This post will show on how to disable local drive mapping via GPO for Windows Server 2003 environment. Considering GPO will take precedence over Citrix policy, this setting will work on both RDP and ICA sessions. Description : Disable local drive mapping via GPO (the same setting can be applied to local policy too) How To Do : Open your Group Policy Object, and browse to this setting ( Computer Configuration > Administrative Templates > Windows Components > Terminal Services > Client/Server data redirection   Let's focus on Do not allow drive redirection. Right click at it, and click at Properties  Choose Enabled, press Apply and OK.  This will be the outcome. This is the explanation on this setting by Microsoft.   Drive mapping is now disabled, and users are not able to change it.

Description : There are multiple ways to do add AD user groups into computer local groups - manual way or using GPO. To me, it is always GPO way - it is easier (sort of) as the configuration will be persistent across all servers where the GPO being applied to. How To Do :  At your GPO, right click at it, and choose E dit...  Expand to Computer Configuration > Windows Settings > Security Settings > Restricted Groups . Right click at it, and choose Add G roup...  Click at Browse... as we want to choose the AD user Group.  Type your AD User Group   Click at Check Names to ensure the group is correct. Once it is confirmed, click at OK . The User group will be listed here. You can choose as many user groups as you want, it will be listed here. Press OK again.  In here, click at the Add button under This group is a member of:  option.  Click at Browse to choose the local group to be assigned to.  Type your desired local group name. In this example, I

I think I rarely touch about Active Directory, so let's start with a basic one. Let say, one day you want to housekeep your OU structure, delete or maybe move some OUs to different locations, but you got an error : You do not have sufficient privilages to delete <OUName>, or this onject is protected from accidental deletion. or Windows cannot move object <OUName> because: Access is denied. Well, if we look at the first error, it is clear cut, the object is protected from accidental deletion, so the object needs to stay there. Whereas for second error, it just mentioned "access is denied".  Issues : Can't delete or move OU, either one of above errors prompted. Troubleshooting   Right click at the target OU, and click at Properties

This maybe one of my last posts for Windows Server 2003, as we all know its EOL is on July 2015 (14th of July, 2015 to be exact). This post may become handy to some, may not to the others, as they already moved to Windows Server 2008, or perhaps Server 2012. Description : How To Sysprep Windows Server 2003. How To Do :  Mount the Windows Server 2003 installer (take note on the version). Once done, browse to Support\Tools folder. Double click at DEPLOY.CAB Highlight all files, right click, and choose Extract . Select a destination. In this case, it is C:\Sysprep . Once done, you will see all these files inside the folder.  Double click at sysprep.exe This screen will pop up. Press OK . Based on your preference, choose all needed options accordingly. If you want to customize the installation using INI file, choose Factory , or else Reseal . For this post, I chose Reseal , and wants Sysprep to regenerate security identifier (SID). Hence, this

In this Kb , Citrix explains  on how to set up a Configuration Logging for XenApp 6.5. In this  post, I will show on how to set up the same for XenApp 5 for  Server 2003. Description : Set up  Configuration Logging  for XenApp 5 for  Server 2003. How To Do :   Launch Citrix Console, right click at <FarmName> , and choose  Properties .  Browse to Farm-Wide > Configuration Logging .  Click at Configure D atabase .   Choose connection type (in this case, it is SQL Server), DB  Server name , and credential (in this case, I used Windows Integrated security). Press Next   Speficy the database name , and press Next  Leave all settings as default , but change " Use encryption " to No . Press Next  Press Test Database Connection in order to test the connection  You will see this screen if the testing is successful. Press OK Now we are good, Configuration Logging properly set up. press OK .

This is somehow not directly related to Citrix; it is more towards on how application reads information in registry. One of our application relies on Short Date format in Control Panel. Users will face error if the short date format is different with required format. Issues : Short Date format is different with application required setting. User won't be able to proceed with their tasks. Troubleshooting   Before proceed, ensure the user is not logging into the server (ICA or RDP). Go to Start > Run...  Type regedit, and press enter  Browse to My Computer > highlight the HKEY_USERS  Go to File > Load Hive...  Browse to user's profile ( %Documents and Settings%\<User ID> or %Users%\<User ID> ) and open NTUSER.DAT  Put a Key Name, and press OK  Browse to My Computer > HKEY_USERS > <Key Name> > Control Panel > International  Search for sShortDate , and check the format of the Data. In here, yo ucan searc