Monday, November 9, 2015

Unable to Copy Paste from a Published desktop to a third party citrix published application


Entire users in a farm was having issue, where they were unable to copy paste between published desktop and the citrix published application.

1. Logged on to all servers in the published desktop and also to citrix server (where the third party citrix  application IE Link ) is published.

2. Removed all session data from the servers ( by going in to registry editor and navigated to the following path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\SessionData) and deleted all session data

3. Deleted temp profile cache by logging into Advanced system properties > Advanced Tab > User Profiles > Settings and deleted all profiles.

4. On the citrix servers > Click on Administrative tools > citrix > Administrative tools > ICA Listener Configuration

5. Under ICA-TCP, click on Edit, see whether you can make changes to session limits, environment, network adapter tabs (even though it is no way related to the issue) i was exploring all the options.

6. On the citrix server, click on Run Prompt and type - tsconfig.msc - under remote desktop session host configuration, for ICA-TCP properties - under client settings - see if clipboard is checked on the disable the following. If it is checked, please un check and try. if it is not checked, move on to next troubleshooting step.

7. Log on to citrix farm app center and click on policies. In this current scenario, some policies are already applied to the farm. I need to identify whether it is applying or not.

8. click on the priority 1 policy and clicked edit. Under Settings, selected Active Settings, Client Clipboard redirection was allowed.

9. clicked on filters tab and selected active filters, under user or group, i edited and added the required ad group who are accessing the third party published application.

10. Under Worker group, click on edit and added the all-servers worker groups (were both published desktop servers and the third party citrix servers are present).

11. Clicked OK. Now the policy is applied to the required AD group and the required worker group servers.

Now i need to make sure that the policy is applied to citrix servers or not?

12. Login to citrix servers and open registry editor, go to the following location

     32 bit Citrix Server: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix
     64 bit Citrix Server: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies

13. You will see the list of policies applied to that particular citrix server. But what i noticed was, if you delete the old policy keys under 32 bit location, it will automatically delete in 64 bit key location.

14. I have deleted all the rest of the keys ( which are older) under registry location:         HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix

15. If you click on each key, under Events, you will be the LastUpdate key with time stamp on it.
That's how you find out whether the latest citrix GPO is applied to the citrix server or not. Also under Evidence, you will see the ServerGroup (To which workergroup, this policy is applied to)

Key Locations:

Events: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Citrix\2\Events
Evidence: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Citrix\2\Evidence

16. Also on the current key, if you expand User folder under HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Policies\Citrix\2\User
and under VCPolicies, you will see AllowClipboardRedir REG_DWORD as 1. That's how I identified that allow clip board redirection which I have applied through citrix policies is actually applying or not

17. Rebooted all citrix servers.

18. Make sure GP Client services is started on all citrix servers or not, if it is not running. Try to reboot the server once again.

Checked with End users. Now they were able to copy paste between published desktops and published third party citrix applications.

Thank you
Kesavapani Patnala







Unable to log on to published desktop

Users are getting the following error when they are trying to log on to published desktop.

"Windows Could not connect to the group policy client service."



Logged on to each citrix server ( total 8 ) and checked the group policy services is started or not. Found that gp client services is not started on one server
prohibited logons on that one server through citrix app center. 
rebooted the server
enabled logons on that one server again through citirx app center
logged into the server and checked the services and gp client services was started successfully. 

Issue resolved, users were able to log in with out any issues.


On the other hand, i also checked the following troubleshooting.

There are two places to look in the registry:

  1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration.  I found that the key wasintact, so, you do not touch anything here.
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1.  Below are descriptions what must be present there.
  • There must be Multi-String value called GPSvcGroup. My laptop was missing it.  So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
  • Next, you must create a key (a folder) and name it GPSvcGroup
  • Then open newly-created GPSvcGroup folder and create 2 DWORD values:
  1. First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
  2. Second is called CoInitializeSecurityParam and it must have value of 1.
Once you completed all steps above, reboot the computer and the problem will be fixed.

Thank you 
Kesavapani Patnala