sword12
asked on
Citrix profile management issue
hi citrix experts
We have in our environment Citrix users profile problem. we have XenApp 7.12
We are using Citrix user profiles and we do this via delivery controller policy
We do folder redirection for (( desktop – my documents – download – APP data – contact – links – pictures – start menus – etc ))
But recently our user profiles getting bigger so much and I found the biggest directory
AppData\Local\Microsoft\Wi
AppData\Local\Mozilla\Fire
I found online this links which shoes which paths I have to include
https://www.smali.net/citrix-profile-management/
here the configuration but with AD GPO but we use Citrix policy from delivering controller
https://www.lewan.com/blog/citrix-profile-management-done-correctly-part-1-of-2
I have two questions
1- In the delivery controller policy, I can add the exclusion directory and exclusion files but I don’t know the syntax
Should be like this AppData\Local\Microsoft\Wi
Or like this the all path from the shared file system \\filerone\CTX-Profiles\%u
2- After I configure this policy and let say it worked what will happen to the data inside the old users profile some of the users has more than 6 GB \INetCache directory. it will be removed automatically or I have to do it manually
And any side effect to user work
We have in our environment Citrix users profile problem. we have XenApp 7.12
We are using Citrix user profiles and we do this via delivery controller policy
We do folder redirection for (( desktop – my documents – download – APP data – contact – links – pictures – start menus – etc ))
But recently our user profiles getting bigger so much and I found the biggest directory
AppData\Local\Microsoft\Wi
AppData\Local\Mozilla\Fire
I found online this links which shoes which paths I have to include
https://www.smali.net/citrix-profile-management/
here the configuration but with AD GPO but we use Citrix policy from delivering controller
https://www.lewan.com/blog/citrix-profile-management-done-correctly-part-1-of-2
I have two questions
1- In the delivery controller policy, I can add the exclusion directory and exclusion files but I don’t know the syntax
Should be like this AppData\Local\Microsoft\Wi
Or like this the all path from the shared file system \\filerone\CTX-Profiles\%u
2- After I configure this policy and let say it worked what will happen to the data inside the old users profile some of the users has more than 6 GB \INetCache directory. it will be removed automatically or I have to do it manually
And any side effect to user work
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
They both do the same thing. Some Citrix admins have no access or rights to AD GPOs so they can only use Studio based policies.
On mobile right now. Will look at your attachment when I get home.
On mobile right now. Will look at your attachment when I get home.
Just a reminder that 7.12 is no longer supported. Citrix support will not talk to you about any issues unless you are on at least 7.15.
BTW:
"Note: %USERPROFILE% is implied by Profile management. Do not add it explicitly"
Take a look at what Citrix recommends.
https://docs.citrix.com/en-us/profile-management/downloads/profile-management-5.pdf
Cookie handling
Profile Management now supports deleting stale cookies for Internet Explorer 10 and Internet Explorer 11. You can use the “Process Internet cookie files on logoff” policy to delete stale cookies to avoid cookie folder bloat. In addition, add the following folders to the list of folders that you want to mirror:
AppData\Local\Microsoft\Wi
AppData\Local\Microsoft\Wi
AppData\Roaming\Microsoft\
BTW:
"Note: %USERPROFILE% is implied by Profile management. Do not add it explicitly"
Take a look at what Citrix recommends.
