Hotfix AAC420W005 - For Access Gateway - Advanced Access Control 4.2 for Windows Server 2000 & 2003

Hotfix readme name: AACE420W005.HTML
Hotfix package name: AAC420W005.EXE
For: Advanced Access Control 4.2
Replaces: AAC420W001, AAC420W002, AAC420W003, AAC420W004
Date: November, 2006
Languages supported: English (US), French, German, Japanese, Spanish
Readme version: 1.1

Note: You can apply this hotfix only to computers running Advanced Access Control 4.2.

This hotfix is available from the Citrix FTP site at AAC420W005.zip.

This hotfix includes a security improvement for Endpoint Analysis scans for Access Gateway with Advanced Access Control V. 4.2.

Caution:

• When you apply this hotfix, existing custom scans (scans other than those provided by Citrix) stop working and you must recreate them. To do this:
• For custom scans you created yourself, download the Endpoint Analysis SDK V. 4.2.5, available in the Citrix Developer Network (CDN) portion of mycitrix.com
• For custom scans you purchased from a third-party software vendor, contact the vendor to obtain updated versions of the packages
• Before installing this hotfix, use Windows Explorer to create a backup of your logon points folder because the logon points are not preserved. You also need to recreate any customized logon points. After installing this hotfix, you must remove all existing logon points and then (re-)deploy them.
• This hotfix also updates the Endpoint Analysis Client on the server where you install the hotfix. However, the hotfix does not update any clients you deployed on other devices. To update clients on other devices, download and deploy the provisioning version of the client, Endpoint Analysis Client V. 4.2.5, available, available in the Citrix Developer Network (CDN) portion of mycitrix.com.
• Symantec Antivirus and Firewall scan packages are part of this hotfix. If you need to uninstall this hotfix, these packages are not removed and become unusable. These packages must be removed manually. If you have configured any scans using the packages, Endpoint Analysis functionality might remain unusable after uninstallation of the hotfix until the Symantec scan packages are removed.
• Symantec Antivirus and Firewall are added as part of this hotfix. However, they are not added to the Access Management Console automatically. If you want to use these scans, import the scan from the installation directory, which is usually C:\Program Files\Citrix\Access Gateway\Bin\EPAPackages.
• This hotfix does not have a Repair option. If the need arises to reinstall this hotfix, you must uninstall and then reinstall it. Reinstalling this hotfix without first uninstalling it might render the Endpoint Analysis scanning functionality unusable.
• After installing this hotfix, you must run discovery in the Access Management Console. When discovery is complete, the initial view displays correctly.

Where to Find Documentation

This document describes the issues solved by this hotfix and includes installation instructions. You can find more information about Citrix Advanced Access Control 4.2 in the Citrix Access Gateway with Advanced Access Control Administrator's Guide. The guide is in the \Documentation directory on the Citrix Access Gateway Enterprise Server CD. All product documentation is also available from the Citrix Web site at http://www.citrix.com/support.

The Administrator's Guide is in an Adobe Portable Document (PDF) format file. To view, search, and print the documentation, you need Adobe Reader 5.0.5 or later with Search. You can download Adobe Reader for free from the Adobe Web site at http://www.adobe.com/.

Known Issue(s) in this Release

• You must apply this hotfix to all servers, including Access Suite Console only systems.


• You may be prompted for your Advanced Access Control 4.2 CD when attempting to uninstall this hotfix. The issue is caused by unversioned files that were part of the original installation that might not be cached. If this happens, without canceling the uninstall process, point to the location and click OK to continue.


• Silent installation of this hotfix is not supported.


• When installing this hotfix, it first attempts to uninstall any previous Advanced Access Control Version 4.2 hotfixes on the computer before continuing with the hotfix installation. On computers that have both the Access Suite Console and Advanced Access Control installed, there might be an intermittent issue where the uninstallation of the previous hotfix ends prematurely. If the hotfix you are attempting to install is not displayed in Add/Remove Programs in the Control Panel, please install the hotfix again.


• When users have Secure Access Client installed, are using either Firefox or Netscape Web browsers, and delete cookies, Secure Access Client stops working. Users must uninstall and then reinstall Secure Access Client. Before reinstallation, remove any Secure Access Client icons from the desktop to prevent duplicate icons.


• When using either Firefox or Netscape, or if the Secure Access Client is installed manually using Internet Explorer, users must restart the browser before connecting with Secure Access Client.

Issue(s) Resolved in this Hotfix

1. Allowing Web resources to bypass Web proxy URL rewriting can be accomplished using policies. Previously, the option Bypass Web proxy URL rewriting was located in the New Web Resource wizard. Modifying this option required you to edit the properties of each Web resource. By installing this fix, you can allow Web resources to bypass Web proxy URL rewriting based on the access scenario rather than on the Web resource. Using policies to configure URL rewriting for Web resources may be appropriate if, for example, you have resources that users access from both internal and external logon points. Using this hotfix allows you to bypass Web proxy URL rewriting for resources accessed through the internal logon point.

   After you install this fix, the option Bypass Web proxy URL rewriting no longer appears on the New Web Resource wizard. Instead, the fix migrates this option, now called Bypass UrlRewriting, to the policy properties. If you configured existing Web resources to bypass Web proxy URL rewriting prior to installing the hotfix, the Bypass UrlRewriting policy setting is enabled and set to Allowed in policies that affect those Web resources after installation. For existing Web resources that do not bypass Web proxy URL rewriting, the Bypass UrlRewriting policy setting is set to Not Configured. If you have a policy that includes two or more Web resources with differing URL rewriting settings (for example, two resources bypass the Web proxy and three resources do not), the Bypass UrlRewriting policy setting is set to Not Configured after installing the hotfix.

   To allow a Web resource to bypass Web proxy URL rewriting:

   1. From the Access Suite Console, expand Policies and then double-click the policy affecting the Web resource. If no policy exists, click Create access policy under Common Tasks.
   2. On the Settings page, select Bypass UrlRewriting and then select Enable this policy to control this setting.
   3. Select the option to allow the setting.

   To enable Web proxy URL rewriting, select the option to deny the setting or clear the Enable this policy to control this setting checkbox.

[From AAC420W001][#128416]

2. Session data can be sent in the form of browser cookies to third party Web sites when using the Web proxy.

   [From AAC420W002][#95586]

3. This hotfix introduces a usability enhancement that allows users who change their password and are prompted by the access center for their old passwords to reset their profiles, then log on to the access center. Their personalized settings and cached credentials are discarded. After installing this hotfix, import the updated Access Center CDA cab file on the server running Citrix Advanced Access Control. To do this:
   1. In the Access Suite Console, right click Access Centers and select Manage CDAs.
   2. Select Import and browse to Program Files\Citrix\Access Gateway\Bin\ctxcdaSessionInit.cab and then click Open.

   [From AAC420W002][#122742]

4. After applying this fix, users whose passwords are set by an administrator to be both blank and changed at next logon can correctly change their passwords the next time they log on.

   [From AAC420W002][#129609, #130928]

5. After applying this hotfix, users no longer have access rights to Advanced Access Control shares and content when their NTFS permissions are removed.

   [From AAC420W002][#129710]

6. After applying this fix, users are required to enter their old password when prompted to gain access to the access center and cannot bypass this screen using the browser's Back button.

   [From AAC420W002][#129893]

7. The Program Neighborhood CDA cannot maintain stored credentials after an administrator makes changes on the Access Suite Console for the access center.

   [From AAC420W002][#129946]

8. Policy checks for resources that use token replacement are case-sensitive.

   [From AAC420W002][#130048]

9. This fix introduces support for Universal Principal Names (UPN), such as user@domain.com, as a method of authenticating to logon points. To enable or disable UPN support, you must set the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MSAM\WebProxy

   Name: EnableUPNUsernamesForWebResources
   Type: REG_DWORD
   Data: 1 (to enable UPN support) or 0 (to disable UPN support)

   Additionally, modify the web.config file for CitrixLogonAgent to hide the domain field on the logon page.

   <add key="HideDomainField" value="true" />

   Finally, you can add this line item to allow the UPN-formatted user name to be passed to RSA. Without this only the user name is sent.

   <add key="SendCompleteUserNameToRSA" value="true" />

   [From AAC420W002][#130576]

10. After applying this hotfix, attachments through email can be performed from an Advanced Access Control share. No longer does the service account need to be explicitly set as an NTFS security member of that share.

    [From AAC420W002][#131502]

11. The network resource 0.0.0.0 is denied by default.

    [From AAC420W002][#132297]

12. Tasks, such as Check In, Check out, and Version History that are associated with the Document Library of a Sharepoint site, might not be available for use.

    [From AAC420W003][#134191]

13. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX110950.

    [From AAC420W004][#131634]

14. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX111614.

    [From AAC420W004][#139539]

15. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX111615.

    [From AAC420W004][#140095]

16. If a user adds or removes a subfolder in a file share exposed through the File System Browser, other users cannot see that the subfolder was added or removed. The issue occurs because the program maintains a cache of file and subfolder names in the published file shares to reduce the time it takes to display them to each user; the cache does not reflect changes at the subfolder level.

    [From AAC420W004][#134244]

17. Depending on the input locales of user accounts writing to the Event Log, embedded event time stamps are formatted differently (yyyy/mm/dd, dd/mm/yyyy, and mm/dd/yyyy). This makes it difficult to locate events in the log. With this fix, the Event Log Consolidator no longer uses the embedded time stamps but those of the Event Log instead.

    [From AAC420W005][#129825, #132211]

18. When viewing the Web File Browser in the Website Viewer CDA, error pages and access denied pages might appear. The issue occurs when the Web File Browser is run through a proxy. This fix modifies the IIS filter to ignore the offending Web File Browser asp page.

    [From AAC420W005][#130123]

19. When the Access Gateway appliance has a fully qualified domain name (FQDN) that has only one or two parts (such as domain.com, instead of www.domain.com), and the appliance is configured to be part of an Advanced Access Control farm, the appliance does not appear in the Gateway Appliances server list in the Advanced Access Control Access Suite Console.

