How to Create a Change Password Form Definition for Presentation Server Client 10.100 or Later

Summary

With version 10.100 or later of the Presentation Server Client, the Program Neighborhood Agent invokes a change password window when a user’s Windows password expires. This article describes how to create a Citrix Password Manager form definition to respond to this Program Neighborhood Agent window, resulting in smoother password changes.

Requirements

In Web Interface, from the Access Management Console, the user must be configured to change his/her password in the Access Management Console.

In the console, expand Web Interface, click Configure Authentication Methods and go to Properties > Prompt > Password Settings. Enable Change password.

Procedure

If you have not deployed an application definition for the Program Neighborhood Agent before, download its template by clicking this link.

This Password Manager template is updated to reflect the current Presentation Server Client 10.2xx settings. Using this revised template, administrators can create an application definition for the Program Neighborhood Agent.

If you are already using a Password Manager application definition for Program Neighborhood Agent, complete the following procedure to update the application definition:

1. Log on to the workstation, but do not log on to Program Neighborhood Agent.

2. Terminate the user’s Windows password while the user is logged on to the workstation. This can be expedited by selecting the User must change password at next login check box for the user’s Windows account.

3. Launch Program Neighborhood Agent and supply credentials. The user is notified that about the password expiration and prompted to create a new one.

4. Click Yes. The Program Neighborhood Agent password wizard launches.

5. Launch the Application Definition tool for Password Manager.

6. Edit the Program Neighborhood Agent application definition.

7. Create a form with Password change form as the form type.

8. Select the program window corresponding to the Program Neighborhood Agent change password form.

9. Define form actions for Old Password, New Password, and Confirm new password.

10. Configure for Advanced matching to distinguish between the Logon form and the Change password form.


a. On the Logon form, add the following for the Submit credentials action:

Control ID	Variable	Condition	Value
1003	Class	Equal	Edit
1004	Class	Equal	Edit
1005	Class	Equal	Edit

b. On the Change Password form, add the following for the Change Password action:

Control ID	Variable	Condition	Value
116	Class	Equal	Edit
117	Class	Equal	Edit
118	Class	Equal	Edit

Users receive these changes when they synchronize with the central store.

The Password Manager Change Password Wizard starts immediately when the Program Neighborhood Agent change password window launches again.

More Information

For more information on creating a logon form definition for version 10.100 or later of the Presentation Server Client, see CTX113346 – Legacy Password Manager Agents do Not Detect Presentation Server Client 10.100 or Later.

For an even smoother experience, configure Success and Fail password forms as well. This allows Password Manager to automatically detect these events and react accordingly, lessening user intervention. Complete the following procedure:

1. Perform a password change with the Program Neighborhood Agent wizard. A dialog box appears indicating success. Do not click OK.

2. Create a form with Successful password change form as the form type.

3. Select the program window corresponding to the Program Neighborhood Agent’s successful password change confirmation dialog box.

4. Define a form action for the OK button.

5. Perform an unsuccessful password change with the Program Neighborhood Agent wizard. A dialog box appears indicating failure. Do not click OK.

6. Repeat Steps 2 through 4 for the Failure case using a Failed password change form.

7. Configure Advanced matching to distinguish between the Successful password change form and the Failed password change form as follows.


a. On the Success form, add the following for the Submit credentials action:

Control ID	Variable	Condition	Value
65535	Text	Equal	Your password has been changed.

b. On the Failure form, add the following for the Submit credentials action:

Control ID	Variable	Condition	Value
65535	Text	Not Equal	Your password has been changed.