TrevorProkop.com

We were using Citrix Password Manager 4.6.93 and upgraded to Citrix Password Manager 4.6.94 and had an error with a server after reboot.  We were able to fix this issue by copying down the ctxgina.dll to the Password Manager folder on the Citrix 4.5 server.

 Here are the steps that resolved the infinite server 2003 reboot.

1. Start Up in Safe Mode
2. Copy ctxgina.dll from C:\Windows\system32\
3. Paste into C:\Program Files\Citrix\MetaFrame Password Manager\SSOGina
4. Rename SSOGina.dll to SSOGina.dll.old
5. Rename ctxgina.dll to SSOGina.dll
6. Reboot

Launch the Terminal and type the following exactly:
defaults write com.apple.desktopservices DSDontWriteNetworkStores true
Restart your Mac and you will no longer have those pesky .DS_Store files appearing every time you browse a network share.

www.malwaredatabase.net is a great resource to keep up to date on some of the latest Malware that’s out on the Internet.

Brian Madden had a great article on setting up the Citrix Access Managment Console to auto configure, this really comes in handy when you delegate functions to people that are not as familiar with configuring the client.

Here is the post:

One of the great benfits of Presentation Server / XenApp is the ability to delegate administrative functions to help desk admins and support engineers. Unfortunately if you simply publish the Access Management Console for them, the “discovery” process will prompt the user every time the console is launched, which is annoying and confusing. In this artcile, Katie Koepke took the time to figure out how you can pre-configure the AMC so that discovery runs without user intervention.
Written by:Katie Koepke
Publication Date:March 27, 2008
Tags:Citrix
Doc #Id: 5702print version tell a friend

4comments9773 viewsIt’s widely known that one great benefit made available in Presentation Server 4.5 (and previous versions) is the ability to delegate, in a granular fashion, limited functionality within the Access Management Console (AMC) to help desk administrators and other engineers who may be supporting a Presentation Server / XenApp environment. The most efficient way to distribute the AMC to help desk admins is to publish it like any other app from your Presentation Server farm. However, if you publish the default AMC from “c:\Program Files\Common Files\Citrix\Access Management Console - Framework\CmiLaunch.exe,” each new user launching the published application for the first time will be prompted to “Configure and Run Discovery.” This is not something most of us want for our help desk administrators to have to deal with or to be confused by. Launching a pre-configured AMC that automatically runs a discovery to gather current information is much simpler for everyone.

While it turns out it’s very simple to accomplish this, the information is not readily available by doing a quick Google search for a CTX article. In fact, I talked to a couple of engineers at Citrix before finding someone who was able to provide the solution. That said, while the process is actually quite simple, and it could be buried in an admin guide somewhere, the purpose of this article is to provide a quick and easy “how to” resource on publishing a pre-configured AMC for Help Desk Administrators.

Step 1: Add Presentation Server/XenApp Administrators
To begin, launch the AMC and run through the “Add administrator” wizard and add the appropriate user accounts or security groups of those whom you would like to delegate either “View Only,” “Full Administrator,” or “Custom” administration abilities to. In most cases you’ll select the “Custom” option and delegate specific functions accordingly.

Step 2: Configure the Microsoft Management Console/Access Management Console
Next, launch the Microsoft Management Console (MMC) from a Presentation Server/XenApp server and add the Citrix Access Management Console snap-in.

Highlight the Citrix Access Management Console in the MMC and you will be prompted to “Configure and Run Discovery.” (If you are not prompted, right-click the Citrix Access Management Console and select “Configure and Run Discovery.”). Complete the wizard accordingly and click “Finish.”

After finishing the discovery, click “File | Options” in the MMC. Select the “Console mode” drop-down arrow and select the desired option. In the case of publishing the AMC to help desk admins I would suggest selecting “User mode - limited access, single window.” Accept the default options leaving “Do not save changes to this console” unchecked and “Allow the user to customize views” checked (if you want them to have the ability to customize the view). Click “Apply,” then “OK”.

Next, save the MMC console (“File | Save As”) and save the console with a descriptive name in a location of your choice with the .msc extension. For example, name it “Access Management Console.msc” and save it in C:\Program Files\Citrix. Close the MMC. If you are prompted to save the console settings click “Yes.” Copy the .msc file to the same location on each Presentation Server in your farm that you intend to publish the console on.

Step 3: Publishing the Newly Configured MMC/AMC
To publish the newly configured MMC/AMC simply go through the application publishing wizard as you normally would. For the command line application location, enter “mmc.exe” followed by the path to the .msc file you saved in the prior steps. For example:

mmc.exe “C:\Program Files\Citrix\Access Management Console.msc”

No working directory needs to be defined.

If you would like to change the icon from the default MMC icon, browse to C:\Program Files\Common Files\Citrix\Access Management Console - Framework\CmiLaunch.exe and select the traditional AMC icon

That’s it! When the published AMC is launched a discovery will run automatically to capture the most recent data without requiring the discovery to be configured.

Troubleshooting Tips
If you receive the following discovery errors when launching the published version of the AMC as an administrator with “Full” or “Custom” privileges, try the following solutions. These issues may or may not apply to you depending on how your environment is configured.

Error:

Errors occurred when using in the discovery process. An unexpected error occurred. Check that the server name is correct, that the server is on, that Citrix Presentation Server is installed on this server, and that the Citrix MFCOM Service is running.