    [From AAC420W005][#130126]

20. Users who are deleted from the access center section of the Access Suite Console can still log on.

    [From AAC420W005][#131234]

21. Users and user groups in the Access Suite Console might appear with the name of the security identifier (SID) instead of the user or group name. This happens when the domain contains a large number (2,000 or more) of objects, the SID is truncated when stored in the database, and correct SID-to-name mapping is impossible. After applying this fix, any existing users who appear as SIDs must be removed and then added again.

    [From AAC420W005][#131399]

22. If the Advance Access Control session times out, users of an Access Center Program Neighborhood Content Delivery Agent can still launch published applications.

    [From AAC420W005][#132028]

23. Depending on the input locales of user accounts writing to the Event Log, embedded event timestamps are formatted differently (yyyy/mm/dd, dd/mm/yyyy and mm/dd/yyyy). This makes it difficult to locate events in the log. With this fix, the Event Log Consolidator no longer uses the embedded timestamps but those of the Event Log instead.

    [From AAC420W005][#132211]

24. Files do not embed in the browser when launched from an Advanced Access Control resource traversing the Web proxy. Instead, they launch using their local associated application.

    [From AAC420W005][#132741]

25. Under McAfee VirusScan Enterprise 8.0, upgrading to a later scan engine and/or updating virus definitions causes End Point Analysis scans to fail.

    [From AAC420W005][#132835]

26. After changing their passwords as prompted by the Windows security policy, users receive a "Failed to change password" error message and cannot log on.

    [From AAC420W005][#132934]

27. Administrators cannot add UNCs that contain special characters such as ampersands (&).

    [From AAC420W005][#133077]

28. When migrating an Advanced Access Control database from Version 4.0 to 4.2, some policy settings configured for features that are new in Version 4.2 do not take effect. As a result, the Access Gateway Client does not launch.

    [From AAC420W005][#133204]

29. When changing an Active Directory user's group membership, logons to Advanced Access Control servers may fail.

    [From AAC420W005][#133867]

30. When Advanced Access Control is configured to start the Secure Access Client, the installation of the Net6Helper ActiveX control fails to install and the client is redirected to the Advanced Access Control logon page. In this scenario, the client cannot establish a connection using the Secure Access Client.

    [From AAC420W005][#134737]

31. Static Web resource content is not cached when traversing the Web proxy, which causes additional hits to the backend resource. With this fix, global static content is cached, which dramatically increases performance because redundant requests are avoided.

    [From AAC420W005][#135194]

32. This fix addresses the following set of issues related to installing the Endpoint Analysis Client:
    • Users of Mozilla-based browsers cannot install the client from the first Web page (Welcome.aspx) when connecting through HTTPS and, thus, through the Access Gateway.
    • Users of Internet Explorer on Windows XP with Service Pack 2 cannot install the client from Welcome.aspx. As a workaround, users can be redirected to Login.aspx and install the client from there. However, this option does not work when connecting through the Access Gateway.
    • Users of Mozilla-based browsers are presented with a hyperlink to manually download the client if the automatic installation mechanism fails. However, users of Internet Explorer are not presented with the hyperlink; instead, they are redirected to Login.aspx without being able to run an Endpoint Analysis scan.
    • Installing the client requires users to have rights to write both to the "Program Files" folder and to the HKEY_LOCAL_MACHINE registry hive. If Internet Explorer detects that a user does not have such rights, installation of the client is skipped. On Mozilla-based browsers, the rights check is not performed and users attempting to install the client without sufficient rights receive cryptic error messages.

    You might need an updated build for the Access Gateway if the installation of the EPA client fails to install immediately. If you are using Access Gateway Standard Edition, Version 4.5, make sure the build number is equal or greater than 28.7. If you are using Citrix Access Gateway Version 4.2, make sure the build number is higher than 81.32

    [From AAC420W005][#135931]

33. Users may have access to file shares even if such access is not explicitly granted by an Advanced Access Control policy.

    [From AAC420W005][#136265]

34. When viewing the file shares list in the NavUI page and setting the "Show Location" registry value to zero to avoid the display of UNCs, the tool tips of the NavUI page continue to display the UNCs for each share.

    [From AAC420W005][#136452]

35. Different access rights of files within file share resources are not honored.

    [From AAC420W005][#136675]

36. Changing passwords when logging on with a user principal name (UPN; for example, user@domain.com) and leaving the Domain field blank does not work.

    [From AAC420W005][#136754]

37. When an IIS Web site is configured to have more than one IP/port combination, the Server Configuration wizard exits unexpectedly when launched.

    [From AAC420W005][#137264]

38. Endpoint Analysis scans for Symantec and Norton products do not identify clients using Symantec Client Security or Symantec AntiVirus Corporate Edition products. This fix introduces new scan packages for Symantec AntiVirus and Firewall components. The firewall scan works with Symantec Client Security Version 2.x and later. The antivirus scan works with components of Symantec Client Security and with Symantec AntiVirus Corporate Edition Version 9.0 and later and with Symantec AntiVirus Enterprise Edition of the same versions. Citrix recommends that you configure scans and filters for the new packages.

    [From AAC420W005][#137344]

39. If an access policy is set to allow users to open a file using only HTML Preview, the choice page appears erroneously.

    [From AAC420W005][#137538]

40. When adding more than one Endpoint Analysis scan result to a logon point in languages other than English, the results are not saved.

