The Ultimate Citrix Install Guide
 
PROJECT MANAGEMENT
1. Project Management Overview
2. Project Management Methodology
3. Tips for Making Meetings Effective

ANALYSIS PHASE
1. Analysis Phase Overview
2. Vision / Project Scope (Statement of Work)
3. Project Plan
4. Infrastructure Assessment
5. Proof of Concept
6. Analysis Phase Checkpoint

DESIGN PHASE
1. Design Phase Overview
2. Server Design
3. MetaFrame Access Suite Design
4. Infrastructure Design
5. Design Phase Checkpoint

IMPLEMENTATION PHASE
1. Implementation Phase Overview

2. Prepare the Network Environment

2. 1. Create Required Network Shares
2. 2. Firewall Modifications
2. 3. Throttling Port Speed and Duplex Settings
2. 4. Add Users to a Terminal Services Environment
2. 5. Create Required Citrix Specific User Groups

3. Install Operating System(s) for MetaFrame XP

3. 1. Installing Microsoft Windows 2000
3. 2. Installing Microsoft Windows Server 2003

4. MetaFrame IMA Data Store Installation & Configuration

4. 1. How to Install & Configure Microsoft SQL Server 2000
4. 2. How to Install and Configure Microsoft SQL Desktop Edition (MSDE)

5. Install MetaFrame XP Server w/ Feature Release 3

5. 1. How to Remap MetaFrame XP Server Driver Letters
5. 2. Installing MetaFrame Feature Release 3 on Windows 2000
5. 3. Installing MetaFrame Feature Release 3 on Windows Server 2003
5. 4. Installing MetaFrame XP HotFixes
5. 5. How to Add Licenses through the Management Console for MetaFrame XP

6. Install “Image” Applications


7. Rapid Server Deployment

7. 1. How to Clone a Citrix MetaFrame XP Server
7. 2. How to Create a Network Boot Disk

8. Configure MetaFrame XP Farm Wide Settings

8. 1. Recycling Operating Systems
8. 2. MetaFrame XP Delegated Administration
8. 3. How to Create a Zone & Move MetaFrame XP Servers to it
8. 4. How to Set a Server’s Preference for Data Collector Elections
8. 5. MetaFrame XP User Policies
8. 6. How to Implement Automatic ICA Client Updates
8. 7. Client Drive Mapping
8. 8. How to Implement Client to Server Content Redirection
8. 9. How to Implement Server to Client Content Redirection
8. 10. Configure ICA Keep-Alive
8. 11. Configure SpeedScreen Browser Acceleration

9. Install “Manual” Applications

9. 1. How to Install and Configure Microsoft Office 2000
9. 2. How to Install and Configure Microsoft Office XP
9. 3. How to Install and Configure Microsoft Office 2003

10. MetaFrame Conferencing Manager 2.0

10. 1. How to Install the Conference Organizer Service
10. 2. How to Install the Conference Room
10. 3. How to Install Conferencing Manager User Interface
10. 4. How to Specify the License Type through the CM Configuration Tool
10. 5. How to Add Users to the Conferencing Manager
10. 6. Microsoft Exchange Server Integration
10. 7. Troubleshooting

11. Publishing Resources through the Management Console

11. 1. How to Publish an Application
11. 2. How to Publish Content
11. 3. How to Publish Application from a Shortcut
11. 4. How to Publish the Printer Folder
11. 5. How to Publish Windows Explorer

12. How to Configure the Printing Environment

12. 1. Set the proper expectations
12. 2. Setup the Print Environment
12. 3. Create Printer Compatibility Driver Mappings
12. 4. Set Printer Bandwidth Limits for Client Auto-Created Printers
12. 5. How to use Project Compatibility automate Driver Mapping
12. 6. How to Manually Connect a Client Printer within an ICA Session

