• Conversant Group: On average SMBs lose $141,000 per ransomware incident. We keep the bad guys away.

    Learning the Basics of Citrix XenApp 5 for Windows Server 2003 (Part 4 of 7)

    December 3, 2008

    XenApp, XenApp 5 for Server 2003

    This article was updated January 6, 2009.

    If you would like to read the other parts in this article series, please go to:

    In Part 3 of this 7-part article, you learned how to install the Windows Server 2003 prerequisites for XenApp 5, the License Server and Web Interface and all Windows security updates.  In Part 4 of this article, you will learn how to install XenApp 5 for Server 2003 – Platinum Edition and your Citrix product license.

    When you finished Part 3, you had just verified there were no additional Windows Updates available and exited Internet Explorer.  This left you at the server’s desktop.  There are a few things that need to be done before you start installing XenApp 5 – Platinum Edition.  First, you need to install your favorite unzip utility.  The unzip capability in Windows Server 2003 R2 cannot be used to extract the files you downloaded from the MyCitrix web site.  Downloading and installing your unzip utility is left for you to complete.

    Note: The commercial WinZip and WinRAR utilities are an option for this, as are the freeware utilities InfoZip and 7-Zip.

    After you install your unzip utility, you need to configure your Virtual Machine (VM) to allow access to the license and XenApp 5 files downloaded from your MyCitrix web site.

    Right-click the VMware Workstation tab for your Learning XenApp 5 VM and click Settings…

    Click the Options tab.

    Click Shared Folders

    Click Always enabled

    Check Map as a network drive in Windows guests

    Click the Add button.

    Click Next on the Add Shared Folder Wizard.

    Click the Browse button.

    Browse to the folder that contains the files downloaded from your MyCitrix web site, select that folder and then click OK.

    Click Next on the Add Shared Folder Wizard.

    Verify that Enable this share is checked and that Read-only is not checked and then click Finish.

    Click OK on the Virtual Machine Settings.

    You will now be back at the server’s desktop.  Click Start and My Computer.

    You will now see your shared folder mapped as Drive Z.

    Note: What is .host?  .host is how VMware Workstation refers to the host computer running VMware Workstation.

    Double-click the Z: drive and navigate to where you placed the XenApp 5 Server Zip file XA5_EN_W2K3.zip.  XA5_EN_W2K3.zip is the XenApp Server CD image you downloaded from your MyCitrix site in Part 1.

    Double-click the Zip file.  Answer Yes to the security message.  The “potential security flaw” is a protection feature that Microsoft added in update 921398 referenced as MS06-045.

    Extract the Zip file to C:\XA5CD1.

    After that file is unzipped, navigate to the XenApp 5 Components Zip file, XA5_EN_COM_W2K3.zip.  XA5_EN_COM_W2K3.zip is the XenApp 5 Components CD image you downloaded from your MyCitrix site in Part 1.

    Double-click the Zip file.  Answer Yes to the security message.  The “potential security flaw” is a protection feature that Microsoft added in update 921398 referenced as MS06-045.

    Extract the file to C:\XA5CD2.  Close all open Programs and Windows except the C:\XA5CD2 Explorer Window.

    You now need to fix a bug in the installation files.  The version of the Web Interface that will be installed with XenApp 5 on Server 2003 is not Web Interface 5 but Web Interface 4.6.  The Citrix Clients that will be installed are the Version 11 clients.  Web Interface 4.6 does not know how to use the Version 11 client files.  You need to rename one of the client files to allow Web Interface 4.6 to work properly in your testing environment.  This has been documented in Citrix Support Article CTX118567.

    Double-click the Clients folder.

    Double-click the ica32 folder.

    You now see the three Version 11 Citrix Client files.

    The file you need to rename is XenAppWeb.msi.  Right-click XenAppWeb.msi and select Copy.

    Right-click an empty area just underneath XenAppWeb.msi and select Paste.