    [From AAC420W005][#137724]

41. When an HTML encoded colon (:) appears in a URL, the URL rewriter generates a URL that later cannot be properly resolved by WinHttp because it considers the URL invalid.

    [From AAC420W005][#137959]

42. If Advanced Access Control is hosted on an alternative Web site, users logging on receive a server error message if Hotfix AAC420W002 is installed.

    [From AAC420W005][#139545]

43. When using the proxy cache feature, the Web browser may produce a warning about insecure content. This happens because the proxy cache does not distinguish between content acquired through SSL and raw content. This fix modifies the proxy cache to be aware of the presence of SSL and to make it part of what uniquely identifies content in the cache. You must restart IIS for this change to take effect.

    [From AAC420W005][#139902]

44. The EngineMgrService.exe process may exit unexpectedly when previewing PDF files on an Advanced Access Control file share. The issue occurs when the title tag of the generated HTML is empty or contains something other than a file path.

    [From AAC420W005][#139953]

45. RSA SecurID authentication fails after upgrading from Version 4.0 of Advanced Access Control.

    [From AAC420W005][#140600]

46. This fix provides compatibility of the Access Suite Console in Access Gateway Enterprise 4.0 and Access Gateway with Advanced Access Control 4.2, and the Access Management Console in Access Gateway Advanced Edition 4.5 with Version 4.5 of the Access Management Console.

    [From AAC420W005][#143235]

47. When adding a file share with periods, the console produces the following error message: "The UNC path is invalid." This happens because Advanced Access Control does not recognize paths to file shares whose names contain a period as valid UNCs.

    [From AAC420W005][#143317]

48. With workspace control enabled, when applications reconnect using Advanced Access Control or the Web Interface, the applications create new Presentation Server sessions instead of sharing the same Windows session.

    [From AAC420W005][#144319]

49. Users connecting to Advanced Access Control through the Access Gateway cannot install Citrix Presentation Server Client from the installation page that appears on the navigation page.

    [From AAC420W005][#145058]

50. Earlier versions of the Endpoint Analysis technology require downloading various libraries to perform client scans. This fix decreases the complexity of the technology by aggregating all client-side components into a single package and thus providing tighter integration and increased security.

    [From AAC420W005][#147978]

Installing and Uninstalling this Hotfix

Important

Before installing this hotfix, you might have private binaries provided by the Citrix Technical Support team. Some of these private binaries are stored in the Global Assembly cache and appears as version 4.2.5. Before installing this hotfix, remove these binaries from the Global Assembly cache.

To remove binaries from the Global Assembly cache

1. Click Start, click Run, and type %systemroot%\assembly\.
2. Click on the Version column to sort by version.
3. Find any assembly that has version 4.2.5 and make sure that a 4.2.0 version also exists.
4. Right-click the version 4.2.5 assembly and click Delete.

Notes:

This hotfix may or may not prompt you to restart the server when the installation or uninstallation is complete.

To install this hotfix:

1. Download this hotfix from the Citrix FTP site at AAC420W005.zip.
2. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.
3. Close all applications.
4. Run the executable.
5. Restart the server.

To uninstall this hotfix:

1. From the Start menu, select Settings > Control Panel.
2. In Control Panel, double-click Add/Remove Programs.
3. Highlight the hotfix you want to uninstall and click Remove.
4. Follow the directions on-screen.

Files Updated (All Dates/Times EDT)