13. Install MetaFrame Secure Access Manager 2.0

13. 1. Install MetaFrame Secure Access Manager on Windows 2000 Server
13. 2. Install MetaFrame Secure Access Manager 2.0 on Windows Server 2003
13. 3. How to Install MetaFrame Secure Access Manager 2.0 Service Pack 1
13. 4. Install the Access Management Console on MetaFrame XP or a Workstation
13. 5. Create an Access Center
13. 6. Configure the Access Center
13. 7. Customizing MetaFrame Secure Access Manager
13. 8. How to Configure Internet Explorer for a Secure Access Center

14. Install Web Interface 2.1

14. 1. How to Install Web Interface 2.1 (Clean Install)
14. 2. How to Upgrade a NFuse Server to Web Interface 2.1
14. 3. Web Interface 2.1 Web Administration Tool
14. 4. How to Customize Web Interface 2.1
14. 5. How to Repair Web Interface 2.1

15. Install SSL Certificates and Secure IIS Server

15. 1. How to install and configure the IIS Lockdown Tool (version 2.1)
15. 2. How to Enable SSL on an IIS Web Server
15. 3. How to Force the use of SSL Encryption on a IIS Web Site

16. Install Secure Gateway 2.0 for MetaFrame

16. 1. Pre-installation Check List
16. 2. How to Install and Configure the STA Component
16. 3. Install the Secure Gateway Service
16. 4. Secure Gateway for MetaFrame Management Tools

17. MetaFrame XP Remote Administration Tools

17. 1. Management Console for MetaFrame XP
17. 2. Citrix Web Console (CWC)

18. ICA Clients

18. 1. How to Install the ICA Win32 Program Neighborhood Agent
18. 2. How to Install the ICA Win32 Web Client
18. 3. How to Configure the ICA Java Client
18. 4. How to Utilize the ICA Program Neighborhood Pass-Through Client
18. 5. Citrix ICA Client 6.20 for OS 9.X
18. 6. Citrix ICA Client 6.30 for OS 10.x

19. Microsoft Terminal Services Licensing

19. 1. Summary of Licensing Options in Windows 2000 Server
19. 2. Summary of the licensing options in Microsoft Windows Server 2003

20. Implement Windows System Policies

20. 1. MIAB Administrative Template Overview
20. 2. How to Create an Administrative Template to Hide Drives
20. 3. Implementing Windows 2000 Active Directory Group Policies
20. 4. Implementing Windows NT, Terminal Server 4.0 System Policies

21. How to Install and Configure MetaFrame Password Manager

21. 1. Prepare the Directory Service
21. 2. Install and Configure the MetaFrame Password Manager Console
21. 3. Deploy the MetaFrame Password Manager Agent
21. 4. On-Going Maintenance

22. Implementation Phase Checkpoint


READINESS PHASE
1. Readiness Phase Overview
2. Testing your New MetaFrame Access Suite Environment
3. Pilot Implementation
4. Rollout Any Remaining Servers
5. Implement Change Management Policies and Procedures
6. Readiness Phase Checkpoint

ROLLOUT PHASE
1. Rollout Phase Overview
2. End-User Training
3. Administrator Training
4. Go Live!
5. Rollout Phase Checkpoint

APPENDIX
1. Additional Resources
2. MIAB3.0.ZIP - Files Explained

4. Infrastructure Assessment

The infrastructure assessment section of the Analysis phase is one of the most overlooked sections of a project but is one of the most important. Without it we make a lot of assumptions and increase our chances of risk, not to mention the possibility end-user perception might be skewed due to issues beyond the scope of the project.

From my experience, a MetaFrame XP deployment will amplify the environment you deploy in to. What I mean by this is that if you place a MetaFrame XP farm in a poorly performing network you will most likely experience user perception problems. However, if you prepare your environment and deploy in to a network that meets the necessary requirements, your customer will love the outcome and you will make more money with less hassles.

During the Infrastructure Assessment, you will be tasked to document the readiness, requirements and considerations for each of the following sections. This information will allow you and your customer to understand which areas of their current environment are ready for the MetaFrame Access Suite rollout and identify the ones where more attention is required.

