Actually Jeff, it hasn't been real bad. I struggled with the LOGOFFCHECKSYSMODULES key simply cause I made a typo and left out a quote in the .REG file. Fixed that and it worked fine. I had to add 2 modules to it: protectionutilsurrogate.exe,smcgui.exe, they would not terminate when the user exited. I saw in the forums last night that a lot of people are just disabling the SMCGUI.EXE do to some issues. I guess the main one being if you leave the icon in the Systray any user can initiate a full scan. You can hide the icon (check box in the Symantec Console), but looks like it might simply be better to not let it launch. I'm going to be looking at that today since it also takes up about 50MB per session, multiply that by 20+ session per box and it's a fair chunk of memory. I put SEP on 30 of our Citrix servers Sunday night, I'm sure I'll catch a couple more little quirks before I move along with the rest of the farm. It's also a pain to deploy to 2008 servers, you can't use the management console, you have to use the Deployment Wizard that is hit and miss or do it manually. George From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jeff Bolton Sent: Tuesday, February 23, 2010 7:33 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Logoff Check Sys Modules I'm almost afraid to ask, but what issues have you run into with Symantec Endpoint Security? I only ask because our Security manager plans to install the same product here in the next few days and being prepared for, rather than troubleshooting what he's broken this time with his new tools, would be helpful... :) ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of GTaylor@xxxxxxxx Sent: Monday, February 22, 2010 4:12 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Logoff Check Sys Modules Xenapp 4.5 on 2003 64-Bit R2 I have a couple new modules I need to add to [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI] LogOffCheckSysModules (Thank you Symantec Endpoint Protection.) I go into install mode, make the reghack and go back to execute mode. I then rdp back to the server and the entries are not there. I have a question, does making a registry change like this for all users require a reboot? Thanks, George ________________________________ Regional Health's mission is to provide and support health care excellence in partnership with the communities we serve. Note: The information contained in this message, including any attachments, may be privileged, confidential, or protected from disclosure under state or federal laws . If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Sender immediately by a "reply to sender only" message and destroy all electronic or paper copies of the communication, including any attachments. ________________________________ The information contained in this e-mail message may be privileged and confidential information and is intended only for the use of the individual and/or entity identified in the address of this message. If the reader of this message is not the intended recipient, or an employee or agent responsible to deliver it to the intended recipient, you are hereby requested not to distribute or copy this communication. If you have received this communication in error, please notify us immediately by return e-mail. In this circumstance, we request that you delete the original message from your system. ________________________________ Regional Health's mission is to provide and support health care excellence in partnership with the communities we serve. Note: The information contained in this message, including any attachments, may be privileged, confidential, or protected from disclosure under state or federal laws . If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the Sender immediately by a "reply to sender only" message and destroy all electronic or paper copies of the communication, including any attachments.