Server binaries

AthenaWeb.dll	266,240	11/10/2006	06:11p
CDS.dll	319,488	11/10/2006	06:11p
Citrix.AccessGatewayEnterprise.LogonAgentService.dll	45,056	11/10/2006	03:59p
Citrix.AdvancedAccessControl.ImportExport.DataObjects.dll	49,152	11/10/2006	03:09p
Citrix.AdvancedAccessControl.ImportExport.Interfaces.dll	28,672	11/10/2006	03:09p
Citrix.AuthenticationService.Common.dll	36,864	11/10/2006	03:30p
Citrix.AuthenticationService.dll	126,976	11/10/2006	03:30p
Citrix.AuthenticationService.LDAP.dll	32,768	11/10/2006	03:30p
Citrix.AuthenticationService.Server.dll	36,864	11/10/2006	03:30p
Citrix.AuthenticationService.UniversalBroker.dll	28,672	11/10/2006	03:30p
Citrix.Common.Protocols.NFuse.dll	40,960	11/10/2006	03:29p
Citrix.Common.System.dll	163,840	11/10/2006	03:02p
Citrix.EPAService.dll	57,344	11/10/2006	03:21p
Citrix.LogonAgent.Config.Backend.dll	69,632	11/10/2006	04:18p
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll	49,152	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.AccessPointManager.dll	53,248	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.Common.dll	81,920	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.EmailManager.dll	40,960	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.dll	139,264	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll	1,196,032	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.PageManager.dll	53,248	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.PeopleManager.dll	57,344	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.ResourceManager.dll	94,208	11/10/2006	03:09p
Citrix.Msam.Auditing.dll	24,576	11/10/2006	03:07p
Citrix.Msam.Installation.Migration.Processor.dll	73,728	11/10/2006	04:17p
Citrix.Msam.NavUI.BusinessObjects.NavUIManager.dll	32,768	11/10/2006	03:58p
Citrix.Msam.Policies.AdminTranslationLayer.dll	65,536	11/10/2006	03:09p
Citrix.Msam.Policies.CommonStrings.dll	8,704	11/10/2006	03:09p
Citrix.Msam.Policies.RuntimeTranslationLayer.dll	28,672	11/10/2006	03:29p
Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll	32,768	11/10/2006	03:29p
Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.dll	24,576	11/10/2006	03:29p
Citrix.Msam.ServerConfig.Common.dll	307,200	11/10/2006	04:18p
Citrix.Msam.ServerConfig.ConfigData.dll	57,344	11/10/2006	04:19p
Citrix.Msam.ServerConfig.ConfigWizard.dll	483,328	11/10/2006	04:19p
Citrix.Msam.SessionManagement.Server.dll	57,344	11/10/2006	03:08p
Citrix.Msam.Settings.dll	24,576	11/10/2006	03:05p
Citrix.NUI.dll	45,056	11/10/2006	03:59p
Citrix.Resources.AggregationLegacy.dll	69,632	11/10/2006	03:29p
Citrix.Resources.MetaFrameCommon.dll	13,312	11/10/2006	03:29p
Citrix.WebFileBrowser.NetworkShares.dll	65,536	11/10/2006	06:11p
CitrixDomainIdentification.CAB	37,490	11/10/2006	03:26p
CitrixFWEMcAfee.CAB	41,040	11/10/2006	03:26p
CitrixFWEWindows.CAB	36,446	11/10/2006	03:26p
CitrixFWEZoneLabs.CAB	36,540	11/10/2006	03:26p
CitrixFWPMcAfee.CAB	37,078	11/10/2006	03:26p
CitrixFWPNorton.CAB	36,560	11/10/2006	03:26p
CitrixFWPZoneLabs.CAB	37,935	11/10/2006	03:26p
CitrixFWSymantec.CAB	36,735	11/10/2006	03:26p
CitrixIEPatchLevel.CAB	36,222	11/10/2006	03:26p
CitrixIEVersion.CAB	38,022	11/10/2006	03:26p
CitrixMACEnumeration.CAB	40,193	11/10/2006	03:26p
CitrixMFVersion.CAB	38,077	11/10/2006	03:26p
CitrixNNVersion.CAB	40,557	11/10/2006	03:26p
CitrixOSPatchLevel.CAB	36,315	11/10/2006	03:26p
CitrixOSVersion.CAB	36,251	11/10/2006	03:26p
CitrixVSEMcAfee.CAB	76,285	11/10/2006	03:25p
CitrixVSENorton.CAB	43,049	11/10/2006	03:25p
CitrixVSETrend.CAB	42,572	11/10/2006	03:25p
CitrixVSPMcAfee.CAB	40,287	11/10/2006	03:26p
CitrixVSPNorton.CAB	56,670	11/10/2006	03:25p
CitrixVSSymantec.CAB	42,942	11/10/2006	03:26p
CPatch.exe	28,672	10/05/2006	11:13a
ctxcdaSessionInit.CAB	46,355	11/10/2006	04:28p
CtxPDFHandler.dll	42,496	11/10/2006	06:11p
CtxUpdateUtility.exe	86,016	11/10/2006	04:22p
DataLayerMigration.dll	884,736	11/10/2006	04:18p
EventLogConsolidator.exe	618,496	11/10/2006	04:23p
FEI.cab	372,997	11/10/2006	04:33p
LogonAgent.dll	180,224	11/10/2006	03:58p
LogonAgentApp.cab	793,628	11/10/2006	04:33p
MsamDatabaseInitializer.dll	303,104	11/10/2006	03:05p
OSUtilities.dll	192,512	11/10/2006	06:11p
policy.4.2.Citrix.AccessGatewayEnterprise.LogonAgentService.Config	443	11/10/2006	03:59p
policy.4.2.Citrix.AccessGatewayEnterprise.LogonAgentService.dll	3,584	11/10/2006	03:59p
policy.4.2.Citrix.AdvancedAccessControl.ImportExport.DataObjects.Config	448	11/10/2006	03:09p
policy.4.2.Citrix.AdvancedAccessControl.ImportExport.DataObjects.dll	4,096	11/10/2006	03:09p
policy.4.2.Citrix.AdvancedAccessControl.ImportExport.Interfaces.Config	447	11/10/2006	03:09p
policy.4.2.Citrix.AdvancedAccessControl.ImportExport.Interfaces.dll	4,096	11/10/2006	03:09p
policy.4.2.Citrix.AuthenticationService.Common.Config	430	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.Common.dll	3,584	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.Config	423	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.dll	3,584	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.LDAP.Config	428	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.LDAP.dll	3,584	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.Server.Config	430	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.Server.dll	3,584	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.UniversalBroker.Config	439	11/10/2006	03:30p