    You will now have a file named Copy of XenAppWeb.msi.  Right-click that file and select Rename.

    Rename the file to ica32web.msi.

    You have completed the steps documented in CTX118567.  You are now ready to begin installing XenApp 5.

    NOTE:  Most people believe that XenApp can only be installed on a network that uses either Active Directory or eDirectory.  That is not true.  XenApp can be installed on a stand-alone workgroup computer, as well as UNIX versions for Solaris, AIX and HP-UX.

    Navigate to C:\XA5CD1 and double-click Autorun.exe.

    NOTE: XenApp was previously known as Presentation Server and before that as MetaFrame.  Citrix renamed Presentation Server to XenApp in February 2008.  This is very confusing but you will still see references to all three product names in various places.  The Citrix web site, MyCitrix.com and tech support articles refer to XenApp.  The installation and most product documentation refer to Presentation Server.  Most of the event log entries still refer to MetaFrame.  The MetaFrame product name has not been used since 2005.  Another point of confusion is the product component name Web Interface.  Web Interface has been the component name since sometime between 2001 and 2003.  The prior component name was nFuse.  You will still see the name nFuse in many Citrix configuration files.

    When Citrix released XenApp 5 for Server 2008 they also rebranded Presentation Server 4.5 with Feature Release 1 as XenApp 5 for Server 2003.  There is NO core difference between XenApp 5 for Server 2003 and Presentation Server 4.5 with Feature Release 1.  Even though you are installing what Citrix calls XenApp 5, ALL the installation screens, prompts and documentation still refer to the product as Presentation Server 4.5.

    After you double-click Autorun.exe, the XenApp 5 installation starts.

    Click Product installations and updates.

    Click Install Citrix Presentation Server 4.5 and its components.

    Click I accept the license agreement AND scroll all the way down to the end of the Citrix License Agreement or click in the License Agreement box and press Ctrl+End.  If you do not scroll to the bottom, you will receive an error.  Click OK on the error.

    Click Next.

    Click Next.

    Citrix does not recommend that the License Management Console and the Web Interface be installed on the same server.  If you do, then the Web Interface must be installed first and then the Citrix License components.  In the next screen, you will see that the Citrix Licensing is deselected by default.

    NOTE: If you do not see the option for the Web Interface, that means IIS and ASP.NET have not been installed.  Please cancel this installation, return back to Part 3 and make sure you follow all the steps to install the prerequisites.

    Click on Citrix Licensing and select Entire feature will be installed on local hard drive.  The Web Interface components will be installed first by the installer.  This allows you to install both components on a single server.  However, Best Practice is to install the Citrix Licensing on a server NOT in the XenApp Farm and to install the Web Interface on a separate server that is not a domain member in the DMZ.  Since this learning server is not a production server, you can safely install all XenApp components on one server.

    All six components are now selected.  Click Next.

    Click Next.

    You need to install all the Access Management Consoles for this Learning series.  Click Next.

    Click Next.

    The Access Management Console components are installed.

    Click Finish.

    You will see either see pop-ups or pop-unders showing Microsoft Visual J# and the initial Web Interface components are being installed without user interaction.

    Click Next.

    Accept the default destination folder for the Web Interface components.  Click Next.

    Click Install the Clients from the Components CD-ROM and click Browse.

    Browse to C:\XA5CD2.  Double-click the XA5CD2 folder.

    Double-click the Clients folder.

    Click OK.

    Click Next.

    Click Next.

    Click Finish.

    The Java Runtime is now installed.  Even if you install Java Runtime, Update 11 (or later) prior to installing XenApp 5 or Web Interface, the XenApp installer will still install the Java Runtime, Update 9.

    Click Next.

    Accept the default destination folder for Citrix Licensing and click Next.

    Click Next.

    Accept the default location for the license files.  Click Next.

    Click Next to accept the default Web server of IIS.

