Hotfix MPSE300R05W2K3051 - For Metaframe Presentation Server 3.0 for Windows Server 2003

Hotfix readme name: MPSE300R05W2K3051.HTML
Hotfix package name: MPSE300R05W2K3051.MSI
For: Citrix Presentation Server 3.0 with Hotfix Rollup Pack MPSE300W2K3R05
Replaces: MPSE300R05W2K3002, MPSE300R05W2K3007, MPSE300R05W2K3011, MPSE300R05W2K3015, MPSE300R05W2K3016, MPSE300R05W2K3017, MPSE300R05W2K3022, MPSE300R05W2K3031, MPSE300R05W2K3032, MPSE300R05W2K3046
Date: January, 2008
Language supported: English (US)
Readme version: 1.01

Readme Revision History

Version	Date	Change Description
1.01	January, 2008	Added line item #168503
1.00	January, 2008	Initial release

Important Note(s) about this Release

• This hotfix can be applied only to a Windows Server 2003 with Presentation Server 3.0 and Hotfix Rollup Pack MPSE300W2K3R05 installed.

• Caution! This hotfix may require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

Where to Find Documentation

This document describes the issue(s) solved by this hotfix and includes installation instructions. You can find more information about Presentation Server 3.0 in the Presentation Server Administrator's Guide. Documentation, including the Administrator's Guide, is in the Document Center located in the \documentation\docs directory on the Presentation Server CD. The Document Center provides a single point of access to the documentation and enables you to go directly to the section in the documentation that you need. You can access the Document Center from the product CD or install it on your servers.

If you prefer to access the guide without using the Document Center, navigate to the component PDF files using Windows Explorer. The guide is in an Adobe Portable Document (PDF) format file. To view, search, and print the documentation, you need Adobe Reader 5.0.5 or later with Search. You can download Adobe Reader for free from the Adobe Web site at http://www.adobe.com/.

All product documentation is also available from the Citrix Web site at http://support.citrix.com .

Issue(s) Resolved in this Hotfix

1. When running the CHFARM utility or during the process of adding a server to a farm, the IMA data key is set incorrectly. This, in effect, adds a second data collector to the zone. The actual data collector cannot communicate with the other server, which might cause this server to become unresponsive and refuse connections. This change prevents the IMA Service from starting when the IMA data key does not match the one contained in the data store. This fix applies only to servers running with a direct connection to a SQL or Oracle database.

   [From MPSE300R05W2K3002][#129403]

2. This internal licensing enhancement introduces an alternate method of handling errors occurring during license acquisition.

   To enable this enhancement, a specific license file is required.

   [From MPSE300R05W2K3007][#137751]

3. Under certain environmental conditions the IMAsrv.exe process might consume 100% of the CPU.

   [From MPSE300R05W2K3011][#143150]

4. When attempting to connect to a server, users might receive a warning stating that the licensing grace period has expired; connection attempts are refused. The issue occurs if a server is restarted during the licensing grace period and does not recognize the local copy of the license information. The grace period sets in when there is no connectivity between the server and the license server. During that time, the server uses a local copy of the license information.

   [From MPSE300R05W2K3015][#134465]

5. ICM pings are sent if network traffic is not detected. When a user employs an application that makes constant screen updates, ICM pings are not sent. In this instance, a broken network connection causes the session to wait on the TCP time-out. When the TCP connection times out, the session goes into a disconnected state. This change generates ICM pings on the network connection at the configured rate that is independent of the data sent by the application.

   To implement this fix, on the computer running Presentation Server, change the following registry key:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\
   Name: ForcePing
   Type: REG_DWORD
   Data: 1

   On the client, in Program Neighborhood connection properties, clear Enable Session Reliability.

   [From MPSE300R05W2K3016][#116986]

6. By design, member servers in a farm request session records from the data collector at logon time to evaluate user or application limitation values. These queries are done even if no user or application limitation policies are in place. In large farm environments, these queries cause a large number of unnecessary records to be sent from the data collector to the member servers. This fix prevents such queries when no user or application limitation policies are in place.

   [From MPSE300R05W2K3017][#131850]

7. This fix addresses a security vulnerability. For more information, refer to the Citrix Security Bulletin CTX111186 at the Citrix Support Web site.

   [From MPSE300R05W2K3017][#141284]

8. When a user logs on with Client for Linux, and the following registry key is deleted from the computer running MetaFrame Presentation Server, the server experiences a fatal exception with the error code KERNEL_MODE_EXCEPTION_NOT_HANDLED (8e).

   HKEY_USERS\.Default\KeyboardLayout
   Name: PRELOAD
   Type: REG_SZ
   Data: 1

   [From MPSE300R05W2K3022][#149614]

9. At times of high server utilization, all sessions on heavily utilized servers might become unresponsive.

   [From MPSE300R05W2K3051][#129829]

10. The memory consumption of the IMASrv.exe process on a zone data collector might increase over time until it can no longer handle requests.

    [From MPSE300R05W2K3031][#155482]

11. Application limits do not work if published Application B is launched by published Application A (including scripts and batch [.vbs, .bat, .cmd] files) and Application A is closed while Application B continues to run.

    For more information, see Knowledge Center article CTX102683.

    [From MPSE300R05W2K3032][#152972]

12. Menu animations are not disabled by the policy Turn off Menu Animations. After applying this fix, you must set the following registry key to enable default menu animation in an ICA session:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\
    Name: MenuAnimation
    Type: REG_DWORD
    Data: 1

    [From MPSE300R05W2K3051][#152708]

13. Applications might become unavailable after a zone data collector election is called if any server involved in the election process times out. After applying this fix, you can configure a new option, ElectionRetryTimeout, which defines the length of time, in milliseconds, a member server waits for acknowledgements from others servers to continue or restart the zone data collector election. If this timeout expires, the server calling the election will restart the election process by sending an election request to the most preferred server.

    To enable this fix, set the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA\Runtime\
    Value: ElectionRetryTimeout
    Type: REG_DWORD
    Value: Decimal number in milliseconds

    If the above value is not configured this timeout continues to default to twice the election timeout [(the election timeout defaults to 10 seconds) + ((n-1) * 50ms)] where n is the number of servers the member server sent the election request to. For example, if a member server sends an election request to 3 servers, with the first 2 servers not responding and the third server responding, the election process would restart if the member server is not informed of which server is the new/existing Zone Data Collector after 20.200 seconds (2 * 10.100).

    [From MPSE300R05W2K3046][#158997]

14. Applications that are started sequentially stop responding.

    [From MPSE300R05W2K3051][#141362]

15. Terminal Services fails unexpectedly after restarting the server.

    [From MPSE300R05W2K3022][#148208]

16. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX114487.

    [From MPSE300R05W2K3051][#168503]

17. This security fix is designed to enhance security with published applications by making their names harder to predict. To achieve this, the fix appends a token to the Application Name when the application is published. The token is a circumflex followed by a random combination of eight characters/digits. For example, if you publish Microsoft Word with an Application Name of "MS Word" and a Display Name of "Word," users see "Word" when enumerating the application, and an .ica file lists the application as #"MS Word^XXXXXXXX." No changes are made to the application's Display Name (the name of the application as it appears in client interfaces) except for Program Neighborhood custom connections, where the Display Name is equal to the Application Name as it appears in the application's Properties page in the console.

    Important Notes:

    • You must install this fix on all servers in the farm.

    • Application names that contain special characters must be enclosed within quotation marks when using a command line to launch the application, for example, "MS Word^XXXXXXXX."

    • Only the Application Names of applications you publish after you install this fix are changed as described.

    • The Application Names of applications already published when you install this fix are not modified. To update previously published applications within the farm, run dscheck / secureapp.

    • Modifying previously published applications by running dscheck / secureapp can create backward compatibility issues with older .ica files that do not contain the updated Application Name. To prevent such compatibility issues, you can choose to:

      • Not update previously published applications

      • Selectively revert the Application Name to the previous format by deleting the token from the updated Application Name in the application’s Properties page.

    For more information, see Knowledge Center article CTX115245.

    [From MPSE300R05W2K3051][#172653]

Installing and Uninstalling this Hotfix

Notes:

• This hotfix is packaged with Microsoft Windows Installer 2.0 (msiexec) as a .msi file. You can deploy the hotfix package to a group of servers using Microsoft Active Directory Group Policy Object or using Citrix Installation Manager. For more information, see the Presentation Server Administrator’s Guide or the Citrix Installation Manager Administrator’s Guide. For more information about msiexec, see the Microsoft Web site at http://www.microsoft.com/. Search on keyword msiexec.

• If the need arises to restore the original settings and functionality provided by this hotfix, you must uninstall the hotfix before reinstalling it according to the installation instructions below.

To install this hotfix:

1. Download the hotfix package from the Hotfixes and Service Packs page of the Citrix Web site at http://www.citrix.com.

2. Copy the hotfix package to an empty directory on the hard drive of the MetaFrame server.

3. Close all applications.

4. Run the executable.

5. Restart the server.

Note: To install this hotfix silently, use the /q option after the executable. Using the /q option without additional options automatically restarts the server.

To uninstall this hotfix:

1. From the Start menu, select Settings > Control Panel.

2. In Control Panel, double-click Add/Remove Programs.

3. Highlight the hotfix you want to uninstall and click Remove.

4. Follow the directions on-screen.

Files Updated (All Dates/Times EST)

File Name	Date	Time	Size
MPSE300R05W2K3051.MSI	12/18/2007	05:25p	2,018,816
ctxrdpctls.dll	12/18/2007	03:21p	25,600
ctxsecureApp.exe	12/18/2007	03:21p	29,696
hotfix.exe	08/16/2005	12:47p	78,096
icactls.dll	12/18/2007	03:21p	45,056
icareduc.sys	12/18/2007	05:17p	12,680
ImaAccess.dll	12/04/2007	03:57p	122,880
ImaAdminSal.dll	12/04/2007	03:59p	151,552
ImaAppSal.dll	12/04/2007	04:27p	139,264
ImaAppSs.dll	12/18/2007	05:17p	323,720
ImaMfRpc_Client.dll	12/18/2007	03:21p	36,352
ImaMsgsUI.dll	12/04/2007	03:52p	48,640
ImaRaSs.dll	12/18/2007	05:17p	196,744
imareduc.dll	12/18/2007	05:17p	13,448
ImaRuntimeSs.dll	12/18/2007	05:17p	274,568
ImaSrv.exe	12/04/2007	04:03p	131,072
ImaSystem.dll	12/04/2007	03:56p	241,664
ImaUserSal.dll	12/04/2007	03:59p	167,936
MfRpcSs.dll	12/18/2007	05:17p	204,936
MfSrvSs.dll	12/18/2007	05:17p	512,136
RMMonitorSS.dll	12/18/2007	05:17p	1,147,016
seamls20.dll	12/18/2007	03:21p	69,632
wdica.sys	12/18/2007	05:17p	216,584
wfshellUI.dll	12/18/2007	02:27p	14,848
wsxica.dll	12/18/2007	05:17p	1,052,944
wsxicaUI.dll	12/18/2007	02:26p	15,872

MD5 Checksum	File Name
5A665FBAC6F236712C964E04BDE7B7DA	MPSE300R05W2K3051.MSI
739BD4C513441B55124A3DED4B82AE5B	ctxrdpctls.dll
8145CBFD0573AD6B1E76C8041EB471F2	ctxsecureApp.exe
1EB2B187E0FC1447AEA45F56A3E4F46F	hotfix.exe
D37F0C7BE85BD89F44048B0FA5ED3683	icactls.dll
537FD1F1C98F9238CD018B025F720DCF	icareduc.sys
7F8892D77E15F0F562453325232B0BFC	ImaAccess.dll
83A098BB0B1062F23E78ED07A819AF15	ImaAdminSal.dll
09206B18862E2629BB9C3991AC4140E7	ImaAppSal.dll
A2C3910CBD2CB07C3B177BD81EC116B4	ImaAppSs.dll
0964C82A0341867EEA3A29583479EF6F	ImaMfRpc_Client.dll
4779D3B43FE0966EB18B472010C40FEA	ImaMsgsUI.dll
BA7B8D2296F0184B6131C2500F0FBFB3	ImaRaSs.dll
2849ED9A8E29D36C244BE77BB5134582	imareduc.dll
5EACF88DE83AC4451EF235C3D4A8F325	ImaRuntimeSs.dll
077A42A795BE2BC1BFB3D17296B9B723	ImaSrv.exe
F03A81C78C27DA41FDE4D852790A39DB	ImaSystem.dll
C0C6763BCF7140BEC2A506107255FDAC	ImaUserSal.dll
D264FF70CC477D0253F124AE6FDC5891	MfRpcSs.dll
1CCADED3ABFDECA04D2324A236EBC98F	MfSrvSs.dll
852C0727A9A46F6535398611FC1809BD	RMMonitorSS.dll
7006572100D34F47C6E1C23189CBFF75	seamls20.dll
6ED72857FEED8F7862C6313F175089DE	wdica.sys
CB57AAEE935979013A72ACFBF7436462	wfshellUI.dll
31A6A11DC08B3087975A95D48B121D8F	wsxica.dll
ECB2A26EBF18B1856E5703EA25981B20	wsxicaUI.dll

Copyright © 2008 Citrix Systems, Inc. All rights reserved.
Citrix, MetaFrame, and MetaFrame XP are registered trademarks, and Citrix Presentation Server is a trademark of Citrix Systems, Inc. in the United States and other countries.
All other trademarks and registered trademarks are the property of their respective owners.