Windows Live Alerts
Start access
Support Forum
Remote Desktop Services
Terminal Services
Web Interface
Tips & Tools
Lassen Sie sich von einem Experten Beraten

Custom Citrix Administrator and DCOM permissions Print E-mail
Written by Thomas Koetzing   
Wednesday, 07 December 2011

ImageAccording to CTX126977 you just need to add users to the local "Distributed COM Users" to get a custom Citrix Administrator to work. This should ensure that users can enumerate across all servers in the farm. That doesn't work for me and for others in the forum. There is another article CTX106304 that explains how to set MFCOM launch permission but is a pain to do with a lot of servers in the farm.

Here is an easy way that worked for me in a global XenApp Farm:

1. Use Group Policy Restricted Groups to add users/group to the local Distributed COM Users
Computer Configuration\Policies\Windows Settings\Security Settings\Restricted Groups

2. Use Group Policy Define Activation Security Check exemptions do disable Activation Security Check for the MFCOM appid
Path: Computer Configuration\Policies\Administrative Templates\System\Distributed COM\Application Compatibility\Define Activation Security Check exemptions

Use the DCOMCNFG tool to find the Application ID (appid) for MFCOM. Mine is {7BB98CBB-42E7-402B-994B-C21141D252DB} and is the value name and the value is 1 to disable the activation check.

Hope that helps some people with their Custom Citrix Administrators.

find or follow me @