    Click OK to restart Microsoft IIS Server and click Next.  You cannot click Next until you select the option to restart IIS.

    Click Next.

    Click Finish.

    Click Next.

    Scroll down until you see Program Neighborhood Agent.

    Click Program Neighborhood Agent and select Entire feature will be unavailable and click Next.  Program Neighborhood Agent requires access to a Web Interface site that doesn’t exist yet and that you will not be creating in this series.  To prevent the error message from appearing every time you login to the VM, you should just not install the Agent.

    Citrix recommends enabling Pass-through Authentication for the Pass-through Client.  When a user connects to applications published on different XenApp servers, pass-through client authentication enables XenApp to automatically pass the user’s credentials from the initial server to the XenApp server hosting the next published application.  This prevents the user from having to re-authenticate when opening applications on different XenApp servers.

    Click Yes and then Next.

    You can select whether to create a new farm or join an existing farm.  You will be creating a new farm for this Learning article.

    NOTE:  What is a Farm?  A Farm is a group of servers running XenApp that can be managed as a unit, enabling the administrator to configure features and settings for the entire farm rather than being required to configure each server individually.  All the servers in a farm share a single data store.

    NOTE: What is a data store?  The data store provides a repository of persistent information about the farm that each server can reference, including the following:

    • Farm configuration information
    • Published Application configurations
    • Server configurations
    • Static policy configuration
    • XenApp administrator accounts
    • Printer configurations

    Click Create a new farm and then click Next.

    You will use the default database of Access and keep the default zone name.  There are several databases that can be used for the Farm Data Store but the Access database requires no preinstall configuration on your part.  The databases available for selection are:

    • Access
    • SQL Server Express
    • SQL Server
    • Oracle
    • DB2

    The Zone name is simply a descriptive name for the zone.  By default XenApp uses the Subnet ID.  In XenApp 5 for Server 2008, the default Zone name is “Default Zone”.

    NOTE: What is a Zone?  A Zone is a logical grouping of XenApp servers that share a common zone data collector.  Zones allow the efficient collection of dynamic farm information.  Each zone in a farm has exactly one data collector.  All of the member servers in a particular zone communicate their dynamic information to the data collector for their zone. The data collector then shares this information with all other data collectors in the farm.

    NOTE: What is a zone data collector?  A zone data collector is a server that stores and manages dynamic information about the servers in a zone, including:

    • Published Applications usage
    • Server load
    • User sessions
    • Online servers
    • Connected sessions
    • Disconnected sessions
    • Load balancing information

    Enter a new Farm name of Learning.

    Click Next to accept the default Administrator account as the initial XenApp Farm Administrator and your server’s name, CitrixONE, as the Domain.


    For this Learning series, you do not need to enable IMA encryption.  Since the data store is located on this XenApp server, there is no network traffic to encrypt.

    Click Next

    Enter CitrixONE as the Host name for the License Server.

    Click Next.

    You will now install the license file downloaded from MyCitrix.  Click Install license for this product now and then click Next.

    If you decide not to install licenses at this time, you will receive an error upon logging into the VM and after 96 hours the XenApp server will refuse to run.

    Click the Open License Management Console button.

    Click Step 2: Copy license file to this license server.

    Click Browse.

    Browse to your license file, click the license file and then click Open.

    Click Upload.

    Click close the browser window and return to the setup program.

    Click Yes to close the License Management Console browser window.

    Click Next to continue with the setup.

    Shadowing can be a useful tool for user collaboration, training, troubleshooting and monitoring. This capability is useful for supervisors, help desk personnel, teachers, and anyone else who may need to examine another user’s session.  During Setup, you can limit or disable shadowing.  You can disable shadowing of ICA sessions on all servers in a farm if, for example, legal requirements prohibit shadowing of user’s sessions.  Or, you may want to disable shadowing on servers that host sensitive applications such as Human Resources or Payroll.

