The Ultimate Citrix Install Guide
 
PROJECT MANAGEMENT
1. Project Management Overview
2. Project Management Methodology
3. Tips for Making Meetings Effective

ANALYSIS PHASE
1. Analysis Phase Overview
2. Vision / Project Scope (Statement of Work)
3. Project Plan
4. Infrastructure Assessment
5. Proof of Concept
6. Analysis Phase Checkpoint

DESIGN PHASE
1. Design Phase Overview
2. Server Design
3. MetaFrame Access Suite Design
4. Infrastructure Design
5. Design Phase Checkpoint

IMPLEMENTATION PHASE
1. Implementation Phase Overview

2. Prepare the Network Environment

2. 1. Create Required Network Shares
2. 2. Firewall Modifications
2. 3. Throttling Port Speed and Duplex Settings
2. 4. Add Users to a Terminal Services Environment
2. 5. Create Required Citrix Specific User Groups

3. Install Operating System(s) for MetaFrame XP

3. 1. Installing Microsoft Windows 2000
3. 2. Installing Microsoft Windows Server 2003

4. MetaFrame IMA Data Store Installation & Configuration

4. 1. How to Install & Configure Microsoft SQL Server 2000
4. 2. How to Install and Configure Microsoft SQL Desktop Edition (MSDE)

5. Install MetaFrame XP Server w/ Feature Release 3

5. 1. How to Remap MetaFrame XP Server Driver Letters
5. 2. Installing MetaFrame Feature Release 3 on Windows 2000
5. 3. Installing MetaFrame Feature Release 3 on Windows Server 2003
5. 4. Installing MetaFrame XP HotFixes
5. 5. How to Add Licenses through the Management Console for MetaFrame XP

6. Install “Image” Applications


7. Rapid Server Deployment

7. 1. How to Clone a Citrix MetaFrame XP Server
7. 2. How to Create a Network Boot Disk

8. Configure MetaFrame XP Farm Wide Settings

8. 1. Recycling Operating Systems
8. 2. MetaFrame XP Delegated Administration
8. 3. How to Create a Zone & Move MetaFrame XP Servers to it
8. 4. How to Set a Server’s Preference for Data Collector Elections
8. 5. MetaFrame XP User Policies
8. 6. How to Implement Automatic ICA Client Updates
8. 7. Client Drive Mapping
8. 8. How to Implement Client to Server Content Redirection
8. 9. How to Implement Server to Client Content Redirection
8. 10. Configure ICA Keep-Alive
8. 11. Configure SpeedScreen Browser Acceleration

9. Install “Manual” Applications

9. 1. How to Install and Configure Microsoft Office 2000
9. 2. How to Install and Configure Microsoft Office XP
9. 3. How to Install and Configure Microsoft Office 2003

10. MetaFrame Conferencing Manager 2.0

10. 1. How to Install the Conference Organizer Service
10. 2. How to Install the Conference Room
10. 3. How to Install Conferencing Manager User Interface
10. 4. How to Specify the License Type through the CM Configuration Tool
10. 5. How to Add Users to the Conferencing Manager
10. 6. Microsoft Exchange Server Integration
10. 7. Troubleshooting

11. Publishing Resources through the Management Console

11. 1. How to Publish an Application
11. 2. How to Publish Content
11. 3. How to Publish Application from a Shortcut
11. 4. How to Publish the Printer Folder
11. 5. How to Publish Windows Explorer

12. How to Configure the Printing Environment

12. 1. Set the proper expectations
12. 2. Setup the Print Environment
12. 3. Create Printer Compatibility Driver Mappings
12. 4. Set Printer Bandwidth Limits for Client Auto-Created Printers
12. 5. How to use Project Compatibility automate Driver Mapping
12. 6. How to Manually Connect a Client Printer within an ICA Session

13. Install MetaFrame Secure Access Manager 2.0

13. 1. Install MetaFrame Secure Access Manager on Windows 2000 Server
13. 2. Install MetaFrame Secure Access Manager 2.0 on Windows Server 2003
13. 3. How to Install MetaFrame Secure Access Manager 2.0 Service Pack 1
13. 4. Install the Access Management Console on MetaFrame XP or a Workstation
13. 5. Create an Access Center
13. 6. Configure the Access Center
13. 7. Customizing MetaFrame Secure Access Manager
13. 8. How to Configure Internet Explorer for a Secure Access Center

14. Install Web Interface 2.1

14. 1. How to Install Web Interface 2.1 (Clean Install)
14. 2. How to Upgrade a NFuse Server to Web Interface 2.1
14. 3. Web Interface 2.1 Web Administration Tool
14. 4. How to Customize Web Interface 2.1
14. 5. How to Repair Web Interface 2.1

15. Install SSL Certificates and Secure IIS Server

15. 1. How to install and configure the IIS Lockdown Tool (version 2.1)
15. 2. How to Enable SSL on an IIS Web Server
15. 3. How to Force the use of SSL Encryption on a IIS Web Site

16. Install Secure Gateway 2.0 for MetaFrame

16. 1. Pre-installation Check List
16. 2. How to Install and Configure the STA Component
16. 3. Install the Secure Gateway Service
16. 4. Secure Gateway for MetaFrame Management Tools

17. MetaFrame XP Remote Administration Tools

17. 1. Management Console for MetaFrame XP
17. 2. Citrix Web Console (CWC)

18. ICA Clients

18. 1. How to Install the ICA Win32 Program Neighborhood Agent
18. 2. How to Install the ICA Win32 Web Client
18. 3. How to Configure the ICA Java Client
18. 4. How to Utilize the ICA Program Neighborhood Pass-Through Client
18. 5. Citrix ICA Client 6.20 for OS 9.X
18. 6. Citrix ICA Client 6.30 for OS 10.x

19. Microsoft Terminal Services Licensing

19. 1. Summary of Licensing Options in Windows 2000 Server
19. 2. Summary of the licensing options in Microsoft Windows Server 2003

20. Implement Windows System Policies

20. 1. MIAB Administrative Template Overview
20. 2. How to Create an Administrative Template to Hide Drives
20. 3. Implementing Windows 2000 Active Directory Group Policies
20. 4. Implementing Windows NT, Terminal Server 4.0 System Policies

21. How to Install and Configure MetaFrame Password Manager

21. 1. Prepare the Directory Service
21. 2. Install and Configure the MetaFrame Password Manager Console
21. 3. Deploy the MetaFrame Password Manager Agent
21. 4. On-Going Maintenance

22. Implementation Phase Checkpoint


READINESS PHASE
1. Readiness Phase Overview
2. Testing your New MetaFrame Access Suite Environment
3. Pilot Implementation
4. Rollout Any Remaining Servers
5. Implement Change Management Policies and Procedures
6. Readiness Phase Checkpoint

ROLLOUT PHASE
1. Rollout Phase Overview
2. End-User Training
3. Administrator Training
4. Go Live!
5. Rollout Phase Checkpoint

APPENDIX
1. Additional Resources
2. MIAB3.0.ZIP - Files Explained

19. 2.    Summary of the licensing options in Microsoft Windows Server 2003

The following is Microsofts official stance on Terminal Services licensing:

User Client Access License (User CAL) - The User Client Access License (User CAL) is designed to provide you with a manageable and cost-effective way to allow your users to access server software from any device. The User CAL eliminates the need for you to obtain a Device CAL for every device from which a particular user accesses your server software. If you prefer the current model, Device CALs will still be a licensing option. In general, you will have the option of acquiring Device[1] and/or User[2] CALs for new versions of Microsoft server products that are licensed on a Server/CAL basis. You should make this decision based on your own business needs.

For example, a company whose executives and sales people access Microsoft Windows Server from multiple devices (e.g., a work PC, a home PC, and a wireless PDA), would now be able to purchase 1 User CAL for each of those people rather than purchasing multiple Device CALs.

In comparison, a company whose employees share devices (e.g., a call center) may still opt to purchase 1 Device CAL for each device accessing the server software.

External Connector for External Users - The External Connector license is designed to provide you with a manageable and cost-effective way to allow your business partners and end-customers access to your licensed server software. For many, the External Connector license will be a simplified solution because it eliminates the need to count and purchase individual CALs for each business partner or end-customer accessing the licensed server software. This option will generally be available for new versions of Microsoft server products that are licensed exclusively on a Server/CAL basis (i.e., products without a processor-based licensing alternative). External Connector licenses cannot be used for hosting.

For example, a company that allows both suppliers and their end-customers to access its servers may have difficulty counting and tracking individual CALs for these users. As an alternative, this company would be able to purchase the External Connector license for each copy of the server software accessed by an unlimited number of their suppliers and/or end-customers.

As part of this announcement, Microsoft also announced that the provision for Operating System Equivalency (OS equivalency provision) will not apply to Microsoft Windows Server 2003 Terminal Services. The OS equivalency provision states that there is no need for a Microsoft Windows Server Terminal Services Client Access License (CAL) for devices accessing Microsoft Terminal Services that are running a corresponding version of the Professional Edition of the Microsoft Windows Desktop Operating System. The following table summarizes the versions of the Microsoft Windows Professional Desktop Operating System that correspond to a version of Microsoft Windows Server Terminal Services:

 

Microsoft Windows Server Terminal Services Version

Corresponding Versions of Windows Desktop Professional

Microsoft Windows 2000 Server Terminal Services

Microsoft Windows 2000 Professional (or later version of Windows Professional)

Microsoft Windows NT Server 4.0 Terminal Server Edition (Terminal Server was a separate product at the time of this version release)

Microsoft Windows NT Workstation 4.0 (or later version of Windows XP Professional)

 

This decision was made based on: Additional features/functionality that has been added to Microsoft Windows Server 2003 Terminal Services.

The OS Equivalency provision that was inconsistent with Microsoft's new software licensing framework, in providing consistent and flexible licensing terms.

Microsoft realizes that the removal of the OS Equivalency provision for Microsoft Windows Server 2003 Terminal Services will affect some customers and is committed to ensuring that existing Microsoft customers who would like to take advantage of Microsoft Windows Server 2003 Terminal Services features have a cost-effective way of doing so. As a result, we have developed a transition plan to provide a cost effective means for existing Volume Licensing customers to migrate to Microsoft Windows Server 2003 Terminal Services CALs, upon product launch.

The introduction of the new options for licensing Microsoft software products that are licensed in the Server CAL model reflects our commitment to making licensing more consistent, flexible, and valuable to customers. We received feedback from customers that the OS Equivalency provision was inconsistent with those qualities for the following reasons:

The OS Equivalency Provision resulted in situations where customers were at risk of becoming noncompliant. In the past, if you were using the most current version of the desktop operating system, then you were granted access to Microsoft Windows Terminal Services in the Microsoft Windows Server Operating System.  But if you upgraded to a new server operating system and didnt upgrade your client operating systems, you were required to acquire Microsoft Windows Server Terminal Services CALs.  Depending on your client upgrade cycles, you could easily find yourself moving in and out of compliance with licenses.  This caused customers a great deal of frustration and confusion. 

Microsoft Windows Terminal Services is adding the User CAL and External Connector options to solve many customer problems encountered with our previous Microsoft Windows Terminal Services licensing models. Keeping the OS Equivalency Provision, in conjunction with the new CAL options, would result in you having to do complicated calculations to figure out what to buy and when. For more information on the User Cal and External Connector options, please refer to: http://www.microsoft.com/licensing/.

The new licensing model for Microsoft Windows Terminal Services in Microsoft Windows Server 2003 is more consistent with the Microsoft Windows Server licensing model. We received feedback from numerous customers that the licensing of Terminal Services was highly confusing, largely due to the OS Equivalency provision. Because Microsoft Windows CALs and Microsoft Windows Server Terminal Services CALs are both required when using Microsoft Windows Terminal Services, having the same license structure removes a layer of complexity.

Transition Plan for OS Equivalency Removal in Microsoft Windows 2003 Server Terminal Services

Microsoft realizes that the removal of the OS Equivalency provision will affect some customers and is committed to ensuring that existing Microsoft customers who would like to take advantage of Microsoft Windows 2003 Server Terminal Services features have a cost-effective way of doing so. As a result, we have developed a transition plan to provide a cost effective means for existing Volume Licensing customers to migrate to Microsoft Windows 2003 Server Terminal Services CALs, upon product launch.

The following table summarizes the migration path to Microsoft Windows 2003 Server Terminal Services CALs for customers by agreement and license type, at the time of the Microsoft Windows Server 2003 Launch.

How do I migrate to Windows Server 2003 Terminal Services CAL, if I have the following situation upon the launch of Microsoft Windows Server ..

Answer*: Note that the bolded items represent migration rules that apply only to customers with licenses and active Software Assurance/Upgrade Advantage (SA/UA) or Enterprise Agreement (EA) enrollments at the time of the Microsoft Windows Server 2003 product release, as part of a special transition migration.

Open License

Microsoft Windows Desktop Professional Edition Upgrade L&SA/UA, with UA/SA active at the time of launch of Windows Server 2003

Receive Microsoft Windows Server 2003 Terminal Services CAL and SA/UA coverage during remaining term of SA/UA.

Microsoft Windows XP Professional Edition Upgrade L

Receive Microsoft Windows Server 2003 Terminal Services CAL

 

Microsoft Windows Desktop Operating System license (any edition or version other than Microsoft Windows XP Professional), not including SA/UA.

