• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1811
  • Last Modified:

Citrix ICA and XP Pro with user access vs. administrator access

Accessing citrix via a web portal for a hospital.  Access via a computer or thin client.

Able to launch citrix application with an account with administrator privlegages, but when trying to acces with an account with user access the citrix application starts and then says unable to connect.

Do i have to give access to the user account somewhere, certain files, etc?

Does anyone have any ideas? Does this make sense?

Scott
0
goldmantechology
Asked:
goldmantechology
1 Solution
 
mrwaqarCommented:
Are you able to login locally on Citrix in a user's name which doesnt work remotely and run the application? Can you post the full error message you are getting?
0
 
goldmantechologyAuthor Commented:
This is an application provided by a hospital.  I am not the administrator of the citrix server. Just the IT consultant for the medical practice trying to access the hospital system. I am not that experienced with citrix.

The hospital has provided a URL to logon to citrix.  Once the user is logged in they then click on the application icon they want to launch via citrix.

A user with Administrator privledges can launch the application.

A user with user privledges can NOT launch the application. The errors "Network or dial-up problems are preventing communication with the Citrix MetaFrame Server.

Now I know citrix installs a small file when lauching from the web for access to the application.  Now where does citrix try to install this?  That is most likely the problem since adminstrators don't have a problem installing things, where a user does not have access to install something on the computer.

Scott
0
 
BLipmanCommented:
Citrix does not install anything on a thin client, they have the ICA client software embedded in firmware.  What happens when you connect to the Web Interface is an ICA file is passed to the client software and this file specifies parameters to the client to launch.  I don't think this is your issue though.  
Whenever people are troubleshooting Citrix and the Web Interface I suggest connecting via the full blown Citrix client on a PC workstation.  This simplifies things.  When you get that working you can test it via the Web Interface and then from a thin client.  
The first thing you need to check is if the user is a member of the local group "Remote Desktop Users" on each Citrix server.  This opens up policies on the local server that will allow interactive logon and a bunch of other stuff.  If this is a 2000 Citrix server then it works differently.  The next thing you can check is Citrix Connection Configuration.  Open this and check the permissions on ICA-TCP, this is the TCP/IP listener for the ICA protocol.  I set User access (not Guest or Full) for normal users.  
Check those 2 items and see if you can test with the actual Citrix Client from a PC.  Now you were almost correct with the "Citrix installs a small file" thing; just not with how your phrased the question.  On a PC (not a thin client) there must be either an Active X/Java plug-in in your browser or a full blown ICA Client on the PC for it to connect.  The thin client uses an embedded client.  
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 
goldmantechologyAuthor Commented:
Not able to connect with full blown Citrix as the hospital does not allow this for a physician.  However this would not solve the problem.

Here are the scenarios with the problem taking place.  

Scenario A:

Customer is on XP Machine with Administrator privileges (no DC logs in locally to machine).
Goes to website that hospital provides
Logs in with username and password
Citrix provides icon for Software application
Click on software application and it begins the logon process
Negotiation Capabilities completes and software application launches.

 

Scenario B:

Customer is on XP Machine with user privileges (no DC logs in locally to machine).
Goes to website that hospital provides
Logs in with username and password
Citrix provides icon for Software application
Click on software application and it begins the logon process
Negotiation Capabilities does not complete and the following error is presented
MetaFrame Presentation Server connection interrupted, attempting to reconnect
0
 
BLipmanCommented:
Your user is trying to save a TCAL I would bet.  Go  to the following registry key and give the user full access:

HKEY_LOCAL_MACHINE\Software\Microsoft\MSLicensing

You will need to use the 32 bit registry editor to assign permissions to a key (execute regedt32 from the Run bar).  Then give the local user full rights to this and its subkeys.  See if that works.  You could verify this process by running RegMon and watching the client plug-in try to access your registry.  To make your life easier you might want to try pre-loading the web plug-in on your doctors machines via policy or something.  That will prevent any install errors if they don't have it loaded already.  
0
 
goldmantechologyAuthor Commented:
That fixed the problem.  Thank you.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now