop, web access will be provided via a Web Interface installed on separate server. Also, a separate SQL 2008 R2 database will be used. Lastly, a dedicated License Server has already been installed and will not be needed as part of the Controller installation. Select the appropriate components for installation. This should include: > XenDesktop Controller > Desktop Studio > Desktop Director Uncheck the selections for Web Access, License Server, and Install SQL Server Express. These components are installed separately. Click Next to continue 5 Allow the installation summary to generate. Validate that all appropriate components are included in the summary area and click Install. 6 Uncheck Configure XenDesktop after closing and click Close. Close out the remote connection to the first XenDesktop Controller. Page 29

30 Installing a XenDesktop Controller 7 Connect to the server that is designated as another XenDesktop controller. 8 Navigate to the location of the XenDesktop Installer Media and launch via AutoPlay Run AutoSelect.exe 9 Select Install XenDesktop **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrator to ensure compliance with specific enterprise account standards. Page 30

31 Installing a XenDesktop Controller 10 Read the entire Licensing Agreement. Select the checkbox for I accept the terms and conditions and select Next to continue. 11 **NOTE** In this scenario for XenDesktop, web access will be provided via a Web Interface installed on separate server. Also, a separate SQL 2008 R2 database will be used. Lastly, a dedicated License Server has already been installed and will not be needed as part of the Controller installation. Furthemrore, Desktop Director will not be required as it is already available on the first Controller. Therefore, unselect it. Select the appropriate components for installation. This should include: > XenDesktop Controller > Desktop Studio Uncheck the selections for Web Access, Desktop Director, License Server, and Install SQL Server Express. These components are installed separately. Click Next to continue Page 31

32 Installing a XenDesktop Controller 12 **NOTE** As Desktop Director is not installed on the second Controller and the IIS role is not required, a firewall exception may be needed for Port 80 to accommodate incoming Broker requests. Coordinate with Network Security Administrators to ensure appropriate firewall considerations are taken into account for any specific enterprise configuration. Check the box marked Enbale these ports to allow Port 80 to be used for Broker connections to this Controller. Click Next to continue the installation 13 Allow the installation summary to generate. Validate that all appropriate components are included in the summary area and click Install. Allow the Setup Wizard to complete the installation. Once complete, a final summary will be presented. Validate that all appropriate components were installed properly. If proceeding directly to the next section (Configuration Creating a XenDesktop Site), then click Close. Otherwise, uncheck the box marked Configure XenDesktop after closing and click Close. Page 32

33 Configuration Creating a XenDesktop Site Creating a XenDesktop Site 1 Connect and authenticate to the server selected to run the Desktop Controller. **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Launch Desktop Studio from the Start Menu. Desktop Studio should appear under: Start > All Programs > Citrix > Desktop Studio 3 From Desktop Studio, select Desktop Deployment in the center pane of the Snap-In. Page 33

34 Creating a XenDesktop Site 4 Name the XenDesktop Site per enterprise standards. In Database Configuration, enter the name of the SQL 2008 server installed earlier. Enter the name of the Database in the Database Name field. For the purposes of this scenario, leave in the prepopulated default Database name to have the wizard create the database. ***NOTE*** To validate connectivity to the SQL Server, use the Test Connection button. This test will likely generate an error as the Database for XenDesktop has not yet been created. However, connectivity to the SQL Database will be validated successfully. It is possible to create a Database prior to installing a XenDesktop site, however this step is beyond the scope of this Implementation Guide. Click Next to continue 5 Provide Citrix License server information (installed earlier) and click Connect The wizard will present the license types available on the licensing server. Select the appropriate one for this installation and click Next Page 34

35 Creating a XenDesktop Site 6 Configure the Host hypervisor per specific enterprise standards. Ensure that a Host Address preceeded by http, Username, & Password are provided. Name the Host connection Select Use XenDesktop to create virtual machines Click Next to continue 7 Specify the resources that will be utilized by the Virtual Machines in this installation. Click Add to configure where to store virtual machines. Provide a Name for the storage details. Select the storage type. For this scenario, an iscsi mount will be utilized. Select a guest network for the virtual machines. 8 Validate the settings for VM resources Click Next to continue Page 35

36 Creating a XenDesktop Site 9 Review the installation Summary for accuracy. Click Finish to continue Close out the remote connection to the first XenDesktop Controller. 10 Connect and authenticate to the server selected to be the second XenDesktop Controller. **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 11 Launch Desktop Studio from the Start Menu. Desktop Studio should appear under: Start > All Programs > Citrix > Desktop Studio Page 36

37 Creating a XenDesktop Site 12 From Desktop Studio, select Join existing deployment in the center pane of the Snap-In. 13 In the Select XenDesktop Site dialog box, specify the address of the first controller. Specify either an IP address or Fully Qualified Domain Name (FQDN). Click Ok to continue 14 A pop-up asking whether to allow XenDeskto to update the database automatically will be presented. Click Yes to continue 15 Allow XenDesktop to configure the Site and add the second controller. A progress bar will be presented until completion. Page 37

38 Creating a XenDesktop Site 16 Upon successful completion of adding a second controller to the XenDesktop Site, Desktop Studio will return to the Site Dashboard. Settings and information regarding this XenDesktop site will be presented and available for Administration. Configuring the XenDesktop site is now complete. Exit from Desktop Studio and logout from the second controller. Page 38

39 Citrix Web Interface Pre-requisites Web Interface Pre-requisites 1 Connect and authenticate to the server selected to run Citrix Web Interface **NOTE** If using a service account to install Citrix Web Interface, ensure that the user account has elevated privileges. Consult with Active Directory Administrator to ensure compliance with specific enterprise account standards. 2 Launch Server Manager from the Start Menu. The path to Server Manager is Start > Administrative Tools > Server Manager 3 Select the Roles tree node in the left hand navigation pane. Click Add Role Page 39

40 Web Interface Pre-requisites 4 Agree to the Introductory Screen for the Add Roles Wizard by clicking Next Select Web Server role from the checkboxes available 5 Agree to the screen that introduces IIS by selecting Next Page 40

41 Web Interface Pre-requisites 6 Ensure that all appropriate checkboxes are selected. Many of these will be selected by default. Checkboxes include: Web Server > Common HTTP Features > > Static Content > Default Document > Directory Browsing > HTTP Errors Web Server > Application Development > > ASP.NET >.NET Extensibility > ISAPI Extensions > ISAPI Filterss Web Server > Health and Diagnostics > > HTTP Logging >.Request Monitor Web Server > Management Tools > > IIS Management Console Web Server > Management Tools > IIS Management Compatibility > IIS 6 Metabase Compatibility 7 Confirm the installation selections by selecting Install at the prompt. Page 41

42 Web Interface Pre-requisites 8 Allow the installation to proceed to completion 9 Validate that the installation completed If successful, click Close to complete the installation the IIS Server Role. Close out Server Manager and return to the system. It is now possible to proceed with the installation of secondary components required for Web Interface 10 Once Web Server role, navigate to the directory containing Microsoft Visual J#.NET 2.0. The installer is available in the Support folder of XenDesktop 5 media Double click the installer file. For 64-bit systems, the installer will be vjredist64.exe Page 42

43 Web Interface Pre-requisites 11 The installation wizard will launch. Read the overview and click Next to continue 12 Read the entire End-User License Agreement Check the box marked I accept the terms of the License Agreement Click Install to proceed 13 Allow the wizard to install files related to the software Page 43