policy.4.2.Citrix.AuthenticationService.UniversalBroker.dll	3,584	11/10/2006	03:30p
policy.4.2.Citrix.Common.Protocols.NFuse.Config	424	11/10/2006	03:29p
policy.4.2.Citrix.Common.Protocols.NFuse.dll	3,584	11/10/2006	03:29p
policy.4.2.Citrix.Common.System.Config	415	11/10/2006	03:02p
policy.4.2.Citrix.Common.System.dll	3,072	11/10/2006	03:02p
policy.4.2.Citrix.EPAService.Config	412	11/10/2006	03:21p
policy.4.2.Citrix.EPAService.dll	3,072	11/10/2006	03:21p
policy.4.2.Citrix.LogonAgent.Config.Backend.Config	427	11/10/2006	04:18p
policy.4.2.Citrix.LogonAgent.Config.Backend.dll	3,584	11/10/2006	04:18p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.Config	446	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessPointManager.Config	445	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessPointManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.Common.Config	433	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.Common.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EmailManager.Config	439	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EmailManager.dll	3,584	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.Config	450	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.InitializationManager.Config	448	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PageManager.Config	438	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PageManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PeopleManager.Config	440	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PeopleManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.ResourceManager.Config	442	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.ResourceManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Auditing.Config	415	11/10/2006	03:07p
policy.4.2.Citrix.Msam.Auditing.dll	3,072	11/10/2006	03:07p
policy.4.2.Citrix.Msam.Installation.Migration.Processor.Config	439	11/10/2006	04:17p
policy.4.2.Citrix.Msam.Installation.Migration.Processor.dll	3,584	11/10/2006	04:17p
policy.4.2.Citrix.Msam.NavUI.BusinessObjects.NavUIManager.Config	441	11/10/2006	03:58p
policy.4.2.Citrix.Msam.NavUI.BusinessObjects.NavUIManager.dll	3,584	11/10/2006	03:58p
policy.4.2.Citrix.Msam.Policies.AdminTranslationLayer.Config	437	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.AdminTranslationLayer.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.CommonStrings.Config	429	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.CommonStrings.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayer.Config	439	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayer.dll	3,584	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.Config	451	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll	4,096	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.Config	448	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.dll	4,096	11/10/2006	03:29p
policy.4.2.Citrix.Msam.ServerConfig.Common.Config	426	11/10/2006	04:18p
policy.4.2.Citrix.Msam.ServerConfig.Common.dll	3,584	11/10/2006	04:18p
policy.4.2.Citrix.Msam.ServerConfig.ConfigData.Config	430	11/10/2006	04:19p
policy.4.2.Citrix.Msam.ServerConfig.ConfigData.dll	3,584	11/10/2006	04:19p
policy.4.2.Citrix.Msam.ServerConfig.ConfigWizard.Config	432	11/10/2006	04:19p
policy.4.2.Citrix.Msam.ServerConfig.ConfigWizard.dll	3,584	11/10/2006	04:19p
policy.4.2.Citrix.Msam.SessionInit.Config	418	11/10/2006	03:58p
policy.4.2.Citrix.Msam.SessionInit.dll	3,584	11/10/2006	03:58p
policy.4.2.Citrix.Msam.SessionManagement.Server.Config	431	11/10/2006	03:08p
policy.4.2.Citrix.Msam.SessionManagement.Server.dll	3,584	11/10/2006	03:08p
policy.4.2.Citrix.Msam.Settings.Config	415	11/10/2006	03:05p
policy.4.2.Citrix.Msam.Settings.dll	3,072	11/10/2006	03:05p
policy.4.2.Citrix.NUI.Config	405	11/10/2006	03:59p
policy.4.2.Citrix.NUI.dll	3,072	11/10/2006	03:59p
policy.4.2.Citrix.Resources.AggregationLegacy.Config	429	11/10/2006	03:29p
policy.4.2.Citrix.Resources.AggregationLegacy.dll	3,584	11/10/2006	03:29p
policy.4.2.Citrix.Resources.MetaFrameCommon.Config	427	11/10/2006	03:29p
policy.4.2.Citrix.Resources.MetaFrameCommon.dll	3,584	11/10/2006	03:29p
policy.4.2.DataLayerMigration.Config	413	11/10/2006	04:18p
policy.4.2.DataLayerMigration.dll	3,072	11/10/2006	04:18p
policy.4.2.EventLogConsolidator.Config	415	11/10/2006	04:23p
policy.4.2.EventLogConsolidator.dll	3,072	11/10/2006	04:23p
policy.4.2.LogonAgent.Config	405	11/10/2006	03:58p
policy.4.2.LogonAgent.dll	3,072	11/10/2006	03:58p
policy.4.2.MsamDatabaseInitializer.Config	418	11/10/2006	03:05p
policy.4.2.MsamDatabaseInitializer.dll	3,584	11/10/2006	03:05p
SAMFilter.dll	73,728	11/10/2006	06:11p
SecurityBroker.dll	126,976	11/10/2006	06:11p
SessionInit.cab	119,869,852	11/10/2006	04:33p
VeratiumInbox.dll	196,608	11/10/2006	06:11p
WebProxy.dll	319,488	11/10/2006	06:11p
WebServices.cab	29,890	11/10/2006	04:33p

For US:

Citrix.AuthenticationService.resources.dll	5,120	11/10/2006	03:30p
Citrix.AuthenticationService.Server.resources.dll	5,120	11/10/2006	03:30p
Citrix.LogonAgent.Config.Backend.resources.dll	9,728	11/10/2006	04:19p
Citrix.Msam.SessionManagement.Server.resources.dll	6,144	11/10/2006	03:08p
CPatchUI.dll	6,144	10/05/2006	10:20a
LogonAgent.resources.dll	28,672	11/10/2006	03:58p

For DE:

Citrix.AuthenticationService.resources.dll	5.120	10.11.2006	15:30
Citrix.AuthenticationService.Server.resources.dll	5.120	10.11.2006	15:30
Citrix.LogonAgent.Config.Backend.resources.dll	10.240	10.11.2006	16:19
Citrix.Msam.ServerConfig.Common.resources.dll	200.704	10.11.2006	16:18
Citrix.Msam.ServerConfig.ConfigWizard.resources.dll	36.864	10.11.2006	16:19
Citrix.Msam.SessionManagement.Server.resources.dll	6.144	10.11.2006	15:08
CPatchUI.dll	6.656	05.10.2006	11:15
EventLogConsolidator.resources.dll	94.208	10.11.2006	16:23
LogonAgent.resources.dll	19.968	10.11.2006	15:58

For ES:

Citrix.AuthenticationService.resources.dll	5.120	11/10/2006	03:30p
Citrix.AuthenticationService.Server.resources.dll	5.120	11/10/2006	03:30p
Citrix.LogonAgent.Config.Backend.resources.dll	9.728	11/10/2006	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	200.704	11/10/2006	04:18p
Citrix.Msam.ServerConfig.ConfigWizard.resources.dll	40.960	11/10/2006	04:20p
Citrix.Msam.SessionManagement.Server.resources.dll	6.144	11/10/2006	03:08p
CPatchUI.dll	6.656	10/05/2006	11:20a
EventLogConsolidator.resources.dll	98.304	11/10/2006	04:23p
LogonAgent.resources.dll	19.456	11/10/2006	03:58p

For FR:

Citrix.AuthenticationService.resources.dll	5 120	10/11/2006	15:30
Citrix.AuthenticationService.Server.resources.dll	5 120	10/11/2006	15:30
Citrix.LogonAgent.Config.Backend.resources.dll	10 240	10/11/2006	16:19
Citrix.Msam.ServerConfig.Common.resources.dll	204 800	10/11/2006	16:18
Citrix.Msam.ServerConfig.ConfigWizard.resources.dll	45 056	10/11/2006	16:19
Citrix.Msam.SessionManagement.Server.resources.dll	6 144	10/11/2006	15:08
CPatchUI.dll	6 656	05/10/2006	11:18
EventLogConsolidator.resources.dll	106 496	10/11/2006	16:23
LogonAgent.resources.dll	32 768	10/11/2006	15:58

For JA:

Citrix.AuthenticationService.resources.dll	5,120	2006/11/10	03:30p
Citrix.AuthenticationService.Server.resources.dll	5,120	2006/11/10	03:30p
Citrix.LogonAgent.Config.Backend.resources.dll	10,240	2006/11/10	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	204,800	2006/11/10	04:18p
Citrix.Msam.ServerConfig.ConfigWizard.resources.dll	40,960	2006/11/10	04:20p
Citrix.Msam.SessionManagement.Server.resources.dll	6,144	2006/11/10	03:08p
CPatchUI.dll	5,632	2006/10/05	11:17a
EventLogConsolidator.resources.dll	94,208	2006/11/10	04:24p
LogonAgent.resources.dll	32,768	2006/11/10	03:58p