Professional Services organizations will often focus on other items that may represent a risk, but are not directly associated with technology users, project management practices, etc. These are important areas to explore, and should be assessed to some degree when you perform your own assessment.

Upon completion of the infrastructure assessment, you will be able to spot problem areas and make recommendations for changes that will help you in your quest to achieve the vision of the project.

An Infrastructure Assessment is broken down into the following sections though others may be added/subtracted based on the specific IT environment:

 

       Network Architecture: The Network Architecture segment is very important but sometimes is completely overlooked. Please give it the attention it deserves. The MetaFrame Access Suite is great if you have a good network, but can turn ugly very quick if the network infrastructure you are installing into is not properly designed. You will want to document what network protocols are on the wire, if they are using switches / hubs and how they are configured. You should document how they are segmenting the network (VLANS, subnets), what topologies are in play (Ethernet, Token Ring, ATM) and any bandwidth management software they may be running. You will also need to look for and document any duplex mismatch that might be found.

In order to make sure that you are not responsible for any possible security holes, you will want to discuss with your customer what security precautions they have in place I.E. (firewalls, access controls, and two-factor authentication). You will also want to determine and document who has access to the physical presence of the hardware

 

       Hardware Environment: You will want to document the vendor, the amount of memory, processors, disk drives, NIC(s) required and any additional hardware for devices pertinent to the MetaFrame deployment.


       Operating Systems Environment:

Windows Server 2003 (Active Directory) - you will need to document how the Active Directory is designed. Document information such as name resolution, pertinent IP addresses, OU structure and file/print structure. Parse through the login scripts for any possible issues, group membership, any users/groups that will have administrator access and any additional information that might be specific to your customers AD design.

Windows 2000 (Active Directory) - you will need to document how the Active Directory is designed. Document information such as name resolution, pertinent IP addresses, OU structure and file/print structure. Parse through the login scripts for any possible issues, group membership, any users/groups that will have administrator access and any additional information that might be specific to your customers AD design.

NT Server 4.0 - you will need to document how the NT domain is designed. You will want to gather such information as the Domain model (Single Domain, Multiple Domains, Multiple Master, etc), name resolution (WINS, DNS), file/print structure. Parse through the login scripts for any possible issues, group membership, any users/groups that will have administrator access and any additional information that might be specific to your customers domain design.

Novell Netware - you will need to document how the Novell network is designed. You will want to gather such information as the type of Novell directory services running, i.e. NDS, Bindery. If they are running NDS, you will want to document the NDS design (OUs, trees, etc.), name resolution, all the protocols running and their respective addresses. Parse through the login scripts for any possible issues, group membership, any users/groups that have administrator access, and any additional information that might be specific to your customers Netware design.

 

       MetaFrame Environment: If you will be deploying into a network with an existing MetaFrame / WinFrame installation, you will need to verify the following: Farm Architecture, ICA Browser, Servers, Load Balancing, Network Structure, Users, Applications, Application Delivery Architecture and Licensing.

 

       Printing Environment: If you have been around the Citrix world for a while, you will know that the print subsystem is one of the most finicky problem spots and requires proper configuration for optimum performance. With this in mind you will want to make sure you do your best in analyzing your customers print environment. You will need to document all the print servers for such things as what OS it is running, how the printers are attached and how many printers are on each print server. You will also need to document as many of the home / off-site printers as possible.

I like to throw this task in to the hands of my customer and task them with the responsibility of supplying me with a list of all the printers that need to be supported. I also make sure that they are aware that any additional printers might require additional changes.

 

       Client Environment: In a server-based computing environment, you spend 99% of your time on the back-end but it is still important to know what type of client workstations you will be deploying into so that you can account and support them as needed. You will want to document the operating systems you will need to support, if they are desktops or laptops, how the users will be connecting to the server and from what type of connection. (RAS, ICA dial-in and or TCP/IP via the Internet)

 


       Change Control Environment: The goal of any deployment is not only to successfully deploy the product, but also to leave an environment that will not fall when you leave. This is done by creating policies and procedures on how future changes will be orchestrated. This is what we call change management.

