[THIN] Re: ICA Client 8.0
- From: James Hill <HillJ@xxxxxxxxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Fri, 15 Oct 2004 10:38:14 +1000
I have found that setting sso after the installation works fine if it is
done by someone with admin privileges. This is by simply ticking the
"Pass-through Authentication" and "use local credentials to logon" check
boxes under Tools\ICA settings.
After that it is also necessary to configure the particular custom ica
connection to use this feature.
For custom connections, it works.
-----Original Message-----
From: Jeff Durbin [mailto:techlists@xxxxxxxxxxxxx]
Sent: Friday, 15 October 2004 9:26 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ICA Client 8.0
I wouldn't do it this way, personally. The first registry value that the
script replaces is 'Order' under NetworkProvider. It's replaced with the
value "LanmanWorkstation,PnSson". I think the intention is to add the
"PnSson" part. That's fine, if the original value was just
'LanmanWorkstation". On my XP Pro machine, the original value is
"RDPNP,LanmanWorkstation,WebClient", so if I ran the script, I would lose
the "RDPNP" and "WebClient" values. The script would have to append the
"PnSson" part to work properly.
_____
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Matthew Shrewsbury
Sent: Thursday, October 14, 2004 12:41 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ICA Client 8.0
Does anyone know if this works for the 7.1 client?
Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA
Network Administrator
-----Original Message-----
From: Jim Hathaway [mailto:JimH@xxxxxxxxxxxxxxx]
Sent: Thursday, October 14, 2004 3:21 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: ICA Client 8.0
Bruno,
If on installation of the ICA 8.0 client the end user does not select to use
local logon credentials for their sessions, then the SSO registry settings
will not get setup properly. It will be possible from within the client
interface to select these options after the fact, but they won't work
properly because the installation process alone will setup the proper
registry keys.
Chris Walter posted the following KIX script to the list a few months back
when this was being discussed, this script makes all the needed registry key
entries for clients without having to re-install the ICA client.
$x =
WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvi
der\Order", "ProviderOrder","LanmanWorkstation,PnSson",REG_SZ)
$appsrvU="%userprofile%\applic~1\icaclient\appsrv.ini"
$appsrvD="c:\docume~1\defaul~1\applic~1\icaclient\appsrv.ini"
$pnd="c:\docume~1\defaul~1\applic~1\icaclient\pn.ini"
$x =WriteProfileString("$appsrvU", "WFClient", "SSOnUserSetting", = "On")
$x =WriteProfileString("$appsrvU", "Metaframe",
"UseLocalUserAndPassword","On")
$x =WriteProfileString("$appsrvD", "WFClient", "SSOnUserSetting", ="On")
$x =WriteProfileString("$appsrvD", "Metaframe",
"UseLocalUserAndPassword","On")
$x =AddKey("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson")
$x
=AddKey("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\NetWork
Provider")
$x
=AddKey("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Enum=")
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson","I
sEnabled","1",REG_DWORD)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson","T
ype","4",REG_DWORD)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Net
workProvider", "Class","2",REG_DWORD)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Net
workProvider", "Name","Citrix Single Sign-on",REG_SZ)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Net
workProvider", "ProviderPath","C:\Program
Files\Citrix\ICAClient\pnsson.dll",REG_SZ)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Enu
m", "0","Root\LEGACY_PNSSON\0000",REG_SZ)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Enu
m", "Count","1",REG_DWORD)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Enu
m", "NextInstance","1",REG_DWORD)
$x
=WriteValue("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PnSson\Enu
m", "Service","PnSson",REG_SZ)
You'll obviously want to test this out first before just mass rolling this
script out to all end users. I haven't doublechecked this (just saved the
post w/ the script) so you'll want to verify the reg keys written here are
still valid for the 8.0 ICA client.
HTH
J
_____
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Petitti, Bruno
Sent: Thursday, October 14, 2004 12:00 PM
To: Thin
Subject: [THIN] ICA Client 8.0
We are currently deploying a new client to our firm computers and in the
process sending down ICA configuration files.
The client installs correctly, but then we have a script running that copies
the following files to the user's profile:
Appsrv.ini
Pn.ini
Uistate.ini
Wfclient.ini
When the user opens Citrix Program Neighborhood all the settings have been
applied but on some computers options like pass through authentication are
grey out or local user logon credentials.
Any idea's why?
Thanks for your help in advance.
Notice: This transmission contains confidential information intended only
for the use of the individual or entity to whom it is addressed. Any
disclosure, copying, distribution, or action in reliance on the contents of
this transmission is strictly prohibited by anyone except the party to whom
it is addressed.
Other related posts:
