The Ultimate Citrix Install Guide
 
PROJECT MANAGEMENT
1. Project Management Overview
2. Project Management Methodology
3. Tips for Making Meetings Effective

ANALYSIS PHASE
1. Analysis Phase Overview
2. Vision / Project Scope (Statement of Work)
3. Project Plan
4. Infrastructure Assessment
5. Proof of Concept
6. Analysis Phase Checkpoint

DESIGN PHASE
1. Design Phase Overview
2. Server Design
3. MetaFrame Access Suite Design
4. Infrastructure Design
5. Design Phase Checkpoint

IMPLEMENTATION PHASE
1. Implementation Phase Overview

2. Prepare the Network Environment

2. 1. Create Required Network Shares
2. 2. Firewall Modifications
2. 3. Throttling Port Speed and Duplex Settings
2. 4. Add Users to a Terminal Services Environment
2. 5. Create Required Citrix Specific User Groups

3. Install Operating System(s) for MetaFrame XP

3. 1. Installing Microsoft Windows 2000
3. 2. Installing Microsoft Windows Server 2003

4. MetaFrame IMA Data Store Installation & Configuration

4. 1. How to Install & Configure Microsoft SQL Server 2000
4. 2. How to Install and Configure Microsoft SQL Desktop Edition (MSDE)

5. Install MetaFrame XP Server w/ Feature Release 3

5. 1. How to Remap MetaFrame XP Server Driver Letters
5. 2. Installing MetaFrame Feature Release 3 on Windows 2000
5. 3. Installing MetaFrame Feature Release 3 on Windows Server 2003
5. 4. Installing MetaFrame XP HotFixes
5. 5. How to Add Licenses through the Management Console for MetaFrame XP

6. Install “Image” Applications


7. Rapid Server Deployment

7. 1. How to Clone a Citrix MetaFrame XP Server
7. 2. How to Create a Network Boot Disk

8. Configure MetaFrame XP Farm Wide Settings

8. 1. Recycling Operating Systems
8. 2. MetaFrame XP Delegated Administration
8. 3. How to Create a Zone & Move MetaFrame XP Servers to it
8. 4. How to Set a Server’s Preference for Data Collector Elections
8. 5. MetaFrame XP User Policies
8. 6. How to Implement Automatic ICA Client Updates
8. 7. Client Drive Mapping
8. 8. How to Implement Client to Server Content Redirection
8. 9. How to Implement Server to Client Content Redirection
8. 10. Configure ICA Keep-Alive
8. 11. Configure SpeedScreen Browser Acceleration

9. Install “Manual” Applications

9. 1. How to Install and Configure Microsoft Office 2000
9. 2. How to Install and Configure Microsoft Office XP
9. 3. How to Install and Configure Microsoft Office 2003

10. MetaFrame Conferencing Manager 2.0

10. 1. How to Install the Conference Organizer Service
10. 2. How to Install the Conference Room
10. 3. How to Install Conferencing Manager User Interface
10. 4. How to Specify the License Type through the CM Configuration Tool
10. 5. How to Add Users to the Conferencing Manager
10. 6. Microsoft Exchange Server Integration
10. 7. Troubleshooting

11. Publishing Resources through the Management Console

11. 1. How to Publish an Application
11. 2. How to Publish Content
11. 3. How to Publish Application from a Shortcut
11. 4. How to Publish the Printer Folder
11. 5. How to Publish Windows Explorer

12. How to Configure the Printing Environment

12. 1. Set the proper expectations
12. 2. Setup the Print Environment
12. 3. Create Printer Compatibility Driver Mappings
12. 4. Set Printer Bandwidth Limits for Client Auto-Created Printers
12. 5. How to use Project Compatibility automate Driver Mapping
12. 6. How to Manually Connect a Client Printer within an ICA Session

13. Install MetaFrame Secure Access Manager 2.0

13. 1. Install MetaFrame Secure Access Manager on Windows 2000 Server
13. 2. Install MetaFrame Secure Access Manager 2.0 on Windows Server 2003
13. 3. How to Install MetaFrame Secure Access Manager 2.0 Service Pack 1
13. 4. Install the Access Management Console on MetaFrame XP or a Workstation
13. 5. Create an Access Center
13. 6. Configure the Access Center
13. 7. Customizing MetaFrame Secure Access Manager
13. 8. How to Configure Internet Explorer for a Secure Access Center

14. Install Web Interface 2.1

14. 1. How to Install Web Interface 2.1 (Clean Install)
14. 2. How to Upgrade a NFuse Server to Web Interface 2.1
14. 3. Web Interface 2.1 Web Administration Tool
14. 4. How to Customize Web Interface 2.1
14. 5. How to Repair Web Interface 2.1

15. Install SSL Certificates and Secure IIS Server

15. 1. How to install and configure the IIS Lockdown Tool (version 2.1)
15. 2. How to Enable SSL on an IIS Web Server
15. 3. How to Force the use of SSL Encryption on a IIS Web Site

16. Install Secure Gateway 2.0 for MetaFrame

16. 1. Pre-installation Check List
16. 2. How to Install and Configure the STA Component
16. 3. Install the Secure Gateway Service
16. 4. Secure Gateway for MetaFrame Management Tools

17. MetaFrame XP Remote Administration Tools

17. 1. Management Console for MetaFrame XP
17. 2. Citrix Web Console (CWC)

18. ICA Clients

18. 1. How to Install the ICA Win32 Program Neighborhood Agent
18. 2. How to Install the ICA Win32 Web Client
18. 3. How to Configure the ICA Java Client
18. 4. How to Utilize the ICA Program Neighborhood Pass-Through Client
18. 5. Citrix ICA Client 6.20 for OS 9.X
18. 6. Citrix ICA Client 6.30 for OS 10.x

19. Microsoft Terminal Services Licensing

19. 1. Summary of Licensing Options in Windows 2000 Server
19. 2. Summary of the licensing options in Microsoft Windows Server 2003

20. Implement Windows System Policies

20. 1. MIAB Administrative Template Overview
20. 2. How to Create an Administrative Template to Hide Drives
20. 3. Implementing Windows 2000 Active Directory Group Policies
20. 4. Implementing Windows NT, Terminal Server 4.0 System Policies

21. How to Install and Configure MetaFrame Password Manager

21. 1. Prepare the Directory Service
21. 2. Install and Configure the MetaFrame Password Manager Console
21. 3. Deploy the MetaFrame Password Manager Agent
21. 4. On-Going Maintenance

22. Implementation Phase Checkpoint


READINESS PHASE
1. Readiness Phase Overview
2. Testing your New MetaFrame Access Suite Environment
3. Pilot Implementation
4. Rollout Any Remaining Servers
5. Implement Change Management Policies and Procedures
6. Readiness Phase Checkpoint

ROLLOUT PHASE
1. Rollout Phase Overview
2. End-User Training
3. Administrator Training
4. Go Live!
5. Rollout Phase Checkpoint

APPENDIX
1. Additional Resources
2. MIAB3.0.ZIP - Files Explained

7. 2.        How to Create a Network Boot Disk

In order to clone a server you will need to create a boot disk that will allow you to connect to your network so that you can copy the image file that you created in step 10, to a network share for future use. The following procedures will show you how to create a MS-DOS 6.22 boot disk.

You need only one blank 1.44MB 3.5" disk, an NT Server 4.0 CD-ROM, MS-DOS network adapter drivers, and a Windows workstation. You need to create a separate boot disk for every different type of network adapter you use.

1.      Insert a blank, formatted 3.5" disk into the workstation's drive A.

2.      Insert the NT Server 4.0 CD-ROM into the workstation's CD-ROM drive (drive E in this article).

3.      Run E:\support\hqtool\makedisk.bat to create an NT 4.0 hardware query disk, which works as an MS-DOS boot disk that you can customize.

4.      After makedisk.bat has finished running, go to the 3.5" disk. Remove hardware query components that makedisk.bat has placed on the disk (i.e., A:\zipfile.exe, A:\setramd.bat, A:\dos\findramd.exe, and A:\dos\ramdrive.sys). The boot disk doesn't need the hardware query components, and they consume valuable disk space that you need for the TCP/IP networking components.

5.      To ensure that A:\autoexec.bat doesn't reference any files that you removed in Step 4, edit A:\autoexec.bat to contain only

@echo off
prompt $p$g
SET PATH=A:\DOS

 

6.      To prevent errors when config.sys attempts to reference the hardware query components that you deleted, edit A:\config.sys to contain only

DEVICE=A:\DOS\HIMEM.SYS
DEVICE=A:\DOS\EMM386.EXE FRAME=NONE
DOS=HIGH,UMB
FILES=30
BUFFERS=20
LASTDRIVE=Z
STACKS=9,256
SHELL=A:\COMMAND.COM A:\ /E:512 /P

This step completes the creation of the MS-DOS boot disk.

7.      Copy the E:\clients\msclient\netsetup folder and its contents to a FAT partition on your local system (drive C in this article) that you can access when you boot from your new boot disk. The system will use the Netsetup files to install the TCP/IP networking component to the disk.

