Hotfix readme name: XAE600W2K8R2X64R01.HTML

Hotfix package name: XA600W2K8R2X64R01.MSP

For: Computers running XenApp 6 for Windows Server 2008 R2

Replaced hotfixes: See table

Invalidated hotfixes: See table

Date: December, 2011

Language supported: English (US), German (DE), Spanish (ES), French (FR), Japanese (JA), Simplified Chinese (SC)

Readme version: 1.11

Readme Revision History

This hotfix rollup pack replaces most individual hotfixes released for this version of XenApp so far and introduces a number of new fixes and enhancements that have not been released previously.

This document describes the issue(s) solved by this hotfix rollup pack and includes installation instructions. The full XenApp and other product documentation is available from Citrix eDocs, the Citrix Product Documentation Library.

Additional documentation of interest:

This hotfix rollup pack replaces the following hotfixes:

XA600W2K8R2X64001, XA600W2K8R2X64002, XA600W2K8R2X64003, XA600W2K8R2X64004, XA600W2K8R2X64005, XA600W2K8R2X64006, XA600W2K8R2X64007, XA600W2K8R2X64008, XA600W2K8R2X64009, XA600W2K8R2X64010, XA600W2K8R2X64011, XA600W2K8R2X64012, XA600W2K8R2X64013, XA600W2K8R2X64014, XA600W2K8R2X64015, XA600W2K8R2X64016, XA600W2K8R2X64017, XA600W2K8R2X64018, XA600W2K8R2X64019, XA600W2K8R2X64020, XA600W2K8R2X64021, XA600W2K8R2X64022, XA600W2K8R2X64023, XA600W2K8R2X64024, XA600W2K8R2X64025, XA600W2K8R2X64026, XA600W2K8R2X64027, XA600W2K8R2X64028, XA600W2K8R2X64029, XA600W2K8R2X64030, XA600W2K8R2X64031, XA600W2K8R2X64032, XA600W2K8R2X64033, XA600W2K8R2X64034, XA600W2K8R2X64035, XA600W2K8R2X64036, XA600W2K8R2X64037, XA600W2K8R2X64038, XA600W2K8R2X64039, XA600W2K8R2X64040, XA600W2K8R2X64041, XA600W2K8R2X64042, XA600W2K8R2X64043, XA600W2K8R2X64044, XA600W2K8R2X64045, XA600W2K8R2X64046, XA600W2K8R2X64047, XA600W2K8R2X64048, XA600W2K8R2X64049, XA600W2K8R2X64050, XA600W2K8R2X64051, XA600W2K8R2X64052, XA600W2K8R2X64053, XA600W2K8R2X64054, XA600W2K8R2X64055, XA600W2K8R2X64056, XA600W2K8R2X64057, XA600W2K8R2X64058, XA600W2K8R2X64059, XA600W2K8R2X64060, XA600W2K8R2X64061, XA600W2K8R2X64062, XA600W2K8R2X64063, XA600W2K8R2X64064, XA600W2K8R2X64065, XA600W2K8R2X64066, XA600W2K8R2X64067, XA600W2K8R2X64068, XA600W2K8R2X64069, XA600W2K8R2X64070, XA600W2K8R2X64071, XA600W2K8R2X64072, XA600W2K8R2X64073, XA600W2K8R2X64074, XA600W2K8R2X64075, XA600W2K8R2X64076, XA600W2K8R2X64077, XA600W2K8R2X64078, XA600W2K8R2X64079, XA600W2K8R2X64080, XA600W2K8R2X64081, XA600W2K8R2X64082, XA600W2K8R2X64083, XA600W2K8R2X64085, XA600W2K8R2X64086, XA600W2K8R2X64087, XA600W2K8R2X64089, XA600W2K8R2X64090, XA600W2K8R2X64091, XA600W2K8R2X64092, XA600W2K8R2X64093, XA600W2K8R2X64096, XA600W2K8R2X64097, XA600W2K8R2X64099, XA600W2K8R2X64100, XA600W2K8R2X64101, XA600W2K8R2X64102, XA600W2K8R2X64104, XA600W2K8R2X64105, XA600W2K8R2X64106

Installing this hotfix rollup pack partially invalidates the following hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require as follows:

This hotfix rollup pack contains Fix #241756, which addresses a security vulnerability. For more information, see Knowledge Center article CTX128169 . [#241756]

Caution: Several items in this hotfix rollup pack require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

On some Citrix XenApp servers, silent installation of hotfix rollup packs can fail and installation with UI can display the following error message: "Operation could not be completed (error 0x00000002)." If you are affected by this issue, see Knowledge Center article CTX133014 for more information.

Installing this hotfix rollup pack partially invalidates several hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require. List of invalidated hotfixes

Important : If you utilize the SSLAutoConfig tool to configure SSL and plan to continue using the tool after installing this hotfix rollup pack, you must download and use the most recent version of the tool, available as Knowledge Center article CTX127580 . [#228352]

The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply . The next time the server restarts, the correct policies are in place.

This fix prevents data store inconsistencies that can result from deleting a streamed to server application from the Delivery Services Console.

After installing this hotfix rollup pack, you might find the Delivery Services Console to become unresponsive when you delete streamed applications. If you are experiencing this issue or to prevent it from happening, install both a XenApp and a Delivery Services Console hotfix that contains Fix #257489.

If previous XenApp hotfix(es) were uninstalled, the installation of this hotfix rollup pack can fail with Error 30010: "Citrix XenApp 6 Hotfix Rollup Pack 1 cannot currently be installed on this server. See the Citrix XenApp 6 Hotfix Rollup Pack 1 readme for a workaround. Installation will now exit." In certain configurations, the installation does not fail with an error but not all files will be properly updated. For more information, see Knowledge Center article CTX131431 .

