• Install Data Protector 7 On Linux

We've been using HP Data Protector to backup a number of Solaris, HP-UX and Windows servers and we have recently been introduced to Red Hat Linux 7.0 Enterprise servers. We are having a time getting the backup software to connect to these linux systems.

PSE450W2K3R07.msp

Software Solution Disclaimer

This package contains a software solution that has been replaced by a more recent version available for download from the Citrix support website (support.citrix.com). It is provided merely for your convenience. Citrix recommends applying the most up-to-date version of the software, which addresses the fix or enhancement being targeted. Later versions of the release may include multiple changes that address different areas including security vulnerabilities, code fixes, and enhancements. Installation of this software should only be performed on test or developmental environments. This software is not supported and is provided 'AS IS.' You are solely responsible for your selection and use of the software. Any reported issues will require the most current revision of the software (http://www.citrix.com/English/SS/supportThird.asp?slID=5107&tlID=1861652). Please visit our security site for additional security notices and information (support.citrix.com/securitybulletins ).

CITRIX MAKES NO REPRESENTATIONS OR WARRANTIES OF NONINFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE WITH RESPECT TO THE PROVIDED SOFTWARE SOLUTION. THE SOFTWARE SOLUTIONS ARE DELIVERED ON AN 'AS IS' BASIS WITH NO SUPPORT. YOU SHALL HAVE THE SOLE RESPONSIBILITY FOR ADEQUATE PROTECTION AND BACK-UP OF ANY DATA USED IN CONNECTION WITH THE SOFTWARE SOLUTION. IN NO EVENT SHALL CITRIX BE LIABLE FOR (i) SPECIAL, INDIRECT, DIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES, OR (ii) ANY OTHER CLAIM, DEMAND OR DAMAGES WHATSOEVER RESULTING FROM OR ARISING OUT OF OR IN CONNECTION WITH THE SOFTWARE SOLUTION, WHETHER AN ACTION IN CONTRACT OR TORT, INCLUDING NEGLIGENCE, OR OTHERWISE.

Applicable Products

• XenApp Fundamentals 2.0
• XenApp 5.0 for Windows Server 2003

Hotfix readme name: PSE450W2K3R07.HTML
Hotfix package name: PSE450W2K3R07.MSP
For: Computers running Windows Server 2003 (32-bit) with one of the following installed:

• XenApp 5 Feature Pack 2
• XenApp 5
• Presentation Server 4.5 Feature Pack 1
• Presentation Server 4.5
• XenApp Fundamentals 2.0

Replaces:
PSE450W2K3R01, PSE450W2K3R02, PSE450W2K3R03, PSE450W2K3R04, PSE450W2K3R05, PSE450W2K3R06, PSE450R04W2K3044, PSE450R04W2K3045, PSE450R04W2K3046, PSE450R05W2K3039, PSE450R05W2K3041, PSE450R05W2K3042, PSE450R05W2K3043, PSE450R05W2K3045, PSE450R05W2K3046, PSE450R05W2K3047, PSE450R05W2K3048, PSE450R05W2K3049, PSE450R05W2K3050, PSE450R05W2K3054, PSE450R05W2K3056, PSE450R05W2K3057, PSE450R05W2K3059, PSE450R06W2K3001, PSE450R06W2K3004, PSE450R06W2K3005, PSE450R06W2K3006, PSE450R06W2K3008, PSE450R06W2K3009, PSE450R06W2K3010, PSE450R06W2K3011, PSE450R06W2K3013, PSE450R06W2K3014, PSE450R06W2K3015, PSE450R06W2K3016, PSE450R06W2K3017, PSE450R06W2K3018, PSE450R06W2K3019, PSE450R06W2K3020, PSE450R06W2K3021, PSE450R06W2K3022, PSE450R06W2K3023, PSE450R06W2K3024, PSE450R06W2K3025, PSE450R06W2K3026, PSE450R06W2K3028, PSE450R06W2K3030, PSE450R06W2K3031, PSE450R06W2K3033, PSE450R06W2K3035, PSE450R06W2K3036, PSE450R06W2K3037, PSE450R06W2K3038, PSE450R06W2K3039, PSE450R06W2K3041, PSE450R06W2K3042, PSE450R06W2K3043, PSE450R06W2K3044, PSE450R06W2K3045, PSE450R06W2K3046, PSE450R06W2K3047, PSE450R06W2K3048, PSE450R06W2K3050, PSE450R06W2K3051, PSE450R06W2K3053, PSE450R06W2K3054, PSE450R06W2K3055, PSE450R06W2K3056, PSE450R06W2K3058, PSE450R06W2K3060, PSE450R06W2K3061, PSE450R06W2K3062, PSE450R06W2K3063, PSE450R06W2K3064, PSE450R06W2K3065, PSE450R06W2K3066, PSE450R06W2K3067, PSE450R06W2K3071
Date: June, 2011
Language supported: English (US)
Readme version: 1.15

Readme Revision History

This hotfix rollup pack replaces all earlier hotfix rollup packs. You can install it on the base product as well as on top of any earlier hotfix rollup pack released for this version of XenApp.

This hotfix rollup pack also replaces most individual hotfixes released for this version of XenApp and introduces a number of new fixes and enhancements that have not been released previously.

This readme file documents the fixes and enhancements that are new in Hotfix Rollup Pack 7. Documentation for fixes from earlier hotfix rollup packs is available from the links below:

Where to Find Documentation

This document describes the issue(s) solved by this hotfix rollup pack and includes installation instructions. The full XenApp and other product documentation is available from Citrix eDocs, the Citrix Product Documentation Library.

Additional documentation of interest:

• For version information about specific prerequisites, see Knowledge Center article CTX125090.

• Before installing this hotfix rollup pack on servers licensed for Standard Edition, you must migrate those servers to Advanced Edition. Standard Edition was discontinued on Citrix Presentation Server 4.5; installing this hotfix rollup pack on servers licensed for Standard Edition might cause the following error message to appear:

  Citrix Presentation Server is unable to retrieve the product edition. Check to see if the Citrix Independent Management Architecture service is running without errors. Citrix Presentation Server cannot request licenses until it can obtain the product edition - no client devices can connect. If necessary, set the product edition in the Delivery Services Console. The product must be set to the same edition as your licenses.

  To migrate your servers to Advanced Edition, you must obtain an Advanced Edition license and then change the server edition in the Delivery Services Console from Standard to Advanced. For information about obtaining an Advanced Edition license, visit your My Citrix account or contact your reseller.

