To let the Workspace Control Desktop start on a Terminal Server:
- In the Citrix Console, publish a Citrix server desktop.
- Depending on your Citrix XenApp edition, it may differ how a Citrix server desktop is published. For more information, refer to your Citrix documentation.
- In Microsoft Active Directory, configure a GPO:
- Go to User Configuration > Administrative Templates > System > "Custom User Interface".
- Enter the correct path to pfwsmgr.exe. This starts Workspace Control when a user launches a Citrix Desktop.
- Create the GPO:
- Go to User Configuration > Administrative Templates > System > "Custom user interface".
- Enter the correct path %RESPFDIR%\pfwsmgr.exe.
- Enable loopback processing on this GPO:
- Go to Computer Configuration > Administrative Templates > System > Group Policy > "User Group Policy loopback processing mode".
- Enable this setting in Replace mode.
- Configure security for the GPO:
- On the Security tab of the GPO properties (Delegation > Advanced), add the group containing all users for whom you want a Managed Desktop.
- You can remove (or deny) the "apply-rights" for your administrative accounts.
- Link the GPO:
- Link the GPO to the OU where your Citrix Servers exist in the Microsoft Active Directory.
- For Citrix XenApp 6.5 you should use the Citrix AppCenter.
- For Citrix XenApp/XenDesktop 7.x you should use Citrix Studio.
This best practice applies to:
- Microsoft Windows Server Remote Desktop Services.
- Citrix XenApp 6.5 and Citrix XenApp/XenDesktop 7.x.