https://docs.citrix.com/en-us/profile-management/downloads/profile-management-5.pdf
Cookie handling
Profile Management now supports deleting stale cookies for Internet Explorer 10 and Internet Explorer 11. You can use the “Process Internet cookie files on logoff” policy to delete stale cookies to avoid cookie folder bloat. In addition, add the following folders to the list of folders that you want to mirror:
AppData\Local\Microsoft\Wi
AppData\Local\Microsoft\Wi
AppData\Roaming\Microsoft\
ASKER
Thank you for your update so the configuration in the attached file ok ? Or
And what the benefits of mirror this directories
I can understand the exclusions but mirroring why
Plus if I enable to remove I.E. cookie this will make the log of time so long
I am searching for a configuration which meets
1 fast log in with light profile
2 fast log of also
And do you think if we installed work space environment management will help but even WEM use citric Profil management just the advantage that resource management
Or we can think about app sense in the Future
Kindly advice me what the best I can do till I make upgrade
Plus can I make upgrade to 7.15 on the fly without side effects
I am thinking to do it like this
0 upgrade license servers
1 upgrade delivery controllers
2 upgrade PVS
3 upgrade VDAs on the images
4 upgrade store front
What do you think
Thanks
And what the benefits of mirror this directories
I can understand the exclusions but mirroring why
Plus if I enable to remove I.E. cookie this will make the log of time so long
I am searching for a configuration which meets
1 fast log in with light profile
2 fast log of also
And do you think if we installed work space environment management will help but even WEM use citric Profil management just the advantage that resource management
Or we can think about app sense in the Future
Kindly advice me what the best I can do till I make upgrade
Plus can I make upgrade to 7.15 on the fly without side effects
I am thinking to do it like this
0 upgrade license servers
1 upgrade delivery controllers
2 upgrade PVS
3 upgrade VDAs on the images
4 upgrade store front
What do you think
Thanks
AppSense (now owned by Ivanti) is one complex piece of software.
WEM has too many issues for me. I don't mess with it anymore.
Fastest logon and logoff possible is done by using mandatory profiles. But then users cannot save anything to their profiles.
If you do not want any Internet cookies saved, then don't mirror the inetcache folder. Mirroring the folder is the recommendation from Citrix and then use the policy setting to delete temp internet cookies to get rid of cookies that are not saved in the cookie cache database file.
The process to upgrade from one version of XenApp/XenDesktop is well documented in the product docs. I always use the documented process.
WEM has too many issues for me. I don't mess with it anymore.
Fastest logon and logoff possible is done by using mandatory profiles. But then users cannot save anything to their profiles.
If you do not want any Internet cookies saved, then don't mirror the inetcache folder. Mirroring the folder is the recommendation from Citrix and then use the policy setting to delete temp internet cookies to get rid of cookies that are not saved in the cookie cache database file.
The process to upgrade from one version of XenApp/XenDesktop is well documented in the product docs. I always use the documented process.
ASKER
HI Carl
sorry but i don't find on Citrix site the doc which talk about upgrade from 7.12 to 7.15
kindly send me the link
sorry but i don't find on Citrix site the doc which talk about upgrade from 7.12 to 7.15
kindly send me the link
ASKER
HI Carl
what exactly the meaning of Exclusion
1- Exclusion that you exclude this data to be saved on the shared file system where you save the users profiles and let them be saved on the local disk of the worker (( if this option so we make the full local disk full and we need to reboot from time to time the worker
2- Exclusion that that you exclude this data to be saved on the shared file system where you save the users profiles and let them be saved on other shared file system (( and this mean the other shared file system will be full of trash data just INTERNET cache
3- Exclusion that this data will be saved as TMP data and when the user log off this data will deleted (( if this option right so this make sense for me and this is what exactly i need
plus i don't understand Folders to mirror . why i have to mirror them and to where local disk or shared file system
i need a solution that IE and Firefox and chrome cache will be removed after the user will log off
i did a GPO for IE it worked for some users and some not
i am stil fighting to find a solution which make the user profile small as much as i can
plus i want to use from delivery controller an option called profile streaming but i saw that this work together with always cache size
but i dont want to cache anything on the local disk of the worker
so can use profile streaming without caching anything on local disk maybe this will speed on the login time for our users
tell me how
pls check the attached file
answer me when you have time pls
thanks a lot
11-22-2018-4-06-57-PM.jpg
what exactly the meaning of Exclusion
1- Exclusion that you exclude this data to be saved on the shared file system where you save the users profiles and let them be saved on the local disk of the worker (( if this option so we make the full local disk full and we need to reboot from time to time the worker
2- Exclusion that that you exclude this data to be saved on the shared file system where you save the users profiles and let them be saved on other shared file system (( and this mean the other shared file system will be full of trash data just INTERNET cache
3- Exclusion that this data will be saved as TMP data and when the user log off this data will deleted (( if this option right so this make sense for me and this is what exactly i need
plus i don't understand Folders to mirror . why i have to mirror them and to where local disk or shared file system
i need a solution that IE and Firefox and chrome cache will be removed after the user will log off
i did a GPO for IE it worked for some users and some not
i am stil fighting to find a solution which make the user profile small as much as i can
plus i want to use from delivery controller an option called profile streaming but i saw that this work together with always cache size
but i dont want to cache anything on the local disk of the worker
so can use profile streaming without caching anything on local disk maybe this will speed on the login time for our users
tell me how
pls check the attached file
answer me when you have time pls
thanks a lot
11-22-2018-4-06-57-PM.jpg
Exclusion list - files:
List of files that are ignored during synchronization.