• Before installing this hotfix rollup pack, you must uninstall the following hotfixes, if present on the system, from Add/Remove Programs:

  • PSE450R04W2K3006
  • PSE450R04W2K3044

• When the installation of this hotfix rollup pack is complete, contrary to Hotfix Rollup Pack 5, the dscheck /full FTA /reindex command does not run automatically. This change in behavior was implemented in order to prevent long indexing times observed in earlier hotfix rollup packs. However, to take advantage of the Delivery Services Console Discovery optimizations provided by Fix #205118*, you must run the command manually on a least one server in the farm. Before doing so, Citrix recommends that you back up your data store. [#224599]

  *From Fix #205118: The more file type associations are present in the data store, the longer MFCOM queries on applications can take. This is because the search for file type associations for applications can take a long time because no filters are used for the search, resulting in a delay in any queries that involve applications. This fix introduces a filter based on the application unique identifiers (UIDs). Because file type associations are indexed on application UIDs, the search should return faster.

• Installing this hotfix rollup pack partially invalidates the following hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require as follows:

  Invalidated Fix	Invalidated Hotfix	Replacement Hotfix
  #170359	PSE450R03W2K3025	TBD
  #223843, #232192, #252363	PSE450R06W2K3027	TBD
  #224158	PSE450R05W2K3022	TBD
  #228274	PSE450R06W2K3002, PSE450R05W2K3036	PSE450R07W2K3004
  #235788	PSE450R06W2K3027, PSE450R05W2K3051	TBD
  #236378	PSE450R06W2K3027, PSE450R05W2K3051	PSE450R07W2K3035
  #239087	PSE450R06W2K3080	PSE450R07W2K3068, PSE450R07W2K3066
  #242465	PSE450R06W2K3072	PSE450R07W2K3005
  #253674	PSE450R06W2K3080, PSE450R06W2K3057	PSE450R07W2K3068, PSE450R07W2K3066, PSE450R07W2K3046
  #258895	PSE450R06W2K3072, PSE450R06W2K3070	PSE450R07W2K3005
  #259055	PSE450R06W2K3077	PSE450R07W2K3062, PSE450R07W2K3053, PSE450R07W2K3047
  #259317	PSE450R06W2K3079	TBD
  #LA0308	PSE450R06W2K3076	PSE450R07W2K3027
  #LA0369	PSE450R06W2K3074	PSE450R07W2K3037, PSE450R07W2K3013
  #LA1741	PSE450R06W2K3078	PSE450R07W2K3064

• Caution: Do not install this hotfix rollup pack on 64-bit operating systems. Although Citrix uses the same code base in the development of both the 32-bit and 64-bit versions of the software, the binaries and files differ. Installing this hotfix rollup pack on 64-bit operating systems is not supported and can yield unpredictable results.

• Installing this hotfix rollup pack over RDP or in an ICA session is not supported but you can install it through a remote desktop console session.

• The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the SSL Relay Configuration tool, verify the policies in itsConnection tab and click Apply. The next time the server restarts, the correct policies are in place.

  Important: If you utilize the SSLAutoConfig tool to configure SSL and plan to continue using the tool after installing this hotfix rollup pack, you must download and use the most recent version of the tool, available as Knowledge Center article CTX127580. [#228352]

• On systems where both XenApp Advanced Configuration (CMC.msi) and XenApp Server (mps.msi) are installed and CMC.msi was installed stand-alone (as opposed to as a feature of XenApp), for example when installing from the Feature Pack 2 DVD, using CPatch.exe to deploy a hotfix rollup pack causes the hotfix rollup pack to patch only CMC.msi, not mps.msi. After installing this hotfix rollup pack, affected servers show Presentation Server at a version other than 4.5.7 in Add/Remove Programs. If this occurs, as a workaround, install this hotfix rollup pack a second time on affected servers. To prevent the issue from occurring, download and install HotfixPSE450R05W2K3035 before installing this Hotfix Rollup Pack. [#224822]

• After installing Hotfix Rollup Pack 7, the Independent Management Architecture (IMA) Service might not start. This happens if you install Presentation Server Enterprise Edition and then downgrade to the Advanced Edition. See Knowledge Center article CTX113836 for more information.

• If you use the Presentation Server 4.5 Feature Pack 1 Platinum Edition media to install Presentation Server 4.5 and change the server edition to Enterprise afterward, the server edition reverts to Platinum when you install Hotfix Rollup Pack 7. See CTX117362 for more information.

• Unattended installation of this hotfix rollup pack from a batch file using the /qb switch fails to complete. Instead, the installer stalls at a dialog box prompting to close CMD.exe. As a workaround, use the /qb- or the /qn switch. [#186447]

• If configuration logging is enabled (HKEY_LOCAL_MACHINESoftwareCitrixIMARUNTIMEPSRequired = 1) at the time you install this hotfix rollup pack, the Citrix SMA Service might fail to start with System event ID 7001, 'The Citrix SMA Service depends on the Citrix Independent Management Architecture Service which failed to start because of the following error: After starting, the service hung in a start-pending state.' The issue occurs only the first time the server restarts following installation, not on subsequent restarts. As a workaround, start the service manually. [#219157]

• When you install this hotfix rollup pack on a system where Citrix Presentation Server was installed silently using msiexec.exe, you are prompted for the Presentation Server 4.5 source media. This occurs because the Citrix Streaming Client (Offline plug-in) is not installed by default with the silent installation. See Knowledge Center article CTX114136 for more information. [#216553]

• On systems where the Presentation Server Console was installed as a feature of Presentation Server or XenApp, the entry for the console in Add/Remove Programs is not updated to XenApp Advanced Configuration, the new name of the console; the previous name – Management Console for Presentation Server 4.5 - continues to be displayed instead. On systems where the Presentation Console was not installed as a feature of Presentation Server or XenApp, the entry for the console in Add/Remove Programs is updated to XenApp Advanced Configuration.

• Using this hotfix rollup pack on computers running Microsoft Windows Vista to upgrade the Presentation Server Console to XenApp Advanced Configuration is supported on the 32-bit version of Windows Vista, but not on the 64-bit version. [#214086]

• To upgrade to the latest pass-through clients from Presentation Server 4.0, upgrade in the following order [#156201]:

  1. Presentation Server 4.0 mps.msi
  2. Presentation Server 4.5 mps.msi
  3. Hotfix Rollup Pack PSE450W2K3R07
  4. Online plug-in 12.1
     Note: Upgrades to Version 12.1 are supported only from 10.200, 11.0, and 11.1.1 plug-in releases.

• The Suite Monitoring and Alerting (SMA) Service used by the Delivery Services Console might not start after installing this hotfix rollup pack and restarting the system. To fix this problem, you must upgrade the .NET Framework version on the system to .NET 2.0 SP1 or later.