    The decision made on this screen cannot be changed without reinstalling XenApp.  This is from page 66 of the XenApp 4.5 with Feature Release 1 (AKA XenApp 5.0 on Server 2003):


    Important: Shadowing restrictions are permanent. If you disable shadowing or
    enable shadowing but disable certain shadowing features during Setup, you
    cannot change the restrictions later. Any user policies you create to enable user-to-
    user shadowing are subject to the restrictions you place on shadowing during
    Setup. Do not disable shadowing as a substitute for user- and group-specific
    connection policies.

    Prohibit shadowing of user sessions on this server. Select this option to
    permanently disable shadowing of user sessions on the server. If you disable
    shadowing during Setup, you cannot enable it using other Citrix Presentation
    Server configuration utilities or by creating connection policies.


    Click Next to accept the default of allowing shadowing.

    Click Next to share the XML Port with IIS.

    There are three main options and one sub-option for adding users to the Remote Desktop Users Group.

    • Add the Authenticated Users now.  Authenticated Users includes all users and computers whose identities have been authenticated by Windows.
    • Add the list of users from the Users group now.  The Users group is a built-in default group.  Members of this group can perform common tasks, such as running applications, using local and network printers, and locking the server.
    • Skip this step and add users later.  Allows you to manually add user to the Remote Desktop Users Group at a later time.
    • Add Anonymous users also.  If checked will create 15 Anonymous user accounts named Anon000 through Anon014 and place them in the Anonymous Users Group.  This group is then added to the Remote Desktop Users Group.

    Note: What is the Remote Desktop Users Group?  The Remote Desktop Users group allows the same access as the Users group, with the additional ability to connect remotely to the XenApp server. By using this group, you save administrative resources by not having to set up these rights for each user individually.

    Click Add the Authenticated Users now and then click Next.

    Note:  Even if you uncheck Add Anonymous users also before you click Add the Authenticated Users now, the 15 anonymous user accounts are still created.

    Click Finish on the Review screen.

    Click Yes on the warning popup about security on the IIS Script folder.

    Uncheck View the Readme file.

    Click Close.

    Click Next.

    Click Next.

    Click Finish.

    Click Next.

    Click Next to accept the default destination folder for the Document Center.

    Click Finish.

    The Installation Summary screen contains some incorrect information.  XenApp 5 for Server 2003 installs the ICA Client 11.000 for Windows and the Citrix Streaming Client 1.2.

    Click Finish.

    Click Yes to restart your VM.

    You have now successfully installed XenApp 5 for Server 2003 (Finally!). This process took 30 minutes and 4 seconds for me.  With the time from Part 2 and Part 3, the total time is 1 hour, 31 minutes and 9 seconds.

    In Part 5, you will upgrade the License Server to version 11.5, install a Microsoft Visual C++ prerequisite, update the Management Console and install Hotfix Rollup Pack 3 to XenApp 5.


    Conversant Group: On average SMBs lose $141,000 per ransomware incident. We keep the bad guys away.

    About Carl Webster

    Webster is a Sr. Solutions Architect for Choice Solutions, LLC and specializes in Citrix, Active Directory and Technical Documentation. Webster has been working with Citrix products for many years starting with Multi-User OS/2 in 1990.

    View all posts by Carl Webster

    5 Responses to “Learning the Basics of Citrix XenApp 5 for Windows Server 2003 (Part 4 of 7)”

    1. luka Says:

      What a wonderful blog !!!
      Thank you for sharing your knowledge.



    2. tatose Says:

      Good stuff I’m seeing here! Added your shared your article on facebook, hope you don’t mind.


    3. Janet McClarty Says:

      It’s a shame you don’t have a donate button! I’d definitely donate to this brilliant blog! I guess for now i’ll settle for bookmarking and adding your RSS feed to my Google account. I look forward to brand new updates and will talk about this site with my Facebook group. Talk soon!


    Leave a Reply to luka