Either 1) Acquire Microsoft Windows XP Professional Upgrade License before the launch of Microsoft Windows Server Terminal Services and receive a Microsoft Windows Server 2003 Terminal Services CAL, or 2) Acquire a CAL for Microsoft Windows Server 2003 Terminal Services

 

Current Terminal Server Work at Home CAL

Receive Microsoft Windows Server 2003 Terminal Services CAL

 

Microsoft Windows Server Terminal Services CAL (any version other than Microsoft Windows Server 2003 Terminal Services.)

Either 1) Acquire Microsoft Windows XP Professional before the launch of Microsoft Windows Server Terminal Services and receive a Microsoft Windows Server 2003 Terminal Services CAL, or 2) Acquire a CAL for Microsoft Windows Server 2003 Terminal Services

Terminal Services CAL&SA/UA, with UA/SA active at the time of launch of Windows Server 2003

 

Receive Microsoft Windows Server 2003 Terminal Services CAL and SA/UA coverage during the remaining term of SA/UA.

Select License

Microsoft Windows Desktop Professional Edition Upgrade L&SA/UA, with UA/SA active at the time of launch of Windows Server 2003

Receive Microsoft Windows Server 2003 Terminal Services CAL and SA/UA coverage during remaining term of SA/UA.

 

 

 

 

Microsoft Windows XP Professional Edition Upgrade L

Receive Microsoft Windows Server 2003 Terminal Services CAL

 

Microsoft Windows Desktop Operating System license (any edition or version other than Microsoft Windows XP Professional), not including SA/UA.

Either 1) Acquire a Microsoft Windows XP Professional Upgrade license before the launch of Microsoft Windows Server Terminal Services and receive a Microsoft Windows Server 2003 Terminal Services CAL, or 2) Acquire a CAL for Microsoft Windows Server 2003 Terminal Services

 

Terminal Services Work at Home CAL

Receive Microsoft Windows Server 2003 Terminal Services CAL

 

Microsoft Windows Server Terminal Services CAL (any version other than Windows Server 2003 Terminal Services)

Either 1) Acquire Microsoft Windows XP Professional before the launch of Microsoft Windows Server Terminal Services and receive a Microsoft Windows Server 2003 Terminal Services CAL or 2) Acquire a CAL for Microsoft Windows Server 2003 Terminal Services

Terminal Services CAL&SA/UA, with UA/SA active at the time of launch of Windows Server 2003

Receive Microsoft Windows Server 2003 Terminal Services CAL and SA/UA coverage during the remaining term of SA/UA.

 


 

Enterprise Agreements

(active enrollments)

Microsoft Windows Desktop Operating System enrolled in an EA that is active at the time of launch of Windows Server 2003

Receive Microsoft Windows Server 2003 Terminal Services CAL and maintenance coverage during remaining enrollment term.

 

Terminal Services Work at Home CAL

Receive Microsoft Windows Server 2003 Terminal Services CAL and maintenance coverage during remaining enrollment term (unless otherwise stated in your agreement).

 

Microsoft Windows Server Terminal Services CAL (any version)

(without Microsoft Windows Desktop Operating System Upgrade)

Receive Microsoft Windows Server 2003 Terminal Services CAL and maintenance coverage during remaining enrollment.

 

 

* Note, Microsoft Windows Server 2003 Terminal Services CALs can be either User or Device CALs. However, Microsoft Windows Server Terminal Services will not be able to accommodate downgrades for User CALs (i.e. a Microsoft Windows 2003 Server Terminal Services User CAL cannot be downgraded to a Microsoft Windows 2000 Windows Terminal Services User CAL) because Microsoft Windows 2000 Terminal Services (and prior version) technologies only support Device CALs.

20. Implement Windows System Policies

When users access a session through a MetaFrame XP server, by default, they have access to all files, features and applications on the server. This gives a stray user the ability to detrimental effect all other users of the MetaFrame XP server. In order to prevent this behavior you will want to lockdown the environment through Computer and User Policies.

A Policy is a set of registry settings that defines the computer resources available to an individual or to a group of users. Policies define the various facets of the desktop environment that a system administrator needs to control, such as which applications are available, which applications appear on the users desktop, which applications and options appear in the Start menu, who can change their desktops and who cannot, and so forth. System policies can be implemented for specific users, groups, computers, or for all users.

In the following sections, I have documented how to implement Policies in both a Microsoft NT 4.0 and or Novell Netware environment and a Windows 2000 Active Directory environment. You will also find a great Administrative Template (MIAB.ADM) that incorporates most of the changes found throughout this document and a few more and how to add and configure it.

 

 

 

 


DABCC Site Map | Legal Notice | Privacy Statement | All Rights Reserved for DABCC, Inc.