• Uninstalling Version 5.2 of the Streaming Client (Offline plug-in) from a system where Hotfix Rollup Pack 7 is installed might lead to system instabilities. The issue occurs because uninstalling the client removes the AIEcom.exe common component file. As a workaround, after uninstalling the client, run Repair on the Presentation Server Version 4.5 base installation. Running Repair restores the AIEcom.exe file. [#193688]

• If the Delivery Services Console is open while uninstalling this hotfix rollup pack, Discovery does not run successfully after restarting the server. For more information, including a workaround, see Knowledge Center articleCTX122690. [#217993]

• When uninstalling this hotfix rollup pack from a server with the Delivery Services Console or the Citrix Streaming Client (Offline plug-in) and/or Profiler installed, you are prompted for the Presentation Server 4.5 source media. After locating the media and proceeding with the uninstallation, the server will contain a few files that are not at the correct version levels. To restore the correct versions of these files, run the Delivery Services Console, Citrix Streaming Client and/or Profiler .msi packages and select the Repair option.

• Uninstalling this hotfix rollup pack from a server where Citrix Access Essentials/XenApp Fundamentals was installed from the Version 2.0 retail CD can cause some hotfixes installed with Citrix Access Essentials/XenApp Fundamentals to disappear from Add/Remove Programs. [#212512]

• If you uninstall this hotfix rollup pack using the cpatch command but do not restart the server as prompted, the following error message appears: 'ErrorID = 1647. The patch package is not removable.' This error in no way affects the removal of the rollup pack, and the rollup pack is successfully removed nonetheless.

• Hotfix Rollup Pack 7 introduces new criteria for listing installed hotfixes in the Add/Remove Programs control panel. After installing this rollup pack, you will notice the following difference in Add/Remove Programs:

  • Previous behavior: Most hotfixes replaced by the rollup pack are removed from the list. Hotfixes invalidated by the rollup pack continue to be listed.
  • New behavior: Most hotfixes replaced by the rollup pack are removed from the list. Most hotfixes invalidated in full or in part by the rollup pack are no longer listed because they are removed from the system.

  Background: A hotfix is replaced by a hotfix rollup pack when the rollup pack includes all fixes contained in the hotfix. A hotfix is invalidated by a rollup pack when the rollup pack includes some but not all fixes contained in the hotfix. A hotfix can also be invalidated if it and the rollup pack share common binaries – even if the rollup pack does not include any of the fixes contained in the hotfix. Fixes contained in an invalidated hotfix but not included in the rollup pack are removed from the system when you install the rollup pack. If you continue to require hotfixes invalidated by the rollup pack, obtain or request the corresponding replacement hotfixes from your support representative.

• Caution: Several items in this hotfix rollup pack require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that might require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

• Citrix has changed the name of its product line and several features. Citrix XenApp is the new name for the Citrix Presentation Server product line, and XenApp Advanced Configuration is the new name of the Presentation Server Console. The Presentation Server name remains on all existing product, documentation, user interface, and support materials for Version 4.5 and earlier of the product. For additional information about new product names, see Citrix eDocs, the Citrix Product Documentation Library, and search for 'New Product and Feature Names.'

• After installing this hotfix rollup pack, earlier versions of the Delivery Services Console do not refresh properly when you move large numbers of applications from one folder to another. To prevent this issue, Citrix recommends that you upgrade to Version 5.0.2 of the console, which ships with Feature Pack 2. [#216569].

• After installing this hotfix rollup pack, Presentation Server 4.5 licensing will be enforced for the Application Streaming feature available in the Enterprise and Platinum editions. As a result, this feature will start to consume Presentation Server licenses and any individual Streaming (CSS) licenses received and activated in the past will no longer be utilized.

• After installing this hotfix rollup pack, settings for the Presentation Server Console/XenApp Advanced Configuration are no longer read from the %USERPROFILE% folder but from the %APPLICATION DATA% folder. Therefore, if you are upgrading a server to this hotfix rollup pack from a server that is at Hotfix Rollup Pack 3 level or earlier and want to retain the existing console settings, you must move the Citrix/Management Console folder from %USERPROFILE% to %APPLICATION DATA%. [#194127]

• After installing this hotfix rollup pack, applications for which parameter passing is enabled might fail to launch. This is a result of the implementation of Fix #182305, which enforces tighter command line validation by default. Among potentially affected applications is the Citrix Conferencing Manager, any application that attempts to open a file over a UNC path [#186923], and Microsoft Office applications on WISP (Web Interface for SharePoint). As a workaround, you may choose to disable the fix:

  For Citrix Conferencing Manager:

  1. Go to the server properties of Citrix Conference Room.
  2. Select the published application and click Edit.
  3. In the Custom Application Location dialog box, select 'Specify custom command line and working directory.'
  4. Append %** to the command line (for example, 'C:Program FilesCitrixCMCMCRoom.exe' %**).
  5. Specify a working directory.
  6. Apply the changes.

  For individual applications:

  1. Go to the Location property of the published application, for example, Microsoft Word.
  2. Append %** to the command line (for example, 'C:Program FilesMicrosoft OfficeOffice12winword.exe' %**).
  3. Specify a working directory.
  4. Apply the changes.

  Alternatively, it is possible to disable the fix at the server level by setting the following registry key:

  HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlCitrixwfshellTWI
  Name: PublishedAppCommandLineFlag
  Type: DWORD
  Data: 0

• For information about Command Line Parameter Validation for XenApp, see Knowledge Center articles CTX117316 and CTX115245.

• After installing this hotfix rollup pack, Internet Explorer might experience difficulties handling Web pages with Adobe Flash rich content. For more information, see Knowledge Center article CTX121023. [#215256]

• After installing this hotfix rollup pack, two instances of XenApp Advanced Configuration might appear on the ICA toolbar. [#217312]

• Fix #230816 modifies the current default behavior as follows:

  After installing this hotfix rollup pack, all client drives are mapped and connected upon logon automatically and by default. This includes floppy disk, CD-ROM, local, and remote drives. If you need to disable automatic mapping and connection of drives upon logon, utilize the Mappings and/or Connection policies (HDX Plug-n-Play > Client Resources > Drives). For more information, see Knowledge Center article CTX123992.

• In support of some of the features included in Feature Pack 2, this hotfix rollup pack upgrades, just as Hotfix Rollup Pack 5 did, the internal product version from 4.5 to 4.6. As a result, using MFCOM to extract the version number of Hotfix Rollup Pack 5, for example with Server.WinServerObject5.MPSVersion, returns Version 4.6 instead of 4.5. Modify your MFCOM scripts or tools accordingly.

• When adding the ValidSites registry key to redirect specific URLs from server to client, specify the URLs without http://. For example, add www.citrix.com, not http://www.citrix.com. [#161177]

• Certain users cannot access the Event Log. This might cause some expected event messages to be missing. For more information, see Knowledge Center article CTX118466. [#197462]

• If you publish or modify an application on a server where this hotfix rollup pack was installed on top of XenApp 5/Presentation Server 4.5 base installation (without other hotfix rollup packs), the application throws an exception if you try to modify it after uninstalling this hotfix rollup pack. [#166266]

This hotfix rollup pack introduces the following fixes that have not been previously released:

Console

1. Moving servers from one Delivery Services Console folder to another can cause those servers to no longer be visible in the console even though they continue to accept connections and are seen when running Qfarm.

