Rate this Article:
You must be signed in to rate again
Article Feedback Print View
Alternate Languages:

icon representing critical update Hotfix Rollup Pack PSE450W2K3X64R02 - For Citrix Presentation Server 4.5 for Windows Server 2003 64-Bit Edition

Document ID: CTX116294   /   Created On: Mar 27, 2008   /   Updated On: Jun 27, 2008
Average Rating: 4

Hotfix Rollup Pack 2 for Citrix Presentation Server 4.5 64-bit Edition

Readme

Hotfix readme name: PSE450W2K3X64R02.HTML
Hotfix package name: PSE450W2K3X64R02.MSP
For: Computers running Windows Server 2003 (64-bit) with Presentation Server 4.5 installed

Replaces: PSE450R01W2K3X64001, PSE450R01W2K3X64002, PSE450R01W2K3X64003, PSE450R01W2K3X64004, PSE450R01W2K3X64005, PSE450R01W2K3X64006, PSE450R01W2K3X64007, PSE450R01W2K3X64008, PSE450R01W2K3X64009, PSE450R01W2K3X64010, PSE450R01W2K3X64011, PSE450R01W2K3X64012, PSE450R01W2K3X64014, PSE450R01W2K3X64016, PSE450R01W2K3X64018, PSE450R01W2K3X64019, PSE450R01W2K3X64020, PSE450R01W2K3X64021, PSE450R01W2K3X64022, PSE450R01W2K3X64023, PSE450R01W2K3X64024, PSE450R01W2K3X64025, PSE450R01W2K3X64026, PSE450R01W2K3X64027, PSE450R01W2K3X64030, PSE450W2K3X64005, PSE450W2K3X64013, PSE450W2K3X64015, PSE450W2K3X64016, PSE450W2K3X64017
Date: March, 2008
Language supported: English (US)
Readme version: 1.05

Readme Revision History

Version DateChange Description
1.05 June, 2008 Removed "Platinum Edition" from Special Installation Instructions
1.04 May, 2008 Modified description of line item #169782
1.03 May, 2008 Modified list of invalidated hotfixes
1.02 May, 2008 Removed line item #177288
1.01 May, 2008 Added description of line item #165816
1.00 March, 2008 Initial release

Introduction

Hotfix rollup packs are cumulative; they contain both new fixes and fixes from replaced hotfixes and hotfix rollup packs. This readme file documents the fixes that are new in Hotfix Rollup Pack 2. For detailed information, see the following:

Where to Find Documentation

This document describes the issue(s) solved by this hotfix rollup pack and includes installation instructions. You can find more information about Presentation Server 4.5 in the Presentation Server Administrator's Guide. All product documentation is available from the Citrix Web site at www.citrix.com/support.

Special Installation Instructions for Presentation Server

Upgrading from Presentation Server 4.5 with Feature Pack 1

You cannot install the Citrix Streaming Client and Profiler Version 1.1 after you install Hotfix Rollup Pack 2.  If you attempt to install the Streaming Client and Profiler after Hotfix Rollup Pack 2, the installation fails. For the Streaming Client and Profiler to coexist on a single server with Presentation Server, perform the installation in the following order:

  1. To support application streaming, download and upgrade to Version 1.1 of the Streaming Client, if applicable.

    Navigation: Download Clients page > Citrix XenApp (the new name for Presentation Server) > Windows Vista/XP/2003/2000 > Streaming Client Version 1.1

  2. To upgrade your profiling workstation, download and upgrade to Version 1.1 of the Streaming Profiler, if applicable.

    Navigation: Download Server Components page (requires My Citrix logon) > Citrix XenApp (the new name for Presentation Server) > Windows Downloads for Presentation Server 4.5 > Streaming Profiler Version 1.1

  3. Download and install Hotfix Rollup Pack 2.

    Navigation:

    32bit Windows

    64bit Windows

Upgrading from Presentation Server 4.5

  1. To support application streaming, download and upgrade to Version 1.1 of the Streaming Client, if applicable.

    Navigation: Download Clients page > Citrix XenApp (the new name for Presentation Server) > Windows Vista/XP/2003/2000 > Streaming Client Version 1.1

  2. To upgrade your profiling workstation, download and upgrade to Version 1.1 of the Streaming Profiler, if applicable.

    Navigation: Download Server Components page (requires My Citrix logon) > Citrix XenApp (the new name for Presentation Server) > Windows Downloads for Presentation Server 4.5 > Streaming Profiler Version 1.1

  3. Download and install Hotfix Rollup Pack 2.

    Navigation:

    32bit Windows

    64bit Windows

  4. Install the remaining updated components, such as Web Interface, Access Management Console Extensions, and Presentation Server Client.

    Navigation:

    • Web Interface 4.6 for Windows (requires My Citrix logon) > Download Common Technology Components > Web Interface > Windows > Web Interface 4.6 for Windows.

    • Access Management Console (requires My Citrix logon) > Download Server Components > Citrix XenApp (the new name for Presentation Server) > Windows Downloads for Presentation Server 4.5 > Access Management Console

    • Presentation Server Client > Download Clients > Citrix XenApp (the new name for Presentation Server) > Windows Vista/XP/2003/2000

Important Note(s) about this Release

  • Caution: Do not install this hotfix rollup pack on 32-bit Windows. Although Citrix uses the same code base in the development of both the 32-bit and 64-bit versions of Presentation Server, the binaries and files differ. Installing this hotfix rollup pack on 32-bit Windows is not supported and can yield unpredictable results.

  • Caution: Several items in this hotfix rollup pack require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

  • See Knowledge Center article CTX116505 for known install behaviors and their workarounds.

  • See Knowledge Center article CTX116674 for known issues with this hotfix rollup pack in multiple monitor environments.

  • Installing this hotfix rollup pack partially invalidates the following hotfixes. This happens because not all fixes in these hotfixes are included in the hotfix rollup pack. Obtain or request the corresponding replacement hotfixes for any invalidated fixes you require as follows:

    Invalidated Hotfix Replacement Hotfix
    PSE450R01W2K3X64032 PSE450R02W2K3X64003
    PSE450R01W2K3X64033 PSE450R02W2K3X64006
    PSE450R01W2K3X64036 PSE450R02W2K3X64002

  • Before installing this hotfix rollup pack on servers licensed for Standard Edition, you must migrate those servers to Advanced Edition. Standard Edition was discontinued on Citrix Presentation Server 4.5; installing this hotfix rollup pack on servers licensed for Standard Edition might cause the following error message to appear:

    Citrix Presentation Server is unable to retrieve the product edition. Check to see if the Citrix Independent Management Architecture service is running without errors. Citrix Presentation Server cannot request licenses until it can obtain the product edition – no client devices can connect. If necessary, set the product edition in the Access Management Console. The product must be set to the same edition as your licenses.

    To migrate your servers to Advanced Edition, you must obtain an Advanced Edition license and then change the server edition in the Access Management Console from Standard to Advanced. For information about obtaining an Advanced Edition license, visit your My Citrix account or contact your reseller.

  • After installing this hotfix rollup pack, Presentation Server 4.5 licensing will be enforced for the Application Streaming feature available in the Enterprise and Platinum editions. As a result, this feature will start to consume Presentation Server licenses and any individual Streaming (CSS) licenses received and activated in the past will no longer be utilized.

  • After installing this hotfix rollup pack, applications for which parameter passing is enabled might fail to launch. This is a result of the implementation of Fix #182305, which enforces tighter command line validation by default. Among potentially affected applications is the Citrix Conferencing Manager, any application that attempts to open a file over a UNC path [#186923], and Microsoft Office applications on WISP (Web Interface for SharePoint). As a workaround, you may choose to disable the fix:

    For Citrix Conferencing Manager:

    1. Go to the server properties of Citrix Conference Room.
    2. Select the published application and click Edit.
    3. In the Custom Application Location dialog box, select "Specify custom command line and working directory."
    4. Append %** to the command line (for example, “C:\Program Files\Citrix\CMCM\CRoom.exe” %**).
    5. Specify a working directory.
    6. Apply the changes.

    For individual applications:

    1. Go to the Location property of the published application, for example, Microsoft Word.
    2. Append %** to the command line (for example, “C:\Program Files\Microsoft Office\Office12\winword.exe” %**).
    3. Specify a working directory.
    4. Apply the changes.

    Alternatively, it is possible to disable the fix at the server level by setting the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
    Name: PublishedAppCommandLineFlag
    Type: DWORD
    Data: 0

    For more information about this security enhancement and for a workaround, see Knowledge Center article CTX115245.

  • When you try to view the Resource Manager node or generate a Resource Manager report on a server without Fix #168503 installed, a server down error message appears. To avoid this, make sure to install this hotfix rollup pack (or a hotfix that includes Fix #168503) on all servers in the farm. See CTX114487 for a list of hotfixes that contain this fix.

