CVAD - Assigning policies to user groups does not take effect
Article ID: CTX695284
Updated On:
Description
1. Create a new "User Group" on the Domain Controller, adding several user account into this "User Group".
2. Open Citrix Studio, switching to "Policy" panel.
3. Create a new policy or edit an existing policy.
4. Configure required policies and select "User or group" on the "Assign policy to" panel
5. Assign the policy to the new created "User Group".
6. Save and enable the policy.
Users in this "User Group" launch the ICA Session but the policy does not take effect.
Cause
The group membership is not updated immediately.
When user launches the ICA Session, the policy failed to apply as no results can be returned for this user belonging to the assigned user group.
Resolution
1. Logon the Desktop.
2. Open PowerShell and run the command: gpresult /r /scope user.
3. There is no new created "User Group" listed in the output result.
4. Go to Domain Controller and run PowerShell with administrator permission.
5. Run the command to update group membership: klist.exe -li 0x3e7.
6. Logoff the sessions and launch it again.
Issue/Introduction
"User or group" is a common filter used to assign the policy on Citrix Studio.
Customer created a new "User Group" on the Domain Controller, then assign the policy to the new created "User Group" from Citrix Studio, but the policy cannot be applied.
