This article describes the required permissions to run the Citrix Streaming Service.
By default, the local Ctx_StreamingSvc account is used to start the Citrix Streaming Service on a computer with the Offline Plug-in installed. This service starts the Radesvc.exe process.
To verify the privileges of the Ctx_StreamingSvc user, complete the following steps:
Open the Local Security Policy console, type secpol.msc.
Navigate to Security Settings > Local Policies > User Rights Assignment in the Group Policy console.
Verify that the Ctx_StreamingSvc account exists in each of the following Group Policy rules:
Version 6x and Later- For Windows XP and 2003
- Back up Files and Directories
- Deny log on locally
- Deny log on through Terminal Services
- Log on as a batch job
- Log on as a service
- Restore files and directories
- Take Ownership of files or other directories
- Back up Files and Directories
- Deny log on Locally
- Deny log on through Remote Desktop Services
- Log on as a batch job
- Log on as a service
- Restore files and directories
- Take Ownership of files or other directories
Ensure that the user account also has permissions to the following locations:
Folder locations: - %PROGRAMFILES%\Citrix Read & Execute- %PROGRAMFILES%\Streaming Client Read & Execute
- %PROGRAMFILES%\Citrix\RadeCache Full Control
- %PROGRAMFILES%\Citrix\RadeStore Full Control
- %PROGRAMFILES%\Citrix\Deploy Full Control
- %WINDIR%\Fonts Full Control
- %WINDIR%\Registration Full ControlĀ
Registry:
- HKEY_LOCAL_MACHINE \Software\Citrix\RadeCache: Full Control
- HKEY_LOCAL_MACHINE\Software\Citrix\Rade: Full ControlĀ
The CLIENTCACHE utility (which is located on the computer with the Streaming Client installed) is also used to relocate the Radecache folder. It automatically applies the correct permissions to the folder and registry key.