  • When adding the ValidSites registry key to redirect specific URLs from server to client, specify the URLs without http://. For example, add www.citrix.com, not http://www.citrix.com. [#161177]

  • Make sure your 64-bit server is running Windows 2003 SP2 before installing Hotfix Rollup Pack PSE450W2K3X64R02. If SP2 is not installed, Citrix MFCOM Service might not respond as expected. [#162425]

  • To enable Microsoft Vista and Office 2007 compatibility, you must install Hotfix Rollup Pack 2 before installing any Access Management Console extensions. [#162886]

  • If you remove Hotfix Rollup Pack 1 after publishing an application with Hotfix Rollup Pack 2 and the Hotfix Rollup Pack 2-level Access Management Console, the console might throw an exception when you attempt to edit the properties of that published application. This problem does not occur when you edit the properties of a published application that was created before Hotfix Rollup Pack 2 was installed. [#166266]

Microsoft Windows Vista/Office 2007 Compatibility Updates and Other Enhancements

This hotfix rollup pack introduces the following compatibility updates in support of Microsoft Windows Vista and Office 2007.

Note: To get the full benefit of these compatibility updates, you must also deploy Version 10.100 or later of the Presentation Server Client.

Enhanced (16-, 32-, and 48-bit) Icon Support

Support for enhanced icons allows administrators to publish applications with 32-bit color depth icons if the application supports them.

Requirements:

  • Program Neighborhood Agent 10.100

  • The Web Interface 4.6

  • Applications must be published using the latest release of the Presentation Server Extension

Considerations:

  • The Access Management Console cannot display 32-bit color icons. The console displays icons with 4-bit color depth.

  • To enable (or disable) existing applications in the farm to display 32-bit color depth icons, republish the applications using the following procedure.
    Note: You must perform Step 4 for each published application. [#163159]

    1. In the Access Management Console, select your Presentation Server farm.

    2. In Common Tasks, select Modify farm properties and then select Modify all properties.

    3. To configure icon color settings, go to Farm Properties > Presentation Server > General and then under Enable 32 bit icon color depth select the Enable check box to enable 32 bit icon color depth (or clear the check box to disable 32 bit icon color depth).

    4. To enable your applications to use the new icon color settings, in the Access Management Console, delete the published applications and then republish them.

  • Program Neighborhood displays icons with 4-bit color depth.

Microsoft Office Live Preview Support

The Microsoft Office 2007 Live Preview feature allows you to quickly see how formatting options will look, without actually applying them. Live Preview is enabled by default.

To disable Live Preview

  • On 32-bit Windows, change the following flag value to 0:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\UIHook
    Name: Flag
    Type: REG_DWORD
    Data: 0

  • On 64-bit Windows, change the following flag values to 0:

    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxHook\AppInit_Dlls\UIHook
    Name: Flag
    Type: REG_DWORD
    Data: 0

When enabled, the flag value is set to 6. Changing the flag value to anything other than 0 or 6, or changing any of the other values/subkeys under UIHook, might result in Live Preview not functioning properly.

Microsoft Office OneNote 2007

  • Microsoft Office OneNote 2007 can display a notification area icon that provides fast access to common functionality. Because this notification area icon is a separate process (OneNoteM.exe), launched by OneNote and relaunched during Windows startup, the notification area icon appears only the first time a user connects to the OneNote application. It does not appear on later connections unless the option is explicitly reenabled each time. This behavior occurs because after the initial launch by OneNote, the process is placed in the Windows Startup folder and launched by the Explorer shell at startup. Seamless sessions do not launch the Explorer shell, so the notification area icon is not launched automatically.

    To make the notification area icon behave properly within a seamless ICA session, publish a batch file or script that launches both OneNote.exe and OneNoteM.exe, rather than just publishing OneNote by itself. Thus, if the user selects the option to show the notification area icon, it appears and if not, the notification area icon exits immediately after launch.

    The following is an example OneNote.wsf script file, which you should publish instead of the OneNote application. The script file must reside in the same folder as OneNote.exe and OneNoteM.exe: [#161009]

    <package>
    <job id="OneNote">

      <comment>

      File: OneNote.wsf
      Description: Launch OneNote and its notification area icon.
      Requirements: WSH 5.5 or higher.

      Copyright (c) 2007 Citrix Systems, Inc.

      </comment>
    <runtime>
    <description>
         Launch OneNote and its notification area icon
    </description>
    <example>
         CScript //nologo OneNote.wsf
    </example>
    </runtime>
    <script language="VBScript">

        Set oShell = CreateObject("WScript.Shell")
        oShell.Run """" & oShell.CurrentDirectory & "\\OneNoteM.exe"" /tsr"
        oShell.Run """" & oShell.CurrentDirectory & "\\OneNote.exe"""
    </script>
    </job>
    </package>

Microsoft Office InfoPath 2007

If a Vista 32-bit client launches a published Microsoft Office 2007 InfoPath seamless session with16-bit high color, the background color might change with each keystroke. To solve this problem, launch the published Microsoft Office 2007 InfoPath seamless session with 256 color or 24-bit (True Color) color. [#166478]

Microsoft Office PowerPoint

  • Users cannot highlight a graphical object (bitmap images) in a locally-running text editor (for example, WordPad), and then copy and paste it to a published PowerPoint application. As a workaround, first copy the object to a published application (for example, Word) and then copy and paste it to the published PowerPoint application. [# 158794]

  • To enable a file with a .pps extension to open as a PowerPoint slide show using content redirection in a Program Neighborhood Agent session, you must publish the PowerPoint application twice: [#165379]

    1. Publish the PowerPoint application as Powerpoint with the file type associations set to all except .pps and .ppsx.

    2. Publish the PowerPoint application again as Powerpoint Slideshow with the file type associations set to .pps and .ppsx.

Functionality Not Supported

The following features or products are not supported in this release:

  • Office 2007 is not supported with Conferencing Manager.

  • Citrix recommends that you do not deploy Microsoft Office Groove with Presentation Server because of the following Groove design issues. [#162133]

    • Cannot use the same Groove account on multiple computers without moving the account file.

    • Designed to synchronize data between users but not a central server.

    • No support for remote drives; thus, file sharing requires using SharePoint files only.

    • Storing and synchronizing workspaces increases the load on the servers running Presentation Server.

    • DirectSound-based audio, which Presentation Server does not support. Audio messaging and chatting are not available.

  • Because of Microsoft design changes, you cannot use Citrix Installation Manager to deploy Office 2007. [#155549]

Citrix SecureICA Services

Citrix SecureICA is supported in Citrix Presentation Server 4.5 with Hotfix Rollup Pack PSE450W2K3x64R01 running on 64-bit servers; however, SecureICA is not supported from 64-bit clients.

General Issues

  • When you refresh a list of objects in the Access Management Console (for example, the list of administrators), a dialog box might appear stating there was an unhandled exception. The exception might prevent the table from being populated properly. To avoid this, enlarge the table by dragging the horizontal line separating the table of items in the upper-right pane from the list of tasks in the lower-right pane. [#163022]

  • To enable remote Access Management Console capability, ensure that Network Com+ is installed on the computer running Presentation Server. [#162679]

  • The Access Management Console for the 64-bit Presentation Server might become unresponsive when running VMware Workstation 5.5. A Fatal Execution Engine Error is reported in the Event Log. To correct this issue, contact Microsoft Customer Support Services at http://support.microsoft.com/contactus/?ws=support, request Hotfix 930771, and apply the hotfix to your system. [#165739]

  • After you upgrade to the latest Access Management Console and launch it, a message appears prompting you to choose Upgrade or Don't Upgrade. Click Upgrade only if you have upgraded all Access Management Consoles to the latest Access Management Console snap-ins released at the same time as Hotfix Rollup Pack 1. Choosing Upgrade specifies that you cannot use an earlier version of console to open the .msc configuration file and you can no longer use the earlier version to see any My Views created with it. However, you are able to use the later version to open the file, and view, edit, and save My Views. If you choose Don't Upgrade, the file is not upgraded and you can use both versions of the console to see My Views, but you can edit and save My Views only in the earlier version. [#165749]

  • When publishing an application, a black square might appear in the Access Management Console instead of an icon. This occurs if the selected icon does not contain a 16-color (4 bit) image format. To correct this issue, select an icon that contains a 16-color image format or use icon editing software to generate the 16-color format from the original icon. [#166213]

  • To upgrade to the latest Citrix Presentation Server pass-through clients from Presentation Server 4.0, upgrade in the following order [#156201]:

    1. Presentation Server 4.0 mps.msi

    2. Presentation Server 4.5 mps.msi

    3. Hotfix Rollup Pack PSE450W2K3X64R01

    4. Presentation Server Clients 10.100 ica32pkg.msi

  • A published Microsoft Office OneNote 2007 application does not recognize the Vista client's local audio and video devices; thus, the published OneNote 2007 cannot record or play audio and video content. [#159522]

  • The Microsoft OneNote 2007 screen clipping function does not work as expected when using multimonitors. After launching a published application and then launching OneNote, the screen should have a washed-out appearance after selecting Screen Clipping from the Insert menu. The area being selected by dragging the mouse should not be washed out; thus, indicating the selected area. When multimonitor support is enabled, the screen is not washed out; therefore, there is no visual indication of the area selected (although the screen clipping functionality does work). [#166788]

New Fixes in this Release

This hotfix rollup pack introduces the following fixes that have not been previously released:

Application Isolation SDK
Client Device IssuesSeamless Windows
Content RedirectionServer/Farm Administration
Data StoreSession/Connection
IMA ServiceSmartAuditor
Installation ManagerSmart Cards
KeyboardSmoothRoaming
Load BalancingSpeedScreen
Logon/AuthenticationSystem Exceptions
Memory, CPU OptimizationTWAIN
PrintingVirtual IP
Resource ManagerMiscellaneous

Application Isolation

  1. 2007 Microsoft Office applications fail to launch from application isolation environments.

