Hotfix MPSE300R05W2K035 - For Metaframe Presentation Server 3.0 for Windows 2000 Server

Hotfix readme name: MPSE300R05W2K035.HTML
Hotfix package name: MPSE300R05W2K035.MSI
For: Presentation Server 3.0 with Hotfix Rollup Pack MPSE300W2KR05
Replaces: MPSE300R05W2K002, MPSE300R05W2K005, MPSE300R05W2K007, MPSE300R05W2K009, MPSE300R05W2K011, MPSE300R05W2K019, MPSE300R05W2K020, MPSE300R05W2K033
Date: January, 2008
Language supported: English (US)
Readme version: 1.01

Readme Revision History

Version	Date	Change Description
1.01	January, 2008	Added line item #168503
1.00	January, 2008	Initial release

Important Note(s) about this Release

• This hotfix can be applied only to a Windows 2000 Server with Presentation Server 3.0 and Hotfix Rollup Pack MPSE300W2KR05 installed.

• Caution! This hotfix may require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

Where to Find Documentation

This document describes the issue(s) solved by this hotfix and includes installation instructions. You can find more information about Presentation Server 3.0 in the Presentation Server Administrator's Guide. Documentation, including the Administrator's Guide, is in the Document Center located in the \documentation\docs directory on the Presentation Server CD. The Document Center provides a single point of access to the documentation and enables you to go directly to the section in the documentation that you need. You can access the Document Center from the product CD or install it on your servers.

If you prefer to access the guide without using the Document Center, navigate to the component PDF files using Windows Explorer. The guide is in an Adobe Portable Document (PDF) format file. To view, search, and print the documentation, you need Adobe Reader 5.0.5 or later with Search. You can download Adobe Reader for free from the Adobe Web site at http://www.adobe.com/.

All product documentation is also available from the Citrix Web site at http://support.citrix.com .

Issue(s) Resolved in this Hotfix

1. When running the CHFARM utility or during the process of adding a server to a farm, the IMA data key is set incorrectly. This, in effect, adds a second data collector to the zone. The actual data collector cannot communicate with the other server, which might cause this server to become unresponsive and refuse connections. This change prevents the IMA Service from starting when the IMA data key does not match the one contained in the data store. This fix applies only to servers running with a direct connection to a SQL or Oracle database.

   [From MPSE300R05W2K002][#129403]

2. This internal licensing enhancement introduces an alternate method of handling errors occurring during license acquisition.

   To enable this enhancement, a specific license file is required.

   [From MPSE300R05W2K005][#137751]

3. Under certain environmental conditions the IMAsrv.exe process might consume 100% of the CPU.

   [From MPSE300R05W2K007][#143150]

4. When attempting to connect to a server, users might receive a warning stating that the licensing grace period has expired; connection attempts are refused. The issue occurs if a server is restarted during the licensing grace period and does not recognize the local copy of the license information. The grace period sets in when there is no connectivity between the server and the license server. During that time, the server uses a local copy of the license information.

   [From MPSE300R05W2K009][#134465]

5. By design, member servers in a farm request session records from the data collector at logon time to evaluate user or application limitation values. These queries are done even if no user or application limitation policies are in place. In large farm environments, these queries cause a large number of unnecessary records to be sent from the data collector to the member servers. This fix prevents such queries when no user or application limitation policies are in place.

[From MPSE300R05W2K011][#131850]

6. This fix addresses a security vulnerability. For more information, refer to the Citrix Security Bulletin CTX111186 at the Citrix Support Web site.

   [From MPSE300R05W2K011][#141284]

7. The memory consumption of the IMASrv.exe process on a zone data collector might increase over time until it can no longer handle requests.

   [From MPSE300R05W2K019][#155482]

8. This enhancement adds wild card support to the functionality introduced by Fix #63894. The original fix addresses the following issues:

   • Published applications do not appear in the console

   • Application limits do not work if published Application B is launched by published Application A (including scripts and batch [.vbs, .bat, .cmd] files) and Application A is closed while Application B continues to run

   For more information, see Knowledge Center article CTX102683.

   [From MPSE300R05W2K020][#152972]

9. Applications might become unavailable after a zone data collector election is called if any server involved in the election process times out. After applying this fix, you can configure a new option, ElectionRetryTimeout, which defines the length of time, in milliseconds, a member server waits for acknowledgements from others servers to continue or restart the zone data collector election. If this timeout expires, the server calling the election will restart the election process by sending an election request to the most preferred server.