   To enable this fix, you must:

   1. Run DSCHECK /full folders /clean.
   2. Restart the server.
   3. For each missing server, run DSCHECK /full groups /AddMember <GroupUID> <ServerUID>.
   4. Restart the server.

   [From PSE450W2K3R07][#253940]

Data Store

1. When using MFCOM, duplicate instances of published applications with identical browser names can be created. This fix updates the DSCHECK utility so that you can detect and delete such duplicate publication instances. If you are affected by this issue, install this fix and then:

   1. Run DSCHECK /full apps /DeleteDuplicateApp (to list duplicate application instances)
   2. Run DSCHECK /full apps /DeleteDuplicateApp /Clean (to remove duplicate application instances)

   [From PSE450W2K3R07][#250411]

IMA Service

1. The IMA Service can take upwards of one hour to start on servers that have to traverse a WAN to communicate with the data store. The issue occurs because the IMA Service checks the data store for Microsoft License Information for non-Windows clients. With this fix, the check is performed more efficiently.

   [From PSE450W2K3R07][#225670]

2. The IMA Service might exit unexpectedly with error code 0x80000003.

   [From PSE450W2K3R07][#232191]

Installation Manager

1. It is possible to edit configured Installation Manager jobs to be scheduled to occur in the 'past.' The issue occurs when editing a job scheduled to occur on a future date but at an earlier time of day than present. In such cases, the job starts deploying immediately.

   [From PSE450W2K3R07][#253345]

Load Balancing

1. Load evaluators do not properly scale to threshold values when using Memory Utilization as the only rule. To enable this fix, you must set the following registry key and then restart the IMA Service:

   HKEY_LOCAL_MACHINESOFTWARECitrixIMARUNTIME
   Name: EnableNewMemUseLoadCalc
   Type: REG_DWORD
   Data: 1

   [From PSE450W2K3R07][#232738]

2. Load balancing, when configured based on servers and applications, might not work correctly at times. This results in new connections going to the same server rather than to the least loaded server.

   [From PSE450W2K3R07][#232105]

Printing

1. Print jobs are automatically deleted from the printer queues of autocreated network printers when an administrator logs off from a client session.

   [From PSE450W2K3R07][#233506]

2. The Print Spooler Service can experience an exception on cpproc.dll, printer autocreation to fail intermittently.

   [From PSE450W2K3R07][#232501]

3. With SmoothRoaming enabled, users must relaunch sessions to reenumerate and update session printers after roaming to a different location. This feature enhancement introduces dynamic printer discovery to automatically reenumerate and update session printers after roaming to a different location so that relaunching of sessions is no longer necessary. To enable this enhancement, you must also deploy a client hotfix that includes Fix #226929.

   [From PSE450W2K3R07][#226929]

4. Local printer properties might not be properly applied to session printers.

   [From PSE450W2K3R07][#223899]

5. With a Citrix policy in place not to autocreate printers but use only the Citrix Universal Printer, the universal printer is not available when you connect to a session from a second client device.

   [From PSE450W2K3R07][#254142]

Resource Manager

1. Resource Manager can fail to collect process information. To enable this fix, you must create the following registry key:

   HKEY_LOCAL_MACHINESOFTWARECitrixCitrix Resource Manager
   Name: TimeOutValueInMilliSec
   Type: REG_DWORD
   Data: 1800000 or greater

   [From PSE450W2K3R07][#220407]

Security Issues

1. The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in itsConnection tab and click Apply. The next time server restarts, the correct policies are in place.

   [From PSE450W2K3R07][#228352]

2. This fix addresses a security vulnerability related to Citrix Secure Gateway. For more information, see Knowledge Center article CTX128168.

   [From PSE450W2K3R07][#252520]

3. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX129430.

   [From PSE450W2K3R07][#260479]

Server/Farm Administration

1. This feature enhancement adds support for Configuration Logging on 64-bit servers that are configured to use only FIPS-approved cryptography.

   [From PSE450W2K3R07][#229036]

2. This update to the DSCHECK utility allows for the deletion of Installation Manager packages with missing package inventory records.

   [From PSE450W2K3R07][#232015]

3. Configuration Logging reports can return incorrect server/zone affiliations. The issue occurs when the name of one zone (zone_one) is a subset of the name of another zone (zone_one_two).

   [From PSE450W2K3R07][#255947]

4. This enhancement adds server reboot schedules to the Configuration Logging feature.

   [From PSE450W2K3R07][#240378]

5. When using MFCOM to create and assign Citrix policies through Windows PowerShell, an error occurs if you try to assign the policy to a string containing a wildcard(*). This happens only for the first string in the assignment; subsequent strings can contain wildcards and work correctly.

   [From PSE450W2K3R07][#258365]

6. When modifying the election preference of a server, the Configuration Logging database incorrectly reports: 'Server removed from zone.'

   [From PSE450W2K3R07][#255926]

7. The Citrix End User Experience Monitoring (SemsService.exe) fails to capture the following server startup metrics:

   • Profile Load (PLSD)
   • Login Script Execution (LSESD)

   [From PSE450W2K3R07][#257507]

8. Modifications to a server's reboot schedule made by clicking Apply to Other Servers on a server's Reboot Schedule property sheet fail to get written to the Configuration Logging database.

   [From PSE450W2K3R07][#257634]

9. With memory optimization enabled at the farm level, updates to the Memory Optimization Exclusion List are not appropriately propagated to the registry of member servers.

   [From PSE450W2K3R07][#257379]

Session/Connection

1. Attempts to terminate certain application from the Connection Center fail.

   [From PSE450W2K3R07][#232330]

2. On servers with Fix #231830 installed, logon attempts made using the Receiver for Android fail at the stage where the 'Running Logon Scripts' message is displayed.

   [From PSE450W2K3R07][#260424]

3. In certain configurations, attempts to synchronize Windows Mobile devices in a session can fail.

   [From PSE450W2K3R07][#261794]

Shadowing

1. In scenarios where the XenApp Acceleration feature of Branch Repeater 5.5 is enabled (default) to compress and accelerate ICA traffic over WANs, shadowing a published desktop session across the WAN can cause the client session to disconnect unexpectedly.

   [From PSE450W2K3R07][#236597]

Smart Cards

1. Attempts to reconnect to a disconnected session fail if made from a device that uses a smart card reader of a different type or make than the previous device.

