Prompt User Credentials When Executing Jobs in NetScaler MAS 12.x

Complete the following steps to configure “Specify User Credentials for this job” option when creating Jobs:

1. Navigate to Networks > Configuration Jobs > Click Create Job button.

User-added image

2. After selecting the required custom job parameters, such as the name of the job, the configuration type, adding instances it must be run on, the variables for the instances, click Next.

User-added image

3. Select Instance.

User-added image

4. Specify Variable Values

User-added image

5. Job Preview.

User-added image
6. Execute variables.

a. Check Specify User Credentials for this job radio button.

User-added image

Related:

How to use Citrix Policy to Set a Default Session Printer

This section details how to configure Citrix Policy settings to set one of the following printer types as the default printer in the session:

  • Client Printer
  • Network Printer
  • Citrix Universal Printer
  • Citrix PDF Printer

Client Printer

Client printers are any printer device that is configured on the user endpoint where the Citrix Receiver client is installed. This generally refers to printers that are physically attached to the endpoint but may include network printers configured on the endpoint. The default printer on the client side can be set as the default printer in the session.

Printing Policy Settings:

  • Set the Default printer policy setting to ‘Set default printer to the client’s main printer’.
  • In the Printer assignments policy setting, set the Default printer setting to ‘Client main printer’.

Network Printer

Network printers are any printer that is accessible from the VDA to a shared printer UNC Path. These printers are generally managed and assigned to users by IT administrators. Network printers may be configured on a XenApp server, a virtual desktop, or directly on the user endpoint.

Printing Policy Settings:

  • Add the UNC path of the network printer to the Default Printer policy setting.
  • Add the UNC path of the network printer to the Printer Assignments policy setting.

Citrix Universal Printer

Citrix Universal Printer is a generic printer created at the beginning of a session that is not tied to any client printing device. When using this generic printer, the resulting print job will be sent to and displayed on the local endpoint where the user has the option to print to any client printer available. This printer is enabled via Citrix policy and can only be used with Windows endpoints using the Receiver for Windows client. Not to be confused with the Citrix Universal Printer Drivers.

Printing Policy Settings:

  • Set the Default printer policy setting to ‘Set default printer to the Generic Universal Printer’.
  • In the Printer assignments policy setting, set the Default printer setting to ‘Generic Universal Printer’.

Citrix PDF Printer

Citrix PDF Printer is a PDF printer created at the beginning of a session that is not tied to a printing device. When using this PDF printer, the resulting print job will be sent in PDF file format and displayed on the local endpoint where the user has the option to print to any client printer available. This printer is enabled via Citrix policy and can only be used with Chrome and HTML5 receivers.

Printing Policy Settings:

  • Set the Default printer policy setting to ‘Set default printer to the PDF printer’.
  • In the Printer assignments policy setting, set the Default printer setting to ‘PDF printer’.

Troubleshooting

Symptoms or Error

Default session printer is not being set correctly in the session on Windows 10 or Windows Server 2016 VDAs.

Solution

Disable the option to ‘Let Windows manage my default printer’ on the VDA.

Option 1

  1. Navigate to Windows Start menu.
  2. Click “Settings”.
  3. Click “Devices” in the Settings dialog.
  4. Click “Printers & scanners” section.
  5. Disable the setting “Let Windows manage my default printer”.

Option 2

Set the following registry value:

  • Registry path: HKEY_CURRENT_USERSOFTWAREMicrosoftWindows NTCurrentVersionWindows
    • Name: LegacyDefaultPrinterMode
    • Type: REG_DWORD
    • Data: 1

Option 3

Disable the windows setting through Group Policy.

Navigate to the following location in Group Policy Editor:

  • User Configuration -> Administrative Templates -> Control Panel -> Printers
    • Enable “Turn off Windows default printer management”.

Problem Cause

When ‘Let Windows manage my default printer’ is enabled, the last session printer created in the session is set as the default printer. Windows sets the default printer to the most recently used printer.

Related:

FAQ: Time Zones and ShareFile

Q: Is it possible to set a default time zone and default time settings for new users?

A: No. Users will need to manually update their own profile to change the timezone. This setting can be found in Settings > Personal Settings > Edit Profile > Time and Date

Q: I live outside of Eastern Standard Time but all reporting seems to default to this time zone. How can I change that?

A: Reports cannot be generated in specific time zones. Reports will default to EST.

Related:

XenApp and XenDesktop 7.x Cross Language Connection Support

This article describes cross language connection support for XenApp and XenDesktop 7.x.

Summary of Cross Language Connection Support

  • VDA image support:

    1. VDA images include:
      • RDS-VDA: Windows Server 2008 R2 and later version.
      • VDI-VDA: Windows 7 x86/x64 and later version.
    2. Windows XP and Vista have been removed from support list of latest VDA version.

