Search This Blog

Friday, June 29, 2012

APP-V 5.0 ADMX file

Just as UE-V has a ADMX file for Group Policies, the new APP-V 5 beta delivers an ADMX file for APP-V settings.

You can find the ADMX and ADML files after installing the sequencer:


Copy the files to your policy central store and you will be able to set various settings for the APP-V client.

You can find the settings under Computer Configuration\Policies\Administrative Templates\System\App-V


Thursday, June 28, 2012

Xenapp Flash player prompt

You might see this prompt on your Citrix clients when they browse to a internet web page with flash contents.

Do you want to optimize content designed for Flash, such as videos, animation, and applications?


If you would like to disable flash redirection and also skip the prompt, you can use these Citrix Policies.

Flash content will then always be rendered on the server, please also note that this is a user setting, so if the policy is applied to the Xenapp servers OU, loopback processing mode must be enabled.


An online application is attempting to access files on your computer.

Your Citrix Xenapp 6.5 windows clients might see this prompt when connecting to a local drive.


One way to get rid of the prompt so that users do not have to answer the question is to add your web interface to the trusted web site zone.

To do this for all your clients use this GPO setting Site to Zone Assignment list:


And then add the address of the web interface address and assign the value 2 (trusted zone).


Microsoft User Experience Virtualization Settings Storage Path

Microsoft User Experience Virtualization includes ADMX file for Group policy settings.
When setting the storage path you are able to use the variables %USERNAME% and

Tuesday, June 26, 2012

Windows Installer coordinator hangs

You might experience this when you install MSI packages on your RDS/Terminal and XenApp servers.

The installation will hang and display the message:

Please wait while the application is preparing for the first use


I have seen this with the following software packages:
  • Google Chrome (Enterprise)
  • IBM i Access

One way to avoid this issue is to create and set the following dword value to 0:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\TSMSI\Enable

During deployment with MDT 2012 or SCCM 2012 one way to do this is to add it in your task sequence:


You can find more information in this link

Monday, June 18, 2012

Advanced Group Policy management and Service Account rights

I recently wrote that the Group Policy Management Console Sample Scripts could be used to grant the AGPM service account rights to all existing GPO’s.

Another way to do this if your running Windows 2008 R2, is to use the Group Policy cmdlets in windows PowerShell.

First you must import the Group Policy module with the command import-module grouppolicy

And then you will be able to use the cmdlet to grant the service account access, in this example the security group AGPM-Service will be granted full access.

Set-GPPermissions -All -TargetName "AGPM-Service" -TargetType Group -PermissionLevel GpoEditDeleteModifySecurity

We will achieve the same as we did with the old scripts but now with PowerShell  Smile

For a complete list of Group policy cmdlets see Group Policy Cmdlets in Windows PowerShell.

Wednesday, June 13, 2012

APP-V 5.0 Beta: The operation failed as the management server was not found

When playing around with the APP-V 5.0 Beta I ran into this error when starting the management console:

The operation failed as the management server was not found. Please ensure it is properly installed.


For me the solution was to register ASP.NET 4.0 (both 32 bit and 64 bit)

  • 32-bit registration: c:\windows\\framework\v4.0.30319\aspnet_regiis.exe –ir
  • 64-bit registration: c:\windows\\framework64\v4.0.30319\aspnet_regiis.exe –ir


After the registration the console runs as expected.


Monday, June 11, 2012

Advanced Group Policy Management


When working with Advanced Group policy management and using a service account, you need to give the service account rights to all existing GPO’s if you want to have them controlled by AGPM.

To do this easily you can download Group Policy management Console Sample Scripts.


Once downloaded and installed you can use the script GrantPermissionsOnAllGPOs.wsf.

In order to grant the service account (AGPM\svc.agpm) FullEdit access to all existing GPO’s you can use the command:

cscript "c:\Program Files (x86)\Microsoft Group Policy\GPMC Sample Scripts\GrantPermissionOnAllGPOs.wsf" "AGPM\svc-agpm" /Permission:FullEdit


Just not fun doing this on every GPO with the GUI Smile