44 Web Interface Pre-requisites 14 Once the installer is completed, a Setup Complete summary screen will be presented Click Finish to complete the installation Installation Citrix Web Interface Citrix Web Interface Installation 1 Navigate to the path where the Web Interface software is available. The latest version of Web Interface is available on Double-click the installer package to begin the setup process **NOTE** If using a service account to install Citrix Web Interface, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Select the language for the Web Interface installation. For the purposes of this scenario, select English and click Ok Page 44

45 Citrix Web Interface Installation 3 The installer will present a welcome screen. Read the entirey of the welcome screen text and click Next to continue 4 Read the entire Citrix License Agreement Select the radio button marked I accept the license agreement and click Next 5 Choose the filesystem path to install Citrix Web Interface. The default installation path will be: C:\Program Files (x86)\citrix\web Interface Once the installation path has been specified, click Next to continue Page 45

46 Citrix Web Interface Installation 6 Decide whether Citrix Clients will be installed as part of Web Interface setup. As this scenario will be utilizing Merchandising Server, select the radio button marked Skip this step and click Next to continue the installation 7 Read the summary screen and click Next to begin the setup file installation 8 The setup program will begin migrating files to the server. Allow the setup to complete. Page 46

47 Citrix Web Interface Installation 9 Upon successful installation of Web Interface components, review the summary page. Ensure that the checkbox marked Start creating sites now is checked. Click Finish to complete the installation of Web Interface. Configuration Citrix Web Interface Citrix Web Interface Configuration 1 In the Web Interface Management Snap-In, right-click XenApp Web Site and select Create Site ***NOTE*** Web Interface Management can be found by navigating to: Start -> All Programs -> Citrix -> Citrix Web Interface Management Page 47

48 Citrix Web Interface Configuration 2 In the Create Site dialog, specify information to label the site For the purposes of this scenario, the site Path has been made to be /Citrix/XenDesktop and the Name to be XenDesktop ***NOTE*** Confer with the Web Administration team on whether the enterprise requires Web Interface to be the default IIS Site. If this is a shared web server, this may not be advisable. Click Next to continue 3 Select the Point of Authentication. For the purposes of this scenario, the Point of Authentication will be At Web Interface. ***NOTE*** Confer with the Web Administration and Security teams to determine this setting. Point of Authentication can vary widely based on enterprise security requirements Click Next to continue 4 Review the installation summary for accuracy. If all settings are validated click Next to begin configuration of this XenApp Web Site. Page 48

49 Citrix Web Interface Configuration 5 Allow the setup wizard to complete installation of the Web Interface Web Site. Once the setup wizard has completed, a site summary box will be presented. Ensure that the checkbox marked Configure the site now is checked and click Next to continue 6 The Farm Setup dialog box will be launched. Specify a Farm Name In the Servers area, click Add Specify the XenDesktop Controller address in the field marked server name. Either the fully qualified domain name (FQDN) or the IP address of the Controller can be specified. Click OK to add the Server to the Farm Repeat this step for all of XenDesktop Controllers in the enterprise configuration. 7 Once all Servers in the XenDesktop Site have been added, click Next to continue Page 49

50 Citrix Web Interface Configuration 8 Configure the Authentication Method appropriate for the enterprise. ***NOTE*** Authentication Methods vary widely depending on enterprise security needs. Consult with Security Administrators to choose the model most appropriate for this installation. For the purposes of this scenario, Explicit authentication should be chosen. Click Next to continue 9 Configure the Domain Restrictions ***NOTE*** Domain Restriction settings depend on enterprise security needs. Consult with Security Administrators to choose the model most appropriate. For the purposes of this scenario, Allow any domains will be chosen. Click Next to continue 10 Choose the most appropriate Logon Screen appearance. For the purposes of this scenario, choose Minimal Click Next to continue Page 50

51 Citrix Web Interface Configuration 11 Specify the Published Resource type. As the XenDesktop environment is Pooled Random, the most appropriate Resource Type will be Online. Click Next to continue. 12 Review the Initial Configuration summary for accuracy. Click Finish to complete the installation of XenDesktop Web Interface site. Upon successful configuration, exit from Web Interface management Snap-In Page 51

52 Citrix Merchandising Server Pre-requisites Merchandising Server Pre-requisites Prerequisites Merchandising Server: Merchandising Server virtual appliance software. Download the Merchandising Server virtual appliance from the Citrix support site. It is one of the downloads available under the Citrix Receiver product group. Citrix XenServerTM 5.x with 8 GB of available disk space and 1 GB available RAM A Workstation running XenCenter in order to import the virtual image. Active Directory 2003 Service Pack 2 and above. The corporate directory must be accessible through Active Directory. One of the following browser versions is required to use the Citrix Merchandising Server Administrator Console: Internet Explorer 7 Internet Explorer 8 Firefox version 3.x Installation Merchandising Server Merchandising Server Pre-requisites 1 Launch XenCenter and connect to an environment that Merchandising Server will be hosted. Click File and then Import to begin the procedure to import the Merchandising Server 2.1 virtual appliance. Page 52

53 Merchandising Server Pre-requisites 2 On the Import Source, navigate to where the Merchandising Server appliance file has been downloaded. Select the file and click Open Click Next to continue. 3 Select a server that will be the home server for the imported appliance. 4 Select a storage repository where the Merchandising Server virtual disk will be kept. Once the storage repository has been selected, click Import to proceed. Page 53

54 Merchandising Server Pre-requisites 5 Configure the virtual network interfaces for the new VM as required by the enterprise network topology. Click Next to continue 6 On the Complete the import screen, ensure that Start VM after import is checked Click Finish to begin the virtual appliance import process. 7 Monitor the progress of the VM import by click to the Logs tab in XenCenter Once the import process has completed, exit from XenCenter Page 54

55 Merchandising Server Pre-requisites 8 Once the import process has completed, navigate to the Console tab for the Merchandising Server VM in XenCenter. 9 Use text input to configure the Merchandising Server per enterprise requirements Ensure that the network configuration (IP address, gateway, DNS) settings are correct The Merchandising Server will reboot after configuration. It will also require a change to the default root password prior to reboot. Allow the Merchandising Server to reboot fully 10 Using a web browser, navigate to the Merchandising Server configuration website. The URL should be as follows: Log in username set to root and password C1trix321 Page 55

56 Merchandising Server Pre-requisites 11 Upon successful login, the main setup screen will be presented. Select Configure Active Directory to begin configuring Merchandising Server. 12 Enter the appropriate settings for Active Directory environment in the fields provided. Source Name: Server Address: An identifier for this connection Provide the IP address for the AD Domain Controller Server Port: Typically this is 389 BIND DN: Provide the LDAP string for the account used to connect to Active Directory Base DN: Provide the LDAP string for the Domain Server Sync Schedule Select the timeframe for AD Synch Click Save and Synch to finalize settings for Active Directory integration with Merchandising Server. Page 56

57 Merchandising Server Pre-requisites 13 Click the Permissions field to configure access rights to Merchandising Server 14 Enter an account that will have Administrative privileges in Merchandising Server in the search box. Click Search to locate the account in Active Directory. 15 Once the account desired has been located, select the radio button and click Edit Grant the appropriate role merchandising Server. In this scenario, grant Administrator Once the account is configured, exit from the screen by clicking the x in the upper right corner of the window Page 57

