Symptoms
When shadowing, the following error message is received:
“You do not have the proper encryption level to access this session.”
Cause
Multiple and different requirements of encryption have been established at the listener level or at the Policy level.
The following steps reproduce this issue:
1. Publish Notepad with128-bit encryption.
2. Create a policy to allow only 128-bit encryption ICA connections.
3. Launch Notepad from Program Neighborhood for instance.
4. Shadow the ICA connection from either the shadow taskbar or the Management Console.
The ICA session created from the shadow program, either the shadow taskbar, wshadow.exe, or the Management Console, generates an ICA session with the encryption level found under the registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\ica-tcp\MinEncryptionLevel
This key is controlled within the Citrix Connection Configuration, mfcfg.exe, under the Advance button.
In this example, if the setting is set to basic, the ICA session created for shadowing is created with the basic encryption level and therefore does not meet the policy encryption requirements.
Multiple policies configured with different requirements and assigned to different groups of user or client machines can make this issue seem intermittent or complex.
Resolution
In this example, setting the listener to 128-bit encryption ensures the shadowed session meets the policy requirements.
More Information
CTX607275 – Error: You do not have the proper encryption level to access this session..When using the Shadow Taskbar
CTX104904 – Error: You Do Not Have The Proper Encryption Level.. When Logging On To a Windows 2003 Server