8.      Create a folder on drive C and name it NIC_Driver. Copy your network adapter's MS-DOS\Windows for Workgroups (WFW) 3.11 drivers into the NIC_Driver folder. (You can find the drivers on the CD-ROM or disk that came with the adapter or download the drivers from the adapter manufacturer's Web site.) You need at least the two drivers oemsetup.inf and nic_card.dos. If your adapter doesn't have an oemsetup.inf file, copy the drivers that are available, then use the workaround described for this situation when you reach Step 12.

9.      Use your newly created boot disk to reboot your machine.

10. Type: C:\netsetup\setup.exe at the command prompt, then press Enter to start the setup program for Microsoft Network Client 3.0 for MS-DOS. Press Enter again to set up the Network Client software on your boot disk.

11. Select C:\net in the Network Client directory and press Enter. The network setup program creates a C:\net folder and places all the necessary binaries and configuration files into that folder. You specify the local hard disk, not the boot disk, as the file destination because the Network Client setup program copies more than the essential files, and those files take up more space than is available on the boot disk. In later steps, you'll remove superfluous files from the C:\net folder and place the streamlined C:\net folder on your boot disk.

12. A screen that lists network adapters appears. From the list, select the network adapter that your system is using. If your adapter doesn't appear on the list, select Network adapter not shown on list below and press Enter. On the next screen that appears, enter the path to the NIC_Driver folder that you created in Step 8. The next screen that appears displays a list of network adapters that your drivers support. Select your adapter, and when the next screen prompts you, press Enter to select the Setup for best performance option. This option configures the network drivers to use more memory for network buffers.

If you found in Step 8 that your network adapter doesn't include an oemsetup.inf file, you can select any network adapter from the list, manually copy the nic_card.dos driver for your network adapter into the A:\net folder, and copy into A:\net\protocol.ini the entries in the sample protocol.ini file that comes with your nic_card.dos driver. You also need to change the netcard, lana0, and bindings entries in A:\net\protocol.ini to point to the new driver section. Listing 1, page 72, contains a sample protocol.ini file.

After you adjust the protocol.ini file, edit the netcard entry in A:\net\system.ini to point to the new nic_card.dos driver. Listing 2, page 72, shows an example of a system.ini file's [network drivers] section.

13. After you select your adapter, the setup program asks you for a username. Type the domain account that you will use to connect to the remote share (in this article, the username is Administrator). Press Enter.

14. The next screen that appears, the setup menu, lets you change names, setup options, and network configuration. Select the Change Names option, and on the resulting screen, which Figure 1 shows, set Change Computer Name to a unique name and set Change Domain Name to the domain in which the Administrator user account resides.

 

Press Enter and the program will return you to the setup menu. Select Change Setup Options, and on the resulting screen, set Change Logon Validation to Logon to Domain, as Figure 2 shows. Press Enter to return to the setup menu, and then select Change Network Configuration. The resulting screen, which Figure 3 shows, contains two boxes; you can press Tab to toggle between the boxes. By default, the NWLink IPX protocol is bound to the network adapter. To add the TCP/IP protocol, shift to the lower box, select Add Protocol, and press Enter. A list of protocols appears. From the list, select Microsoft TCP/IP and press Enter. You return to the previous screen. To remove the NWLink IPX protocol, toggle to the upper box and choose NWLink IPX Compatible Transport. Then, move to the lower box, select Remove, and press Enter. The resulting window will look similar to Figure 3.

 

If your network does not use DHCP to configure clients, you need to change the TCP/IP settings to give your network adapter a static IP address. Select Microsoft TCP/IP in the upper box, then toggle to the lower box and select Change Settings. Press Enter. The resulting screen lets you specify an IP address, subnet mask, and default gateway. To disable the DHCP client, you also need to set Disable Automatic Configuration to

 

 

15. Press Enter as many times as necessary to reach the setup menu. On the setup menu, select the listed options are correct, and press Enter. When the setup program prompts you for an OEM driver disk, press Enter again. Then, press F3 to finish setup without rebooting. Eject the boot disk, and reboot to your main OS.\

16. To fit the C:\net folder and its contents onto the boot disk, you need to remove all nonessential files. Open the C:\net folder and delete

C:\net\setup.exe
C:\net\sockets.exe
C:\net\nwlink.exe
C:\net\expand.exe
C:\net\ping.exe
C:\net\ipconfig.exe
C:\net\addname.exe
C:\net\win_sock.dll
C:\net\winsock.dll
C:\net\wsockets.dll
C:\net\rascopy.bat
C:\net\vbapi.386
C:\net\vsockets.386
C:\net\readme.txt
C:\net\*.inf
 

17. Copy C:\net to your boot disk, and use a text editor to replace C:\net with A:\net in the autoexec.bat, config.sys, and system.ini configuration files on the boot disk. For example, change C:\net\autoexec.bat to A:\net\autoexec.bat.