File names should be specified as paths relative to the user profile. Wildcards are allowed. Wildcards are applied recursively.
Note: As of Profile Management 7.15, you can use the vertical bar '|' for applying a policy to only the current folder without propagating it to the subfolders.
Examples:
Desktop\Desktop.ini ignores the file Desktop.ini in the Desktop directory.
AppData\*.tmp ignores all files with the extension .tmp in the directory AppData and its subfolders.
AppData\*.tmp| ignores all files with the extension .tmp in the directory AppData.
If this setting is disabled, no files are excluded.
Exclusion list - directories:
List of directories that are ignored during synchronization.
Folder names should be specified as paths relative to the user profile.
Examples:
Entering "Desktop" (without quotes) ignores the Desktop directory in the user profile.
If this setting is disabled, no folders are excluded.
Registry exclusion list:
List of registry keys in the HKCU hive which are ignored during logoff.
Example:
Software\Policies.
If this setting is disabled, no registry keys are excluded.
List of files that are ignored during synchronization.
File names should be specified as paths relative to the user profile. Wildcards are allowed. Wildcards are applied recursively.
Note: As of Profile Management 7.15, you can use the vertical bar '|' for applying a policy to only the current folder without propagating it to the subfolders.
Examples:
Desktop\Desktop.ini ignores the file Desktop.ini in the Desktop directory.
AppData\*.tmp ignores all files with the extension .tmp in the directory AppData and its subfolders.
AppData\*.tmp| ignores all files with the extension .tmp in the directory AppData.
If this setting is disabled, no files are excluded.
Exclusion list - directories:
List of directories that are ignored during synchronization.
Folder names should be specified as paths relative to the user profile.
Examples:
Entering "Desktop" (without quotes) ignores the Desktop directory in the user profile.
If this setting is disabled, no folders are excluded.
Registry exclusion list:
List of registry keys in the HKCU hive which are ignored during logoff.
Example:
Software\Policies.
If this setting is disabled, no registry keys are excluded.
ASKER
Thanks for the answer
And excuse my limited understanding
So exclude mean the path I set to be excluded will be 100 % ignored and will not be saved on the local disk of the xenapp server or any where els
If the answer yes
How the application which need this path will work
For example inetcach for IE
And excuse my limited understanding
So exclude mean the path I set to be excluded will be 100 % ignored and will not be saved on the local disk of the xenapp server or any where els
If the answer yes
How the application which need this path will work
For example inetcach for IE
"So exclude mean the path I set to be excluded will be 100 % ignored and will not be saved on the local disk of the xenapp server or any where else"
Only if you have it set to delete the cached copies of the roaming profile.
"How the application which need this path will work
For example inetcach for IE"
Then you include the specific files. The FOLDERS and contents will be ignored EXCEPT for any FILES you SPECIFICALLY configure to be included.
For example, you could exclude APPDATA\Local and all subfolders and nothing will be saved to the user's profile.
You could exclude APPDATA\Local but include APPDATA\Local\subfolder1\f
Only if you have it set to delete the cached copies of the roaming profile.
"How the application which need this path will work
For example inetcach for IE"
Then you include the specific files. The FOLDERS and contents will be ignored EXCEPT for any FILES you SPECIFICALLY configure to be included.
For example, you could exclude APPDATA\Local and all subfolders and nothing will be saved to the user's profile.
You could exclude APPDATA\Local but include APPDATA\Local\subfolder1\f
ASKER
so i will do it like this (( please check the attached file ))
then after that i will remove manually the huge amount of data from the shared file system where the citrix users profiles saved
then i hope the login will faster and user profiles will be lighter
do you think it was bad to use citrix policy from delivery controller not using AD GPO temple
do you think AD GPO better or both the same
thanks again
11-10-2018-9-59-18-PM.jpg