For information about the order of deployment to servers in a farm and other helpful best practices guidelines, see Knowledge Center article CTX120842 (Best Practices for Citrix XenApp Hotfix Rollup Pack Installation and Deployment) .

This hotfix rollup pack introduces the following fixes that have not been previously released:

End User Experience Monitoring

A process notification thread that exits unexpectedly can cause published applications to not appear in the report or to be under-reported.

HDX MediaStream

Attempts to slide the progress bar backwards in Windows Media Player while rendering MP4 (MPEG 4 Video) or MOV (QuickTime) files can cause the audio to become unavailable. Windows Media Player has also been observed to become unresponsive, making it impossible to log off from the session.

HDX Plug and Play

This fix is required to make the HDX Plug-n-Play for USB Storage Devices feature available to XenApp 6 Fundamentals Edition.

Installing, Uninstalling, Upgrading

When uninstalling XenApp 6, the following registry key fails to be removed:

The XenApp 6 installer creates blank registry entries as placeholders to be populated with valid data later - that is, when a farm is created or joined. Repairing and/or reinstalling the product as well as installing and/or uninstalling certain hotfixes on a server that has already joined a farm causes that serverâs farm-specific configuration logging registry data to be reset to blank values. As a result, configuration logging no longer functions properly.

This fix corrects the issue, if present, and prevents it from occurring when installing subsequent hotfixes on systems running XenApp 6 Fundamentals Edition.

On XenApp 6 Fundamentals Edition, installing early hotfixes for XenApp 6, which do not contain Fix #248247, removes the entries Smass.dll and CAEServerSs.dll from HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA\RUNTIME\:

Logon/Authentication

When reconnecting to an application published for anonymous users, users are prompted for credentials.

Data: 0 (use the previous authentication handling); 1 (skip NTLM authentication); 10 (skip NTLM authentication for all but Web browser processes)

However, this resolution might not be satisfactory for customers who want users to authenticate using NTLM, especially for Web browsers. This fix adds a bit to the registry value as follows:

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxSSP\NTLM Name: HandlingMethod Type: REG_DWORD Data: 0 (use the previous authentication handling); 1 (use the new handling)

To address the issue, Fix #184053 was introduced to skip NTLM authentication by setting the following registry key:

When running a published instance of Internet Explorer using Program Neighborhood Agent or the online plug-in, the following error message can appear: "The page cannot be displayed." As a result, users can be incorrectly locked out of their accounts when launching applications or accessing other resources in a Kerberos environment.

Printing

The Paper Size setting is missing from the Paper/Quality tab of the Citrix Universal Printer Print Settings.

A race condition when launching or reconnecting to a session can prevent some session printers from being created.

If you change the default client printer while disconnected from a session and then reconnect to that session, the new printer is not added and the previous printer is not deleted as the default printer.

With a printing policy configured to disable client printer mapping or if there a no client printers, session printers fail to be created.

With a Citrix policy in place not to autocreate printers but use only the Citrix Universal Printer, the universal printer is not available when you connect to a session from a second client device.

Autocreated printers might fail to fully initialize in the session, causing a "The printer is not installed" error message to appear.

Security Issues

This fix addresses a security vulnerability related to Citrix Secure Gateway. For more information, see Knowledge Center article CTX128168 .

Key: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxSSP\NTLM Name: HandlingMethod Type: REG_DWORD Data: 0 (use the previous authentication handling); 1 (use the new handling)

After applying this fix, you must define the following registry key and restart the server for the fix to take effect:

Users can be incorrectly locked out of their accounts when launching applications or accessing other resources in a Kerberos environment.

Server/Farm Administration

EventID 1542 and EventID 45 warnings appear in the Event Log for VPTray.exe even after attempting to suppress them according to the procedure described in Knowledge Center article CTX113486 .

Attempts to connect to a disconnected session from a published instance of the Delivery Service Console fail and the following error message appears: "IMA_RESULT_NOT_SUPPORTED (0x8000003a)."

This fix prevents data store inconsistencies that can result from deleting a streamed to server application from the Delivery Services Console.

MetaFrame_Application_LoadLevel class info cannot be retrieved from WMI Provider on servers upgraded to Hotfix Rollup Pack 3 or later.

Session/Connection

When reconnecting to a disconnected session where the wall paper is set using a group policy, the desktop wallpaper is no longer set.

When logged on to a XenApp 6 Fundamentals Edition Web Interface site as an anonymous user, the user can successfully launch applications without being prompted for credentials.

Attempts by certain custom applications to overwrite an existing file can fail. Instead, the application appends the new information to the existing file.

Users can be randomly presented with a Windows logon screen prompting them for credentials for nonexisting sessions.

A published toolbar might not dock correctly in the client work area. As a result, other application windows might cover it in full or in part.

Attempts to log on or log off from new servers might result in Network Location Awareness Service (NlaSvc) timeouts and fail.

When launching a published instance of Windows Explorer (explorer.exe), the following message appears: "You have started Windows Explorer desktop in your remote session. This will obscure your local Explorer desktop" and the server desktop launches in the session.

EdgeSight reports on published desktop launch counts can show fewer launches than the actual numbers. This happens because the EUEM Service (semsService.exe) fails to pass along data for desktops whose names exceed 17 characters in length.

When using Secure Gateway, SSL-secured sessions might disconnect unexpectedly, reporting an SSL Library Error 45.

System Exceptions

After installing Hotfix XA600W2K8R2X64086, refreshing the user list in the Shadow Taskbar can cause the server to become unresponsive and to no longer accept new connections.

Servers might experience a fatal exception, displaying a blue screen, on picadm.sys with Errors 22 and 7E.

Attempts to run Citrix Windows Management Instrumentation (WMI) query as an unprivileged user can fail and cause multiple Windows services to exit unexpectedly.

After installing Hotfix XA600W2K8R2X64067, a rare race condition can cause the Citrix Audio Service (CtxAudioSvc.dll) to exit unexpectedly.

At times of heavy logon/logoff activity, one or more of the following can be observed:

This fix addresses an issue with the wdica.sys file that can cause servers to become unresponsive.

A memory leak can occur in ctxwmi.dll, which is loaded by the Citrix WMI Service(ctxwmisvc.exe).

The Wfshell.exe process might cause CPU consumption to rise and remain above 25 percent.

Miscellaneous

Note : You must restart the server after this registry edit in order for the license file to be cached.

This fix allows you to save the license server cache file in a shared network location - a location separate from the XenApp server image - so that the file is available even when the server image shuts down. If you save the file in a location away from the server image, you must set the following registry key to point to the cache file location:

Provisioned XenApp servers refuse to accept connections if they are restarted while the license server is unavailable. The issue occurs because the license server cache file, MPS-WSXICA_MPS-WSXICA.ini, is saved in the %ProgramFiles(x86)%\Citrix\system32\cache folder, which might be unavailable when the server image shuts down.

Note : Implementations of Fix #242177 in hotfix releases for Presentation Server 4.5/XenApp 5 for Windows Server 2003 are not affected by the integration issue and work as designed.

This fix replaces Fix #242177 on systems running XenApp 6. A code integration issue with Fix #242177 in earlier hotfix releases for XenApp 6 prevents Fix #242177 from working as designed. This fix (#LA0745) corrects the integration issue and allows you to save the license server cache file in a shared network location as described below. After applying this fix, the XenApp server's computer name will be appended to the license server cache file as designed - for example: WSXICA_MPS-WSXICA_<XA Server Name>.ini.

Hotfixes fail to update IIS files under IIS\Scripts if you change the configuration of the Citrix XML Service to share the default TCP/IP port with IIS as described in Knowledge Center article CTX125107 . After applying this fix, the XMLChoice registry key will be set properly.

This hotfix rollup pack includes the following fixes from replaced hotfixes:

Terminal Services RemoteApps fail to launch from XenApp servers. [From XA600W2K8R2X64001][#231386]

When connecting to a server running Windows Server 2008 R2 with Service Pack 1, Terminal Services can exit unexpectedly. This causes users to experience a black screen during logon and the logon process fails to complete. [From XA600W2K8R2X64001][#232329]

Attempts to log on to a server with a user name that exceeds 19 characters in length fail and can cause the Winlogon.exe process on the server to exit unexpectedly. This fix adds support for user names up to 255 characters long. [From XA600W2K8R2X64001][#233858]

Installing hotfixes or performing a repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component, if present, from the system. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes. [From XA600W2K8R2X64002][#245185]

Servers running XenApp 6 can become unresponsive while shutting down. The issue occurs when the picadm.sys driver encounters certain error conditions that prevent it from shutting down gracefully. [From XA600W2K8R2X64003][#235234]

Longer periods of playback at a high sampling rate can drain Window Media Player buffers. When that happens, media files or streams can unexpectedly stop while the player controls indicate that playback continues. The issue occurs when flow control network writes are slow and samples accumulate in picashell's out-buffer queue. As a workaround, this fix introduces the following registry key that, when set, allows you to disable flow control as follows: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\SpeedScreen

Name: SkipFlowControl

Type: REG_DWORD

Data: 1 (disable flow control); 0 (enable flow control; default) [From XA600W2K8R2X64004][#232277]

A memory leak in SessionSS.dll can cause the memory utilization of the IMA Service to increase unexpectedly. [From XA600W2K8R2X64006][#236150]

When the Windows logon takes a long time due to, for example, Active Directory authentication, a full-screen published desktop does not display a status indicator to provide status feedback. This can be confusing to users. This fix modifies the behavior of the status indicator so that the indicator remains visible until the authentication completes. Note: To correct this issue in its entirety, you must install both a server hotfix and a plug-in hotfix that contains Fix #235374. [From XA600W2K8R2X64007][#235374]

The IMA Service fails to start when using multiple NIC teams and the ICA listener is assigned to only one NIC team. [From XA600W2K8R2X64008][#235068]

Restarting the IMA Service while the data store is unavailable results in the temporary deletion of certain farm policy settings from the server. This occurs because reading the settings from the local host cache - intended as a backup mechanism for retrieving farm policy settings in case the data store is down - does not work properly. Even without this fix, the issue is temporary: restarting the IMA Service as soon as the data store is available again repopulates the farm policy settings. This fix addresses the issue that prevents the proper reading of the farm policy settings from the local host cache in the first place. [From XA600W2K8R2X64009][#234694]

With SmoothRoaming enabled, users must relaunch sessions to reenumerate and update session printers after roaming to a different location. This feature enhancement introduces dynamic printer discovery to automatically reenumerate and update session printers after roaming to a different location so that relaunching of sessions is no longer necessary. To enable this enhancement, you must also deploy a client hotfix that includes Fix #226929. [From XA600W2K8R2X64010][#226929]

This enhancement is a part of the XenApp Printing Optimizations. The Printing Optimizations improve the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements, required components, and known issues, see XenApp Printing Optimizations in eDocs, the Citrix Product Documentation Library. [From XA600W2K8R2X64010][#238211]

Attempts to connect to a XenApp 6 server from a Wyse terminal configured for smart card single sign-on fail. [From XA600W2K8R2X64011][#242752]

