NDA
• You have seen this slide countless times and you will see it countless times more in each and every break out you attend. Simply because you fail to read this slide in its entirety does not remove your obligation to keep confidential all material
information disclosed to you by the presenter of this material. You may find this content funny, you may find it boring, you
may even walk out of this presentation, none of that will change the fact that the material presented is covered under our
Agenda
•
Citrix’s value-add products compatible on
Microsoft Windows Server 2003
•
Tuning Tip for Citrix technologies running on
Microsoft Windows Server 2003
MetaFrame Compatibility on
MetaFrame Access Suite USERS INFORMATION Conferencing Manager Password Manager Secure Access Manager Presentation Server
Citrix MetaFrame Access Suite
Any Device Any Network
Secure
Presentation Server 3.0
•
Feature Enhancements
– Simplified Licensing for all Access Suite Products
– Citrix Documentation Center
– Management Console for the Access Suite
• View Applications, Servers, Zones in all Farms • Monitor Performance of Server Farms
– Enhanced Support for Large Farms
– Zone Preference and Failover
– Extended Policy Options
– Enhanced Delegated Administration
Presentation Server 3.0
– Enhanced Delegated Administration – Digital Dictation Support
– Enhanced Multimedia Support
• SpeedScreen Multimedia
• SpeedScreen Flash Acceleration • SpeedScreen Image Acceleration
– Improved User Logon
– Session Reliability
– Follow-me Roaming
– Disabled Applications now hideable
– Basic Support for RDP Clients
Password Manager 2.0
W in d o w s W in d o w sFor Access to
For Access to
What is MetaFrame Password Manager?
• Single Sign-On solution for:
– MetaFrame Presentation Server Deployment
– Desktop Deployment
– Mixed Deployment (MetaFrame Presentation Server + Desktop)
• User only needs to remember primary credentials • Handles all secondary logons and password change
requests automatically
• End users and administrators can configure applications using an easy-to-use wizard
Secure Access Manager 2.2
•
Remote employees need
offline
access to email.
•
Need to support additional browser beyond
Microsoft’s Internet Explorer.
•
Desire to secure existing Enterprise Information Portal
(EIP) or other existing Web based infrastructure.
•
Challenges displaying Java based internal Web sites
and applications.
•
Challenges accessing internal Web sites with unique
verb sets, WebDAV enabled sites, etc…
MetaFrame Secure Access
Manager 2.2 delivers…
•
Alternative User Interface:
– Allows MetaFrame Secure Access Manager to direct users to
different EIPs or Web based infrastructures (other than the Access Center) immediately after authentication.
•
New
Advanced
Gateway Client, providing support for:
– Most common PC browsers (IE, Netscape, etc…) – Synchronization of Outlook 2000+ clients
– Access to java based Web sites and applications
– Access to sites incorporating unique verb sets such as WebDAV enabled sites, Outlook Web Access, etc…
Securing Alternative User Interface
•
Allows customers to leverage existing infrastructure
•
Allows MetaFrame Secure Access Manager to be
sold as a solution to secure other EIPs
Conferencing Manager 3.0
•
Up to 50% of employees work outside office
•
Often geographically separated
•
Sharing information easily and securely
MetaFrame Conferencing Manager enables
–
Nearly any device over any connection
–
Secure application collaboration
Conferencing Manager Evolution
•
Guest attendees
– Users that are not MetaFrame users or are not employees
•
Overall enhanced usability
– All users launching applications
– Attendee moderated mouse and keyboard control
– Request mouse/keyboard control
Adding attendees
•
Invite users
from the
domain,
Guest Web Login
•
Friendly Name
•
Guest ID
– unique for each
– guest attendee
– E.g. email address
•
Conference ID
Usability Improvements
• Set Mouse/KeyB Control
• Pass Mouse/KeyB Control
• Request Mouse/KeyB Control
Usability Improvements
•
Flexible Options
– Mouse/Keyboard
– Color Depth
Tuning &
Presentation Server
•
MetaFrame Presentation Server on Windows Server
2003 includes the following changes in functionality:
– The ICA Client Creator utility is not supported. If you want to create installation floppy diskettes for supported client software, you must manually create them.
– Virtual “Scripts” directory is not created when IIS is enabled. MetaFrame Presentation Server Setup installs a .Dll file—Wpnbr.dll—in a virtual directory called “Scripts.” This file is required if you are using the Web Interface for port sharing.
Presentation Server
– Remote users can connect to MetaFrame Presentation Server over TCP/IP only. Terminal Services in Windows Server does not support remote connections over
IPX/SPX, NetBIOS, and asynchronous transports.
– “Restrict each user to one session” feature is enabled by default. When this setting is enabled, the server
disconnects an active session and reconnects the new connection request from the same user to the
disconnected session.
Enabling this feature conserves resources and simplifies reconnecting to disconnected sessions. You can disable this setting in the Server Settings node of Terminal
Presentation Server
•
Forest Trusts
– With Windows Server 2003 Active Directory forests, you can create a 2-way forest trust that will allow a transitive trust between all child domains in the trusted forests.
• MetaFrame XP FR3 does not support the use of this type of trust between child domains. If you require a trust between 2 child domains in separate forests, it is necessary to create an explicit trust between domains.
Presentation Server
•
User Access to Terminal Servers
– By default on Windows Server 2003, members of the Administrators and Remote Desktop Users groups can connect via Terminal Services.
• The Remote Desktop Users group contains no users when it is initially created; you must manually add any users or
groups that will require Terminal Services access.
• If the users are not already members of the Computer’s local group it is also necessary to add them.
Presentation Server
•
DO NOT USE THE /3GB Switch
– On Microsoft Windows Server 2003 operating systems, using the /3GB switch in Boot.ini is not recommended on servers running MetaFrame Presentation Server.
• Server 2003 systems can address up to 4GB of memory, usually 2GB for kernel and 2GB for processes. Using the /3GB switch in boot.ini changes memory allocation to 1GB for kernel and 3GB for processes.
• Due to the large number of applications and processes
running on a MetaFrame Presentation Server and Terminal Services, kernel memory space is heavily used, so using the /3GB switch causes a decrease in scalability.
More Info…
•
For more tuning tip and tricks for MetaFrame
Access Solutions running in a Microsoft
Windows Server 2003 environment please visit: