Citrix xenapp 7.7 Domain policy not applying Domain GPO

Consider that GPO is not a Citrix technology but Microsoft.

XenApp allows for configuring Citrix Policies using Group Policy but there is a component installed and it still requires the standard Central Repository hosted on the SYSVOL.

You have to make sure and use the latest ADMX files for that version.

Example, if you had earlier versions of XENAPP such as .7.5 or 7.6 those ADMX files are not updated on the SYSVOL automatically.

This can cause issues.

If RSOP only shows local policy that can happen if logged on to the server as local administrator instead of Domain Administrator.  

Something to consider.

Hi All,

To clarify based on your questions and suggestions. We have an OU called Terminal servers and put our citrix servers, that OU is blocking the domain the policy. Created a new GPO for the OU and its not applying  to citrix servers ( specially office 2013 - toolbar, disabling protected view outlook).

This is a new fresh install. When I RSOP it only brings up local policy with no policy applied from the GPO. I didn't download the office 2013 ADMX files onto the citrix server, is this something we need to do in order for the policy to be applied.

You mentioned Office 2013.

Did you download the latest ADMX files and place them in the INF folder?

Then this would create a central repository on the SYSVOL

You must import those ADMX files for the settings to show up.

OR

You must copy the ADMX files and ADML files to the INF folder

When you open up GPMT tool it will create a Policy folder on SYSVOL

Download
https://www.microsoft.com/en-us/download/details.aspx?id=35554

Install
http://www.ntweekly.com/?p=8602

This should resolve your issue

Assuming you mean to download and update the ADMX file on domain controller or is it the local citrix server.

Also, we have 2013 ADMX, if we update with the latest, will it overwrite or clear any policy settings that we already have on our network

You should not mix and match.

In other words, your "other network" machines should not have the same ADMX files as Citrix.

Those are workstations.

Citrix runs on 2008 R2 64 bit OS.

That could be your issue right there.

You must create a dedicated GPO just for Citrix that is relative to 2008 R2 server operating system running in RDS mode with Citrix installed.

The ADMX files should match the patch level of Office Suite.

If you have the latest Office service pack then yes, those files should be copied to the local C:\windows\inf folder.

Imported to GPMT

A brand new policy created.

On a 2008 R2 Server.

So that the new policy gets created on the central repository using 2008 R2 SP1 OS for example and the policies will work.

You are only copying to c:\windows\INF on one server.

Just long enough to create the Group Policy using Group Policy Mgmt Tool

Once your new Policy folder shows up on SYSVOL feel free to delete the local copies of ADMX

After you make all your setting changes that is.

Another catch.  If you upgrade or use 2012 R2 OS and Citrix in the future.

Follow the same steps to create a complete separate Group Policy linked to a dedicated OU or lots of problems.

Ok will try that and update you.

Good deal.  I would go ahead and take a snapshot of the central store so you know when the new one is added.

https://support.microsoft.com/en-us/kb/3087759

http://blogs.technet.com/b/askds/archive/2009/12/09/windows-7-windows-server-2008-r2-and-the-group-policy-central-store.aspx 

Good reference points above.

By snapshot I mean "screen shot"

Hi All,

We tried of couple of things, and it was the obvious wmi filtering was applied.