Connections from WinCE clients can get randomly dropped before the server logon screen appears. [From XA600W2K8R2X64013][#230540]

The DSMAINT / RECOVER does not restore a database backed up using the DSMAINT / BACKUP command. [From XA600W2K8R2X64014][#242816]

The DSCHECK utility can exit unexpectedly when running the DSCHECK /full servers /clean command. [From XA600W2K8R2X64015][#244806]

The CPU consumption of the CitrixCseEngine.exe process can spike unexpectedly and cause logon delays. [From XA600W2K8R2X64016][#240091]

Attempts to launch a published application that resides on a mapped network drive rather than on a XenApp server fail. When trying to connect to the application from the Web Interface, the following error message appears: "An error occurred trying to establish the connection." The issue is caused by an internal application installation check. To suppress the application installation check and prevent the issue from occurring, you must set the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\IMA

Name: DisableAppInstallCheck

Type: REG_DWORD

Data: 1 (allow published applications to reside on mapped network drives); 0 (do not allow published applications to reside on mapped network drives) Note: This issue does not occur in other versions of XenApp and Presentation Server. For related information, see Knowledge Center article CTX125104. [From XA600W2K8R2X64016][#242170]

When using the Client for Solaris, copying files from mapped client drives into a session running on XenApp 6 for Windows Server 2008 R2 can cause the server to experience a fatal exception, displaying a blue screen. [From XA600W2K8R2X64018][#230823]

If a session is disconnected while it is still reading or writing a CDM file, the resulting deadlock condition can prevent servers from accepting new session requests. [From XA600W2K8R2X64018][#248900]

Servers might experience a fatal exception, displaying a blue screen on picadm.sys with bugcheck code 0x22 (FILE_SYSTEM). [From XA600W2K8R2X64018][#250230]

Calling System.IO.Directory.Exists() against \\Client\ returns true, even if there is no media in that drive. [From XA600W2K8R2X64018][#251117]

Servers might experience a fatal exception, displaying a blue screen on picadm.sys. [From XA600W2K8R2X64018][#253078]

Certain applications fail to launch when Admin Approval Mode is enabled in User Account Control. [From XA600W2K8R2X64019][#214441]

This feature enhancement lets you control whether users can copy files from their virtual environments to their user devices: When enabled, files and folders on mapped client-drives cannot be added or modified from within the session. Files and folders on mapped client-drives are available in read-only mode only. When disabled, files and folders on mapped client-drives are available in read/write mode from within the session. By default, the setting is disabled. To enable this feature: In registry key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\Virtual Clipboard, create a DWORD value with value name ReadOnly and value data 1. [From XA600W2K8R2X64020][#211433]

This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX128169. [From XA600W2K8R2X64021][#241756]

Installing hotfixes for Citrix XenApp 6 for Windows Server 2008 R2 causes the ICA Session performance monitor counter to be removed. As a result, HDX Monitor for XenApp and some EdgeSight user session monitoring cannot find and report on that counter. This fix prevents the counter from being removed when installing subsequent hotfixes. [From XA600W2K8R2X64023][#248473]

Attempts to log on to a XenApp 6 server using Version 7 or earlier of the clients can cause svchost.exe to exit unexpectedly. As a result, further connection attempts to the server fail until it is restarted. [From XA600W2K8R2X64026][#237503]

The memory utilization of the IMA Service (ImaSrv.exe) can grow unexpectedly. [From XA600W2K8R2X64027][#245170]

EdgeSight does not properly collect data for published desktop launches and does not properly display such data in its reports. [From XA600W2K8R2X64028][#240414]

Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 0xf4 on IMAAdvanceSrv.exe. [From XA600W2K8R2X64029][#246935]

Attempts to launch Windows Internet Explorer from an http, https, or mms hyperlink embedded in a streamed application fail. The issue occurs because XenApp does not create the HKEY_CLASSES_ROOT\htmlfile\shell\opennew\command_backup registry key as part of server file type association. [From XA600W2K8R2X64029][#250332]

Servers can experience a svchost.exe exception on termserv.exe and as a result become unresponsive. [From XA600W2K8R2X64030][#238866]

Load balancing, when configured based on servers and applications, might not work correctly at times. This results in new connections going to the same server rather than to the least loaded server. [From XA600W2K8R2X64031][#232105]

An unhandled exception in picaprovider.dll can make processes, among them winlogon.exe, exit unexpectedly. [From XA600W2K8R2X64032][#241468]

The Shadow Taskbar can become unresponsive when expanding tree items. [From XA600W2K8R2X64033][#249887]

Parts of the names and descriptions of client mapped printers might appear in an unexpected language; for example, "Microsoft XPS Document Writer (von <computer_name>) in Sitzung: 2." The issue occurs if, while installing Windows Server 2008 R2 (English), under Language to install, you select a language other than English (for example, German), then install XenApp 6, and then change the server's current system locale (Regional and Language Options > Administrative > Change system locale... > Regional and Language Settings) to a different locale; for example, English. The localized parts of the names and descriptions of session printers do not, as expected, appear in English but in the language selected under Language to install when installing Windows Server 2008 R2. [From XA600W2K8R2X64034][#248436]

Servers can experience high CPU utilization after installing Hotfix XA600W2K8R2X64010. [From XA600W2K8R2X64034][#253033]

If a user has multiple simultaneous connections and removes and reinserts a smart card, Version 11.2 of the plug-in can become unresponsive. To enable this fix, you must set both of the following registry keys: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\SmartCard

Name: KeepLockTillEndTxSuccess

Type: REG_SZ

Data: 1

HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard

Name: KeepLockTillEndTxSuccess

Type: REG_SZ

Data: 1 [From XA600W2K8R2X64035][#227329]