    [From PSE450W2K3X64R02][#163619]

Client Device Issues

  1. When copying files to mapped network drives, real-time data consistency checks fail due to an incorrect length of buffer content.

    [From PSE450W2K3X64R02][#167697]

  2. Mapped network devices (for example; drives, serial or parallel ports) might fail to be created or open in the session.

    [From PSE450W2K3X64R02][#175928]

Content Redirection

N/A

Data Store

  1. The way the SQL Server driver handles SQL Error 40001 (transaction rolled back due to deadlock) might lead to data store corruption.

    [From PSE450W2K3X64R02][#168867]

  2. Stored procedures might not return proper error codes.

    [From PSE450W2K3X64R02][#168868]

IMA Service

  1. The IMA Service fails to start if you rename imareduc.dll. Renaming imareduc.dll allows you to disable compression in IMA network traffic as a means to view IMA packets in NetMon.

    [From PSE450W2K3X64R02][#168865]

  2. When the Independent Management Architecture Service is started, the installation of products listed under HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\ProductCodes (32bit Windows) or HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\ProductCodes (64bit Windows) are verified. If the HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA\RUNTIME\PSRequired (32bit Windows) or HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\IMA\RUNTIME\PSRequired (64bit Windows) registry value is set to 1, for example, when recreating a server’s Local Host Cache and any of the products fail verification, the Independent Management Architecture Service will not start and the following events are logged in the server's System log:

    Source: IMAService
    ID: 3609
    Description: Failed to load plugin MfSrvSs.dll with error IMA_RESULT_REGISTRY_ERROR

    Source: IMAService
    ID: 3601
    Description: Failed to load initial plugins with error IMA_RESULT_REGISTRY_ERROR

    This fix adds additional error detail listing which products fail verification. In addition to the previous events, the following event is now logged in the server's System log for each product that fails verification:

    Source: IMAService
    ID: 3997
    Description: Installation of the following product failed verification: Failing Product Name. This occurs when the installer files are missing from the Windows Installer cache. Run a repair on the missing product from the Add or Remove Programs Control Panel Applet to correct this problem.

    [From PSE450W2K3X64R02][#169782]

Installation Manager

  1. Installation Manager might fail to uninstall certain packages and the following error message appears in the properties of the failed uninstall:

    "Error Code 0x7. An install, repair or remove operation is in progress for this product."

    [From PSE450W2K3X64R02][#162517]

  2. When creating installer packages that involve copying transform (.mst) files on a remote server, the copy process succeeds but Event Viewer messages indicate that it failed.

    [From PSE450W2K3X64R02][#176895]

Installing, Uninstalling, Upgrading

N/A

Keyboard

N/A

Licensing

N/A

Load Balancing

  1. Executing the "qfarm /load" command fails to return any information. This issue does not affect load balancing and can occur if a server in the zone is offline when executing the command.

    [From PSE450W2K3X64R02][#164943]

  2. When using a Netscaler device or Access Gateway, Enterprise Edition, to load balance XML brokers, the following error message might appear:

    "A network error caused your request to time out. Try to connect again. If you continue to receive this message, contact your Citrix administrator."

    The issue occurs because the XML Service does not respond to requests routed through a network device that adds a HTTP request header that begins with the letters 'c' or 'k.'

    [From PSE450W2K3X64R02][#166906]

Logon/Authentication

  1. Under certain Active Directory scenarios, attempts to change a password using a User Principal Name (UPN) from the Web Interface might fail. The attempt succeeds if the user is in the same domain as the Web Interface but fails if the user is in a trusted external domain.

    [From PSE450W2K3X64R02][#154632]

  2. When a Terminal Server is configured for "Relaxed Security" (Windows Server 2003) or "Permissions compatible with Terminal Server 4.0 Users" (Windows 2000 Server), the Terminal Server User group is added only as an alternative to the Remote Interactive Logon group.

    [From PSE450W2K3X64R02][#156747, #174141]

  3. Server logons from client devices with many printers attached might take a long time. The process might become unresponsive during the "Mapping client drives" stage.

    [From PSE450W2K3X64R02][#164621]

  4. Logons to applications configured to "Stream if possible" might fail with an SSL-related error even if SSL is not required.

    [From PSE450W2K3X64R02][#164928]

  5. The Workspace Control feature fails when logging on to NDS using an alias context.

    [From PSE450W2K3X64R02][#166421]

  6. Establishing a server console session from the console might fail and the following error messages appear:

    "You do not have proper encryption level to access this session."

    "To log on to this remote computer, you must have Terminal Server User Access permission on this computer. By default, members of the Remote Desktop Users group have these permissions. If you are not a member of the Remote Desktop Users group or another group that has these permissions, or if the Remote Desktop Users group does not have these permissions, you must be granted these permissions manually."

    [From PSE450W2K3X64R02][#174350]

Memory, CPU Optimization

  1. The Citrix CPU Utilization Management/CPU Rebalancer Service fails to start when set to automatic. The issue occurs when the Citrix License infrastructure is not fully initialized when the service starts up. The licensing infrastructure informs the CPU Rebalancer that license information is not currently available and the service exits.

    [From PSE450W2K3X64R02][#163877]

Printing

  1. Autocreated printers that no longer have an associated session are not deleted when the Citrix Print Service (CPSVC) restarts.

    [From PSE450W2K3X64R02][#160983]

  2. When printing using the universal printer, the default output settings such as paper size and orientation are fixed. This fix offers a workaround by allowing administrators to set default values for the universal printer. To do this, set the following registry keys as needed:

    • On 32-bit Windows:

      HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\UPDDevmode
      Name: see chart
      Type: see chart
      Data: see chart

    • On 64-bit Windows:

      HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\UPDDevmode
      Name: see chart
      Type: see chart
      Data: see chart

      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Print\UPDDevmode
      Name: see chart
      Type: see chart
      Data: see chart

    NameTypeData
    dmOrientationREG_DWORD1 = portrait, 2 = landscape
    dmPaperSizeREG_DWORD1 = letter through 118 = last paper defined in paper table
    dmPaperLengthREG_DWORD1 - 65535
    dmPaperWidthREG_DWORD1 - 65535
    dmScaleREG_DWORD1 - 1000
    dmCopiesREG_DWORD1 - 9999
    dmDefaultSourceREG_DWORD1 - 15
    dmPrintQualityREG_DWORD1 = draft, 4 = high
    dmColorREG_DWORD1 = monochrome, 2 = color
    dmDuplexREG_DWORD1 = simplex, 2 = horizontal, 3 = vertical
    dmYResolutionREG_DWORD32 - 65535
    dmTTOptionREG_DWORD1 = bitmap, 2 = download, 3 = substitute, 4 = outline
    dmCollateREG_DWORD0 = false, #1 = true
    dmLogPixelsREG_DWORD0 - 65535
    dmBitsPerPelREG_DWORD0 - 65535
    dmPelsWidthREG_DWORD0 - 65535
    dmPelsHeightREG_DWORD0 - 65535
    dmFormNameREG_SZForm name, such as letter, A4, tabloid, or other available form options

    [From PSE450W2K3X64R02][#165006]

  3. Non-Unicode characters might not print properly when using the Universal Print Driver.

    [From PSE450W2K3X64R02][#165026]

  4. When reconnecting to a session from a client that uses a different default printer, the printer ToolTip displays the previous client's default printer.

    [From PSE450W2K3X64R02][#166586]

  5. Printers using the Universal Print Driver might be offline when reconnecting to a disconnected session.

    [From PSE450W2K3X64R02][#167462]

  6. Printers might go offline at random.

    [From PSE450W2K3X64R02][#168276, #168279, #168280]

  7. Registry settings under HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\UPDDevmode do not always overwrite default values for the Citrix Universal Printer as intended after applying Fix #165006.

    [From PSE450W2K3X64R02][#168855]

  8. When using network printers, a policy set to prevent printer drivers from being installed might not be honored and drivers are installed.

    [From PSE450W2K3X64R02][#169687]

  9. After applying Hotfix Rollup Pack 1, the setting CTXPRN_ADMINS_CAN_MANAGE (0x4000) of DefaultPrnFlags does not work for Legacy printers. After applying this fix, you must set the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print
    Name: DefaultPrnFlags
    Type: REG_DWORD
    Data: 0x4000

    If a value for this key exists, add 0x4000 to the existing value. For example, a value of 0x20 becomes 0x4020.

    [From PSE450W2K3X64R02][#171615]

  10. You cannot add a printer from within a session if a policy to use legacy names is enabled.

    [From PSE450W2K3X64R02][#173876]

  11. Non-autocreated printers attached to client devices are incorrectly deleted when the spooler service is restarted.

    [From PSE450W2K3X64R02][#174830]

Resource Manager

N/A

SDK

  1. Queries for active sessions for a published application return a Permission Denied error rather than an empty list of sessions if the application is not currently running in any session.

    [From PSE450W2K3X64R02][#162795]

  2. The following script returns information for the server on which the script is run and not for the server specified.

    'Start Sample MFCOM VBS

    Set farm=CreateObject("MetaframeCOM.MetaframeFarm")

    farm.initialize 1

    for each server in farm.servers

    msgbox "| " & server.servername & " | License Server Use Farm Settings Value : " & server.WinServerObject5.UseFarmLicenseServerSetting

    Next

    msgbox "DONE"

    [From PSE450W2K3X64R02][#170954]

Seamless Windows

  1. When Excelhook is enabled, taskbar icons are not created for the following Microsoft Access windows: Query; Form; Report; Data.

    [From PSE450W2K3X64R02][#159427]

  2. When using Presentation Server Clients for Windows, Version 10.100 and earlier, that contain Fix #144841, the seamless toolbar taskbar icon appears on the task bar when docked. To resolve this issue, install a version of the client that contains Fix #165499 and then set following server-side registry key:

    HKEY_LOCAL_MACHINE\System/CurrentControlSet\Control/Citrix\wfshell\TWI
    Name: SeamlessFlags
    Type: REG_DWORD
    Data: 0x200000

    [From PSE450W2K3X64R02][#165925]

  3. After closing a property sheet dialog box, such as a print dialog box, the parent application window might unexpectedly move to the background. For example, when you click Cancel on Notepad's Print dialog box, Notepad might move to the background and a different application takes focus.

    [From PSE450W2K3X64R02][#168553]

  4. After installing certain server hotfixes, pressing the F11 key to bring Internet Explorer to full screen mode no longer works as expected. In single monitor setups, Internet Explorer does not cover the taskbar; in multiple monitor setups, if added to the multiple monitor exclusion key as described in Knowledge Center article CTX110301, Internet Explorer does cover the taskbar.

    [From PSE450W2K3X64R02][#176415]

  5. Right-clicking system menus spans across multiple monitors instead of appearing on a single monitor.

    [From PSE450W2K3X64R02][#176871]

  6. The Windows taskbar spans across multiple monitors instead of appearing on a single monitor.

    [From PSE450W2K3X64R02][#176916]

  7. Applications set to launch on a preferred monitor revert to the preferred monitor after moving them to a different monitor.

    [From PSE450W2K3X64R02][#179464]

Security Issues

  1. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX114893.

    [From PSE450W2K3X64R02][#165816]

  2. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX115245.

    [From PSE450W2K3X64R02][#182305]

Server/Farm Administration

  1. This fix introduces an enhancement to the DSCHECK utility to correct object memberships with the /folders option.

    [From PSE450W2K3X64R02][#161221]

  2. After running the utility DSCHECK /full folders /clean, some folders and subfolders do not appear in appropriate application or server folders within the console.

    [From PSE450W2K3X64R02][#163628]

  3. When running DSCHECK /full folders /clean, corrupted database entries might generate error messages similar to:

    "Member (UID=40d7-0036-000212ce)Group contains member with unknown UID type: 54"
    With this fix, DSCHECK no longer reports unknown UIDs as errors but presents them as warnings. Make sure to back up your database before running DSCHECK /full folders /clean.

    [From PSE450W2K3X64R02][#165060]

  4. Under some circumstances, upgraded servers in upgraded server farms might experience one or more of the following issues:

    • When using the Access Management Console to connect to remote servers, the Discovery process returns the error IMA_RESULT_FINDITEM_FAILURE

    • Remote session management from the console fails on servers not running a fresh installation of Presentation Server 4.5

    After installing this fix, stop the IMA Service on all servers in the farm. Run dsmaint as follows from a command line on one of the servers where this fix is installed:

    dsmaint patchindex /user:dbusername /pwd:dbpassword /dsn:"\Install Path\Citrix\Independent Management Architecture\mf20.dsn" /patchindex:0

    [From PSE450W2K3X64R02][#166575]

  5. Custom administrators with permissions only on application folders but not on the server folders receive an Access Denied error message when trying to perform subordinate tasks, such as logging off, disconnecting, and sending messages to sessions.

    [From PSE450W2K3X64R02][#168127]

  6. The qfarm /zone command displays invalid names for data collector of zones that are offline.

    [From PSE450W2K3X64R02][#170517]

  7. In multiple monitor setups, certain common file dialogs of published instances of the Access Management Console might display erratically. For example, a Browse dialog box might display icons but incomplete text or no text at all.

    [From PSE450W2K3X64R02][#172329]

  8. On systems where Fix #148853 is installed, the DSCHECK utility might display event messages incorrectly.

    [From PSE450W2K3X64R02][#175773]

  9. This fix extends the enhancement to the DSCHECK utility introduced with Fix #172653. After applying Fix #172653, running dscheck /secureapp updates all published applications, including those that already have security tokens. This fix adds the ability to update only applications that do not have a security token. To do this, apply Fix#176720 and then run dscheck /secureapp -NoRenew.

    [From PSE450W2K3X64R02][#176720]

Session/Connection

  1. Copying files and folders from the server to the client over a client mapped drive might fail and an "Access Denied" error message appears. This is the server-side component of a fix that resolves the issue. To resolve the issue in its entirety, you must also install client-side Fix #156273.

    [From PSE450W2K3X64R02][#156273]

  2. When a server application reads data from mapped client drives, the data read might not match the actual data on the client drive.

    [From PSE450W2K3X64R02][#158823]

  3. COM port device mapping might fail intermittently.

    [From PSE450W2K3X64R02][#159017]

  4. This feature enhancement allows the use of KeepAlives when Session Reliability is enabled and monitoring for session disconnection from within applications. To enable KeepAlives when Session Reliability is enabled, set the following registry key:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\
    Name: WritePingTimeToReg
    Type: REG_DWORD
    Data: 1 (to enable KeepAlives) or 0 (to disable KeepAlives)

    Use HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Citrix\SessionStatus\SessionIdN\LastPingTime (where N is the session number) to monitor session tick counts.

    [From PSE450W2K3X64R02][#161787]

  5. File reads might not start at the beginning of the file. This occurs when a file was recently opened, closed, and reopened.

    [From PSE450W2K3X64R02][#163783]

  6. Connecting to a published desktop using the parameter "/cmdline" might fail and the following error message appears even if the client satisfies the required encryption level:

    "You do not have the proper encryption level to access this session."

    [From PSE450W2K3X64R02][#164019]

  7. Under certain circumstances, disconnected sessions remain active.

    [From PSE450W2K3X64R02][#170290]

  8. Applications within child domains of trusted forests cannot be enumerated.

    Note: To correct this issue, you must install this hotfix on all servers that run the XML broker on all affected servers in child domains.

    [From PSE450W2K3X64R02][#171422]

  9. Screen painting might be incorrect for certain applications, including incorrect colors, blurred fonts, and painting artifacts.

    [From PSE450W2K3X64R02][#177970]

  10. Sessions might not properly reflect changes made to the client work area, such as a modified screen resolution.

    [From PSE450W2K3X64R02][#178119]

Shadowing

N/A

SmartAuditor

N/A

Smart Cards

  1. Attempting smart card authentication using a SafeSign smart card might cause the LSASS.exe process to terminate.

    [From PSE450W2K3X64R02][#152888]

  2. When using smart card authentication, users cannot reconnect to a disconnected session from the Web Interface or Program Neighborhood Agent when workspace control is disabled.

