Citrix Virtual Apps and Desktops - Warning: Some of the policy settings have invalid entries.

book

Article ID: CTX694920

calendar_today

Updated On:

Description

On the Delivery Controller you can invoke:

Get-BrokerSite | Select GpoDataNoError, GpoPoliciesGuid, GpoCustomTemplatesGuid

 Example:

GpoDataNoError = False indicates that there is an issue with some policy objects.

You can perform the test using cmdlet:

Test-BrokerDesktopPolicy

Example:

In the example above we can see that there is an issue with TEST_POLICY Filter.

You can also review Policy Set using cmdlet:

Get-BrokerGpoPolicySet | Select PolicySetGuid, LastError

Example:

In the example above you can see the issue with one of the policy sets and specific policy "TEST_POLICY"

 

Cause

Invadli / corrupted filter.

Resolution

Once you indetify a problematic policy object you can:

  • if the issue is with one of the filters, you can edit policy, remove filters and apply new filters again
  • remove policy if it is not needed anymore

 

You can also use SDK and review and modify filters.

You can find more information here: 

https://developer-docs.citrix.com/en-us/citrix-virtual-apps-desktops-sdk/2402/group-policy-sdk-usage.html

In the example above we use SDK to check policy filters, there was an issue / mismatch between USER and COMPUTER policy filter.

How to list specific filters (in this example DesktopGroup filter):

Add-PSSnapin Citrix.*

New-PsDrive -PsProvider CitrixGroupPolicy -Name GP -Root \ -Controller localhost

cd GP:\Computer\TEST_POLICY\Filters\DesktopGroup
ls

cd GP:\User\TEST_POLICY\Filters\DesktopGroup
ls

 

After you modify a policy object, you can run one of the cmdlets again. Please note that policy conversion site service may need 15 min between conversions.

 

Issue/Introduction

This document helps Customers identify if their on-premises CVAD Policies are properly configured. It shows some examples of useful PowerShell cmdlets which can be used for troubleshooting.

Citrix Web Studio may display a warning: Some of the policy settings from a previous release have invalid entries, which failed to pass validation on the data.

image.png

 

Additional Information

Test-BrokerDesktopPolicy

Use this command to check the site policy data so that the data in policies, settings, and filters are all considered acceptable when the data is converted to the new database format. If errors are reported by this command, the errors must be fixed. Otherwise the data cannot be converted to the new format.

https://developer-docs.citrix.com/en-us/citrix-virtual-apps-desktops-sdk/2411/broker/test-brokerdesktoppolicy

 

Group Policy SDK

https://developer-docs.citrix.com/en-us/citrix-virtual-apps-desktops-sdk/2402/group-policy-sdk-usage.html

 

Known issue related to upgrade:

https://support.citrix.com/external/article?articleUrl=CTX676686-policy-data-may-be-lost-when-a-cvad-site-is-upgraded-from-a-previous-version-to-2402&language=en_US