Autocreated Printers in Citrix not Autocreating

We have had a Citrix 4.5 issue for a while now where users connecting from home through the Secure Gateway did not get their local printers autocreated in their Citrix session. For some reason it was worse for users that had USB printers. Network printers and LPT printers would connect occasionally but USB printers almost never worked. I tried mapping the local printer driver to the Citrix Universal Printer driver using the Presentation Server Console but that made no difference. The only clue was an application log when the user logged in with an Event ID of 1116.

Googling this turned up a Citrix document on the permissions needed by the Ctx_CpsvcUser account on each server. None of the suggested steps worked until I added the user account to the local Administrators group and gave the account Full Admin rights in the Citrix Access Management console.

UPDATE: This worked for awhile and then stopped again. I had to change the login account that the Citrix Print Manager service uses to Local System to get it to work again.

Heading Down Under Tomorrow

A sister company based out of Sydney is having some issues with a new installation of Citrix and the parent company that owns us both wants me to go down and see what can be done. Apparently, there is a shortage of IT people with Citrix skills in Australia. Should be fun!

I've managed to bookend the week with both weekends, so on the 19th and 20th I am going to go drive out to the Blue Mountains and stay in Blackheath near Katoomba. On Saturday I'm going to walk the Golden Stairs and hike out to Ruined Castle and maybe Mt. Solitary. On Sunday I'm doing the Grand Canyon walk and then driving back to Sydney on Bells Line of Roads. Saturday the 26th I'll go down to the Royal National Park and see what I can see there.

Its wintertime in Australia so Sydney is about the same temperature as Victoria during the spring (19°C during the day, 10°C at night). Katoomba is currently about 10°C during the day and 3°C at night). So I'm having to dig out my thermals and my Thermawrap to make sure I don't freeze out my walks.

I'll put up a Flickr photostream when I get back.

Citrix File Security button greyed out

A couple of times now, we have run into a situation with Citrix where a user will have selected No Access and Never Ask Again the first time they go into Citrix. It looks like there is a bug with some of the native client upgrades that cause the File Security button in the Connection Center to be greyed (this is where you would go once the user is connected to changed there permissions to access their local drives).

The only workaround I have found so far is to delete the C:\Documents and Settings\%username%\Application Data\ICAClient. Another option is to change the webica.ini file in this folder so that the GlobalSecurityAccess line says GlobalSecurityAccess=405.

Citrix Secure Gateway Certificates

Just ran into an interesting problem at work. We use the Citrix Secure Gateway (CSG) to allow remote users to access Citrix through the web. This tunnels the Citrix ICA traffic (which is normally on TCP port 1493) through port 443. Our certificate on the IIS server was expiring soon so I had renewed and installed it a couple of weeks back and everything appeared to be working.

Today we started getting calls from users who were getting SSL errors after they had authenticated on the Web Interface page and tried to launch a Citrix session. After quickly verifying that the IIS certificate was indeed the new one and doing an iisreset to no effect I did a quick Google search and discovered that not only do you have to install the certificate on IIS, you also have to configure CSG to use the new certificate.