58 Merchandising Server Pre-requisites 16 Log off of the Merchandising Server by clicking Log off in the upper right hand corner of the window. 17 Enter the administrative account credentials are provided in the User Name and Password field. Validate that this account exists and is active in the Active Directory Domain prior to this stage. 18 Allow the Administrator Console in Merchandising Server to load. Validate that all desired and required console functions are available. Once validation is complete, proceed to configuring Merchandising Server. Page 58

59 Configuration Merchandising Server Configuring Merchandising Server 19 In the Administrator Console for Merchandising Server, click the Get New hyperlink under Plug-ins 20 Select the radio button of the Plug-in(s) appropriate for this installation of Merchandising Server and XenDesktop. For the purposes of this Implementation Guide, the Citrix Online Plug-in and Citrix Receiver are to be selected. Click Download to Server ***NOTE*** An active internet connection must be available and for Merchandising Server to be able to download and import the appropriate plug-ins. Page 59

60 Configuring Merchandising Server 21 Acknowledge the warning regarding extended download times by clicking Confirm. Allow the selected Plug-Ins to download to the Merchandising Server. 22 Once the requested Plug-Ins have downloaded, click Close to complete. 23 From the Merchandising Server Administration Console, navigate to: Deliveries > Rules Page 60

61 Configuring Merchandising Server 24 Populate the required data for the creation of a delivery rule. Provide a: Name Field (this is used as a criteria for enforcing a rule) Value (this is used as validation criteria for a rule) Once all required fields have been populated, click Save 25 Validate that the delivery rule has been saved. If successfully saved, it will appear in the Rules Management screen pane with summary information presented. 26 From the Merchandising Server Administration Console, navigate to: Deliveries > Create/Edit Page 61

62 Configuring Merchandising Server 27 On the General tab, provide the following information for a Merchandising Server Delivery: Delivery name Evaluation Order Silent Install (Boolean value: yes/no) Check for updates (optional) Completion text (optional) Support address (optional) Support phone number (optional) GoToAssist sever (optional) 28 On the Plug-Ins tab, Click Add 29 Select the radio buttons of the Plug-Ins to be included. Once selections have been specified, click Add Page 62

63 Configuring Merchandising Server 30 Click the Configuration tab Ensure that there is a value provided in the field labeled: Address of the XenApp Server hosting the XenApp Services which will be the same as the Path value provided in Step 2 of Configuration Citrix Web Interface 31 Click the Rules tab To add a delivery rule, click Add 32 Select a delivery rule by clicking the radio buttom associated with the rule desired. To add a delivery rule, click Add Page 63

64 Configuring Merchandising Server 33 Validate the delivery rule has been selected. If successfully selected the desired rule will appear in the Rules pane in the Merchandising Server Administrator Console. 34 Click the Schedule tab. Specify a schedule if one is desired. Click Schedule to proceed. 35 Validate that the delivery has been entered into the Merchandising Server and scheduled. If successful, the delivery will appear in the Deliveries pane with a green background. Page 64

65 Configuring Merchandising Server 36 Upon successful validation of Delivery creation, log off of the Merchandising Server Administrator Console by Clicking the Log off link in the upper right hand corner of the browser window. Pooled Desktop Image Creating a Pooled Desktop Image Virtual Machine Creating a Desktop Image VM Prerequisites for a Desktop Image Virtual Machine suitable for XenDesktop Ensure that there is a XenServer host with sufficient memory and CPU resources available to host a Windows 7 Virtual Machine. Recommended configuration is: 2 Virtual CPUs and 2048 Mb. of Memory. A Workstation running XenCenter in order to manage the creation of the Virtual Machine. 1 From a management workstation, launch XenCenter and connect to an environment that the Pooled Desktop Virtual Machine will be hosted. Page 65

66 Creating a Desktop Image VM 2 Select the XenServer host that will contain the Pooled image Virtual Machine. Right click and select New VM 3 On the Select a VM template screen, scroll through the selections and choose Windows 7 (64 bit) ***NOTE*** The selection in this step will vary on the desired OS for the Virtual Desktops required by the enterprise. Click Next to continue.. Page 66

67 Creating a Desktop Image VM 4 Provide a Name and for the Master Image virtual machine. Click Next to continue. 5 Specify the Operating System media location. For the purposes of this guide, select the radio button labeled Install from ISO library or DVD drive: Specify the ISO or media file containing the OS installation files. Click Next to continue 6 Mark the radio button labeled Pace the VM on this server. Choose the XenServer that the VM will be hosted on. Click Next to continue Page 67

68 Creating a Desktop Image VM 7 Specify the desired vcpu and Memory resources to allocate to this virtual machine. Click Next to continue 8 Select the desired storage location for this virtual machine. Click Next to continue 9 Configure the Virtual Network Interfaces per specific enterprise standards. Click Next to continue Page 68

69 Creating a Desktop Image VM 10 Review the summary screen to ensure accuracy of all settings. Ensure that the checkbox marked Start the new VM automatically is selected Once all settings have been validated, click Finish to allow XenServer to create the virtual machine. 11 In XenCenter, select the XenServer machine specified to host the master image virtual machine. Navigate to the Logs tab to monitor the progress of the virtual machine creation. Ensure that the checkbox marked Start the new VM automatically is selected Once all settings have been validated, click Finish to allow XenServer to create the virtual machine. 12 If no errors occur during virtual machine creation, the new virtual machine will be viewable in the navigation tree in XenCenter. Page 69

70 Creating a Desktop Image VM 13 Select the new virtual machine and navigate to the Console tab. Proceed with the installation of the OS and all required software before shutting down the virtual machine. Page 70

71 Citrix User Profile Manager Citrix User Profile Manager - Client Side Installation Citrix User Profile Manager Client Side Installation 1 Connect and authenticate to the machine that will be is the Master image. **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Navigate to the path where the installation files for Citrix User Profile Manager are located. Launch the appropriate installer for the Windows OS type For the purposes of this scenario, a 64-bit version of Windows 7 has been selected as the Master Image. Therefore, right click profilemgt3.2.2_x64 and select Install 3 The Citrix Profile Management Setup screen will launch. Proceed with the installation by clicking Next Page 71

72 Citrix User Profile Manager Client Side Installation 4 Read through the entire End-User License Agreement Check the box marked I accept the terms in the License Agreement. Click Next to continue. 5 Specify the path to install Citrix User Profile Manager. **NOTE** The default is C:\Program Files\Citrix\User Profile Manager and should be used for the majority of installations. Change this value only if relevant reason to do so exists. 6 Allow the Summary screen to appear. Click Install to allow Citrix Profile Management to install Page 72

73 Citrix User Profile Manager Client Side Installation 7 The Citrix Profile Management setup will begin installing on the local filesystem. Allow it to proceed to completion. 8 Once installation to the filesystem has completed, a final acknowledgement screen will be presented. Click Finish to complete the client installation 9 The installer will require a reboot of the Windows 7 Master Image. Click Yes to allow the workstation to reboot. ***NOTE*** The Windows 7 workstation will automatically reboot upon clicking Yes. Ensure that any unsaved work is saved prior to executig this step. Page 73