   To enable this fix, set the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA\Runtime\
   Value: ElectionRetryTimeout
   Type: REG_DWORD
   Value: Decimal number in milliseconds

   If the above value is not configured this timeout continues to default to twice the election timeout [(the election timeout defaults to 10 seconds) + ((n-1) * 50ms)] where n is the number of servers the member server sent the election request to. For example, if a member server sends an election request to 3 servers, with the first 2 servers not responding and the third server responding, the election process would restart if the member server is not informed of which server is the new/existing Zone Data Collector after 20.200 seconds (2 * 10.100).

   [From MPSE300R05W2K033][#158997]

10. ICM pings are sent if network traffic is not detected. When a user employs an application that makes constant screen updates, ICM pings are not sent. In this instance, a broken network connection causes the session to wait on the TCP time-out. When the TCP connection times out, the session goes into a disconnected state. This change generates ICM pings on the network connection at the configured rate that is independent of the data sent by the application.

    To implement this fix, on the computer running Presentation Server, change the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\
    Name: ForcePing
    Type: REG_DWORD
    Data: 1

    On the client, in Program Neighborhood connection properties, clear Enable Session Reliability.

    [From MPSE300R05W2K035][#116986]

11. At times of high server utilization, all sessions on heavily utilized servers might become unresponsive.

    [From MPSE300R05W2K035][#129829]

12. Terminal Services fails unexpectedly after restarting the server.

    [From MPSE300R05W2K035][#148208]

13. When a user logs on with Client for Linux, and the following registry key is deleted from the computer running MetaFrame Presentation Server, the server experiences a fatal exception with the error code KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e).

    HKEY_USERS\.Default\KeyboardLayout
    Name: PRELOAD
    Type: REG_SZ
    Data: 1

    [From MPSE300R05W2K035][#149614]

14. Menu animations are not disabled by the policy Turn off Menu Animations. After applying this fix, you must set the following registry key to enable default menu animation in an ICA session:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\
    Name: MenuAnimation
    Type: REG_DWORD
    Data: 1

    [From MPSE300R05W2K035][#152708]

15. Applications that are started sequentially stop responding.

    [From MPSE300R05W2K035][#141362]

16. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX114487.

    [From MPSE300R05W2K035][#168503]

17. This security fix is designed to enhance security with published applications by making their names harder to predict. To achieve this, the fix appends a token to the Application Name when the application is published. The token is a circumflex followed by a random combination of eight characters/digits. For example, if you publish Microsoft Word with an Application Name of "MS Word" and a Display Name of "Word," users see "Word" when enumerating the application, and an .ica file lists the application as #"MS Word^XXXXXXXX." No changes are made to the application's Display Name (the name of the application as it appears in client interfaces) except for Program Neighborhood custom connections, where the Display Name is equal to the Application Name as it appears in the application's Properties page in the console.

    Important Notes:

    • You must install this fix on all servers in the farm.

    • Application names that contain special characters must be enclosed within quotation marks when using a command line to launch the application, for example, "MS Word^XXXXXXXX."

    • Only the Application Names of applications you publish after you install this fix are changed as described.

    • The Application Names of applications already published when you install this fix are not modified. To update previously published applications within the farm, run dscheck / secureapp.

    • Modifying previously published applications by running dscheck / secureapp can create backward compatibility issues with older .ica files that do not contain the updated Application Name. To prevent such compatibility issues, you can choose to:

      • Not update previously published applications

      • Selectively revert the Application Name to the previous format by deleting the token from the updated Application Name in the application’s Properties page.

    For more information, see Knowledge Center article CTX115245.

    [From MPSE300R05W2K035][#172653]

Installing and Uninstalling this Hotfix

Notes:

• This hotfix is packaged with Microsoft Windows Installer 2.0 (msiexec) as a .msi file. You can deploy the hotfix package to a group of servers using Microsoft Active Directory Group Policy Object or using Citrix Installation Manager. For more information, see the Presentation Server Administrator’s Guide or the Citrix Installation Manager Administrator’s Guide. For more information about msiexec, see the Microsoft Web site at http://www.microsoft.com/. Search on keyword msiexec.

• If the need arises to restore the original settings and functionality provided by this hotfix, you must uninstall the hotfix before reinstalling it according to the installation instructions below.

To install this hotfix:

1. Download the hotfix package from the Hotfixes and Service Packs page of the Citrix Web site at http://www.citrix.com.

2. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.

3. Close all applications.

4. Run the executable.

5. Restart the server.

Note: To install this hotfix silently, use the /q option after the executable. Using the /q option without additional options automatically restarts the server.

