We help IT Professionals succeed at work.

can you add a xenapp server to a farm that is not in the same domain?

Last Modified: 2012-02-28
we have multiple domains at one site
DOMAIN A has a citrix xenapp 6 farm in it (FARM A)
DOMAIN B has no citrix farm within
we want to install xenapp on one of the servers in DOMAIN B and have it publish applications
will we be able to add it to FARM A which resides on a different domain?
Watch Question

Carl WebsterCitrix Technology Professional - Fellow
Most Valuable Expert 2019
Top Expert 2010

I do not see a problem with that.  In the web interface you can enter multiple domains.  I have one customer with servers in 7 AD forests and it works.
Senior Consultant
This one is on us!
(Get your first solution completely free - no credit card required)
Carl WebsterCitrix Technology Professional - Fellow
Most Valuable Expert 2019
Top Expert 2010

Nope, 7 AD Forests each with 1 domain.  So, I guess technically 7 AD Domains.  But 7 AD Domains can be on 1 Forest or multiple forests.  I mean 1 domain each in 7 AD Forests.
Ayman BakrSenior Consultant

Great, I agree with you Carl; but in this scenario trust relationship is not by default and thus I am sure that company had created the two-way transitive trust relationship between the forests.
Top Expert 2010

While it's possible, UPN form of authentication is not possible with multiple forest also Citrix recommend servers to be in same domain

Recommendations for Active Directory Environments
Citrix recommends the following configuration for server farms with Active Directory:•XenApp servers are in their own Organizational Units (OUs).
•All servers reside in the same domain.
•The server farm domain has no trust relationships with non-Active Directory domains, as this can affect operations requiring trusted domains.
•The server farm is in a single Active Directory forest. If your farm has servers in more than one forest, users cannot log on by entering user principal names (UPNs).
UPN logons use the format username@UPN identifier. With Active Directory, UPN logons do not require a domain to be specified, because Active Directory can locate full UPN logons in the directory. However, if the server farm has multiple forests, problems occur if the same UPN identifier exists in two domains in separate forests.
Important: Citrix XenApp does not support UPN logons if a server farm spans multiple Active Directory forests.

More information:


Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.