With Session Reliability enabled, ICA connection attempts fail if the ICA Listener is bound to a single NIC in a multihomed environment. [From XA600W2K8R2X64036][#246316]

An issue related to CtxAudioSvc.dll can cause servers to experience a fatal exception, displaying a blue screen, with bugcheck code 80 (NMI_HARDWARE_FAILURE). [From XA600W2K8R2X64037][#249548]

Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 0x3b on vdtw30.dll. [From XA600W2K8R2X64038][#245748]

The CPU consumption of Microsoft Office 2007 applications published using Microsoft App-V on servers running XenApp can increase to 100%. [From XA600W2K8R2X64039][#225459]

wfica32.exe might get initialized within a desktop session during disconnect or logoff of a pass-through session. This can cause the session to reconnect to itself and in the process lock out the user. This fix requires you to install both a server and a client-side hotfix that contains Fix #231831. If, after applying both hotfixes, you continue to observe the issue, create the following server-side registry key to resolve the issue: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ICA Client

Name: CheckWfShellForPassThru

Type: REG_DWORD

Data: 1 [From XA600W2K8R2X64040][#231831]

Winlogon.exe can exit unexpectedly when launching a published application. The issue occurs when the commandline, including parameters, exceeds 200 characters. This fix addresses the issue for commandline parameters that do not exceed 255 characters in length. For instructions on passing longer parameters, see eDocs topic LongCommandLine2. [From XA600W2K8R2X64040][#236631]

If you install XenApp 6 for Windows Server 2008 R2 without configuring it, the IMA Service fails to update CtxSta.config upon reboot if the XML port is set for "Sharing" with IIS. [From XA600W2K8R2X64040][#244230]

Restarting Branch Repeater while there are active server sessions can cause the XenApp server to experience a fatal exception, displaying a blue screen. [From XA600W2K8R2X64040][#244759]

Terminating a shadowed session from the Delivery Services Console using a key combination can cause users to lose keyboard and mouse control of their session. [From XA600W2K8R2X64040][#248234]

Attempts to connect to a server can fail. The issue occurs when attempting to connect to a server with multiple network adapters if an adapter that does not route clients is set to the lowest priority. [From XA600W2K8R2X64040][#250909]

Calls to the WFQuerySessionInformationW() function with the WTSApplicationName flag return an empty string, thus failing to acquire the Application Display name. [From XA600W2K8R2X64041][#253250]

In the Delivery Services Console, under XenApp > Contents or Farm Name > Information session counts include ICA listeners, RDP listeners, and console sessions of all servers. This behavior is different from earlier versions of the product. This fix restores the behavior familiar from earlier versions of the product. [From XA600W2K8R2X64042][#245761]

Selecting Options in any Microsoft Office 2010 published application causes the Options dialog box to remain the topmost window, covering parts of other local or session windows and applications. [From XA600W2K8R2X64043][#254951]

When a server running Access Fundamentals/XenApp 6 Fundamentals Edition is in a workgroup, the Citrix license cannot be retrieved and application launch fails, resulting in the following error message: "License Acquisition failed..." [From XA600W2K8R2X64044][#251987]

The previous implementation of Excelhook, which is used to create separate taskbar icons for each Microsoft Excel workbook, does not work for Excel 2010. This fix enables Excelhook for Excel 2010 if the following registry key is set: On 32-bit Windows : HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ExcelHook

Name: Enabled

Type: REG_DWORD

Data: 1

On 64-bit Windows: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\ExcelHook

Name: Enabled

Type: REG_DWORD

Data: 1 [From XA600W2K8R2X64045][#229062]

Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. The issue occurs when the user removes a thumb drive from a client device while connected to a session. [From XA600W2K8R2X64046][#251035]

Servers can experience a fatal exception, displaying a blue screen, on picadm.sys. Dumps indicate that picadm.sys is referencing invalid, possibly disconnected volumes. [From XA600W2K8R2X64046][#254084]

When the ReadOnlyMappedDrive registry key (HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\services\picadm\Parameters) is set to 1, published applications can no longer access and browse mapped client drives. [From XA600W2K8R2X64046][#256757]

With folder redirection enabled, servers can experience a fatal exception, displaying a blue screen, on picadm.sys. The issue can be observed when attempting to save a file that was introduced into the session on a USB device attached to and then removed from a thin client device. [From XA600W2K8R2X64046][#258343]

Servers with Hotfix XA600W2K8R2X64018 installed can become unresponsive intermittently. The issue occurs when a scheduled reboot is triggered by a Citrix policy while there are active sessions on the server. [From XA600W2K8R2X64046][#258490]

Unplugging a USB device from a thin client while a file is being copied to or from the USB device, can cause the following error message to appear: "An error has occurred. The destination you have specified does not exist. It might be an offline network location or an empty CD or DVD drive. Check the location and try again." After clicking Cancel in response to the error message, the session eventually becomes unresponsive. [From XA600W2K8R2X64046][#260100]

Environment variables in the published application path are not resolved when session sharing is enabled and a session is already running. [From XA600W2K8R2X64047][#254238]

Upon server restart with configuration logging enabled, the IMA Service can take an unspecified amount of time to start. [From XA600W2K8R2X64048][#221158]

Attempts to launch an application, from the Web Interface using Active Directory Federation Services (ADFS) can fail and the following error message appears: âAn error occurred while making the requested connection.â [From XA600W2K8R2X64048][#228190]

A WSXICA 9 error can occur, causing users to no longer be able to connect to any applications. The following error message appears: âThe description for Event ID 9 from source wsxica cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.â [From XA600W2K8R2X64048][#240438]