74 Citrix User Profile Manager - Server Side Configuration Citrix User Profile Manager Server Side Configurations Prerequisites for Citrix Profile Management Server Side Configuration Citrix User Profile Management software. Version will be utilized for this scenario A network path to store user profiles Workstation or Server running Group Policy Management administrative console. 1 Connect and authenticate to the machine selected to house Group Policy Management console. 2 From the Start Menu, launch Group Policy Management. The full path will be: Start > Administrative Tools > Group Policy Management Page 74

75 Citrix User Profile Manager Server Side Configurations 3 Navigate to the Organizational Unit (OU) where Virtual Desktop accounts will be created. ***NOTE*** The location of Virtual Desktop Computer objects varies widely based on enterprise requirements. Work closely with Active Directory Administrators to determine the best location for this specific environment. Right Click on the OU and select Create a GPO in this domain, and Link it here 4 Specify a Name for this policy. It is not necessary to specify a Source Starter GPO. Click OK to create the Group Policy Object that is linked to the OU containing the Virtual Desktop Computer objects. 5 Once the Group Policy Object has been created, right click the name of the object and select Edit ***NOTE*** If this is the first time that the Group Policy Object is selected for editing, an advisory message may be presented by Group Policy Management Console. This message states that the changes being madewill impact all objects that are linked to this Group Policy Object. Acknowledge this message by clicking OK. Page 75

76 Citrix User Profile Manager Server Side Configurations 6 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Policies > Administrative Templates Right click Administrative Templates and click Add/Remove Templates 7 Click Add in the Add/Remove Templates box 8 Navigate to the path where Citrix Profile Management installation files are located. Open the folder where the ADM Templates are located. The typical path for ADM Templates is: ProfileMgmt-3.2.2\ADM_Templates\en Select the Citrix Profile Management ADM file. The filename will be ctxprofile3.2.0.adm Click Open to import the ADM file into the Add/Remove Templates dialogue box. Page 76

77 Citrix User Profile Manager Server Side Configurations 9 Click Close to import the Citrix Policy ADM template into Group Policy Management Editor. The ADM Template will now be imported 10 Navigate to the path of the Citrix Profile Management ADM Template. Default path is: Computer Configuration > Policies > Administrative Templates > Classic Administrative Templates > Citrix > Profile Management Right click the setting for Enable Profile management and select Edit 11 Configure the policy setting by selecting the Enable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. Page 77

78 Citrix User Profile Manager Server Side Configurations 12 In the same path, right click the setting for Path to user store and select Edit 13 Configure the policy setting by selecting the Enable radio button. In the Options area, provide an absolute path or path to the location where user profiles will be stored. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. 14 Navigate to the path of the Citrix Profile Management ADM Template. Default path is: Computer Configuration > Policies > Administrative Templates > Classic Administrative Templates > Citrix > Profile Management > Streamed user profiles Right click the setting for Profile streaming and select Edit Page 78

79 Citrix User Profile Manager Server Side Configurations 15 Configure the policy setting by selecting the Enable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy. Close out the Group Policy Management Editor & exit from Group Policy Management. Page 79

80 Policies Configuration Base Active Directory Policy Windows 7 Desktop Optimizations 1 ***CAUTION*** The following sub-section contains optimizations that may not be advisable for all enterprises. Review the contents of Citrix Knowledge Base article CTX with the Enterprise IT team carefully before implementing changes. All registry setting changes present risk. Modifying the registry incorrectly can cause serious problems that may require reinstallation of the operating system. Ensure proper best practices are followed before making any changes, including but not limited to backing up the registry or disk image before making changes. Disabling services may alter behavior of certain windows features and installed software. Ensure thorough testing of all application features is performed prior to deploying to a Production environment. Connect and authenticate to the machine on housing Group Policy Management console. 2 From the Start Menu, launch Group Policy Management. The full path will be: Start > Administrative Tools > Group Policy Management Page 80

81 Windows 7 Desktop Optimizations 3 Navigate to the Organizational Unit (OU) where Virtual Desktop accounts will be created. ***NOTE*** The location of Virtual Desktop Computer objects varies widely based on enterprise requirements. Work closely with Active Directory Administrators to determine the best location for this specific environment. Right Click on the OU and select Create a GPO in this domain, and Link it here 4 Specify a Name for the policy. It is not necessary to specify a Source Starter GPO. Click OK to create the Group Policy Object that is linked to the OU containing the Virtual Desktop Computer objects. 5 Once the Group Policy Object has been created, right click the name of the object and select Edit ***NOTE*** If this is the first time selecting this Group Policy Object for editing, an advisory message may be presented by Group Policy Management Console. This message states that the changes being made will impact all objects that are linked to this Group Policy Object. Acknowledge this message by clicking OK. Page 81

82 Windows 7 Desktop Optimizations 6 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Error Reporting Right click the setting for Disable Windows Error Reporting and select Edit. 7 Configure the policy setting by selecting the Enable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. 8 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update Right click the setting for Configure Automatic Updates and select Edit. Page 82

83 Windows 7 Desktop Optimizations 9 Configure the policy setting by selecting the Disable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. 10 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Policies > Administrative Templates > System > System Restore Right click the setting for Turn off System Restore and select Edit. 11 Configure the policy setting by selecting the Enable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. Page 83

84 Windows 7 Desktop Optimizations 12 Expand the navigation tree in Group Policy Management Editor to the following path: User Configuration > Policies > Administrative Templates > Control Panel > Personalization Right click the setting for Enable Screen Saver and select Edit. 13 Configure the policy setting by selecting the Enable radio button. Click Apply to put the policy into effect Click OK to accept the changes to policy and return to the Group Policy Management Editor. 14 Repeat Step 12 and 13 for the following Group Policies under Personalization Prevent changing screen saver: Enabled Password protect screen saver: Enabled Screen saver timeout: Enabled: 600 seconds Force specific screen saver: Enabled Configurating a specific screen saver: scrnsave.scr Page 84

85 Windows 7 Desktop Optimizations 15 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Preferences > Windows Settings > Registry Click the Add a new item icon to create a new entry. 16 Configure the New Registry Properties for Disable Last Access Timestamp as follows: Action: Hive: Update HKEY_LOCAL_MACHINE 17 Use the tree browser to navigate to the following Registry Key Path: SYSTEM > CurrentControlSet > Control > FileSystem > NtfsDisableLastAccessUpdate Click Select to modify settings for this Registry Key Page 85

86 Windows 7 Desktop Optimizations 18 Configure the New Registry Properties for Disable Last Access Timestamp as follows: Value Type: REG_DWORD Value data: Base: Hexadecimal Click OK to save settings for this Registry Key 19 Expand the navigation tree in Group Policy Management Editor to the following path: Computer Configuration > Preferences > Windows Settings > Registry Click the Add a new item icon to create a new entry. 20 Configure the New Registry Properties for Disable Large Send Offload as follows: Action: Hive: Create HKEY_LOCAL_MACHINE Page 86