   [From PSE450W2K3R07][#253473]

2. When using smart cards along with Kerberos authentication, users can be locked out unexpectedly before presenting a password or PIN. The issue occurs because XenApp attempts an early logon validation before credentials are submitted. This results in a failed logon attempt, potentially putting the user past the lockout threshold.

   [From PSE450W2K3R07][#255494]

3. In certain scenarios, attempts to reconnect to a disconnected session using a smart card can fail because the smart card prompt does not appear.

   [From PSE450W2K3R07][#260711]

System Exceptions

Install Data Protector 7 On Linux

1. The IMA Service can exit unexpectedly when an Oracle data store becomes unavailable.

   [From PSE450W2K3R07][#208290]

2. A disconnecting session can render the server unresponsive. No ICA, RDP or console session can be established until you restart the server. The issue is caused by one or more pending writes on a stack while the stack is being disconnected. This fix introduces a configurable counter that determines the number of times to attempt the write before failing it when a disconnect on the stack was initiated.

   To configure the counter, you must set the following registry key:

   HKEY_LOCAL_MACHINESYSTEMcurrentcontrolsetcontrolterminal serverwdsicawd
   Name: DisconnectTimeoutRetry
   Type: REG_DWORD
   Data: A value in the range of 10 - 150

   [From PSE450W2K3R07][#250000]

3. Servers might experience a fatal exception, displaying a blue screen. The dump file displays: 'PAGE_FAULT_IN_NONPAGED_AREA (50) at vdtw30!PublishEverything+0x1b.'

   [From PSE450W2K3R07][#243393]

User Experience

1. WAV sound can appear jittery in client sessions on devices running Windows XP with Soundmax cards. To enable this fix, you must set the following registry key:

   HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlTerminal ServerWinStationsICA-tcpAudioConfig
   Name: FastPullFactorForRealtime
   Type: REG_DWORD
   Data: <Range of 1-15>

   [From PSE450W2K3R07][#229649]

User Interface

1. Certain published applications, when launched in seamless mode, fail to place associated application icons in the notification area.

   [From PSE450W2K3R07][#228525]

2. In support of Fix #228352, this fix removes the Any button from the Citrix SSL Relay Configuration tool. It also removes references to the button from related Help files.

   From Fix #228352:

   The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in itsConnection tab and click Apply. The next time server restarts, the correct policies are in place.

   [From PSE450W2K3R07][#257126]

Miscellaneous

1. Attempts to connect to a XenApp server can fail and the following error message appears: 'Cannot connect to the Citrix XenApp Server. SSL Error 4: Attempted to connect using the (TLS V1.0 SSL V3.0) protocol(s). The server rejected the connection.'

   [From PSE450W2K3R07][#224514]

The following fixes were included in hotfixes released since Hotfix Rollup Pack 6. All those hotfixes are replaced by Hotfix Rollup Pack 7:

1. On devices with limited video rendering capacity, scrolling an application window causes the window to keep scrolling for a while longer. This fix introduces support for the following registry key that, when set, allows you to configure the delay between the moment the key is released and the moment the scrolling stops:

   HKEY_LOCAL_MACHINESOFTWARECitrix
   Name: ProcessDelayList
   Type: REG_SZ
   Data: <Application>:<Number; range: 1 - 15000. Higher number means longer delay.>

   For example: HKEY_LOCAL_MACHINESOFTWARECitrixProcessDelayList =excel.exe:2000; Word.exe:1000

   [From PSE450R05W2K3057][#240792]

2. The following error message can appear when launching a published desktop or a published application: 'The application failed to initialize properly (0x06d007e). Click on OK to terminate the application.'

   [From PSE450R06W2K3001][#232671]

3. After an anonymous user logs off, the Anonymous user profile folder becomes locked and cannot be deleted or accessed.

   [From PSE450R06W2K3004][#222360]

4. Mapped client drives are not mapped to applications running in virtual desktop or XenApp sessions.

   [From PSE450R06W2K3005][#230816]

5. With configuration logging enabled (HKEY_LOCAL_MACHINESoftwareCitrixIMARUNTIMEPSRequired = 1), the SMA Service can fail to start with System event ID 7001, 'The Citrix SMA Service service depends on the Citrix Independent Management Architecture Service which failed to start because of the following error: After starting, the service hung in a start-pending state.'

   [From PSE450R06W2K3006][#219157]

6. Upon server restart with configuration logging enabled, the IMA Service can take an unspecified amount of time to start.

   [From PSE450R06W2K3006][#221158]

7. Attempts by custom administrators to modify content redirection settings for streamed applications fail.

   [From PSE450R06W2K3006][#229576]

8. A significant delay can occur when accessing a large number of files at the same time. The issue occurs with files whose timestamp attributes, such as creation or modification dates, are read as part of the file access.

   [From PSE450R06W2K3008][#229619]

9. With browser acceleration enabled, attempts to use Internet Explorer to upload JPG or GIF files to a Web server fail. The issue occurs as a result of the way browser acceleration handles MIME types. To enable this fix, must set the following registry keys:

   • On 32-bit Windows:

     HKEY_LOCAL_MACHINESOFTWARECitrixSpeedScreen
     Name: MimeFlags
     Type: REG_DWORD
     Data: 1 (to enable fix)

     HKEY_LOCAL_MACHINESOFTWARECitrixSpeedScreen
     Name: MimeFlagsType
     Type: REG_DWORD
     Data: 1

   • On 64-bit Windows:

     HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixSpeedScreen
     Name: MimeFlags
     Type: REG_DWORD
     Data: 1 (to enable fix)

     HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixSpeedScreen
     Name: MimeFlagsType
     Type: REG_DWORD
     Data: 1

   [From PSE450R06W2K3009][#231266]

10. Attempts to open a Resource Manager summary log from the console can fail and the following error message appears: 'Could not read the oldest Server Log file.'

    [From PSE450R06W2K3010][#231044]

11. Connections from WinCE clients can get randomly dropped before the server logon screen appears.

    [From PSE450R06W2K3011][#230540]

12. If a smart card is present in the card reader at the client device, logons can become unresponsive and time out after 120 seconds. The issue occurs when a legal notice banner is configured and the connection is configured for explicit credentials. In such scenarios, the presence of the smart card at logon invokes the PIN prompt window, which goes unnoticed because it is hidden behind the legal notice.

    [From PSE450R06W2K3013][#230677]

13. The logon process stops at the 'Running logon scripts' stage, preventing the application from completely launching and users from logging on. This is caused by Winlogon.exe exiting unexpectedly. Dr. Watson references CtxNotif.dll as the faulting module.

    [From PSE450R06W2K3014][#231848]

14. The Single sign-on plug-in icon does not appear in the notification area in XenApp sessions.

    [From PSE450R06W2K3014][#233646]

15. Overview

    This feature enhancement introduces client folder redirection - the ability to map individual client folders into user sessions. A refinement of the existing client drive redirection feature, this enhancement offers greater granularity in controlling which particular client folders can be accessed in user sessions. It can be instrumental in protecting sensitive data and files by allowing only particular client folders to be accessed in user sessions.