    [From PSE450W2K3X64R02][#159675]

  3. The smart card authentication process, when attempted over a wide area network and virtual private network combination, might become unresponsive.

    [From PSE450W2K3X64R02][#167785]

SmoothRoaming

N/A

SpeedScreen

  1. With SpeedScreen Multimedia Acceleration enabled, the video rectangle of a clip playing in the background might overlap application windows in the foreground.

    [From PSE450W2K3X64R02][#165557]

System Exceptions

  1. Servers might experience a fatal exception, displaying a blue screen on ctxsmcdrv.sys with bugcheck code 50.

    [From PSE450W2K3X64R02][#157472]

  2. Disabling XML Service DNS address resolution might not fully take effect. As a result, FQDNs are sent to clients rather than IP addresses.

    [From PSE450W2K3X64R02][#164172]

  3. Event ID 1114 appears sporadically in the Event Log, indicating issues with session printers even though no such issues are apparent. The entries occur when users terminate logons or sessions before the creation of their network printers is complete.

    [From PSE450W2K3X64R02][#164508]

  4. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

    [From PSE450W2K3X64R02][#165810]

  5. Certain custom changes to the IcaThinwireFlags inadvertently cause the Local Host Cache to grow to its maximum size (2 GB). As a result, users can no longer connect to the affected servers.

    [From PSE450W2K3X64R02][#165903]

  6. Stopping the Health Check Agent Service on a server licensed for Advanced Edition causes the service to suffer an access violation. To resolve the issue, apply this fix and then stop and restart the service.

    [From PSE450W2K3X64R02][#166230]

  7. The Citrix Print Manager Service (CPSVC.EXE) might exit unexpectedly during printer autocreation while reconnecting to a session.

    [From PSE450W2K3X64R02][#166831]

  8. Servers might experience a fatal exception, displaying a blue screen on vdtw30.dll with bugcheck code 7e (SYSTEM_THREAD_EXCEPTION_NOT_HANDLED).

    [From PSE450W2K3X64R02][#167557]

  9. Servers might experience a fatal exception, displaying a blue screen on CDM.SYS with bugcheck code 7f.

    [From PSE450W2K3X64R02][#167818]

  10. CpSvc.exe might report heap corruption or become unresponsive in low-memory conditions.

    [From PSE450W2K3X64R02][#168949]

  11. The Client Network Service cannot be stopped from the Windows Services console even if there are no active sessions.

    [From PSE450W2K3X64R02][#169002]

  12. Each time an item is put on the clipboard, the wfshell.exe process does not release the handle used for the operation.

    [From PSE450W2K3X64R02][#171916]

  13. On occasion, published instances of Windows Internet Explorer exit unexpectedly.

    [From PSE450W2K3X64R02][#175654]

  14. Servers might experience a kernel trap (Stop 8e) when accessing vdtw30.dll.

    [From PSE450W2K3X64R02][#173390]

  15. After upgrading to Version 4.6 of the Access Management Console, opening an application properties page might cause the console to become unresponsive with the Event Viewer reporting an access violation in IMACOM Interop COM+ application.

    [From PSE450W2K3X64R02][#176253]

  16. When using the IMetaFrameMySessions interface Add method, MFCOM might terminate unexpectedly.

    [From PSE450W2K3X64R02][#176650]

  17. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

    [From PSE450W2K3X64R02][#176763]

  18. After installing Hotfix Rollup Pack 1, mmhook.dll might cause some published applications to exit unexpectedly while launching.

    [From PSE450W2K3X64R02][#176999]

TWAIN Redirection

  1. In seamless mode, when a TWAIN scan operation completes, the scanner driver window is set behind the scanner application's window.

    [From PSE450W2K3X64R02][#161243]

  2. When a scanning application is closed while a scan request from that application is still underway, the scanner remains in a busy state. This renders the scanner unavailable to other applications until the client device is restarted.

    [From PSE450W2K3X64R02][#164983]

  3. After selecting a scanner to use, the application might fail to enable it.

    [From PSE450W2K3X64R02][#165134]

Virtual IP

  1. Virtual IP addresses are not released when a session is disconnected.

    [From PSE450W2K3X64R02][#159918]

Web Interface

  1. A "User Trust Intersection Change" error message might appear when using the management console to configure an application published to a user or a group that belongs to a domain that is not present in the trust list held in the data store for one or more servers where the application is published. If a server has a problem querying domain trust information, existing domain trust information for that server is removed from the data store.

    With this fix, existing domain trust information is not removed from the data store if a server has a problem querying its domain trust information. Additionally, the following event will be generated in the server's application log:

    Type: Error
    Source: Metaframe Events
    Event ID: 1230
    Description: Failed to get domain trust information for this server.

    [From PSE450W2K3X64R02][#163540]

  2. Users authenticating to the Web Interface using UPN-formatted credentials (user@domain.com) cannot change their passwords.

    [From PSE450W2K3X64R02][#171304]

Miscellaneous

  1. The "Turn off menu animations" policy does not work as designed. This fix removes the policy interface from the console.

    [From PSE450W2K3X64R02][#161130]

  2. The "Turn off clipboard mapping" policy does not work as designed for reconnected sessions.

    [From PSE450W2K3X64R02][#168124]

  3. Internet Explorer might fail when run in kiosk mode.

    [From PSE450W2K3X64R02][#168889]

  4. In response to customer feedback, this fix modifies Fix #172653 so that security tokens are no longer appended to the application name by default when you publish an application. While the feature continues to be available, it is no longer enabled by default. Instead, you must enable it manually by setting the following registry key:

    • On 32-bit Windows:

      Key: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\IMA
      Name: EnableSecurityTokenForNewApp
      Type: DWORD
      Data: 0x1

    • On 64-bit Windows:

      Key: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\IMA
      Name: EnableSecurityTokenForNewApp
      Type: DWORD
      Data: 0x1

    For more information, see Knowledge Center article CTX115245.

    [From PSE450W2K3X64R02][#180310]

Fixes from Replaced Hotfixes and from Hotfix Rollup Pack 1

This hotfix rollup pack also contains all fixes included in Hotfix Rollup Pack 1 plus the following fixes that shipped since the release of Hotfix Rollup Pack 1:

  1. When Internet Explorer 6 or later is run as a published application and SpeedScreen Browser Acceleration is enabled, transparent GIFs on a Web page might display incorrectly.

    [From PSE450W2K3X64013][#163950]

  2. With SpeedScreen Browser Acceleration enabled, SpeedScreenFilter.dll might cause Microsoft Internet Explorer to exit unexpectedly.

    [From PSE450W2K3X64013][#166571]

  3. With SpeedScreen Browser Acceleration enabled, Microsoft Internet Explorer might exit unexpectedly when displaying GIF images.

    [From PSE450W2K3X64013][#167267]

  4. When two users have autorestored printers with the same name, both users can access those printers in each other's sessions. This fix prevents the autorestoration of a printer if its name already exists in another session.

    [From PSE450W2K3X64015][#174240]

  5. If an application requests a large block of contiguous memory, the allocation might fail.

    [From PSE450W2K3X64016][#164566]

  6. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX114487.

    [From PSE450W2K3X64017][#168503]

  7. Disabling the Session Reliability feature causes the following error messages to be logged unnecessarily after the server restarts:

    Application Log:
    Error 100: An internal server error occurred with Reliability Server.

    System Log:
    Error 7024: The Citrix XTE Server service terminated with service-specific error 1 (0x1).

    [From PSE450R01W2K3X64001][#161195]

  8. In an environment that allows only one instance of an application per user, attempts to reconnect to a disconnected session might fail, displaying the error message "You already have an instance of this application open and are not allowed to run more than one instance."

    [From PSE450R01W2K3X64001][#164054]

  9. After disabling logons from a command line ("change logon /disable") and later enabling them again ("change logon /enable"), servers fail to be load balanced and do not accept ICA connection attempts. This happens even though such servers are listed in the list of available servers when using the command qfarm /load.

    [From PSE450R01W2K3X64001][#164584]

  10. NeoLinux client sessions might terminate unexpectedly.

    [From PSE450R01W2K3X64002][#159382]

  11. Pressing a key continually to type the same character multiple times might cause bursts of three or four characters to appear rather than each character being echoed in sequence. Additionally, moving the mouse over a Start menu item or dragging a window might appear somewhat choppy in focus or movement. This fix introduces support for the following two registry settings to change the display behavior:

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\icawd\thin16\
    Name: FrameBuildupTime
    Type: REG_DWORD
    Data:<delay in milliseconds; default=95, range: 10-200>

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\icawd\thin16\
    Name: FrameReviewTime
    Type: REG_DWORD
    Data:<delay in milliseconds; default=30; range: 10-200, but no more than FrameBuildupTime>

    [From PSE450R01W2K3X64002][#163664]

  12. The Workspace Control feature does not work properly for NDS users.

    [From PSE450R01W2K3X64002][#164565]

  13. Idle seamless sessions might not disconnect at the specified timeout interval.

    [From PSE450R01W2K3X64002][#164675]

  14. Winlogon.exe shows higher than average CPU consumption on the server. The issue occurs because the server refreshes the smart card reader state more frequently than necessary. This occurs even if smart cards are not being used. With this fix, the reader state is refreshed only once per noticeable event.

    [From PSE450R01W2K3X64003][#163878]

  15. Enabling memory optimization might prevent applications from launching correctly if their registry values are replaced by a path that points to a memory optimization temporary file.

    [From PSE450R01W2K3X64004][#166210]

  16. Running Discovery from the Access Management Console fails if information in the datastore is corrupted. With this fix, some minor datastore corruption will be ignored and the discovery process will be allowed to complete successfully.

    [From PSE450R01W2K3X64005][#160765]

  17. Pressing a key continually to type the same character multiple times might cause bursts of three or four characters to appear rather than each character being echoed in sequence. Additionally, moving the mouse over a Start menu item or dragging a window might appear somewhat choppy in focus or movement.

    This fix aims to improve interactivity while typing or moving the mouse, without adversely affecting the bandwidth used by heavy-duty graphics. The fix also overrides the settings created by fix #163664 and introduces support for four registry settings that affect the described display behavior.

    Note: The default settings applied by this fix will optimize the display behavior in most typical usage scenarios. The following registry information is provided for informational purposes only; Citrix recommends that you do not change the default settings applied by this fix.

    32-bit Windows
    Key:HKEY_LOCAL_MACHINE/SYSTEM/CCS/Control/TerminalServer/Wds/icawd/Thin16
    Name:see chart
    Type:see chart
    Data:see chart

    64-bit Windows
    Key:HKEY_LOCAL_MACHINE/SYSTEM/CCS/Control/TerminalServer/Wds/icawd/Thin16
    Name:see chart
    Type:see chart
    Data:see chart

    64-bit Windows (32-bit mode)
    Key:HKEY_LOCAL_MACHINE/SYSTEM/CCS/Control/TerminalServer/Wds/icawd/Thin16
    Name:see chart
    Type:see chart
    Data:see chart

    NameTypeData
    ShortFrameReviewTimeREG_DWORD10 - 250 (default value is 15 )
    ShortFrameBuildupTimeREG_DWORD10 - 250 (default value is 45 )
    LongFrameReviewTimeREG_DWORD10 - 250 (default value is 30 )
    LongFrameBuildupTimeREG_DWORD10 - 250 (default value is 90 )

    [From PSE450R01W2K3X64006][#167838]

  18. This hotfix is a prerequisite for installing SmartAuditor, a feature of the Platinum Edition of Presentation Server. To use this feature, you must install this hotfix before you install SmartAuditor.

    [From PSE450R01W2K3X64006][#168919]

  19. Applications with names longer than 32 characters do not report usage correctly in summary database reports. The applications are listed twice in the database; one entry displays a truncated name, the second displays the full application name.

    Note: Reports run after this fix is applied return the correct usage data collected after this fix is applied. Older data is not updated or corrected.

    [From PSE450R01W2K3X64007][#165183]

  20. When run in seamless mode, certain application windows might exceed the work area boundaries and overlap the local taskbar.

    Note: This fix requires Presentation Server Client Version 10.100 or later.

    [From PSE450R01W2K3X64008][#169121]

  21. In some Active Directory configurations, generating billing reports returns no data for some users who belong to Domain Local Groups. To enable this fix, apply this hotfix to your Resource Manager database connection server.

    [From PSE450R01W2K3X64009][#166382]

  22. After applying Hotfix Rollup Pack 1, some applications terminate unexpectedly.

    [From PSE450R01W2K3X64011][#169385]

  23. The Lsass.exe process exits unexpectedly when authenticating to Presentation Server using Kerberos.

    [From PSE450R01W2K3X64012][#168496]

  24. Third party application controls embedded inside .Net applications might not resize properly.

    [From PSE450R01W2K3X64014][#169926]

  25. Novell GroupWise and other applications might maximize incorrectly. To enable this fix, you must set the following registry key(s):

    • On 32-bit Windows:

      HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_dlls\Multiple Monitor Hook
      Name:<application_name.exe>
      Type: REG_DWORD
      Data: 0x156ff

    • On 64-bit Windows:

      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\CtxHook\AppInit_dlls\Multiple Monitor Hook
      Name:<application_name.exe>
      Type: REG_DWORD
      Data: 0x156ff

    [From PSE450R01W2K3X64014][#169936]

  26. After applying Hotfix Rollup Pack 1 for Presentation Server 4.5, maximized seamless windows might become full-screen.

    [From PSE450R01W2K3X64014][#170299]

  27. Maximizing certain applications' child windows might cause the child windows to disappear.

    [From PSE450R01W2K3X64014][#170898]

  28. When run in seamless mode, certain application windows might exceed the work area boundaries and overlap the local taskbar.

    Note: This fix removes the requirement from Fix #169121 to upgrade to Version 10.100 of the client or later.

    [From PSE450R01W2K3X64014][#170915]

  29. Shadowing from the Access Management Console fails when there are disconnected sessions on the server.

    [From PSE450R01W2K3X64016][#167443]

  30. After installing Hotfix Rollup Pack 1, Installation Manager packages might fail to install.

    [From PSE450R01W2K3X64016][#170085]

  31. After applying Hotfix Rollup Pack 1, a farm administrator cannot add Installation Manager packages if the Installation Manager network account password exceeds 13 characters.

    [From PSE450R01W2K3X64016][#170313]

  32. Installation Manager fails to install transform (.mst) files if there is a blank space in the path or file name.

    [From PSE450R01W2K3X64016][#173224]

  33. When running the application publishing wizard on a computer running Presentation Server Version 4.5 with Feature Pack 1 and selecting an icon from a file on an IMA server, the following error message appears:

    "Failed to read icons from file: ....ico."

    [From PSE450R01W2K3X64018][#169913]

  34. Icons for some applications that utilize 32-bit icons do not appear in the console.

    [From PSE450R01W2K3X64018][#169920]

  35. When publishing applications with non-standard icons, the IMA Service might exit unexpectedly. With this fix, the service does not exit when it encounters non-standard icons; instead, you can select Citrix default icons and successfully complete the publishing process.

    [From PSE450R01W2K3X64018][#172158]

  36. This enhancement allows administrators to find and remove orphaned records from the data store using the dscheck /full servers flag.

    [From PSE450R01W2K3X64019][#162115]

  37. Servers might experience a fatal exception, displaying a blue screen, on vdtw30.dll. The issue occurs as a result of dereferencing a null pointer in the Thinwire function DrawFrame.

    [From PSE450R01W2K3X64019][#168365]

  38. In 16-bit color connections, blue or cyan rectangles might appear on graphics.

    [From PSE450R01W2K3X64019][#169157]

  39. In 16-bit color connections, text, lines, and shadows on inactive menu buttons and windows might appear blue instead of gray.

    [From PSE450R01W2K3X64019][#170611]

  40. In 16-bit color connections, blue or cyan rectangles might appear on graphics.

    [From PSE450R01W2K3X64019][#172360]

  41. This security fix is designed to enhance security with published applications by making their names harder to predict. To achieve this, the fix appends a token to the Application Name when the application is published. The token is a circumflex followed by a random combination of eight characters/digits. For example, if you publish Microsoft Word with an Application Name of "MS Word" and a Display Name of "Word," users see "Word" when enumerating the application, and an .ica file lists the application as #"MS Word^XXXXXXXX." No changes are made to the application's Display Name (the name of the application as it appears in client interfaces) except for Program Neighborhood custom connections, where the Display Name is equal to the Application Name as it appears in the application's Properties page in the console.

    Important Notes:

    • You must install this fix on all servers in the farm.

    • Application names that contain special characters must be enclosed within quotation marks when using a command line to launch the application, for example, "MS Word^XXXXXXXX."

    • Only the Application Names of applications you publish after you install this fix are changed as described.

    • The Application Names of applications already published when you install this fix are not modified. To update previously published applications within the farm, run dscheck /SecureApp.

    • Modifying previously published applications by running dscheck /SecureApp can create backward compatibility issues with older .ica files that do not contain the updated Application Name. To prevent such compatibility issues, you can choose to:

      • Not update previously published applications

      • Selectively revert the Application Name to the previous format by deleting the token from the updated Application Name in the application's Properties page.

    For more information, see Knowledge Center article CTX115245.

    [From PSE450R01W2K3X64019][#172653]

  42. Servers might experience a fatal exception with BugCheck DRIVER_LEFT_LOCKED_PAGES_IN_PROCESS.

    [From PSE450R01W2K3X64020][#172422]

  43. You cannot print to printers using the Universal Print Driver in pass-through sessions. Instead, print jobs are queued and then removed without printing and without a warning.

    [From PSE450R01W2K3X64021][#164422]

  44. CpSvc.exe might exit unexpectedly with certain print drivers. Traceback indicates the issue occurs in DevmodeDup.

    [From PSE450R01W2K3X64021][#171251]

  45. This fix adds the ability to disable all retained printers.

    Note: This only effects the creation of retained printers at the start of the client session. If a policy is in use that enables printer retention, changes to any printer settings continue to be saved.

    To enable this fix, you must set the following registry key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print
    Name: DefaultPrnFlags
    Type: REG_DWORD
    Data: 0x80000000

    [From PSE450R01W2K3X64021][#174761]

  46. Servers might experience data loss and a checksum error when communicating with a published application that reads data from a device attached to a COM port on a client device.

    [From PSE450R01W2K3X64022][#156026]

  47. Some applications, when checking client device communication ports, might cause client devices to appear slow or unresponsive.

    [From PSE450R01W2K3X64022][#174668]

  48. After installing Fix #157025, authentication increases logon times by about 60 seconds. The issue can be verified in Task Manager by seeing a 60 second delay in the start of the wfshell.exe process following the start of the cmstart.exe process during user authentication.

    [From PSE450R01W2K3X64023][#170167]

  49. This feature enhancement to SpeedScreen Flash Acceleration adds support for Adobe Flash versions 7a, 8b, 8, 9, 9c, and 9d.

    [From PSE450R01W2K3X64024][#172511]

  50. The printer configuration utility (printcfg.exe) might terminate unexpectedly if launched while the Citrix Print Service is unavailable.

    [From PSE450R01W2K3X64025][#173075]

  51. Some applications that run within an Application Isolation Environment (AIE) and attempt to access a COM server might return a message that the process is busy. Attempting to retry the process fails until the application times out.

    [From PSE450R01W2K3X64026][#175359]

  52. When using large screen size and high color depth, operations with high graphics content might render the session unresponsive.

    [From PSE450R01W2K3X64027][#158066]

  53. Under certain environmental conditions, some application sessions might fail to reconnect.

    [From PSE450R01W2K3X64027][#163505]

  54. The ThinWire driver vdtw30.dll might become unresponsive and bring the entire system to a halt.

    [From PSE450R01W2K3X64027][#166945]

  55. This is the server-side component of a fix that addresses an issue in which applications that are set to launch maximized on a preferred monitor are not properly maximized on the preferred monitor.

    To get the full benefit of this fix, you must also install a client hotfix that includes Fix #171012.

    [From PSE450R01W2K3X64027][#171012]

  56. Some custom applications that become unresponsive cannot be terminated when run in seamless sessions.

    [From PSE450R01W2K3X64027][#171043]

  57. Published applications might exit unexpectedly upon launch.

    [From PSE450R01W2K3X64027][#171322]

  58. With Multiple Monitor Hook enabled, some dialog boxes and splash screens are centered between monitors rather than centered to the primary monitor.

    [From PSE450R01W2K3X64027][#171523]

  59. Some 64-bit applications might appear unresponsive when run seamlessly as a result of the Active Accessibility Hook not loading.

    [From PSE450R01W2K3X64027][#171795]

  60. With Multiple Monitor Hook enabled, when right-clicking an application context menu on the taskbar, the context menu might appear lower than the client taskbar. The issue occurs when two monitors have different screen resolutions and the application appears on the lower-resolution monitor.

    [From PSE450R01W2K3X64027][#171823]

  61. With Multiple Monitor Hook enabled, using either a single or multiple monitor configuration, applications might exit unexpectedly.

    [From PSE450R01W2K3X64027][#172155]

  62. Some applications do not launch within a correctly maximized window.

    [From PSE450R01W2K3X64027][#173545]

  63. The termsrv.exe process might become unresponsive.

    [From PSE450R01W2K3X64027][#173832]

  64. At times of heavy utilization, some applications might terminate unexpectedly.

    [From PSE450R01W2K3X64027][#173976]

  65. Maximized seamless windows that are smaller than the monitor of the client device cannot be moved.

    [From PSE450R01W2K3X64027][#173978]

  66. Under certain environmental conditions, child dialog boxes are not sized correctly.

    [From PSE450R01W2K3X64027][#174769]

  67. Application use and activity of an application that is run within an application isolation environment or streamed to the server might not be logged by Resource Manager.

    [From PSE450R01W2K3X64030][#170108]

Installing and Uninstalling this Hotfix Rollup Pack

Notes:

  • This hotfix rollup pack is packaged with Microsoft Windows Installer 3.0 as a .msp file. For more information about deploying these, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.

  • This hotfix rollup pack might or might not prompt you to restart the server when the installation or uninstallation is complete. If you are using the Access Management Console, you must restart the server after installing or uninstalling this hotfix rollup pack to ensure that it is added to or removed from the console's hotfix inventory list.

  • If the need arises to restore the original settings and functionality provided by this hotfix rollup pack, you must uninstall the hotfix rollup pack before reinstalling it according to the installation instructions below.

To install this hotfix rollup pack:

  1. Copy the hotfix rollup pack to an empty folder on the hard drive of the server you want to update.

  2. Close all applications.

  3. Run the executable.

  4. Restart the server.

  5. If you are using the Access Management Console, restart the server to ensure the hotfix rollup pack is added to the console's hotfix inventory list.

To uninstall this hotfix rollup pack:

  1. From the Start menu, select Settings > Control Panel.

  2. In Control Panel, double-click Add/Remove Programs.

  3. Highlight the hotfix rollup pack and click Remove.

  4. Follow the directions on-screen.

  5. If you are using the Access Management Console, restart the server to ensure the hotfix rollup pack is removed from the console's hotfix inventory list.

Symbols Files Location

(For use only when instructed by Citrix Technical Support) - PSE450W2K3X64R02 Symbols for Windows Server 2003

Files Updated (All Dates/Times EDT)