87 Windows 7 Desktop Optimizations 21 Enter the following value in the Key Path: SYSTEM\CurrentControlSet\Services\BNNS\ Parameters Configure the Properties as follows: Value Name: EnableOffload Value type: REG_DWORD Value data: Base: Hexadecimal Click Apply and then OK to save settings for this Registry Key. 22 ***NOTE*** As Windows 7 Installation methods and features for various enterprises can vary, the following step contains a list of Registry Key additions and updates that should be made to optimize the base image for XenDesktop. As such, System Administrators should validate whether the following keys exist or not in the base image using regedit, then use the procedure outlined in Steps to add registry keys *OR* Steps to update registry keys for the following entries: Disable TCP/IP Offload Increase Service Startup Timeout Hide Hard Error Messages [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ Parameters] "DisableTaskOffload"=dword: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control] "ServicesPipeTimeout"=dword:0002bf20 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows] "ErrorMode"=dword: Disable CIFS Change Notifications [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Policies\Explorer]"NoRemoteRecursiveEvents"=dword: Disable Logon Screensaver [HKEY_USERS\.DEFAULT\Control Panel\Desktop] "ScreenSaveActive"="0" Disable Clear Page File at Shutdown HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "ClearPageFileAtShutdown"=dword: Page 87

88 Windows 7 Desktop Optimizations 22 (Step 22 Continued from prior page) Disable Offline Files [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ NetCache] "Enabled"=dword: Disable Background Defragmentation Disable Background Layout Service [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction] "Enable"="N" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ OptimalLayout] "EnableAutoLayout"=dword: Disable Bug Check Memory Dump [HKLM\SYSTEM\CurrentControlSet\Control\CrashControl] CrashDumpEnabled"= dword: "LogEvent"=dword: "SendAlert"=dword: Disable Hibernation [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ Session Manager\Power] "Heuristics"=hex:05,00,00,00,00,01,00,00,00,00,00,00,00,00,00,00,3f,42,0f,00 Disable Memory Dumps [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl] "CrashDumpEnabled"=dword: "LogEvent"=dword: "SendAlert"=dword: Disable Mach. Acct. Password Changes [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\ Parameters] "DisablePasswordChange"=dword: Redirect Event Logs HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application] "File"="D:\EventLogs\Application.evtx" [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security] "File"="D:\EventLogs\Security.evtx" [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System] "File"="D:\EventLogs\System.evtx" Reduce Event Log Size to 64K HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application] "MaxSize"=dword: [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security] "MaxSize"=dword: [HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System] "MaxSize"=dword: Disable Move to Recycle Bin [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\Explorer\BitBucket] "UseGlobalSettings"=dword: "NukeOnDelete"=dword: Force Offscreen Composition for Internet Explorer [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Force Offscreen Composition"=dword: Page 88

89 Windows 7 Desktop Optimizations 22 (Step 22 Continued from prior page) Reduce Menu Show Delay [HKEY_CURRENT_USER\Control Panel\Desktop] "MenuShowDelay"="150" Disable all Visual Effects except "Use common tasks in folders" and "Use visual styles on windows and buttons" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ Explorer\VisualEffects] "VisualFXSetting"=dword: [HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics] "MinAnimate"="0" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Explorer\Advanced] "ListviewAlphaSelect"=dword: "TaskbarAnimations"=dword: "ListviewWatermark"=dword: "ListviewShadow"=dword: [HKEY_CURRENT_USER\Control Panel\Desktop] "DragFullWindows"="0" "FontSmoothing"="0" "UserPreferencesMask"=binary:90,12,01,80,10,00,00,00 Page 89

90 Configuration Optimized Desktop Policy Windows 7 Desktop Optimizations 1 In XenCenter, select the Master Image VM In the DVD Drive1 area for the VM, select xstools.iso to mount the XenServer Tools media. 2 Connect and authenticate to the machine that will be the Master image. 3 Open My Computer and navigate to the DVD- Rom Right Click the XenServer Tools Media and select Open AutoPlay Select Run xensetup.exe from the AutoPlay prompt Page 90

91 Windows 7 Desktop Optimizations 4 Accept the term of the License Agreement by checking I accept the terms in the License Agreement and clicking Next 5 Select the path XenServer Tools will be installed to. The default will be C:\Program Files (x86)\citrix\xentools After the install location has been specified, click Install to begin the process of installing XenServer Tools 6 Allow the installation program to proceed to completion. Page 91

92 Windows 7 Desktop Optimizations 7 When the installation has completed, select Reboot now and click Finish. ***NOTE*** The Windows 7 workstation will automatically reboot upon clicking Finish. Ensure that any unsaved work is saved prior to completing this step. 8 Once the Client VM has fully rebooted, in XenCenter, select the Master Image VM In the DVD Drive1, locate and specific the file containing XenDesktop 5 media. 9 Connect and authenticate to the machine that will be the Master image. Page 92

93 Windows 7 Desktop Optimizations 10 Open My Computer and navigate to the DVD- Rom Right Click the XenDesktop media select Open AutoPlay Select Run AutoSelect.exe from the AutoPlay prompt 11 Select Install Virtual Desktop Agent **NOTE** Ensure that the user account being used to install the XenDesktop Virtual Desktop Agent has elevated privileges. 12 Select Advanced Install at the screen to select the type of installation. Page 93

94 Windows 7 Desktop Optimizations 13 **NOTE** In this enterprise scenario, all applications will be installed locally. Therefore, XenApp Application Delivery plug-ins will not be required. Uncheck the box marked Support for XenApp Application Delivery Verify that the install location for the Virtual Desktop Agent is appropriate for the environment. The default will be C:\Program Files\Citrix Once the installation location is verified, click Next to begin the Virtual Desktop Agent installation. 14 **NOTE** In this enterprise scenario, the Desktop Controllers will be configured into the Virtual Desktop Agent. This can be done at a later time by using Group Policy or the setup wizard. Select the radio button labeled Manually enter controller location(s) In the input box, specific the fully qualified domain name (e.g. controller1.domain.com) of the Desktop Controllers configured earlier in this guide. If there are multiple controllers, enter each controller s fully qualified domain name separated by a space. Click Check to allow the setup wizard to validate the network presence of the specified controllers. This check does not validate whether the FQDN provided is actually a Controller, so ensure that the actual Desktop Controllers is specified and not another server. Once the Desktop Controllers are verified, click Next to proceed to the next step in the Virtual Desktop Agent installation. Page 94

95 Windows 7 Desktop Optimizations 15 Validate all settings for the Virtual Desktop Agent Configuration. Default settings will have the following checked (enabled): **NOTE** XenDesktop Controller Communications Optimze XenDesktop Performance User Desktop Shadowing Real Time Monitoring These settings will create various exceptions for ports in Windows Firewall. Consult with the Desktop Security team to ensure that settings comply with enterprise standards. Refer to the Citrix Knowledgebase article CTX for more information regarding these settings. Once all settings have been validated, click Next to proceed to installation Summary validation for the XenDesktop Virtual Desktop Agent. 16 Review the installation Summary for accuracy of Intstall Location and Components. If the Summary is correct, click Install to proceed with the installation Page 95

96 Windows 7 Desktop Optimizations 17 Allow the wizard to install components and perform post install validation. 18 Upon successful completion of the wizard, a screen will be presented showing which components were installed. Validate that the XenDesktop Virtual Desktop Agent is presented. Ensure that the checkbox marked Restart Machine (required to complete install) is selected and click Close to end the installation of the XenDesktop Virtual Desktop Agent. ***NOTE*** The Windows 7 workstation will automatically restart upon clicking Close. Ensure that any unsaved work is saved prior to clicking Close. Page 96