Console binaries

Citrix.Common.System.dll	163,840	11/10/2006	03:02p
Citrix.LogonAgent.Config.Backend.dll	69,632	11/10/2006	04:18p
Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll	49,152	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.AccessPointManager.dll	53,248	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.Common.dll	81,920	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.EmailManager.dll	40,960	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.dll	139,264	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll	1,196,032	11/10/2006	03:10p
Citrix.Msam.Amc.BusinessObjects.PageManager.dll	53,248	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.PeopleManager.dll	57,344	11/10/2006	03:09p
Citrix.Msam.Amc.BusinessObjects.ResourceManager.dll	94,208	11/10/2006	03:09p
Citrix.Msam.Policies.AdminTranslationLayer.dll	65,536	11/10/2006	03:09p
Citrix.Msam.Policies.CommonStrings.dll	8,704	11/10/2006	03:09p
Citrix.Msam.Policies.RuntimeTranslationLayer.dll	28,672	11/10/2006	03:29p
Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll	32,768	11/10/2006	03:29p
Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.dll	24,576	11/10/2006	03:29p
Citrix.Msam.ServerConfig.Common.dll	307,200	11/10/2006	04:18p
Citrix.Msam.Settings.dll	24,576	11/10/2006	03:05p
Citrix.Msam.UI.CmiExtension.dll	9,007,104	11/10/2006	04:01p
CollapsiblePanelBar.dll	65,536	05/15/2005	08:45p
CPatch.exe	28,672	10/05/2006	11:13a
EndpointAnalysis.dll	2,170,880	11/10/2006	04:10p
EventLogConsolidator.exe	618,496	11/10/2006	04:23p
MsamDatabaseInitializer.dll	303,104	11/10/2006	03:05p
policy.4.2.Citrix.Common.System.Config	415	11/10/2006	03:02p
policy.4.2.Citrix.Common.System.dll	3,072	11/10/2006	03:02p
policy.4.2.Citrix.LogonAgent.Config.Backend.Config	427	11/10/2006	04:18p
policy.4.2.Citrix.LogonAgent.Config.Backend.dll	3,584	11/10/2006	04:18p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.Config	446	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessCenterManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessPointManager.Config	445	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.AccessPointManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.Common.Config	433	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.Common.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EmailManager.Config	439	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EmailManager.dll	3,584	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.Config	450	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.EndpointAnalysisManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.InitializationManager.Config	448	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.InitializationManager.dll	4,096	11/10/2006	03:10p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PageManager.Config	438	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PageManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PeopleManager.Config	440	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.PeopleManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.ResourceManager.Config	442	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Amc.BusinessObjects.ResourceManager.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.AdminTranslationLayer.Config	437	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.AdminTranslationLayer.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.CommonStrings.Config	429	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.CommonStrings.dll	3,584	11/10/2006	03:09p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayer.Config	439	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayer.dll	3,584	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.Config	451	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerEventHandler.dll	4,096	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.Config	448	11/10/2006	03:29p
policy.4.2.Citrix.Msam.Policies.RuntimeTranslationLayerUtilities.dll	4,096	11/10/2006	03:29p
policy.4.2.Citrix.Msam.ServerConfig.Common.Config	426	11/10/2006	04:18p
policy.4.2.Citrix.Msam.ServerConfig.Common.dll	3,584	11/10/2006	04:18p
policy.4.2.Citrix.Msam.Settings.Config	415	11/10/2006	03:05p
policy.4.2.Citrix.Msam.Settings.dll	3,072	11/10/2006	03:05p
policy.4.2.Citrix.Msam.UI.CmiExtension.Config	422	11/10/2006	04:01p
policy.4.2.Citrix.Msam.UI.CmiExtension.dll	3,584	11/10/2006	04:01p
policy.4.2.EndpointAnalysis.Config	411	11/10/2006	04:10p
policy.4.2.EndpointAnalysis.dll	3,072	11/10/2006	04:10p
policy.4.2.EventLogConsolidator.Config	415	11/10/2006	04:23p
policy.4.2.EventLogConsolidator.dll	3,072	11/10/2006	04:23p
policy.4.2.MsamDatabaseInitializer.Config	418	11/10/2006	03:05p
policy.4.2.MsamDatabaseInitializer.dll	3,584	11/10/2006	03:05p
SecurityBroker.dll	126,976	11/10/2006	06:11p

For US:

Citrix.LogonAgent.Config.Backend.resources.dll	9,728	11/10/2006	04:19p
Citrix.Msam.UI.CmiExtension.resources.dll	6,602,752	11/10/2006	04:05p
CPatchUI.dll	6,144	10/05/2006	10:20a

For DE:

Citrix.LogonAgent.Config.Backend.resources.dll	10,240	11/10/2006	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	200,704	11/10/2006	04:18p
Citrix.Msam.UI.CmiExtension.resources.dll	851,968	11/10/2006	04:03p
CPatchUI.dll	6,656	10/05/2006	11:15a
EndpointAnalysis.resources.dll	536,576	11/10/2006	04:10p
EventLogConsolidator.resources.dll	94,208	11/10/2006	04:23p

For ES:

Citrix.LogonAgent.Config.Backend.resources.dll	9,728	11/10/2006	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	200,704	11/10/2006	04:18p
Citrix.Msam.UI.CmiExtension.resources.dll	921,600	11/10/2006	04:07p
CPatchUI.dll	6,656	10/05/2006	11:20a
EndpointAnalysis.resources.dll	561,152	11/10/2006	04:11p
EventLogConsolidator.resources.dll	98,304	11/10/2006	04:23p

For FR:

Citrix.LogonAgent.Config.Backend.resources.dll	10,240	11/10/2006	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	204,800	11/10/2006	04:18p
Citrix.Msam.UI.CmiExtension.resources.dll	1,048,576	11/10/2006	04:05p
CPatchUI.dll	6,656	10/05/2006	11:18a
EndpointAnalysis.resources.dll	552,960	11/10/2006	04:11p
EventLogConsolidator.resources.dll	106,496	11/10/2006	04:23p

For JA:

Citrix.LogonAgent.Config.Backend.resources.dll	10,240	11/10/2006	04:19p
Citrix.Msam.ServerConfig.Common.resources.dll	204,800	11/10/2006	04:18p
Citrix.Msam.UI.CmiExtension.resources.dll	925,696	11/10/2006	04:09p
CPatchUI.dll	5,632	10/05/2006	11:17a
EndpointAnalysis.resources.dll	524,288	11/10/2006	04:12p
EventLogConsolidator.resources.dll	94,208	11/10/2006	04:24p

Copyright © 2006 Citrix Systems, Inc. All rights reserved.
Citrix, MetaFrame, and MetaFrame XP are registered trademarks, Citrix Presentation Server, and Advanced Access Control are trademarks of Citrix Systems, Inc. in the United States and other countries.
All other trademarks and registered trademarks are the property of their respective owners