Provisioned XenApp servers refuse to accept connections if they are restarted while the license server is unavailable. The issue occurs because the license server cache file, MPS-WSXICA_MPS-WSXICA.ini, is saved in the %ProgramFiles(x86)%\Citrix\system32\cache folder, which might be unavailable when the server image shuts down. This fix allows you to save the license server cache file in a shared network location - a location separate from the XenApp server image - so that the file is available even when the server image shuts down. If you save the file in a location away from the server image, you must set the following registry key to point to the cache file location: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Install

Name: CacheLocation

Type: REG_SZ

Data: <network location of license server cache file> Note: You must restart the server after this registry edit in order for the license file to be cached. For more information, see Knowledge Center article CTX131202. [From XA600W2K8R2X64048][#242177]

The Wfshell.exe process fails Microsoft's Application Verifier Handles test after a server restart. [From XA600W2K8R2X64048][#246596]

When logged on to a XenApp 6 Fundamentals Edition Web Interface site as an anonymous user, the user can successfully launch applications without being prompted for credentials. [From XA600W2K8R2X64048][#250740]

The Remote Desktop Licensing Manager displays the client name as âUnknownâ for the Terminal Services Client Access Licenses (TSCALs) issued. [From XA600W2K8R2X64048][#251083]

The ICA Listener can utilize up to 100 percent of the CPU, causing servers to refuse connections. [From XA600W2K8R2X64048][#254787]

COM port redirection can fail with the following error message: "System error 66: The network resource type is not correct." [From XA600W2K8R2X64048][#256475]

This fix addresses the following issue: Users might get directed to servers scheduled for restart and with logons disabled

Servers scheduled for restart and with logons disabled are listed when running the qfarm /load command [From XA600W2K8R2X64048][#259617]

When launching an RDP session from within a XenApp 6 session, the Shift Key might intermittently fail. [From XA600W2K8R2X64048][#260161]

After changing a server's IP address, connection attempts can fail. [From XA600W2K8R2X64048][#LA0019]

Configuration logging fails for administrators whose SQL Server password starts with a capital letter S. [From XA600W2K8R2X64049][#207951]

The Belgian electronic identity (eID) card is not accessible to 32-bit applications in XenApp sessions. [From XA600W2K8R2X64050][#253674]

When using the WFQuerySessionInformationA() API to retrieve session information, the letters in published application names can appear separated by blank spaces. [From XA600W2K8R2X64051][#258019]

Servers might experience a fatal exception, displaying a blue screen, on CTXDVCS.SYS with stop code 0x44. [From XA600W2K8R2X64052][#249717]

After installing XenApp 6, right-clicking My Computer and selecting Manage fails to bring up the Computer Management console. [From XA600W2K8R2X64053][#245755]

The performance monitor I/O Other Bytes counter reports values of 200-500MB for the csrss.exe process when a user moves the mouse and clicks inside a published desktop. [From XA600W2K8R2X64054][#255854]

Launching Microsoft PowerPoint 2010 in a client session can cause the IMA Service to exit unexpectedly. [From XA600W2K8R2X64055][#240193]

This fix addresses the following issues for sessions launched as streamed to server or by a script: The application name can be missing from the session information of the Delivery Services Console

Session information might not appear under the Applications folder of the Delivery Services Console

folder of the Delivery Services Console Application limits might not get honored

Attempts to reconnect to disconnected sessions can fail [From XA600W2K8R2X64056][#237922]

Print jobs sent by client sessions can cause the Citrix Print Manager Service to terminate unexpectedly. [From XA600W2K8R2X64057][#257776]

The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time the server restarts, the correct policies are in place. [From XA600W2K8R2X64058][#228352]

In support of Fix #228352, this fix removes the Any button from the Citrix SSL Relay Configuration tool. From Fix #228352: The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time server restarts, the correct policies are in place. [From XA600W2K8R2X64058][#257126]

Setting the following registry key to prevent the smart card authentication option from appearing on the Windows logon screen does not work as designed. After applying this fix and setting the registry key, as designed, the smart card authentication option no longer appears on the logon screen: HKEY_LOCAL_MACHINE\SOFTWARE\System\CurrentControlSet\Control\Citrix

Name: NoScardDirectWinLogons

Type: REG_DWORD

Data: 1 (to disable PIN entry) or 0 (to enable PIN entry) [From XA600W2K8R2X64059][#259682]

This fix addresses two installation issues: Hotfixes fail to install on a XA6 server that has not yet had the XenApp Server Role configured.

Installing hotfixes or performing a repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component, if present, from the system. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes. [From XA600W2K8R2X64060][#260065]

A session can be terminated before the first application launches. The issue can occur when a one-minute time-out is exceeded, for example, when the profile share is located across a WAN link rather than on a local share. This fix introduces support for the following registry key that allows you to configure the time-out as follows: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI

Name: ApplicationLaunchWaitTimeoutMS

Type: REG_DWORD

Data: <desired additional time-out, in milliseconds> Note: Specifying a value of less than 10000 reverts to 10000 because 10 seconds is the minimum override. [From XA600W2K8R2X64061][#248815]

Servers might experience a fatal exception, displaying a blue screen, on ctxpn.sys. [From XA600W2K8R2X64061][#255380]

Servers might experience a fatal exception, displaying a blue screen, while shadowing is started. [From XA600W2K8R2X64062][#258948]

This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX129430. [From XA600W2K8R2X64063][#260479]

Servers running XenApp6 Fundamentals Edition might experience a fatal exception, displaying a blue screen, on CtxAltStr.sys. [From XA600W2K8R2X64064][#255018]

When installing XenApp 6 on servers running Windows Server 2008 R2 with SP1 installed, CtxAltStr.sys is accidentally installed at C:\Windows\SysWOW64\drivers. As a result, an CtxAltStr Service error occurs when the server starts. [From XA600W2K8R2X64064][#257409]

The ctxaltstr.sys file fails to get installed to the System32 directory. [From XA600W2K8R2X64064][#LA0429]

Servers might experience a fatal exception, displaying a blue screen, on picaser.sys. [From XA600W2K8R2X64065][#252534]

Attempts to sign a Microsoft Word document in a session authenticated using a BEID smart card can fail. [From XA600W2K8R2X64066][#260695]

On systems with Fix #249548 and #248473 installed, the Citrix Audio Service (CtxAudioSvc.dll) might exit unexpectedly. [From XA600W2K8R2X64067][#258889]

Child windows of some applications position to where their lower boundaries dip below the Windows Taskbar. This is the server-side component of the fix. To resolve the issue in its entirety, you must also install a client-side hotfix that contains Fix #206851. [From XA600W2K8R2X64068][#206851]

Dock bars of published applications might overlap and obscure the local Windows Taskbar. This is the server-side component of the fix. To resolve the issue in its entirety, you must also install a client-side hotfix that contains Fix #206851. [From XA600W2K8R2X64068][#210857]

When run in seamless mode and/or in multiple monitor configurations, certain applications experience screen flickering. [From XA600W2K8R2X64068][#254115]

Certain applications can perform slowly when run in seamless mode. [From XA600W2K8R2X64068][#257490]

The CPU consumption of the winlogon.exe process can be higher than usual and cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted. [From XA600W2K8R2X64068][#LA0032]

The Windows 2008 logon screen might launch full-screen with seamless applications for anonymous users. To enable this fix, you must create the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxHook\AppInit_Dlls\Multiple Monitor Hook

Name: LogOnUIWaitTime

Type: DWORD (32 bit)

Data: 0x2000 (Max value is 0x2000. If it is a greater number then, it will use 0x2000.) [From XA600W2K8R2X64069][#LA0085]

Server to client content redirection for URLs can fail due to an incorrect implementation of HTTP and HTTPS redirection. [From XA600W2K8R2X64070][#LA0025]

Clicking Favorites in an instance of Windows Internet Explorer running on a published desktop and then inserting or removing a USB storage device causes the Internet Explorer window to refresh unnecessarily. This fix introduces support for the following registry key that, when set, prevents the window refresh: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxPnP

Name: PnpRefreshClassExclusion

Type: REG_SZ

Data: IEFrame [From XA600W2K8R2X64071][#261548]

When using a WinCE terminal in a session running on XenApp 5 for Windows Server 2008, insertions and removals of smart cards fail to be detected. The issue occurs when the logon process takes a long time to load and notify the credential provider of the logon event. If a predetermined wait time for the logon process is exceeded, the smart card access event is failed. This fix allows you to extend the logon process wait time. To enable the fix, you must create the following registry key and assign a value in the range of 4 to 10 (Decimal). Preferably, start with value of 6. Adjust this value to a higher number if smart card detection fails.

HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard

Name: SSEEETimeout

Type: REG_DWORD

Data: <Range of 4-10> [From XA600W2K8R2X64072][#241788]

If a smart card is present in the card reader at the client device, the smart card PIN prompt can fail to appear. The issue occurs when a legal notice banner is configured and the user does not dismiss (accept) the notice within four seconds of its appearance. In such scenarios, the PIN prompt does not appear as the wait for the smart card event times out. This fix introduces support for the following registry key to extend the amount of time, in seconds, before a timeout on the smart card event occurs: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard

Name: SSEEETimeout

Type: REG_DWORD

Data: <Range of 4-120 (decimal)> With the above registry key set, the application launches properly if the user dismisses the interactive logon message within 40 seconds; otherwise the application exits after providing the smart card PIN. To prevent this and give users up to 120 seconds to respond to the PIN prompt, additionally set the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI

Name: LogoffCheckerStartupDelayInSeconds

Type: REG_DWORD

Data: <An integer for the length of time to wait for application start. - Enter the delay time in seconds, up to 10 minutes (600 seconds), but no less than the value configured for SSEEETimeout above.> [From XA600W2K8R2X64072][#LA0012]

Some applications within an ICA session can become unresponsive while attempting to access a smart card reader attached to the endpoint. [From XA600W2K8R2X64072][#LA0361]

The IMA Service fails to start when using multiple NIC teams and the RDP listener is assigned to only one NIC team. [From XA600W2K8R2X64073][#253346]

Custom administrators cannot execute certain PowerShell commands. [From XA600W2K8R2X64074][#LA0091]

Custom per-window exception flags/Seamless per application window registry flags as described in Knowledge Center article CTX101644 does not work on XenApp 6 for Windows Server 2008 R2. [From XA600W2K8R2X64075][#259761]

Custom administrators with All permissions cannot view the processes running in a session. The following error message appears: "Object not found." [From XA600W2K8R2X64076][#LA0101]

A rare race condition that occurs when a shadowee disconnects at roughly the same time a shadower connects can cause servers to experience a fatal exception, displaying a blue screen on RPM.dll. [From XA600W2K8R2X64077][#257789]

The shadow logging policies might not log events to the Event viewer properly. [From XA600W2K8R2X64077][#259216]

This fix addresses an issue where the IMA Service exits unexpectedly when a network adapter is not bound to an IP address. [From XA600W2K8R2X64077][#LA0040]

Servers might become unresponsive or experience a fatal exception on rpm.dll when an administrator initiates a shadowing session. [From XA600W2K8R2X64077][#LA0129]

Pass-through authentication fails in a pass-through client after applying XA600W2K8R2X64048. [From XA600W2K8R2X64077][#LA0337]