18. Open the A:\net\system.ini file, and find the [network] section. Within that section, replace the workgroup=WORKGROUP line with passwordcaching=no. The boot disk does not require the workgroup line, and setting passwordcaching to no ensures that a file on your boot disk does not cache your user account password; such a cache might create a security problem in some organizations.

After you complete these 18 steps, you have a TCP/IP boot disk with about 200KB of space to spare. I have used this method successfully with Ethernet and Token-Ring LAN adapters.

If you need boot disks for more than one computer, use the diskcopy.exe command to make copies of your new boot disk. To avoid an identity crisis on your network, you need to change the computername entry in A:\net\system.ini to make each disk unique. If you specified a fixed IP address instead of using DHCP, you need to change the IP address in the TCP/IP section of the A:\net\protocol.ini file to a unique address on each disk you copy.

Your TCP/IP boot disk will let you boot clients to your TCP/IP network and use the Netuse command to map network drives. I commonly use TCP/IP boot disks to roll out a standard client image to multiple machines. When client machines have different hardware, I can map a drive to a network share that contains NT 4.0 installation media and use a boot disk to perform a manual or unattended installation of NT 4.0 onto a machine that does not have a CD-ROM drive. Putting all the boot files on one disk makes performing these administrative tasks much easier.

 

LISTING 1: Sample Protocol.ini File

NONEXECUTABLE

[network.setup]
version=0x3110
netcard=ms$driver,1,ms$driver,1
transport=tcpip,TCPIP
lana0=ms$driver,1,tcpip

[TCPIP]
NBSessions=6
SubNetMask0=255 0 0 0
IPAddress0=0 0 0 0
DisableDHCP=0
DriverName=TCPIP$
BINDINGS=ms$driver
LANABASE=0

[protman]
DriverName=PROTMAN$
PRIORITY=MS$NDISHLP

[ms$driver]
DriverName = nic_driver$
MAXTRANSMITS = 6
RECVBUFS = 2
RECVBUFSIZE = 256
XMITBUFS = 1
XMITBUFSIZE = 2040

Note: The ms$driver values need to match the ms$driver section heading. The sample protocol.ini file that comes with the driver file provides the entries in the ms$driver section.

LISTING 2: A system.ini file's [network drivers] section

[network drivers]
netcard=nic_card.dos
transport=tcpdrv.dos,nemm.dos
devdir=A:\NET
LoadRMDrivers=yes

Note: The netcard value needs to be the driver file name.

 

 

8. Configure MetaFrame XP Farm Wide Settings

Now that we have built a few servers, we are ready for to configure farm wide settings to configure MetaFrame XP for optimum performance, ease of administration, ease of usability.

The following section defines the following:

       How to Setup Automatic Reboot for MetaFrame XP Servers

       MetaFrame XP Delegated Administration

o        How to Add a New MetaFrame XP Administrator

       How to Create a Zone & Move MetaFrame XP Servers to it

       How to Set a Servers Preference for Data Collector Elections

       MetaFrame XP User Policies

o        How to Create a New MetaFrame XP policy

o        How to Configure a MetaFrame XP policy

o        How to Assign a MetaFrame XP policy to User(s) and or Group(s)

       How to Implement Automatic ICA Client Updates

o        How to Update the ICA Client Database with a ICA Client Images

o        How to Update a Single ICA Client

o        How to Configure the ICA Client Update Configuration Database

o        How to Create A Central ICA Client Update Configuration Database

o        How to Configure ICA Client Updates on a User / Group Basis

       Client Drive Mapping

o        How to Configure Client Drive Mapping on a User / Group Basis

o        How to Manually Map Client Drives

o        How to Change the Default Client Drive Letter

       How to Implement Client to Server Content Redirection

       How to Implement Server to Client Content Redirection

o        How to Implement Server to Client Content Redirection Farm Wide

o        How to Implement Server to Client Content Redirection per Server

o        How to Enable Server to Client Content Redirection on a User / Group Basis

       Configure ICA Keep-Alive

o        How to Configure ICA Keep-Alives on a Farm Wide Basis

o        How to Configure ICA Keep-Alives on a Per-Server Basis

       Configure SpeedScreen Browser Acceleration

o        How to Configure SpeedScreen Browser Acceleration Farm Wide

o        How to Configure SpeedScreen Browser Acceleration per Server

o        How to Allow or Disallow Macromedia Flash Player Content in Publish Applications

 

Note: This is not an inclusive list, not all items will be configured in all farms and of course there could be much that I have left out in certain environments. More will be added in future versions of this document.

 


DABCC Site Map | Legal Notice | Privacy Statement | All Rights Reserved for DABCC, Inc.