Solution:

Enable network COM+ access on each Presentation Server per http://support.citrix.com/article/CTX112808.
If the enabling network COM+ access on each server does not resolve the issue when launching the published AMC as administrator with “Custom” privileges, there may be an additional required setting in the custom privileges for that user or group. For example it’s common to delegate the ability to administer “Sessions” (Connect Sessions, Disconnect User, Log Off Users etc.). If you do this make sure you also grant “View Published Applications and Content” in the Applications section of the Citrix Administrator Properties, Permissions section. Further, if you have any subfolders defined in the Applications section of the Citrix Administrator Properties, Permissions section, make sure the same setting is configured in the subfolder.
Error:

The My Knowledge features will not be available for farm

Solution:

Again, the privileges likely need to be modified for your administrators with “Custom” privileges. For this specific error, try enabling the following two settings of the Citrix Administrator Properties, Permissions section:

Monitoring Configuration: Check “View Farm Monitoring and Server Default Monitoring Information”
Resource Manager: Check “View Resource Management Configuration and Alerts”

Step 1: Uninstall Alternative User Input

To uninstall the alternative user input feature, set the installation state to Not Available in Office XP Setup.

Microsoft Windows Millennium Edition (Me), Microsoft Windows 98, or Microsoft Windows NT 4.0:

NOTE: If you have multiple Office XP products installed, for example, Office XP Professional and Publisher 2002, you must repeat the preceding steps for each installed product.

Microsoft Windows 2000 and Microsoft Windows XP:

NOTE: If you have multiple Office XP products installed, for example, Office XP Professional and Publisher 2002, you must repeat the preceding steps for each installed product.

Step 2: Remove Alternative User Input Services from Text Services

English (United States)- default Keyboard United States 101

Step 3: Run Regsvr32 /U on the Msimtf.dll and Msctf.dll Files

Step 1: Uninstall Alternative User Input

To uninstall the alternative user input feature, set the installation state to Not Available in Office XP Setup.

Microsoft Windows Millennium Edition (Me), Microsoft Windows 98, or Microsoft Windows NT 4.0:

NOTE: If you have multiple Office XP products installed, for example, Office XP Professional and Publisher 2002, you must repeat the preceding steps for each installed product.

Microsoft Windows 2000 and Microsoft Windows XP:

NOTE: If you have multiple Office XP products installed, for example, Office XP Professional and Publisher 2002, you must repeat the preceding steps for each installed product.

Step 2: Remove Alternative User Input Services from Text Services

English (United States)- default Keyboard United States 101

Step 3: Run Regsvr32 /U on the Msimtf.dll and Msctf.dll Files

Today I was repairing a PC that would give a lot of page not found errors, wouldn’t update Symantec virus definitions, and wouldn’t perform Windows Updates.  When I tried browsing to housecall.trendmicro.com I couldn’t get that page to load up either.  When I tried pinging these sites, I would receive a 127.0.0.1 address.  I checked the hosts file but nothing was out of the ordinary.  It turns out the computer I was working on was infected with the tdssserv rootkit.  Below are the steps I took to remove it from the workstation.

Try running these these tools:
They have to be fresh downloads, especially combofix has to be the latest version.
1. Download SDFix and save it to your desktop.
http://downloads.andymanchesta.com/RemovalTools/SDFix.zip

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :

* Restart your computer
* After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
* Instead of Windows loading as normal, a menu with options should appear;
* Select the first option, to run Windows in Safe Mode, then press “Enter”.
* Choose your usual account.

* Open the extracted folder and double click “RunThis.bat” to start the script.
* Type “Y” to begin the script.
* It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
* Press any Key and it will restart the PC.
* Your system will take longer that normal to restart as the fixtool will be running and removing files.
* When the desktop loads the Fixtool will complete the removal and display “Finished”, then press any key to end the script and load your desktop icons.
* Finally open the SDFix folder on your desktop and copy and attach the contents of the results file “Report.txt” back

2. download ComboFix to your Desktop, from either of these locations:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log
Re-enable all the programs that were disabled during the running of ComboFix..

Note:
Do not mouse-click combofix’s window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

This link below shows how to use Combofix as well as installing RC if it isn’t installed yet.
http://www.bleepingcomputer.com/combofix/how-to-use-combofix

When we first started rolling out our Citrix Password Manager Self Service Password Reset security questions some users would click close rather than registering.  The problem is, that the Password Manager client would also close and it would not pass the user’s credentials to their applications. 

 In order to alleviate this issue, we disabled the close buton on the registration window.  We performed the following steps on  both our 32 and 64 bit servers:

Users could cancel the First Time Use wizard by clicking the “x” in the upper right corner.

With this fix, you have the option to remove the “x” button to prevent users from canceling the wizard. To do this:

• On the agent, create the following registry value at HKLM\Software\Citrix\MetaFramePasswordManager\Extensions\SetupManager:
  Name: ForceFTU
  Type: DWORD
  Data: 1
• Restart the agent

If you’re looking to have your users reset their locked accounts or forgotten passwords and are already running Citrix Access Gateway Advanced and Citrix Password Manager below you’ll find a How To guide that should get you started with integrating the two of them.  Let me know if there is something I’m missing from the documentation. Click here to download guide.

Here is a way to disable that auto send read receipt feature in Outlook 2007.  There is a registry key created when this is turned on. It’s located at HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Preferences\ReadReceipt  it’s a DWORD value of 00000001 when it is turned on.  To change this, just have a login script rewrite this value to all zeros and then it will be disabled in the user’s Outlook client.