The "Host to client redirection" policy for URLs does not work properly. [From XA600W2K8R2X64078][#255911]

This enhancement allows printing within a session using ICA Proxy through Branch Repeater. [From XA600W2K8R2X64079][#LA0202]

With Windows Driver Verifier enabled for ctxdvcs.sys, servers might experience a fatal exception, displaying a blue screen, on ctxdvcs.sys with stop code 0xC9. [From XA600W2K8R2X64080][#LA0157]

Certain applications fail to update the time stamp on client files after successful write operations. [From XA600W2K8R2X64081][#248008]

Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. [From XA600W2K8R2X64081][#259963]

Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. [From XA600W2K8R2X64081][#LA0187]

Attempts by a process A to access a mapped COM port inside a session fail when a process B is already using that port. This enhancement displays an error message to alert users to the issue. [From XA600W2K8R2X64082][#LA0067]

Attempts by read-only administrators to count worker groups using citrix.xenapp.commands fail. [From XA600W2K8R2X64083][#262549]

Client to server content redirection does not work for .msg files and for mailto: links in some versions on Microsoft Outlook. To enable this fix, you must set the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI

Name: PublishedAppCommandLineFlag

Type: REG_DWORD

Data: 0x2 [From XA600W2K8R2X64085][#208999]

A published IME language bar is grayed out and does not respond to mouse input when restored from the notification area. [From XA600W2K8R2X64085][#LA0221]

Granting a custom administrator "Remote Control" permission on ICA Listeners - necessary for cross-shadowing - can result in the administratorâs ability to shadow users who are not explicitly specified in the administratorâs shadowing policy. [From XA600W2K8R2X64086][#LA0102]

Terminal Services can exit unexpectedly on RPM.dll. [From XA600W2K8R2X64086][#LA0135]

If users change their domain password while connecting to a server and enter a non-matching confirmation password, the session can become unresponsive and disappear after 2 minutes. [From XA600W2K8R2X64086][#LA0170]

Servers might experience a fatal exception, displaying a blue screen on ctxdvcs.sys with stop code 0x44, while shadowing is started. [From XA600W2K8R2X64087][#LA0049]

During times of heavy logon/logoff activity, sessions can become unresponsive while connecting. The "Starting <application name>" message appears but the connection attempt fails to complete. [From XA600W2K8R2X64089][#LA0432]

Visual Studio 2010 retains foreground focus when switching between it and other applications. After applying this fix, you must set the following registry keys: For 32-bit processes: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxHook\AppInit_Dlls\Multiple Monitor Hook

Name: DevEnv.exe

Type: REG_DWORD

Data: see below* For 64-bit processes: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\Multiple Monitor Hook

Name: DevEnv.exe

Type: REG_DWORD

Data: see below* * Data: Calculate the value as follows: If a value exists, add 0x00100000 to the existing value.

If a value does not exist, see Knowledge Center article CTX115637 for value information for your specific environment. Add 0x00100880 to that value. [From XA600W2K8R2X64090][#LA0306]

When executing Auditlog.exe with the "/time" option, the total time logged on displayed in the output log is incorrect. [From XA600W2K8R2X64091][#257693]

When using a custom Delivery Services Console as described in Knowledge Center article CTX126752, the following can be observed: Client-side seamless application windows can get corrupted when moved or resized after the shadowing stops.

Mouse operations can be erratic when shadowing is stopped and then resumed; specifically, the mouse pointer appears to be parked in the top left corner of the session window and immediately returns to that general area after attempting to move it. Note: To address this issue in its entirety, you must install both a server and a client hotfix that contains Fix #258866. [From XA600W2K8R2X64092][#258866]

Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll. [From XA600W2K8R2X64092][#LA0562]

After shadowing a session, the win32k.sys and vdtw30.dll files can leave the session unresponsive on the server; the session cannot be reset. [From XA600W2K8R2X64092][#LA0589]

Servers might experience a fatal exception, displaying a blue screen, on ctxpn.sys. [From XA600W2K8R2X64093][#LA0276]

This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX133159. [From XA600W2K8R2X64095][#LA0315]

Servers might experience a fatal exception, displaying a blue screen, on ctxdvcs.sys with stop code 0x44. [From XA600W2K8R2X64096][#LA0330]

After pressing Ctrl+M to invoke the menu bar of a published media player, the video window moves to the top left corner of the screen while its frame remains in the original location. [From XA600W2K8R2X64097][#257506]

In double-hop scenarios, some applications are not able to access the smart card certificate. To enable this fix, you must set the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\SmartCard

Name: EnableCtxCleanup

Type: REG_DWORD

Data: 1 [From XA600W2K8R2X64099][#LA0502]

Application launches can fail to be captured in the case of applications where the published executable exits within a few moments of the launch. Note: To address this issue in its entirety, you must install a hotfix that contains Fix #LA0066 before installing this fix. Fix #LA0066 is available as a EUEM hotfix (for Presentation Server and XenApp for Windows Server 2003) and as a XenApp hotfix (for Windows Server 2008). [From XA600W2K8R2X64100][#LA0572]

The auditlog command does not work with a two-digit year format (mm/dd/yy). [From XA600W2K8R2X64102][#256741]

EdgeSight reports on published application launch counts can show fewer launches than the actual numbers. This happens as a result of application launches triggered by other published applications such as scripts and commands. Such launches can intermittently fail to be captured. This fix resolves the issue in most scenarios. Additionally, consider installing a XenApp hotfix that contains Fix #LA0572. Fix #LA0572 addresses this issue specifically in scenarios with short-lived sessions (sessions shorter than 5 seconds). [From XA600W2K8R2X64104][#LA0066]