    Note: To enable this enhancement, you must install both Hotfix Rollup Pack 7 (on the server) and Version 12.0.2 of the online plug-in or its replacement (on the client device).

    Installation Instructions

    Client Device

    1. On the computer where you want to install the plug-in, type the following at a command prompt:

       CitrixOnlinePluginFull.exe [Options] or

       CitrixOnlinePluginWeb.exe [Options]

       See http://support.citrix.com/proddocs/topic/online-plugin-120-windows/ica-configure-command-line.html for detailed online plug-in installation instructions.

    2. (Optional.) The product is installed and configured for use in standard drive redirection mode. Folder redirection can be configured in the Connection Center (see 'Making client-side folders available as a server-side drive letter' below).

       Alternatively, you can preconfigure your client software by adding the following registry key and value to the client computer:
       [HKEY_CURRENT_USERSoftwareCitrixICA ClientEngine] CFROnlyMode=1

    Server Computer

    On a server running XenApp 5/Presentation Server 4.5 for Windows Server 2003:

    1. Install Hotfix Rollup Pack 7.
    2. Restart the server.
    3. The product is installed and configured for use in standard drive redirection mode. You can enable Client Folder Redirection by modifying the following registry key and value on the server.
       32-bit Windows Server 2003:
       [HKEY_LOCAL_MACHINESoftwareCitrixClient Folder RedirectionCFROnlyModeAvailable =1
       64-bit Windows Server 2003:
       [HKEY_LOCAL_MACHINESoftwareWow6432NodeCitrixClient Folder RedirectionCFROnlyModeAvailable =1

    Making client-side folders available as a server-side drive letter

    1. Using Version 12.0.2 of the online-plug-in or its replacement, launch a hosted session to a server with Hotfix Rollup Pack 7 installed.
    2. Right-click the plug-in icon in the notification area and select Connection Center.
    3. To open the Access to local drives/folders dialog, select Drives/Folders under Local Access.
    4. Select Custom to enable client folder redirection-only mode and click Add to display the Add local folder dialog.
    5. In the Folder field, use the Browse button to find and select the folder on the client device to be redirected.
    6. Select the drive letter to represent this folder inside the hosted session. If the selected drive letter is not available on the server, a different drive letter is automatically assigned.
    7. Click OK to save the configuration, and then click OK to return to the Connection Center.

    The new drive appears in My Computer.

    Using the File Security dialog

    When you access the new drive, a File Security dialog appears once per session for every site (Citrix Web Interface server) to which you connect, requiring you to specify if redirection should occur or not. You can specify:

    Yes - allows redirection
    No – does not allow redirection
    Read only checkbox– allows only read-only access
    Do not ask again – does not display this dialog in subsequent sessions

    Overriding the preference for displaying the File Security dialog

    1. In the Connection Center, under Local Access, select Drives/Folders to open the Access to local drives/folders dialog.
    2. To override the File Security dialog display preference to apply to all sessions, select Ask me before allowing online applications and desktops to access these folders.

    Important Notes

    • This enhancement requires both Hotfix Rollup Pack 7 (on the server) and Version 12.0.2 of the online plug-in or its replacement (on the client device).
    • Disconnecting a redirected folder by using the net use command or Windows Explorer Disconnect Network Drive on the hosted session does not remove the client folder redirection configuration for that folder. The disconnection occurs in the session, but the redirected client folder is reconnected on the next session startup. This is by design. To remove the client folder redirection completely:
      1. Right-click the online plug icon in the notification area and select Connection Center.
      2. To open the Access to local drives/folders dialog, under Local Access, select Drives/Folders.
      3. Highlight the folder and click Remove.
    • Configuration of redirected folders is not read dynamically in a seamless Explorer (nonpublished desktop) session. Workaround: Restart the session (disconnect, then reconnect).
    • The server-side IMA policies (configured in XenApp Advanced Configuration) do not apply to client folder redirection. Therefore, disabling any client-drive mapping policy by way of IMA policies still allows client folder redirection.
    • Configuration of client-side policies (policies set using icaclient.adm) do affect client folder redirection. When such client-side policies are set to disable drive mapping, client folder redirection is still configurable but folder mapping does not occur.
    • When the server-side registry setting (HKEY_LOCAL_MACHINESoftwareCitrixClient Folder RedirectionCFROnlyModeAvailable) is set to 0, and the client-side user chooses to redirect client-side folders, neither folders nor drives are redirected. This is by design for security reasons. If the client user chooses not to expose all drive letters (by choosing folders only), these will not be redirected. This table shows all possible combinations of these settings:

    • Server Side Registry CFROnlyModeAvailable	Client Side Registry CFROnlyMode	CFR Folders Redirected	CDM (Fixed drives) (and DCDM) Redirected
      ON	ON(1)	YES	NO
      OFF (OR UNDEFINED (2))	OFF (OR UNDEFINED)	NO	YES
      ON	OFF (OR UNDEFINED)	NO	YES
      OFF (OR UNDEFINED)	ON	NO	NO (3)
      <Non CFR Server> (4)	ON	NO	INACCESSIBLE (5)
      <Non CFR Server>	OFF (OR UNDEFINED)	NO	YES
      ON	<Non CFR Client>	NO	YES
      OFF (OR UNDEFINED)	<Non CFR Client>	NO	YES

    (1) This setting is on by default using a registry setting after installation. ON on the client means the user selected Custom in the Access to local drives/folders dialog. OFF on the client means the user selectedAll hard disks and devices with removable storage (default) in the Access to local drives/folders dialog. ON on the server makes the client folder redirection available to users.

    (2) UNDEFINED means a missing registry key.

    (3) As a security measure, no redirection occurs here, because the client is not expecting any redirection.

    (4) Non CFR refers to versions of either the client or server software that does not have the client folder redirection feature.

    (5) Drives are still redirected (enumerated).

    [From PSE450R06W2K3015][#231830]

16. Session information for sessions launched from the Web Interface using Version 11 of the online plug-in for Macintosh displays a blank error (').

    [From PSE450R06W2K3016][#220122]

17. The IMAsrv.exe process can become unresponsive as a result of improper synchronization in ImaRuntimeSs.dll when concurrently accessing shared data in multiple threads.

    [From PSE450R06W2K3017][#231175]

18. Discovery can take a long time to execute when a full administrator is member of many Active Directory groups while it takes only a short time for local administrators.

    [From PSE450R06W2K3018][#235076]

19. A lack of explicit support for the WMA9 codec results in uncompressed audio samples being transmitted to the client, which leads to high bandwidth consumption during audio playback using the WMA9 codec. This fix introduces explicit support for the WMA9 codec.