In most cases, you will not find any change control mechanism in place, but this does not mean that you want to leave it that way. Document any change procedures that might be in place, which is able/responsible for making changes and inform your customer that you will be creating basic change control procedures for their new MetaFrame environment.

 


The following is an example of a basic Infrastructure Assessment finding:

 

Infrastructure Assessment

November 7, 2003

 

Client:

DABCC.COM

 

Executive Sponsor:

Douglas Brown, Owner

 

Project:

Citrix MetaFrame Access Suite Deployment

 

Instructions: Complete the following survey. Answer all questions that apply to your environment. The assessment is divided into 6 parts:

         Network Architecture

         Hardware Environment

         Operating Systems Environment

         Printing Environment

         Client Environment

         Change Control Environment

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

1. Network Architecture

Fill in all applicable sections regarding your network architecture.

       What network topology do you currently have in place (Ethernet, Token Ring, etc.)?

Ethernet

       Are all servers located in the server room? If not, please indicate location.

All servers are located in the computer room located in the southwest corner of the office.

       Fill out the following information for each hub/switch:

Hub/Switch 1:

Hub/Switch Model:

Cisco Catalyst 2948G-L3 switch

Cable type:

CAT 5

SNMP Name:

Dbswitch1

IP Address:

192.168.1.2

Subnet Mask:

255.255.255.0

Manageable?

Yes

Duplex capable?

Yes

VLAN definition(s):

Default VLAN

Broadcast controls?

No

Filters?

No

Any non-default settings?

Ports 9-45 are presently set to auto detect speed and half/full duplex operations. These ports are populated with workstations and printers.

Ports 5- 8 are set to full duplex / 100Mb for connections to the repeaters (repeaters only capable of half duplex operations) in other parts of the complex, (Closet(s) B, C, D).

 

 

 

 

 

 

 

 

 

 

 

 

 

 


       List all port assignments for each hub/switch:

Hub/Switch 1: Cisco Catalyst 2948G-L3

1

Router

25

Workstation

2

None

26

Workstation

3

None

27

Workstation

4

None

28

Workstation

5

DB2KAD1

29

Workstation

6

DB2KAD2

30

Workstation

7

DB2KFS1

31

Workstation

8

DB2KWEB1

32

Workstation

9

None

33

Workstation

10

None

34

Workstation

11

None

35

Workstation

12

None

36

Workstation

13

None

37

Workstation

14

None

38

Workstation

15

HP LaserJet 4M

39

Workstation

16

HP LaserJet 4000

40

Workstation

17

HP LaserJet 4000

41

Workstation

18

HP LaserJet Color 4050

42

None

19

HP OfficeJet 720

43

None

20

Workstation

44

None

21

Workstation

45

None

22

Workstation

46

None

23

Workstation

47

None

24

Workstation

48

None

 

       Complete the following information about your firewall:

Router/Firewall Model:

 

IP Address

Subnet Mask

Fast Ethernet 0/0:

203.72.26.21

255.255.255.248

Fast Ethernet 0/1:

192.168.1.254

255.255.255.0

 

 

Password:

R5y3ds7f3Z

 

 

NAT Translation

IP Address

Assignment

203.72.26.17

NAT Translation

203.72.26.18

NAT Translation

203.72.26.19

(Open)

203.72.26.20

192.168.1.4

203.72.26.21

Router External Interface

203.72.26.22

DSL Interface

 

 

Ports Open:

IP Address

Port(s)

203.72.26.20

SMTP, POP3, WWW, FTP, DNS, 3389

 

 

 

 

 


2. Hardware Environment

Complete the following information regarding all existing server hardware, which will interact with the Citrix MetaFrame environment.

Name: DB2KAD1