Mcafee Antivirus install on Citrix How?

Posted on 2009-04-29
Last Modified: 2013-12-09

Anyone please confirm what is the RIGHT way to install antivrus software on a Citrix server. Since the antivirus is not going to be published does it still have to be installed in a user install mode as below?? If so why?

change user /install

Also - any windows updates or any programs that are NOT going to be published how should those be installed etc...?

Question by:badabing1
    LVL 21

    Expert Comment

    If the installation package is a MSI from MS or Citrix, the MSI will put the server in install mode. From other vendors (atleast whom I trust) you can't be sure the MSI will set the TS in install mode.

    Installation that affects the HKCU registry and ini-files located in user profiles, the server needs to be in install mode. The secure way is the manually set the server in install mode to be 100 per cents sure things don't goes wrong.

    Should not be users logged on when you install (because they might lock the HKCU reg/ini-files for writing).

    Windows update don't modify HKCU or users ini-files.

    My prefered way:

    1. change logon /disable
    2. query user (get them out if someone is logged on)
    3. change user /install
    4. install the software
    5. change user /execute
    6. change logon /enable

    LVL 21

    Expert Comment


    Here is the guidelines from Citrix regarding anti-virus:


    Author Comment

    so is Mcafee install  needed to be install mode, if so why?

    LVL 21

    Accepted Solution

    Install and configure the software for use with other products
    When installing VirusScan Enterprise software where third-party products are installed, or when
    using it with supporting products, you might need to change the installation procedure or
    perform additional configuration. For example, if you are using the Setup utility to install the
    VirusScan Enterprise software where Windows 2003 with Terminal Services is installed, the
    installation stops and you are notified to install the program files using the Windows Add/Remove
    Programs utility.
    NOTE: This installation method is not required if you are using ePolicy Orchestrator to deploy
    VirusScan Enterprise.

    This states that you need to set the server in install mode. (doing the installation from Add/Remove Program will set the TS in install mode. Another way of typing "change user /install").

    Why McAfee say you do is probably because the installation writes to the HKCU.


    Author Comment


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Citrix XenDesktop 7.6 Citrix Policies Audio
    Several part series to implement Internet Explorer 11 Enterprise Mode
    How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now