File Name

Date

Time

Size

ccticket64.dll
03/17/2008
05:41p
69,632
cdfdrv.sys
03/17/2008
08:15p
32,072
cdm.sys
03/17/2008
08:05p
572,216
cdmprov.dll
03/17/2008
05:41p
92,672
citrix_ima_sals_mf.jar
02/20/2008
02:13p
110,469
CPatch.exe
03/17/2008
08:15p
106,496
CPatchbackup_Files.vbs
03/17/2008
08:15p
2,885
CPatchRestore_Files.vbs
03/17/2008
08:15p
4,097
CPatchUI.dll
03/17/2008
08:15p
4,608
cpmon.dll
03/17/2008
05:41p
147,456
cpproc.dll
03/17/2008
05:41p
14,848
cpprov.dll
03/17/2008
05:41p
171,520
CPR169666.vbs
03/17/2008
08:15p
1,868
cpsvc.exe
03/17/2008
05:24p
585,216
cpupdrv.dll
03/17/2008
08:05p
142,144
cpupdui.dll
03/17/2008
05:41p
195,072
ctxadmin.dll
03/17/2008
05:41p
110,080
ctxaltstr.sys
03/17/2008
08:05p
84,800
ctxauth.dll
03/17/2008
05:41p
140,288
ctxcpubal.exe
03/17/2008
08:03p
51,712
ctxcpubulk.dll
03/17/2008
08:03p
29,696
ctxcpucpu.dll
03/17/2008
08:03p
44,544
ctxcpudev.dll
03/17/2008
08:03p
159,744
ctxcpuperf.dll
03/17/2008
08:03p
45,328
ctxcpusched.exe
03/17/2008
08:03p
148,480
ctxcpusupp.dll
03/17/2008
08:03p
222,720
ctxcpusyslib.dll
03/17/2008
08:03p
291,088
ctxgina.dll
03/17/2008
05:41p
242,688
ctxnotif.dll
03/17/2008
05:41p
175,616
ctxpidmn.sys
03/17/2008
08:09p
31,048
ctxprn64.dll
03/17/2008
05:41p
89,088
ctxrmpn.sys
03/17/2008
08:09p
47,432
ctxrpc64.dll
03/17/2008
08:09p
38,536
ctxsbx.sys
03/17/2008
08:09p
249,152
ctxsbxhook64.dll
03/17/2008
05:41p
588,288
ctxsfopersist64.dll
03/17/2008
05:41p
462,848
ctxsfopersist64_RTM.dll
03/17/2008
08:15p
462,848
ctxsfoshellext.dll
03/17/2008
05:41p
148,480
ctxsmcapi64.dll
03/17/2008
05:41p
110,592
ctxsmcdrv.sys
03/17/2008
08:09p
20,040
ctxtestdll64.exe
03/17/2008
05:34p
52,224
cutildll64.dll
03/17/2008
08:09p
80,008
cyncstat64.dll
03/17/2008
05:41p
122,880
icammdrv64.dll
03/17/2008
05:41p
97,280
icareduc.sys
03/17/2008
08:09p
22,600
imaappsal64.dll
03/17/2008
08:03p
226,304
imafilesal64.dll
03/17/2008
08:03p
28,160
imamfrpc_client64.dll
03/17/2008
05:41p
97,280
imasrvsal64.dll
03/17/2008
08:03p
181,248
imasystem64.dll
03/17/2008
08:03p
280,576
IMS_Sal64.dll
03/17/2008
08:03p
109,056
InstallDriver.vbs
03/17/2008
08:15p
2,546
istlsys.exe
03/17/2008
08:15p
9,728
lmssal64.dll
03/17/2008
08:03p
114,688
mfaphook64.dll
03/17/2008
05:41p
242,176
mfappsal64.dll
03/17/2008
05:41p
247,808
mfcontentsal64.dll
03/17/2008
05:41p
71,168
mfpnsal64.dll
03/17/2008
05:41p
60,928
mfprintsal64.dll
03/17/2008
05:41p
136,704
mfsrvsal64.dll
03/17/2008
05:41p
518,144
mmhook64.dll
03/17/2008
05:41p
98,304
pdcrypt1.sys
03/17/2008
08:09p
27,592
pdcrypt2.sys
03/17/2008
08:05p
156,864
policymgr.jar
02/20/2008
02:13p
333,094
PS450RegBackup.vbs
03/17/2008
08:15p
12,300
radeappsal64.dll
03/17/2008
05:41p
92,672
rademsgui.dll
03/17/2008
03:45p
45,056
radesessionsal64.dll
03/17/2008
05:41p
113,664
radexml.dll
03/17/2008
05:41p
84,480
ReinstallDriver.vbs
03/17/2008
08:15p
2,738
scardhook64.dll
03/17/2008
05:41p
191,488
sdbschemaupd_oracle8.sql
02/12/2008
05:27a
249,791
sdbschemaupd_sqlserver.sql
02/12/2008
05:27a
204,349
sdbschema_oracle8.sql
02/12/2008
05:27a
276,373
sdbschema_sqlserver.sql
02/12/2008
05:27a
263,072
shappbarhook64.dll
03/17/2008
05:41p
8,704
SNMPHRPInstall.vbs
03/17/2008
08:15p
1,546
SNMPHRPUnInstall.vbs
03/17/2008
08:15p
1,080
speedscreenfilter64.dll
03/17/2008
05:41p
555,008
sphook64.dll
03/17/2008
05:41p
36,352
statui.dll
03/17/2008
05:41p
17,920
stuisrv.exe
03/17/2008
05:31p
6,144
twexport.sys
03/17/2008
08:06p
8,512
tzhook64.dll
03/17/2008
05:41p
25,088
UIHookRegister.vbs
03/17/2008
08:15p
2,272
UpdatePath.vbs
03/17/2008
08:15p
1,196
VanportBuildNumUpdate.vbs
03/17/2008
08:15p
2,816
vdtw30.dll
03/17/2008
08:09p
818,056
viphook64.dll
03/17/2008
05:41p
151,552
wdica.sys
03/17/2008
08:09p
479,040
wpnbr.dll
03/17/2008
05:41p
256,512
wsxica.dll
03/17/2008
08:09p
1,579,280
X64DupFileFolderDelete.vbs
03/17/2008
08:15p
4,494
cdfdrv.cat (driverfiles)
03/17/2008
08:15p
6,348
cdm.cat (driverfiles)
03/17/2008
08:06p
6,332
ctxaltstr.cat (driverfiles)
03/17/2008
08:06p
6,362
ctxaltstr.inf (driverfiles)
03/17/2008
08:06p
2,782
ctxcdm.inf (driverfiles)
03/17/2008
08:06p
1,351
ctxrmpn.cat (driverfiles)
03/17/2008
08:07p
6,350
ctxrmpn.inf (driverfiles)
03/17/2008
08:07p
1,788
ctxsbx.cat (driverfiles)
03/17/2008
08:07p
6,783
ctxsbx.inf (driverfiles)
03/17/2008
08:07p
2,867
ctxsmcdrv.cat (driverfiles)
03/17/2008
08:07p
6,362
ctxsmcdrv.inf (driverfiles)
03/17/2008
08:07p
1,461
icareduc.cat (driverfiles)
03/17/2008
08:07p
6,356
icareduc.inf (driverfiles)
03/17/2008
08:07p
1,309
pdcrypt1.cat (driverfiles)
03/17/2008
08:08p
6,356
pdcrypt1.inf (driverfiles)
03/17/2008
08:08p
1,311
pdcrypt2.cat (driverfiles)
03/17/2008
08:08p
6,356
pdcrypt2.inf (driverfiles)
03/17/2008
08:08p
1,309
twexport.cat (driverfiles)
03/17/2008
08:08p
6,356
twexport.inf (driverfiles)
03/17/2008
08:08p
763
wdica.cat (driverfiles)
03/17/2008
08:08p
6,338
wdica.inf (driverfiles)
03/17/2008
08:08p
742
ctxaboutui.dll (en)
03/17/2008
03:44p
3,584
ctxactivesyncui.dll (en)
03/17/2008
03:43p
4,096
dsmaintUI.dll (en)
03/17/2008
08:03p
32,768
imamsgsui.dll (en)
03/17/2008
08:03p
49,152
imasrv4mfui.dll (en)
03/17/2008
03:41p
45,056
lms20rulesui.dll (en)
03/17/2008
03:45p
3,584
mfappssui.dll (en)
03/17/2008
03:41p
24,064
MFErrorUI.dll (en)
03/17/2008
03:40p
22,528
mfeventui.dll (en)
03/17/2008
03:40p
19,456
mfprintssui.dll (en)
03/17/2008
03:41p
2,560
mfsrvssui.dll (en)
03/17/2008
03:41p
3,072
mfstatusui.dll (en)
03/17/2008
03:41p
13,312
printcfgUI.dll (en)
03/17/2008
03:44p
61,440
twconfigui.dll (en)
03/17/2008
03:45p
9,728
wfshellUI.dll (en)
03/17/2008
03:44p
53,248
wsxicaui.dll (en)
03/17/2008
03:43p
8,192
imasrv4mfui.dll (ru)
03/17/2008
03:41p
45,056
00000807.kbd (x32)
03/17/2008
04:35p
10,310
agentsvc.exe (x32)
03/17/2008
08:03p
180,224
aie.dll (x32)
03/17/2008
05:40p
135,168
AIECom.exe (x32)
03/17/2008
05:00p
8,192
altisul.dll (x32)
03/17/2008
08:03p
229,376
apsdk.dll (x32)
03/17/2008
05:40p
102,400
ccticket.dll (x32)
03/17/2008
05:40p
69,632
cdfdrv.sys (x32)
03/17/2008
08:15p
25,416
cdmprov.dll (x32)
03/17/2008
05:40p
81,920
chfarm.exe (x32)
03/17/2008
08:03p
151,552
clnthelp.dll (x32)
03/17/2008
05:40p
5,120
cmstart.exe (x32)
03/17/2008
04:44p
15,360
cpscom.dll (x32)
03/17/2008
05:40p
262,144
cpscom.tlb (x32)
02/21/2008
01:27a
8,192
cpscompia.dll (x32)
02/21/2008
01:32a
9,216
cpssdkclient.diagnostics.dll (x32)
02/21/2008
01:33a
24,576
cpssdkclient.dll (x32)
02/21/2008
01:32a
372,736
cpssdkclient.tlb (x32)
02/21/2008
01:32a
67,684
ctxactivesync.exe (x32)
03/17/2008
04:42p
36,864
ctxadmin.dll (x32)
03/17/2008
05:40p
204,800
ctxcpuperf.dll (x32)
03/17/2008
08:03p
45,328
ctxcpusyslib.dll (x32)
03/17/2008
08:03p
291,088
ctxprn.dll (x32)
03/17/2008
05:40p
69,632
ctxrdpctls.dll (x32)
03/17/2008
05:40p
43,008
ctxrpc.dll (x32)
03/17/2008
08:13p
31,880
ctxsbxhook.dll (x32)
03/17/2008
05:40p
376,832
ctxsecureima.dll (x32)
03/17/2008
05:40p
34,304
ctxsmcapi.dll (x32)
03/17/2008
05:40p
86,016
ctxtestdll.exe (x32)
03/17/2008
04:55p
39,424
ctxxmlss.exe (x32)
03/17