Solved

XenApp 6.0 Policies force Users to log Into Local XenApp Server

Posted on 2012-03-14
8
1,142 Views
Last Modified: 2012-03-16
Using XenApp 6.0 policies how can I set the policies so that users log / use applications use their local XenApp servers first then only use other XenApp server applicatins if their local server is not availbe. Is there anyway for me to hide applicaton of sites so users do not get mixed up.

For exmaple Word Site 1, Word Site 2 and Word Site 3. Only site 1 would see word1 , site 2 would see word 2 etc...
0
Comment
Question by:compdigit44
  • 3
  • 3
  • 2
8 Comments
 
LVL 23

Expert Comment

by:Ayman Bakr
ID: 37722210
Let's say you have 3 sites in a farm. You need to organize each site's servers in a separate worker group. So site 1 will have worker group 1, site 2 will have worker group 2 and so on.

Then when you publish word (or any application) you publish it to all three worker groups.

Then in the Delivery Services Console on the Load Balancing Policies node you will create a load balancing policy as follows:

1. You will filter it to apply to the users in one site - say site 1.

2. You will add all three worker groups; however worker group of site 1 should have priority 1

This way users in site 1, when starting word or any app, will be directed to least loaded server from worker group 1. Only when none of the servers in worker group 1 are available the user will be directed to other worker groups depending on the priority set; hence achieving high availability.

You will create two more policies (1 for each site) and filter each to the site's users. Site 2 should have worker group 2 as priority 1 and in the third policy site 3 should have worker group 3 as priority 1.
0
 
LVL 19

Author Comment

by:compdigit44
ID: 37724494
Thanks for the reply. Since I have never used Citrix load balancing before I have the following questions.

1) I already have my Citrix server is both sites in their own zones and worker groups.

2) All of my remote users are not in a group but in a seperate OU.  If I filter by users would users from another site be able to access resources if need be or will they be denied access?

3) if I do setup the load balance policy as listed when users open the web interface will they see all application hosted in the farm or just the applications hosted on their local xenapp server. I know if users see all apps my users are going to get confused as to which apps to click on.

4) My manager has asked me what would purchasing one Netscaler for our remote site do for use over citrix's policies> In other words would can the netscaler provide for us that we cannot do via policies
0
 
LVL 23

Expert Comment

by:Ayman Bakr
ID: 37724775
1) If you have each site configured as a separate zone then the data collector of the user's zone will respond with the least loaded server in that zone provided that you give each site's users a separate web interface configured with its own site's XML. However, you configure the policies to ensure failover, otherwise when no servers in the same zone are capable of handling requests the user in that zone will not be able to proceed.

2) You can filter by IP address instead - but I do urge you to organize your users into groups as this would ease administration and is the best practices. Yes, a user from another site will still be able to access resources if published to them (unless explicitly denied access) - however, with no zone configuration or policy filtering you will not be able to ensure that they land on a server in their own site.

3) They will see all the applications published to them regardless if the application is on their local XenApps. If you only want them to see applications installed on their local XenApps then only publish those to them.

4) Netscaler will provide intelligent local as well as global load balancing and segragation between sites. The benefit of a Netscaler is more than load balancing citrix products but also balancing other non-Citrix servers - but usually used to load balance the web interface servers. Policies are a cheap way for managing load balancing but it is no match in intelligency and with more policies created more administrative overhead is introduced - moreover it is used to load balance XenApps not web interface. I am no NetScaler specialist - but it not usually used to load balance the XenApps.
0
 
LVL 23

Expert Comment

by:Coralon
ID: 37726975
Mutawadi covered this in excellent detail.. I will add one thing.

You can configure WI to hide applications from users using javascript.  It's not too difficult to locate the scripts to do this, and based on that code, you can get more detailed in *how* you hide it, if you have a good web programmer.  

the basic listed code lets you hide applications by putting a # mark as the first character of the description, and it works very well.

Coralon
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 19

Author Comment

by:compdigit44
ID: 37729572
Thanks for the feed back everyone. My main reason for setting up one farm with one DS, 2 DC and two web servers ws do to the following.

1) All users in each site to access application hosted on their local XenAPP server

2) D/R I want to be able to access application in other site if one site should fail.

3) Here is one problem I have, I know you can publish apps to groups of users in order to hide them from the WI but this would help me in a D/R situation. I would need to manually added the other site user group to the apps to order for the users in the order site to see and use the applications. Right now users see every application in both site which is going to confuse my users. Even though applicatinos are labled Word -Site 1 or Word - SIte w they still do not know which icons to click on. I'm hoping there was a way for me to have all apps access but hidden but only viewable it there local xenapp server is down.

Where can I find easy to read information on the full features for NetScaler VPX
0
 
LVL 23

Accepted Solution

by:
Coralon earned 500 total points
ID: 37730347
For your DR situation, if you are hiding the apps, you can remove that hidden attribute with 1 powershell command.. It would be pretty easy to hide the old ones and unhide the DR ones to prevent confusion.  

This is assuming your database for DR is highly available -- if the database becomes inactive, your published app properties become read only.

Another option is to create a client side folder for DR apps, and just tell your users that they are for DR purposes only.  

There isn't really any *easy* documentation that I know of for the Netscalers.. it is a hugely complex product that can do a *ton* of different things.    The basic load balancing and SSL offloading is fairly straightfoward, and the GUI wizards are pretty good.

Coralon
0
 
LVL 19

Author Comment

by:compdigit44
ID: 37730562
How would I create a folder viewed in my WI that would contain my DR apps as you mentioned?
0
 
LVL 23

Expert Comment

by:Coralon
ID: 37730578
When you publish the apps, change the Folder in the Shortcut Presentation section of the properties. Whatever you put in that text box appears as a folder.  If you use a \, it will treat it as nested folders.

Coralon
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

#Citrix #XenApp #Citrix XenApp #Citrix Concurrent License #Citrix Licensing #Citrix Policies
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now