97 Windows 7 Desktop Optimizations 19 ***CAUTION*** The following sub-section contains optimizations that may not be advisable for all enterprise environments. Review the contents of Citrix Knowledge Base article CTX with the Enterprise IT team carefully before implementing changes. All registry setting changes present risk. Modifying the registry incorrectly can cause serious problems that may require reinstallation of the operating system. Ensure proper best practices are followed before making any changes, including but not limited to backing up the registry or disk image before making changes. Disabling services may alter behavior of certain windows features and installed software. Ensure thorough testing of all application features is performed prior to deploying to a Production environment. Connect and authenticate to the machine that is the Master Image VM. 20 From the Start Menu, launch the Services MMC Snap-In by typing Services.msc from the Search Bar and hitting Enter Page 97

98 Windows 7 Desktop Optimizations 21 From the Services MMC Snap-In, locate the Background Intelligent Transfer Service service and double-click it in the Name area. Configure the service properties for Background Intelligent Transfer Service as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 22 From the Services MMC Snap-In, locate the Desktop Windows Manager Session Manager service and double-click it in the Name area. Configure the service properties for Desktop Windows Manager Session Manager as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 23 From the Services MMC Snap-In, locate the Function Discovery Resource Publication service and double-click it in the Name area. Configure the service properties for Function Discovery Resource Publication as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service Page 98

99 Windows 7 Desktop Optimizations 24 From the Services MMC Snap-In, locate the HomeGroup listener service and double-click it in the Name area. Configure the service properties for HomeGroup listener as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 25 From the Services MMC Snap-In, locate the HomeGroup provider service and double-click it in the Name area. Configure the service properties for HomeGroup provider as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 26 From the Services MMC Snap-In, locate the Windows Search service and double-click it in the Name area. Configure the service properties for Windows Search as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service Page 99

100 Windows 7 Desktop Optimizations 27 From the Services MMC Snap-In, locate the Security Center service and double-click it in the Name area. Configure the service properties for Security Center as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 28 From the Services MMC Snap-In, locate the SuperFetch service and double-click it in the Name area. Configure the service properties for SuperFetch as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 29 From the Services MMC Snap-In, locate the Themes service and double-click it in the Name area. Configure the service properties for Themes as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service Page 100

101 Windows 7 Desktop Optimizations 30 From the Services MMC Snap-In, locate the Windows Defender service and double-click it in the Name area. Configure the service properties for Windows Defender as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 31 From the Services MMC Snap-In, locate the Windows Media Player Sharing Service service and double-click it in the Name area. Configure the service properties for Windows Media Player Sharing Service as follows: Startup type: Service status: Disabled Stop Service ***NOTE*** The Service status may be grayed out if the service is not running. Simply ensure that the status is Stopped in this field. Click Apply and then OK to save settings for this Service 32 From the Start Menu, launch the Command Line by typing CMD from the Search Bar and hitting Enter **NOTE** Ensure that the user account being used to perform the following optimizations is entitled elevated privileges. Page 101

102 Windows 7 Desktop Optimizations 33 At the Command Line prompt, type the following: bcdedit /set bootux disabled Hit Enter to execute the command If the operation is successful, close Command Line by clicking the X in the upper right corner of the window 34 Navigate to the Programs and Features from the Control Panel Click Turn Windows features on or off 35 Ensure the following Windows Features are unchecked: Media Features > Windows DVD Maker Media Features > Windows Media Center Tablet PC Components Click OK to uninstall features. This may take time to execute and will require a restart of the workstation once complete. ***NOTE*** The Windows 7 workstation will automatically restart upon clicking Restart Now. Ensure that any unsaved work is saved prior to clicking Close. Page 102

103 Windows 7 Desktop Optimizations 36 Connect and authenticate to the machine that will be the Master image. **NOTE** Ensure that the user account being used login to perform the following optimizations has elevated privileges. 37 Navigate to System Properties by going to Control Panel > System > Advanced System Settings **NOTE** Ensure that the user account being used login to perform the following optimizations has elevated privileges. 38 In the Performance area, click Settings Navigate to the Advanced tab Click Change in the Virtual Memory Settings area Page 103

104 Windows 7 Desktop Optimizations 39 Uncheck Automatically manage paging file size for all drives Select the radio button marked Custom Size Click Change in the Virtual Memory Settings area and enter *THE EXACT SAME* value for Initial size and Maximum size. ***NOTE*** The hardcoded values for ther page file are determined by many factors including Memory Resources available to the vm and application profile that is run on the virtual desktop. This setting varies widely from customer to customer. Incorrectly determining this value can result in system instability. Consult with Desktop Administrators and thoroughly test this setting before determining and implementing in a production environment. 40 Click OK to allow the computer to reboot. ***NOTE*** The Windows 7 workstation will automatically restart upon clicking Restart Now. Ensure that any unsaved work is saved prior to clicking Close. 41 Connect and authenticate to the machine that will be the Master image. **NOTE** Ensure that the user account being used login to perform the following optimizations has elevated privileges. Page 104

105 Windows 7 Desktop Optimizations 42 Run the following Windows Tools in order to prepare the Master Image to join the domain. Windows Disk Cleanup Windows Disk Defragmenter Optimize the Antivirus program to scan writes and disable the scheduled scans. The base image should be scanned before being deployed within production. **NOTE** Ensure that the user account being used login to perform the following optimizations has elevated privileges. 43 Once all optimizations have been completed, join the Master Image to the Domain. The procedure to join a machine to the Domain varies by enterprise and can be done in multiple ways. Choose the procedure that is approved by the enterprise, ensuring that the Master Image Computer account in an OU that will have all appropriate Group Policy applied. Page 105

106 Citrix Access Gateway Enterprise Edition Importing NetScaler Appliance Citrix Access Gateway Pre-requisites 1 Launch XenCenter and connect to an environment that Merchandising Server will be hosted. Click File and then Import to begin the procedure to import the appliance 2 Click Browse to navigate to the location of the NetScaler Appliance location. Select the xva file and click Open Returning to the Import screen, click Next to continue 3 Click Browse to navigate to the location of the NetScaler Appliance location. Select the xva file and click Open Returning to the Import screen, click Next to continue Page 106

107 Citrix Access Gateway Pre-requisites 4 Select the Storage Repository to be used for the NetScaler VPX VM. Click Next to continue 5 Select the Network Interface for the NetScaler VPX VM. Click Next to continue 6 Review the summary screen for accuracy Ensure that the checkbox marked Start VM after Import is selected. Click Finish to begin importing the VM. Allow the VM to import completely Page 107

108 Installation of Citrix Access Gateway Enterprise Edition Citrix Access Gateway Pre-requisites 7 Once the VM has imported, switch to the Console for the VM. Begin following the onscreen instructions to perform basic configuration of the NetScaler VPX 8 Provide the following information to the VPX per on-screen instructions: IPv4 Address Network Mask (Subnet Mask) Gateway Address (IPv4) 9 Once the last network setting has been provided, a summary screen will be presented. Review for accuracy Press 4 to save settings on the NetScaler and reboot the device 10 Watch the console and await the VM state to be Up Once the State is Up, launch a web browser Page 108

109 Citrix Access Gateway Pre-requisites 11 In the URL area of the Web Browser, navigate to the IP address for the NetScaler VPX. Authenticate using default credentials: User Name: Password: nsroot nsroot 12 Upon authenticating to the VPX, a Setup Wizard will be launched validating and configuring the VM. Click Next to continue 13 Confirm the networking addresses provided earlier. Provide a Host Name Ensure appropriate values are entered into the MIP/SNIP Configuration. ***NOTE*** The MIP/SNIP address will be what is used to communicate with XenDesktop Controllers. Ensure that routing and firewall configurations allow network communications to occur on this IP address. Click Next to continue Page 109