To uninstall this hotfix:

1. From the Start menu, select Settings > Control Panel.

2. In Control Panel, double-click Add/Remove Programs.

3. Highlight the hotfix you want to uninstall and click Remove.

4. Follow the directions on-screen.

Files Updated (All Dates/Times EST)

File Name	Date	Time	Size
MPSE300R05W2K035.MSI	12/18/2007	06:17p	1,992,704
ctxrdpctls.dll	12/18/2007	05:16p	24,064
ctxsecureApp.exe	12/18/2007	05:16p	28,672
hotfix.exe	08/16/2005	12:47p	78,096
icactls.dll	12/18/2007	05:16p	27,648
icareduc.sys	12/18/2007	06:10p	12,328
ImaAccess.dll	12/04/2007	03:57p	122,880
ImaAdminSal.dll	12/04/2007	03:59p	151,552
ImaAppSal.dll	12/04/2007	04:01p	139,264
ImaAppSs.dll	12/18/2007	06:10p	323,720
ImaMfRpc_Client.dll	12/18/2007	05:16p	35,328
ImaMsgsUI.dll	12/04/2007	03:49p	46,080
ImaRaSs.dll	12/18/2007	06:10p	196,744
imareduc.dll	12/18/2007	06:10p	12,936
ImaRuntimeSs.dll	12/18/2007	06:10p	274,568
ImaSrv.exe	12/04/2007	04:03p	131,072
ImaSystem.dll	12/04/2007	03:56p	241,664
ImaUserSal.dll	12/04/2007	03:59p	167,936
MfRpcSs.dll	12/18/2007	06:10p	245,896
MfSrvSs.dll	12/18/2007	06:10p	499,848
RMMonitorSS.dll	12/18/2007	06:10p	1,122,440
seamls20.dll	12/18/2007	05:16p	65,536
wdica.sys	12/18/2007	06:10p	213,864
wfshellUI.dll	12/18/2007	04:09p	14,848
wsxica.dll	12/18/2007	06:10p	1,044,752
wsxicaUI.dll	12/18/2007	04:08p	15,872

MD5 Checksum	File Name
68AF9E8D93D0A29E2E0434F727B68017	MPSE300R05W2K035.MSI
7989FBDBB0F583BD5F3E4D15A5959101	ctxrdpctls.dll
4CBE64D488C540E3BAA1896A29094516	ctxsecureApp.exe
1EB2B187E0FC1447AEA45F56A3E4F46F	hotfix.exe
3D3C6253FA6336E803AAB818362D708E	icactls.dll
51D44B30F3C5551FDAA888888B25ED80	icareduc.sys
7F8892D77E15F0F562453325232B0BFC	ImaAccess.dll
83A098BB0B1062F23E78ED07A819AF15	ImaAdminSal.dll
B6712DBA718944F127213271B66A6B6A	ImaAppSal.dll
A2C3910CBD2CB07C3B177BD81EC116B4	ImaAppSs.dll
7AC73CB2A1251D0639644FDA888B7A04	ImaMfRpc_Client.dll
7DCDBA35CDF868799D31DD58C768BBB6	ImaMsgsUI.dll
BA7B8D2296F0184B6131C2500F0FBFB3	ImaRaSs.dll
2B431345E162563D8C2E36E2E06639BC	imareduc.dll
5EACF88DE83AC4451EF235C3D4A8F325	ImaRuntimeSs.dll
077A42A795BE2BC1BFB3D17296B9B723	ImaSrv.exe
F03A81C78C27DA41FDE4D852790A39DB	ImaSystem.dll
C0C6763BCF7140BEC2A506107255FDAC	ImaUserSal.dll
47E224983ED9D0420CFF9D873AAC0B7A	MfRpcSs.dll
B158C2A013FD6FBEDC8A8A691D8BD0BD	MfSrvSs.dll
2B2646A602AE22B3BC39CBE2FCC467D3	RMMonitorSS.dll
F070A66EC0745F9ECC7145C5C44D5456	seamls20.dll
7338A4B00932E505337F38CDE9BB43C6	wdica.sys
101AB48927C002FE6C22054EDA9AC40D	wfshellUI.dll
CB63C862690C0833777263C4339A12AC	wsxica.dll
73504C4313122F2C9BEE6B86B342F4DF	wsxicaUI.dll

Copyright © 2008 Citrix Systems, Inc. All rights reserved.
Citrix, MetaFrame, and MetaFrame XP are registered trademarks, and Citrix Presentation Server is a trademark of Citrix Systems, Inc. in the United States and other countries.
All other trademarks and registered trademarks are the property of their respective owners.