  • XenDesktop connections among Controller 7.x, VDA 7.x and Citrix Receiver 14.x.

  • XenDesktop connections in conjunction with XenApp, Provisioning Services and hypervisors supported by XenApp and XenDesktop 7.x.

  • Multiple user locales in a master image for VDA host.

  • Different language combinations among Controller, VDA host and endpoint device. The following are the language scope:

    English, Japanese, German, French, Spanish, Simplified Chinese, Traditional Chinese, Korean, and Russian.

    User-added image

Prerequisites for Cross Language Connection Support

When you use English Windows 7 for VDI-VDA host in conjunction with Japanese endpoints, you need to install Japanese language packet for VDI-VDA in Control Panel > Regional and Language > Keyboards and Languages tab.

User-added image

List of Cross Language Effects on XenApp and XenDesktop Functions

ID Item Limitation
ICA connection
1 Published desktop display names None
2 User names to log on published desktops None
3 User names to log on endpoint None
4 Characters in clipboard synchronization None
5 Client printer names None
6 Characters in printed documents (native printer driver and universal printer driver) Appropriate fonts must be installed on endpoint and print server (if they exist).
7 Keyboard inputs in the sessions None
8 Client drive mapping None
9 Time zone mapping In XenApp and XenDesktop 7.x VDA session, display name of time zone would be incorrect under some conditions though UTC offset is always correct.
10 XenApp connection from RDS/VDI-VDA session (double-hop ICA connection) None
11 VDA event log Citrix Desktop Service event logs are displayed in the language of the current user locale.

Other Citrix service event logs are displayed in the language of the user locale when VDA is installed regardless of the current user locale.

This is not applicable when the user locale is out of English or Japanese.
VM Hosted Apps
12 Published application names None
13 Application folder names None
14 Content redirection (File Type Association) None
Administration
15 Machine Creation Services None
16 ICA session information in management console None
17 Citrix Policy deployment None
18 Power Management for hypervisors None

Issues and Workarounds

Issue 1

Apply DE/ES/FR MUI language pack to JA Windows 7 OS, the information on “Client Settings” and “Printing Preferences” pages of mapped printer are truncated as shown in the following screen shot:

User-added image

This issue will occur in Asia VDA session if you apply Euro MUI language pack to Asia VDA host and change the System Locale to Euro language.

Workaround 1

The reference contents, which are truncated in the preceding issue are:

  • Configure the local printer device settings, including all printer-specific properties.

  • Configure the local printer document settings, including all printer-specific options.

Note: This issue does not occur on Euro only platform. The following is a screen shot of the content when it is not truncated:

User-added image

Issue 2

Appropriate fonts must be installed on endpoint and print server (if they exist).

Workaround 2

When printing in an environment, such as, the following, printing does not work with EMF UPD.

***************VDI-VDA: JA Win7 64BitClient: EN XP 32bit***************

This issue can be resolved by installing JIS2004 font for Windows XP on the endpoint.

Notes:

  1. If using a print server hosted on Windows Server 2003, you will need to install the font in this case too – Windows XP および Windows Server 2003 で JIS2004 対応フォントを使用する方法.

  2. The preceding issue is not reproducible with XPS UPD. XPS UPD works even if you do not execute the install files for East Asian languages and do not install JIS2004 font for Windows XP on the endpoint.

Environment Not Supported for Cross Language

  • Controller/VDA enclosed in XenDesktop 5 (no SP1).

  • VDA enclosed in XenDesktop 4.

  • 12.x or earlier ICA Clients for Windows.

  • ICA Clients for non-Windows.

Additional Resources

CTX122783 – Cross Language Known Issues and Limitations in XenApp

CTX130633 – XenDesktop Cross Language Known Issues and Limitations

Related:

Removal issues with SEP 14

I do not need a solution (just sharing information)

I have recently begun a process to remove all old Symantec Endpoint Protection 14 installations from many machines.

The issue is about 95% of Windows 7 machines fail to uninstall and return an error of 1603. (Through command line or Powershell). Trying to remove from the control panel will have the progress proceed for a little, then the installer will revert itself. Once this process is completed Internet Explorer is no longer functional on any user logins. It modifies Internet Explorer registry keys during uninstall and doesn’t fix them during rollback. The only way to fix it, and restore functionality is to CleanWipe the machine. I have about 600 of these that need to be removed and realistically I cannot be manually running CleanWipe on each one.

What are my options here? I’ve looked many remote uninstall methods seem to be deprecated or not for use in 14. From what I can tell this is only affecting Windows 7 machines and 10 uninstalled without issues. Any input is appreciated.

0

Related:

Manage ShareConnect Users

From the team dashboard, users can add and manage users.

