Hi, Do you mean the XML server in the Windows 2003 or the DC in that domain? What articile is CTX 076838 ?? I can't seem to find that article on Citrix's support site. Thanks again. ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Mike Semon Sent: Friday, September 16, 2005 3:53 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [THIN] Does your Windows 2003 server have SP1? There is a know issue with pass-through authentication. I am not sure if it is for Smart Cards only. Might also look at CTX 076838. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Selinger, Stephen Sent: Friday, September 16, 2005 4:24 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [THIN] Hi, Yes, pass through works great for my domain. But it does not work for the Windows 2003 domain in which I have a one way trust to. Thanks ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Mike Semon Sent: Friday, September 16, 2005 3:02 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [THIN] Yes, that is an earlier version of WI. So is Pass-through working for your Windows 2000 domain. If so that would eliminate the ICA client being the problem. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Selinger, Stephen Sent: Friday, September 16, 2005 3:39 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [THIN] Hi, Is that a WI 3.0 file location? I can not find an Nfuse Icon on my 4.0 WI site. Also if I set my WI site to only using connect to the XML server in the Windows 2003 domain I do not receive any applications when using Pass-Through. I am informed by WI that there are no applications configured for my user account. When I log on to the WI site explicitly I do get the applications and am able to sign on to those applications using credentials from my Windows 2000 domain. Thanks ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Mike Semon Sent: Friday, September 16, 2005 2:21 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: [THIN] Might check permissions WebDir\Citrix\MetaFrameXP\NFuseIcons This is the folder used to store application icon image files. The web server receives the icon data from the MetaFrame XML service, writes GIF images to disk, and then serves the images over HTTP to the user. If Web Interface is configured for only explicit authentication, the IWAM_MachineName account is responsible for writing the files to disk and the IUSR_MachineName account reads the files during delivery. If Web Interface is configured for Desktop Credentials Pass-Through or Smart Card authentication, IIS impersonates the user account for reading and writing the icons. Authenticated Users: Full Control SYSTEM: Full Control Guest: No access Mike -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On Behalf Of Selinger, Stephen Sent: Friday, September 16, 2005 3:09 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Good Day, I am trying to pass through my user's windows credentials to the WI 4.0 site. I have a Windows 2000 (Domain A) mixed mode domain with a one way trust to a Windows 2003 (Domain B)native mode domain. Users are presented with all applications from the Windows 2000 domain (A) when they log on with pass through authentication but they receive no applications from the Windows 2003 domain (B). If they log on with a explicit logon they receive applications from both farms and life is good. My WI site is set to the xml server in both domains. Thanks in advance and please let me know if I am not being clear. I have posted this message on the Citrix forms but had no reply thus is why I am posting here. (probably should have started here first anyways!)