    [From PSE450R06W2K3019][#235531]

20. This enhancement to the TWAIN redirection feature introduces support for file transfer mode. File transfer mode is used by certain TWAIN applications to transfer scanned files from the client device to the server for processing. This is the server-side component of the enhancement. To enable the enhancement in its entirety, you must also deploy a plug-in hotfix that contains Fix #230466.

    [From PSE450R06W2K3021][#230466]

21. Some applications experience a fatal exception while exiting in a published desktop session. The issue occurs when mmhook.dll dereferences a null pointer.

    [From PSE450R06W2K3023][#234920]

22. Windows Internet Explorer can exit unexpectedly when SpeedScreen Browser Acceleration or HDX 3D Browser Acceleration is enabled.

    [From PSE450R06W2K3024][#221411]

23. speedscreenfilter.dll can cause Windows Internet Explorer to exit unexpectedly while processing GIF files.

    [From PSE450R06W2K3024][#235841]

24. IBM Lotus Notes Calendar does not reflect the correct time when run as a published application. The issue occurs because Lotus Notes Calendar runs as a Java program on the server but does not use java.exe or javaw.exe. This fix introduces support for the following registry key that lets you add a list of programs that run as Java programs but do not use java.exe or javaw.exe. Berthold akzidenz grotesk light font free download. When a program loads tzhook.dll, which handles the implementation of local time and time zones, it will check against this list; if a match is found, the requisite additional APIs are hooked so that the correct time and time zone appear in the session:

    • On 32-bit Windows:

      HKEY_LOCAL_MACHINESOFTWARECitrixCtxHookAppInit_DllsPer Session Time Zone
      Name: javaexes
      Type: MULTI_SZ
      Data: <list of program names that run as Java programs but do not use java.exe or javaw.exe>

    • On 64-bit Windows:

      HKEY_LOCAL_MACHINESOFTWAREWow6432NodeCitrixCtxHookAppInit_DllsPer Session Time Zone
      Name: javaexes
      Type: MULTI_SZ
      Data: <list of program names that run as Java programs but do not use java.exe or javaw.exe>

    [From PSE450R06W2K3025][#231478]

25. The Receiver for Linux session can display the correct time and date but an incorrect location. For example, a client device set to the Singapore time zone (GMT+8) might display an accurate time of GMT+8 but display Hong Kong as the time zone location. To resolve this issue in its entirety, you must also install a Receiver for Linux hotfix that contains Fix #236065.

    [From PSE450R06W2K3025][#236065]

26. Attempts to terminate the csrss.exe, smss.exe and wininit.exe system processes from the console or by way of a shell script utilizing MFCOM can cause the server CPU consumption to spike. This fix prevents the ability to terminate these specific processes from the console or by way of MFCOM scripts. However, it does not prevent you from terminating other Windows system processes, such as WinLogon.

    Caution: Attempts to terminate such Windows system processes can cause servers to experience a fatal exception, displaying a blue screen.

    [From PSE450R06W2K3026][#223178]

27. When the Windows logon takes a long time due to, for example, Active Directory authentication, a full-screen published desktop does not display a status indicator to provide status feedback. This can be confusing to users. This fix modifies the behavior of the status indicator so that the indicator remains visible until the authentication completes.

    Note: To correct this issue in its entirety, you must install both a server hotfix and a plug-in hotfix that contains Fix #235374.

    [From PSE450R06W2K3028][#235374]

28. After reconnecting to a disconnected session, server-side shared network drives might no longer be mapped into the session. The issue is a result of a drive mapping conflict and occurs if a network share uses the same drive letter (for example, F:) on the server as a USB device or smart card reader on the client device.

    [From PSE450R06W2K3031][#233021]

29. This fix addresses an issue where:

    • the IMA Service runs out of memory and becomes unresponsive frequently
    • Event Viewer messages are written each time dynamic store memory allcations fail
    • the thread pool health monitoring feature fails to detect the out-of-memory condition and a new zone data collector does not take over

    This fix adds a call from the dynamic store to the self-monitoring feature, so that when the dynamic store detects an out-of-memory condition, a new zone data collector is elected. It also limits the rate of out-of-memory Event Viewer messages to one every 15 seconds.

    [From PSE450R06W2K3033][#236620]

30. The data collector can become unresponsive when using Branch Repeater to connect to the zone.

    [From PSE450R06W2K3035][#235107]

31. Custom VC driver dlls that use long filenames, as opposed to adhering to the 8.3 filename standard, can cause connection attempts to be rejected. This enhancement introduces support for the following registry key to permit use of long filenames or enforce the 8.3 filename standard:

    HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlTerminal ServerWdsicawd
    Name: ModuleNameOverride
    Type: REG_DWORD
    Data: 1 = crop VC driver name on the server and continue; 0 (or not set) = enforce 8.3 filename adherence

    [From PSE450R06W2K3035][#245060]

32. Servers with Hotfix Rollup Pack 5 or 6 installed can run out of non-paged pool memory in the ICA Pool tag. The issue occurs when users log on to the server and its frequency increases with the amount of time since the most recent restart and the number of logons since the restart.

    [From PSE450R06W2K3035][#249829]

33. Servers might experience a fatal exception, displaying a blue screen, on cdm.sys with bugcheck code CB.

    [From PSE450R06W2K3036][#224799]

34. Disconnecting and reconnecting to a session using smart card authentication can create a temporary session with the Winlogon and CSRSS processes running.

    [From PSE450R06W2K3038][#241916]

35. Running Discovery can fail for custom administrators.

    [From PSE450R06W2K3039][#244881]

36. sphook.dll can cause published instances of Windows Internet Explorer to exit unexpectedly.

    [From PSE450R06W2K3041][#238086]

37. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX128169.

    [From PSE450R06W2K3042][#241756]

38. If a user has multiple simultaneous connections and removes and reinserts a smart card, Version 11.2 of the plug-in can become unresponsive. To enable this fix, you must set the following registry key:

    HKEY_LOCAL_MACHINESOFTWARECitrixSmartCard
    Name: KeepLockTillEndTxSuccess
    Type: REG_SZ
    Data: 1

    [From PSE450R06W2K3043][#227329]

39. In certain configurations, attempts by custom administrators to view the read-only properties of published applications from the console can fail. When this happens, the following error message appears and the console can become unresponsive:

    'Failed to read application properties: [app name]' Details: 'Access Denied.'

    To enable this fix, run the following command and then restart the computer:

    dscheck /full Admintools /AddAdminCapEventID 'View Applications' 1900617

    [From PSE450R06W2K3044][#242424]

40. When shadowing a session from a seamless published Access Management Console/Delivery Services Console on a multiple monitor client, the shadowee's Windows Taskbar might no longer be available in the shadowee's session.

    [From PSE450R06W2K3045][#235564]

41. Even with the session limit set to 1 at the farm level, it is possible for users to open two sessions. This can happen at times of long logon times that can cause users to click an application link multiple times. After disconnecting both sessions, users can no longer reconnect to either session.

    This fix introduces support for the following registry key that, if set, counts only active sessions against the farm level session limit and thus allows a user to reconnect as long as that user's session limit is not exceeded:

    HKEY_LOCAL_MACHINESOFTWARECitrixIMA
    Name: AppLimitExceededAllowReconnect
    Type: REG_DWORD
    Data: 1

    Note: You must restart the IMA Service for this change to take effect.

    [From PSE450R06W2K3046][#249607]

42. Programs that use client mapped COM ports can become unresponsive and show other unexpected behavior.

    [From PSE450R06W2K3047][#240968]

43. Servers might experience a fatal exception on cdm.sys with bugcheck code 0xC2.

    [From PSE450R06W2K3047][#250143]

44. Servers can become unresponsive and stop working unexpectedly. The issue can be observed when anonymous user directories are not completely deleted during logoff and the user's profile is locked out as a result.

    [From PSE450R06W2K3048][#251796]

45. The Citrix Print Service (Cpsvc.exe) can experience an Exception C0000005 (access violation).

    [From PSE450R06W2K3050][#227624]

46. When reconnecting to a disconnected session, local printers are mapped into the session and the default printer changes to a local printer instead of a network printer. This occurs even when client printer mapping is disabled for the user’s Active Directory (AD) account. The issue occurs on systems where Fix #226969 is installed.

    [From PSE450R06W2K3050][#252153]

47. Domain controllers log Security Event ID 529 logon failures for user name '. These log entries occur in error.

    [From PSE450R06W2K3051][#243404]

48. 'Authenticated users' attempting to connect to servers running XenApp 5 for Windows Server 2003 (both clean installs and upgrades) can experience up to 42-second delays during application launches. The issue is related to a lengthy API function call. This fix introduces support for the following registry key that, when set, bypasses the function call:

    HKEY_LOCAL_MACHINESOFTWARECitrixIMA
    Name: DoNotUseADSI
    Type: REG_DWORD
    Data: 1

    [From PSE450R06W2K3051][#247733]

49. When reconnecting to a disconnected session where Microsoft Office Communicator is running in seamless mode, a gray window appears on the screen.

    [From PSE450R06W2K3053][#250350]

50. Servers might experience a fatal exception, displaying a blue screen, on Cdm.sys with stop code 0x0A when using smart card authentication.

    [From PSE450R06W2K3054][#247954]

51. The IMA Service might become unresponsive on the zone data collector, causing users to no longer be able to connect.

    [From PSE450R06W2K3055][#254762]

52. Windows XP and Vista sessions running on servers with Hotfix PSE450R06W2K3025 installed can display the correct time and date but an incorrect location. For example, a client device set to the Singapore time zone (GMT+8) might display an accurate time of GMT+8 but display Hong Kong as the time zone location.

    [From PSE450R06W2K3056][#257766]

53. Canceling or ignoring a smart card PIN prompt results in an orphaned session. The issue occurs because there is no timeout associated with the Windows Logon screen that appears when canceling or ignoring the PIN prompt. This fix introduces support for the following registry key that allows you to set a time, in seconds, after which the session is terminated unless a logon completes successfully:

    HKEY_LOCAL_MACHINESOFTWARECitrixLogon
    Name: LogonIdleTimeout
    Type: REG_DWORD
    Data: 150-240 (decimal)

    [From PSE450R06W2K3058][#256036]

54. Servers can become unresponsive, refusing to accept new connections and to log off existing ones. The issue can occur when the server is sending messages and the client is not responding.

    [From PSE450R06W2K3060][#256456]

55. After reconnecting to a disconnected full-screen published desktop session, the desktop can display incorrectly and be unresponsive to keyboard and mouse input.

    [From PSE450R06W2K3061][#256110]

56. Provisioned XenApp servers refuse to accept connections if they are restarted while the license server is unavailable. The issue occurs because the license server cache file, MPS-WSXICA_MPS-WSXICA.ini, is saved in the%systemroot%Program FilesCitrix folder, which might be unavailable when the server image shuts down.

    This fix allows you to save the license server cache file in a shared network location - a location separate from the XenApp server image - so that the file is available even when the server image shuts down. If you save the file in a location away from the server image, you must set the following registry key to point to the cache file location:

    HKEY_LOCAL_MACHINESOFTWARECitrixInstall
    Name: LSWSXICALocation
    Type: REG_SZ
    Data: <network location of license server cache file>

    Note: You must restart the server after this registry edit in order for the license file to be cached.

    For more information, see Knowledge Center article CTX131202.

    [From PSE450R06W2K3062][#242177]

57. Servers might experience a fatal exception related to Dynamic Client drive mapping, displaying a blue screen.

    [From PSE450R06W2K3062][#252333]

58. Regardless of the number of invalid logon attempts permitted by way of an Active Directory policy, users are locked out of Active Directory after just one invalid logon attempt to the Shadow taskbar.

    [From PSE450R06W2K3063][#259528]

59. Even though forward slashes (/) are legal characters in names of Active Directory organizational units (OU), MFCOM fails to enumerate users for applications who are members of OUs whose names contain that a forward slash.

    [From PSE450R06W2K3065][#259537]

60. Running the qfarm /app /load command from a non-zone data collector returns an invalid valid value of 99990.

    [From PSE450R06W2K3066][#256458]

This hotfix rollup pack also includes all fixes contained in the hotfix rollup packs it replaces. For a list of fixes included in each of the replaced hotfix rollup packs, see the corresponding Knowledge Center articles:

Notes:

• See Special Installation Instructions for Application Streaming with Advanced Edition (CTX120305) and Known Installation Issues with This Release above for known install behaviors and their workarounds.

• This hotfix rollup pack is packaged with Microsoft Windows Installer 3.0 as a .msp file. For more information about deploying .msp files, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.

• This hotfix rollup pack might or might not prompt you to restart the server when the installation is complete. If you are using the Access Suite Console, you must restart the server after installing this hotfix rollup pack to ensure that it is added to or removed from the console's hotfix inventory list.

To install this hotfix rollup pack:

1. Copy the hotfix rollup pack to an empty folder on the hard drive of the server you want to update.

2. Close all applications.

3. Run the executable.

4. Restart the server.

5. If you are using the Delivery Services Console, restart the server to ensure the hotfix rollup pack is added to the console's hotfix inventory list.

(For use only when instructed by Citrix Technical Support) PSE450W2K3R07 Symbols for Windows Server 2003

Files Updated (All Dates/Times UTC)