Friday, May 23, 2008

CTX: Install Symantec Antivirus on Citrix Servers

To install Symantec Antivirus (SAV) o Symantec Endpoint on Citrix Presentation Server 4.0 or Citrix XenApp v4.5, you need to install in Terminal Server installation mode.

I created this script:

change user /install

start /wait MSIEXEC /I "c:\update\sav\Symantec AntiVirus.msi" ADDLOCAL=SAVMain,SAVUI,SAVHelp,EMailTools,OutlookSnapin,QClient NETWORKTYPE=1 INSTALLSERVER=0 SERVERNAME=SAVSRV ENABLEAUTOPROTECT=1 REBOOT=ReallySuppress ALLUSERS=TRUE SYMPROTECTDISABLED=1 /Qn

change user /execute

Enable/Disable Tamper Protection: SYMPROTECTDISABLED

0=Enable / 1=Disable

Optional:

If you want to assign the server to a Client Group, run this extra step:

regedit -s Q:\update\sav\ClientGroup.reg
net stop "Symantec AntiVirus"
net start "Symantec AntiVirus"

---- ClientGroup.reg ----
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\INTEL\LANDesk\VirusProtect6\CurrentVersion]"ClientGroup"="CTX Servers"
---- ClientGroup.reg ----

Reference
Symantec AntiVirus Corporate Edition and Terminal Server support

Friday, May 16, 2008

MS: Use NETSH to import or export the Network Configuration

To backup (or dump) the configuration of the network connection:

netsh -c interface dump > c:\network.txt

To restore the configuration:

netsh -f c:\network.txt

Wednesday, May 14, 2008

CTX: Citrix Optimizations

Turn on Slow-Start Load Balancing
HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA\LMS UseILB = REG_DWORD: 1 Reference Citrix Article CTX108645

Using custom, Office and system ADM templates, implement the following user optimizations via GPO:
* Disable Active Desktop
* Reduce cursor blink rate to 1.5 seconds (1500)
* Reduce MenuShowDelay to 100 ms
* Set sound scheme to “No Sounds”
* Disable Word background grammar and spell checking
* Disable Office Assistant and Office Assistant Animation/Sounds
*Always Show Full Menu Items and Disable the Show menu delay

Network performance and system usage HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer NoRemoteRecursiveEvents = REG_DWORD: 1
Reference Microsoft Article 885189

Memory Optimization HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management LargeSystemCache = REG_DWORD: 1

This setting allocates additional memory to the File System Cache. Starting with Windows Server 2003, Microsoft moved the registry from Paged Pool RAM and into the File System Cache. Running out of File System Cache will prevent users’ ntuser.dat files (profiles) from loading. Setting this registry key to 1 is the same clicking the System Cache button shown in the following screen shot:

Additionally, Citrix recommends settings the Visual Effects tab to adjust for best performance as shown below: The following registry settings are optimizations that Citrix recommends be applied to Terminal Servers in order to optimize performance and allow a maximum number of users to be supported.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Configuration Manager]
"RegistryLazyFlushInterval"=dword:0000003c

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parameters]
"MaxWorkItems"=dword:00002EE0
"MaxMpxCt"=dword:00000800
"MaxRawWorkItems"=dword:00000200
"MaxFreeConnections"=dword:00000064
"MinFreeConnections"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanworkstation\Parameters]
"MaxCmds"=dword:00000800

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters]
"MultiUserEnabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"DisablePagingExecutive"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows]
"ErrorMode"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]
"NtfsDisableLastAccessUpdate"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers]
"NetPopup"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Providers]
"Eventlog"=dword:00000001

Friday, May 09, 2008

CTX: Memory Dump Analysis

SystemDump 3.1 for 32-bit and 64-bit platforms
http://support.citrix.com/article/CTX111072

The SystemDump utility can force a server to generate a memory dump from the session or when a keyboard is not available or non-standard. Command line options allow you to generate a dump from command files and/or remotely when a console session is not available (for example, IBM blade servers). Whether a complete memory or kernel memory dump is saved depends on the Control Panel settings in place.

Troubleshooting Stop Errors, Server Hangs, and Server Restarts http://support.citrix.com/article/CTX101595

This article is meant to help you investigate stop errors and system restarts.

Complete memory dumps are not available on computers that have 2 or more gigabytes of RAM
http://support.microsoft.com/default.aspx?scid=kb;en-us;274598

Gathering Blue Screen Information After Memory Dump in Windows 2000 or Windows NT http://support.microsoft.com/kb/q192463/

This article describes how to gather more information about a blue-screen error message. Note that these steps may not always provide conclusive answers and may only be a symptom of another problem.

Case Study: Intermittent Client Printer Creation and Deletion Failures
http://support.citrix.com/article/CTX112580

Memory dump analysis for printer drivers problems