To add a team user

1. Click Add Users from the left navigation under Manage Team Account.

2. All licensed users will be listed in this menu. Click the checkbox beside a user and click the Invite User button.

3. Team users will receive an email notification informing them that they have been added to the team account. They must click on the link in that email to activate their ShareConnect account.

User-added image
User-added image

To delete a team user

1. From the left navigation, click Manage Users.

2. In the right window, you can see a list of users associated with the team.

3. Select the checkbox of the user you want to delete and click Remove user.

User-added image

Manage Users

By clicking on the Manage Users menu item on the left navigation, administrators can see the following:

  • User details – name, email, the number of computers they’ve installed ShareConnect on and the last time they logged in to use ShareConnect.
  • Delete users
  • Search for users
User-added image

Related:

  • No Related Posts

ShareConnect Settings

ShareConnect offers a variety of account and security settings that you can customize from the ShareConnect Web App. These settings can be used to customize how remote sessions behave.

Note: If you are connecting to a File Server, these preferences are not available. If you are connecting to a Mac computer, not all features may be available.

To view and edit account-wide settings:

  1. These settings can only be configured by an Admin user
  2. Sign into ShareConnect
  3. Access the Settings menu under Manage Team Account.

User-added image

Available Settings

User-added image

User-added image
User-added image


To view and edit user-specific settings:

  1. Sign into ShareConnect and access your username in the upper left.
  2. Click the Settings link.
  3. The settings displayed in this menu reflect the account-wide settings configured by an Admin user.
User-added image
User-added image

Related:

Troubleshoot On-Demand Sync Spontaneous File Downloads

The Windows Explorer thumbnails preview feature can cause the spontaneous download of image and executable files in ShareFile On-Demand Sync. To prevent this, the thumbnail preview feature should be disabled. The thumbnail preview feature is enabled by default in Windows Vista, Windows 7, and Windows 8. It allows the display in Windows Explorer of file icons a preview of the corresponding files. To provide this preview image, Windows Explorer must open image and executable files, which triggers the file to be downloaded through on-demand sync. This occurs upon browsing to the folder location of these files. Thumbnail previews can be disabled via group policy or for an individual user.

Disable the thumbnails preview feature via group policy

This process will disable thumbnails preview for a group of users or all users via Group Policy (administrator privileges are required). Depending on the use case open either the Local Group Policy editor or the Group Policy editor. For instance launch the Local Group Policy editor on a machine with the command line gpedit.msc . When launched, expand the tree view on the left side:

On Vista and Windows 7: User Configuration > Administrative Templates > Windows Components > Windows Explorer

On Windows 8: User Configuration => Administrative Templates => Windows Components => File Explorer

  1. Select the Windows Explorer or File Explorer node in the tree view on the left side panel. Select the Turn off the display of thumbnails and only display icons policy by double clicking it

    User-added image

  2. Select Enabled and then OK to apply.

    User-added image

  3. Note the policy might not be enabled right away. To force a refresh do the following from a command shell: gpupdate /force

Disable the thumbnails preview feature for an individual user

If desired, you can disable the thumbnails preview feature for an individual user. To do so, select Folder Options in the Control Panel. Select the View tab. Choose Always show icons, never thumbnails and then click Apply.

User-added image

Related:

Enterprise Sync Manager

Limitations

Requirements

Options

Once you have installed the enterprise sync tool, click Options.

Keep Sync Manager Running in Tray – Allows the esync icon to be present in the task tray even after closing the application window.

Run Scheduled Jobs Concurrently – We recommend limiting your number of jobs to five or less to avoid excessive completion times and performance issues.

Exclude File Types – Examples could include .tmp or .bak files, which are temporary or backup files that may not be needed. To enter the file types, you must include the ‘.’ (dot) with the file extension.

Error Notification Emails – You can choose to be notified when errors occur or when critical errors disable your job. An email will be sent to the email address of the user logged into the app.


Sync Jobs

  • One-Way Sync: has either a ShareFile folder or a local folder as the source, allowing you to mirror a folder in the alternate location. In this type of sync, changes made to the alternate folder will not be reflected in the source folder.
  • Two-Way Sync: automatically recognizes updates made to either folder and adopts them in the other. In the advanced settings of the enterprise sync tool, you can specify the exact schedule for individual sync jobs and set up sync with multiple ShareFile accounts and users.

To create a new sync job, click the Add button.

User-added image

1. Job Details – The job name is what you would like to call the specific job. The user name and password for the job will be your ShareFile login information (email address and password). The subdomain is the first part of your login page URL. For example: https://yourcompany.sharefile.com. Click Authenticate to verify your credentials. When you see the green check mark, proceed.

Important : If you are getting authentication issue while first time configuration, Please try to login with the same account on secure.sharefile.com and check if it works.