110 Citrix Access Gateway Pre-requisites 14 In the Chose Application, select the radio button marked Skip this Step Click the hyperlink marked Manage Licenses 15 In the license dialog box, click Add to add the license file to the NetScaler device 16 Browse to the location of the license file. Choose the license file and click Select to continue Page 110

111 Citrix Access Gateway Pre-requisites 17 Importing the license fill will require the NetScaler device to reboot. Click Yes to allow the device to reboot 18 The Web Browser will need to be closed and restarted once the license file import reboot is processed. Close the Web Browser by clicking the X in the upper right corner 19 Return to XenCenter and find the NetScaler VM Go to the Console tab to monitor the progress of the NetScaler reboot procedure Await the NetScaler displaying its State as Up 20 Launch a Web Browser and return to the IP address of the NetScaler. Authenticate with nsroot / nsroot The Setup Wizard will launch again at the starting point. Validate the settings and click Next on each screen to return to the point in the installation prior to the the reboot. The screen after license import will be a Summary screen. Validate all settings at the Summary and click Exit to complete NetScaler setup Page 111

112 Citrix Access Gateway Pre-requisites 21 In the Setup User Interface for NetScaler, navigate to NetScaler VPX {IP_ADDRESS} > System > Licenses Validate that the Access Gateway displays the icon 22 In the Setup User Interface for NetScaler, navigate to: NetScaler VPX {IP_ADDRESS} > Access Gateway Right-click Access Gateway and click Enable Access Gateway Feature Page 112

113 Creating A Request, Key, and Certificate Creating A Request, Key, and Certificate 1 In the URL area of the Web Browser, navigate to the IP address for the NetScaler VPX. Authenticate using default credentials: User Name: Password: nsroot nsroot 2 In the Setup User Interface for NetScaler, navigate to NetScaler VPX {IP_ADDRESS} > SSL Page 113

114 Creating A Request, Key, and Certificate 3 From the SSL Pane, click the link marked Create RSA Key 4 Populate the following required fields: Key Filename specify a file name Key Size - specify 1024 Public Exponent Value select F4 Key Format select PEM PEM Encoding Algorithm select DES3 PEM Passphrase specify a passphrase and verify Once required fields have been populated, click Create. Click Close to return to the SSL configuration pane. 5 From the SSL Pane, click the link marked Create CSR (Certifcate Signing Request) Page 114

115 Creating A Request, Key, and Certificate 6 Provide the following items or required information: Request File Name Click Browse in the Key File Name area. Using the file browser, select the key file created in Step 5 Provide the following items or required information: Key Format - select PEM PEM Passphrase specify the passphrase created in Step 4 Distinguished Name Fields specify all relevant fields Leave the Attribute Fields blank. Once all required fields have been populated, click Create. Click Close to return to the SSL configuration pane. 7 Open a new Web Browser window Navigate to the URL of the enterprise certificate authority. Authenticate with domain credentials Page 115

116 Creating A Request, Key, and Certificate 8 From the Microsoft Active Directory Certificate Services web page, click the hyperlink labeled Request A Certificate 9 From the Request A Certificate page, click the hyperlink labeled advanced certificate request 10 On the Advanced Certificate Request web page, select the hyperlink labeled Submit a certificate request by using base- 64-encoded CMC or PKCS #10 file, or submit a renewal rqust using a base-64- encoded PKCS #7 file Page 116

117 Creating A Request, Key, and Certificate 11 Using an FTP Program or Secure Shell (SSH) application, navigate to the path of the Certificate Request file that was submitted in Step 6. Open or view in order to see the entire request string. Copy the entire Certificate Request string to the clip-board, ensuring that the contents starting with: -----BEGIN NEW CERTIFICATE REQUEST and -----END NEW CERTIFICATE REQUEST----- are included in the string copied to the clipboard. 12 Return to the web browser with the Microsoft Active Directory Certificate Services page open. Paste the entire string copied to the clipboard in Step 11 in the field labeled Base-64-encoded certificate request (CMC or PKCS#10 or PKCS #7) In the field marked Certificate Template, select Web Server Click Submit to proceed. 13 A new certificate will now be available to download. Ensure that the Base 64 encoded radio button is selected. Click the Download Certificate hyperlink Page 117

118 Creating A Request, Key, and Certificate 14 Save the certificate to a known location on the filesystem and proceed to the section labeled Configuring Citrix Access Gateway Enterprise Edition Configuring Citrix Access Gateway Enterprise Edition Configuring Citrix Access Gateway Enterprise Edition 1 In the URL area of the Web Browser, navigate to the IP address for the NetScaler VPX. Authenticate using default credentials: User Name: Password: nsroot nsroot 2 In the Setup User Interface for NetScaler, navigate to NetScaler VPX {IP_ADDRESS} > Access Gateway Page 118

119 Configuring Citrix Access Gateway Enterprise Edition 3 In the Access Gateway pane, click the Access Gateway Wizard link 4 Review the Welcome Screen. Click Next to continue Page 119

120 Configuring Citrix Access Gateway Enterprise Edition 5 Select the radio button labeled New in order to create a new virtual server for Citrix Access Gateway Enterprise Edition. Specify the following information for the virtual server: IP Address specify an available static IP address Port ensure that the value is 443 Virtual Server Name provide a name ***NOTE*** Work with enterprise Network Administrators to ensure remote access to this IP address is possible. Configuring enterprise remote access is beyond the scope of this document Once all required information has been provided, click Next to continue. 6 In the Certificate Options drop down of the Access Gateway Wizard, select the value marked Install a signed certificate and private key Provide a value in the Certificate-Key Pair Name 7 In the field labeled Certificate File Name, click the Browse button and select Local Page 120

121 Configuring Citrix Access Gateway Enterprise Edition 8 Using the directory browser, navigate to the local filesystem path where the certificate generated in Step 14 of Creating a Request, Key, and Certificate. Select the certificate file and click Open 9 At the Access Gateway Wizard screen, locate the field area labeled Private Key File Name. Click the Browse button and select Appliance 10 Using the directory browser, navigate to the local filesystem path where the key file generated in Step 4 of Creating a Request, Key, and Certificate. Highlight the key file and click Select Page 121

122 Configuring Citrix Access Gateway Enterprise Edition 11 At the Access Gateway Wizard screen, provide the key file password which was specified on Step 4 of Creating a Request, Key, and Certificate Ensure that the radio button marked PEM is selected. Click Next to continue 12 On the Name Service Providers screen, provide the IP address of a DNS server in the Configured DNS Server field Select DNS in the Name Lookup Priority field. Click Next to continue 13 In the Configure Authentication screen, select LDAP in the Select an authentication type Specify the following information associated with Active Directory : IP Address Port typically 389 Base DN (i.e. CN=Users, dc=abc, dc=local) Administrator Bind DN Administrator Password Confirm Administrator Password Leave all settings unchanged Click Next to continue Page 122

123 Configuring Citrix Access Gateway Enterprise Edition 14 In the Configure Additional Settings screen, ensure that the Configure Authenticate radio button is set to Allow In the Redirect Requests for Port 80 to a Secure Port area, ensure that the Web Address, specify the address of the Web Interface site for Citrix Access Gateway ***NOTE*** This Web Interface site has yet to be configured. Specify the full URL and reserve for upcoming steps. Click Next to continue 15 On the Configure clientless access screen, select the mode of clientless access appropriate for this installation. For the purposes of this guide, select use the Access Gateway Plugin and allow access scenario fallback Leave all other settings unchanged Click Next to continue 16 Review all items on the Summary page. Click Finish if all settings are appropriate Page 123

124 Configuring Citrix Access Gateway Enterprise Edition 17 Allow the setup and configuration of Access Gateway. Once completed, a final summary screen will be presented. If there are no errors, click Finish to exit from the configuration wizard. Page 124

125 Creating a Web Interface Site for Access Gateway Web Interface for Access Gateway Enterprise Edition 1 Connect and authenticate to the server selected to run Citrix Web Interface **NOTE** If using a service account to configure Citrix Web Interface, ensure that the account possesses elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Launch the Web Interface Management console by navigating to: Start > All Programs > Citrix > Management Consoles > Citrix Web Interface Management 3 From the Web Interface Management Console, right click XenApp Web Site and click Create Site Page 125

126 Web Interface for Access Gateway Enterprise Edition 4 In the Specify IIS Location screen, populate the required fields. 5 At the Specify Point of Authentication screen, select At Access Gateway in the drop-down. 6 Provide the Authentication Service URL for the Access Gateway in the required field. Ensure that the Explicit is selected in the Authentication Options Page 126

127 Web Interface for Access Gateway Enterprise Edition 7 Review the Summary screen for the Web Inteface site. Click Next to continue. 8 Allow the installation wizard to create the Web Interface site. 9 Once the site has been created, a summary page will be presented. Ensure the checkbox marked Configure this site now is selected Page 127

128 Web Interface for Access Gateway Enterprise Edition 10 On the Specify Initial Configuration screen, provide a unique Farm Name Click Add 11 Specify a server that will be in the farm for this Web Interface site Click OK 12 Validate that a farm name has been provided and that a server is specified. Click Next to continue Page 128

129 Web Interface for Access Gateway Enterprise Edition 13 Choose a Logon Screen Appearance by selecting the appropriate radio button. Click Next to continue 14 Select the appropriate radio button for the Published Resource Type. Click Next to continue 15 Review the summary screen for accuracy. Once all settings have been validated, click Finish. Page 129

130 Web Interface for Access Gateway Enterprise Edition 16 Validate that the Web Interface site has been created by looking to see if it appears in the XenApp Web Sites area. Once successful validation has occurred, exit from Web Interface Management Console and logoff the Web Interface server. Desktop Groups Configuration Desktop Group Creation XenDesktop Group Creation 1 Connect and authenticate to the server selected to run the Desktop Controller. **NOTE** If using a service account to install the Desktop Controller, ensure that the user account has elevated privileges. Consult with Active Directory Administrators to ensure compliance with specific enterprise account standards. 2 Launch Desktop Studio from the Start Menu. Desktop Studio should appear under: Start > All Programs > Citrix > Desktop Studio Page 130

131 XenDesktop Group Creation 3 From Desktop Studio, select Machine Creation setup. Select Machine Creation the center pane of Desktop Studio 4 In Machine Type, select Pooled For Machine Assignment, select Random 5 Select ther Master Image VM name expansion tree. Click Next to continue Page 131

132 XenDesktop Group Creation 6 Configure the Site settings as appropriate to this enterprise. Ensure that the correct numbers of VMs are selected and that sufficient resources are available on the XenServer Host to support the desired hardware specifications. Click Next to continue 7 Select the Active Directory O-U from the expansion tree to create the Virtual Machine Computer accounts. Use the naming masks to input a naming convention for the Virtual Machines. 8 Provide a description for this Desktop Catalog Validate that the Administrators permitted to use this Catalog is correct Click Next to continue Page 132

133 XenDesktop Group Creation 9 View the Summary and verify all settings Provide a Catalog name for this XenDesktop Catalog Click Finish to allow the wizard to create VM account Allow the Setup Wizard to Copy the master image and complete the installation process Once the desktop group creation has completed, the wizard will return to Desktop Studio. Page 133

134 Configuration Desktop Group Assignment XenDesktop Group Assignment 1 Ensure that machine creation now states as complete in the center of the screen with the correct number of Virtual Desktops created. In the User Assignment area of Desktop Studio, click Configure to begin the process of assigning users to desktops. 2 In the Create Desktop Group dialogue, select the Catalog from which to provision Virtual Desktops for Assignment. Specify the number of machines by entering the value in Add machines textbox. Click Next to continue 3 Enter the number of Desktops to be assigned per user and place it in the text box at the bottom of the screen. This setting is specific to this enterprise Click Add to add users to this Desktop Group. This will bring up the Active Directory user selection screen Page 134

135 XenDesktop Group Assignment 4 Select the appropriate groups and users from Active Directory. Click OK when complete 5 Validate that the settings for users and number of desktop are correct Click Next to proceed 6 Ensure delegation settings are set correctly for the administrator of this desktop group Click Next to proceed Page 135

136 XenDesktop Group Assignment 7 Provide a Display Name and Desktop Group Name for the Desktop Catalog Click Finish to complete the Desktop Assignment 8 Validate that the User Assignment appears in Desktop Studio. If successful, exit from Desktop Studio by clicking the X in the upper right corner of the Snap-In. Page 136

137 Validation Scenarios Internal Access Scenario Internal Access Validation 1 From a workstation within the enterprise network, navigate to the Merchandising Server site. 2 From the Merchandising Server, ensure that the checkbox marked I agree to the Terms of Use is selected Click the Download button 3 Execute the preconfigured Citrix Receiver to the local filesystem by selecting Run ***NOTE*** Consult with the enterprise Desktop team prior to installing any software on a Company workstation. 4 Once completed, a Citrix Receiver icon will appear in the system tray Page 137

138 Internal Access Validation 5 Right click the Citrix Receiver icon and select Check for Updates Provide the credentials associated with an account with access. 6 Allow Plug-Ins to install/update A success prompt will be presented once completed. Click OK to proceed 7 From a web browser, navigate to the Web Interface XenDesktop site. 8 If all installation and configuration steps have been performed successfully, a XenDesktop logon site should be presented. Provide a username and password of an account with a Virtual Desktop provided by XenDesktop. Click Log On to continue Page 138

139 Internal Access Validation 9 Observe if any virtual desktops are available for end-user use. Click the icon representing an assigned virtual desktop to initiate the connection. 10 Allow the virtual desktop to fully load. 11 A splash screen will be presented once the virtual desktop has fully loaded. Proceed with general usage of this new virtual desktop. Page 139

140 External Access Scenario External Access Validation 1 From a workstation outside of the enterprise network, launch a web browser and navigate to the Citrix Access Gateway virtual server IP address. ***NOTE*** The remote access workstation should already have Citrix Receiver installed as well as the Citrix Access Gateway and Citrix Online Plug- Ins. 2 Present the credentials that are enabled for remote access and click Log On. 3 Upon successful Log On, assigned virtual desktops will be presented. Select an assigned virtual desktop and proceed to Steps 10 and Step 11 in Internal Access Scenario Page 140