For the configuration we need to use the Sharefile credentials.

2. Sync Settings – Selecting Both Directions will set a two-way sync for this job. A two-way sync automatically recognizes updates made to either your ShareFile or local folder and adopts them in the other. Selecting Down will set a one-way sync from your ShareFile account to your local files. Selecting Up will set a one-way sync from your local files to your ShareFile account. Once you have selected the direction of the sync, click the blue Browse icon (to the right of the ShareFile Folder field) in order to select the folders you would like to sync. Select a ShareFile and Local folder as needed.

3.Job Schedule – You can choose to schedule the job as a Continuous, Daily, Weekly or Monthly. Depending on your choice, you may have the option of specifying an interval, either once daily or at a specific timeframe.

To complete the new job, click Create Job.

Manage Jobs

User-added image

Enable / Disable All – Stop or start all currently configured sync jobs.

Action (Turn On / Off) – Enable or disable individual sync jobs.

Reset – This action will bring the job to its original state. All files will synchronize at the next scheduled initialization of the job. ShareFile recommends utilizing the Reset function when troubleshooting a recurring issue.

Sync with a Network Path

When syncing with a network location, select the network path from My Network rather than My Computer during sync job creation.

This allows the enterprise sync tool to view the full network path (i.e. \serverfolder).


Sync with a Shared Company Drive or Similar

The following steps are recommended for advanced users. Consult the following steps when attempting to move data from a shared company drive or a similar network drive that isn’t directly connected to a computer. Note: This functionality may require additional permissions.

  1. To eliminate potential permission issues, log in to your computer as the Admin profile for the machine.
  2. Open the Services menu (Control Panel > Administrative Tools > Services).
  3. Navigate down to ShareFile Sync Service and then right click and select ‘Properties’.
  4. Choose the Log On Tab and select This Account.
  5. Log in as an administrator or your user that has permissions to read, write and execute on the network drive that you trying to sync.
  6. Once you have logged in under This Account, please stop and then restart the ShareFile SyncService under ‘Services’.
  7. Once the program has restarted, you can go in and create a new job.
  8. You will need to make sure that you use the full UNC path of folder in the network drive that you want to sync.
    1. ShareFile Enterprise Sync Manager may not be able to find the location if you give it a mapped path instead of the full UNC path.
    2. You can open the Command Prompt and use the “net use” command to find the full UNC path for your current user.
  9. If you continue to have issues after Step 8, verify that you have the read, write and execute permissions on the drive that you are trying to sync.

Manage users

Since the enterprise sync tool allows you to create jobs under different user names and ShareFile accounts, there is a section to manage users who have set up individual sync jobs. You can view all of the users with current sync jobs by clicking Manage Users.

Click the red X to delete users and their sync jobs, or you can click the settings icon to check authentication, edit password, or enable/disable current jobs.

Known Issues

Folder not found

If you receive the error message “The local folder was not found. Please restore it before re-enabling,” run the enterprise sync tool as the user on the computer where you have access to the sync jobs. To do so, please log in to the computer as an admin and click Start. From here, click Control Panel and select Administrative Tools. In the next screen, open the Services menu. Stop the ShareFile Sync service, and then right-click ShareFile Sync service and select Properties. In the screen that opens, click Log On and select This account. You can then enter the login credentials that you use to log in to the computer with access to the network. Click Apply to finish. To complete the process, start the ShareFile Sync service again and use the enterprise sync tool normally.

If you do not enter a user name to log in to your computer or if you are not sure of your full account name to enter on the Log on screen, you can use the built-in Browse feature to locate this information. This will open a new Select Users window. Click Locations on the new window and select the entire directory or network. Click OK, and then enter the first few letters of your account name in the field asking you to enter the object name to select. Next, click Check Names. This will pull up a list of the names that match your entry. You can select your user name from the list and click OK. This will fill your user name in the account field.


Intuit QuickBooks issues

Intuit QuickBooks database files are continuously in use by the QuickBooks backup software, which will not allow these items to be uploaded by the enterprise sync tool. As long as QuickBooks is running, the enterprise sync tool will not be able to upload the QuickBooks file. It may be possible to sync a QuickBooks database file, but QuickBooks must be closed completely, which requires you end to all QuickBooks processes in the Task Manager. To upload QuickBooks database files to ShareFile, log in to the web-based application or use the ShareFile Desktop Widget.


File Path Too Long

Due to Microsoft file path limitations, ShareFile enforces a file path limit of 248 characters for a given file and 260 characters for a given folder.

Use with Windows 2008 / 2012 R2 servers

While the tool may function in these environments, they are not officially supported. Consequently, ShareFile Customer Care cannot assist in troubleshooting these particular setups.

Related: