Hotfix package name: XAE500W2K8X64087.MSP
For: Citrix XenApp 5 for Windows Server 2008 64-bit Edition
Replaces: XAE500W2K8X64001, XAE500W2K8X64003, XAE500W2K8X64004, XAE500W2K8X64008, XAE500W2K8X64009, XAE500W2K8X64011, XAE500W2K8X64022, XAE500W2K8X64023, XAE500W2K8X64032, XAE500W2K8X64033, XAE500W2K8X64036, XAE500W2K8X64042, XAE500W2K8X64044, XAE500W2K8X64048, XAE500W2K8X64060, XAE500W2K8X64070, XAE500W2K8X64071, XAE500W2K8X64072, XAE500W2K8X64076, XAE500W2K8X64084
Date: January, 2012
Language supported: English (US)
Readme version: 1.02

Readme Revision History

Important Notes about This Release

• Note: As a best practice, Citrix recommends that you install this and other hotfixes only if you are affected by the specific issues they resolve. Otherwise, Citrix recommends that you wait for the next hotfix rollup pack for your product release. Hotfix rollup packs consolidate most previously released hotfixes and allow you to update systems in a convenient, single installation.
• Important: Installing this hotfix over an ICA session is not supported but you can install it through a remote desktop session using an administrator account.
• Caution! This release may require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see Citrix eDocs, the Citrix Product Documentation Library.

New Fixes in This Release

1. Regardless of the number of invalid logon attempts permitted by way of an Active Directory policy, users are locked out of Active Directory after just one invalid logon attempt to the Shadow taskbar.

   [From XAE500W2K8X64087][#259528]

2. EdgeSight reports on published application launch counts can show fewer launches than the actual numbers. This happens as a result of application launches triggered by other published applications such as scripts and commands. Such launches can intermittently fail to be captured.

   Note: To address this issue in its entirety, you must install a hotfix that contains Fix #LA0136. Fix #LA0136 is available as an EdgeSight for XenApp Agents hotfix. The combination of Fixes #LA0066 and #LA0136 resolves the issue in most scenarios. Additionally, consider installing a XenApp hotfix that contains Fix #LA0572. Fix #LA0572 addresses this issue specifically in scenarios with short-lived sessions (sessions shorter than 5 seconds).

   [From XAE500W2K8X64087][#LA0066]

3. Application launches can fail to be captured in the case of applications where the published executable exits within a few moments of the launch.

   Note: To address this issue in its entirety, you must install a hotfix that contains Fix #LA0066 before installing this fix. Fix #LA0066 is available as a EUEM hotfix (for Presentation Server and XenApp for Windows Server 2003) and as a XenApp hotfix (for Windows Server 2008).

   [From XAE500W2K8X64087][#LA0572]

Fixes from Replaced Hotfixes

1. In order to meet Microsoft Windows Server 2008 certification requirements, this update provides Authenticode signing for the ctxrdpwsx.dll, ImaSrv.exe, and wsxica.dll files.

   [From XAE500W2K8X64001][#197616]

2. Servers might become unresponsive when enumerating applications.

   [From XAE500W2K8X64003][#203748]

3. Changes you make to the configuration of the CPU Utilization Management feature do not get included in the Configuration Logging report.

   [From XAE500W2K8X64004][#198142]

4. Important: Make sure to read the Important Notes section before installing this hotfix.

   This enhancement is a part of a product simplification effort that removes a number of licensing related complexities. Specifically, with this enhancement:

   • All licensed users of XenApp Advanced, Enterprise, or Platinum hosted applications are also entitled to use the Application streaming feature on their end-user devices in desktop/offline mode without requiring separate licenses
   • The requirement for a "Citrix Streaming Users" Active Directory group is no longer needed
   • Annoyance popup messages that remind administrators and users of the remaining grace period of Technology Preview, Beta, and Early Releases no longer appear

   Important: For this enhancement to take effect, you must also install the following Access Management Console hotfix(es):

   • For XenApp 5 for Microsoft Windows Server 2008: PresentationServer_5.0.1

   Note: After installing this fix, servers configured as XML brokers consume two start-up licenses rather than one.

   [From XAE500W2K8X64004][#205609]

5. This is an enhancement that allows users to view a preview of their printed document using the Citrix Universal Printer. After applying this fix, you must set the following registry key:

   On 32-bit Windows:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\print
   Name: DefaultPrnFlags
   Type: REG_DWORD
   Data: 0x10000

   On 64-bit Windows:

   HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Print
   Name: DefaultPrnFlags
   Type: REG_DWORD
   Data: 0x10000

   If a value for this key exists, add 0x10000 to the existing value. For example, a value of 0x20 becomes 0x10020.

   [From XAE500W2K8X64008][#175118]

6. Depending on the selected paper type, print previews and printouts using the Citrix Universal Printer are improperly scaled and aligned. This results in page margins and font placements that are different from those of the original document. This is the server-side component of a fix that resolves the issue. To resolve the issue in its entirety, you must also install client-side Fix #198079.

   [From XAE500W2K8X64008][#198079]

7. An encoding issue might prevent print jobs utilizing the XPS printer driver from completing. The following error message appears instead: "parameter is incorrect."

   [From XAE500W2K8X64008][#206182]

8. Pass-through authentication is not available when accessing a published application from within a published desktop on XenApp 5 for Windows 2008 servers. Instead, the user must provide valid credentials to launch a session within a desktop session even when pass-through authentication is enabled in the plugin. To resolve this issue, you must install a server-side hotfix for XenApp 5 for Windows 2008 that contains Fix #194894.

   [From XAE500W2K8X64009][#194894]

9. In a high latency environment, applications which write a large amount of data to a client mapped drive using several small write requests might cause performance issues.

   After applying this fix, use the console to configure a Citrix Policy that enables Asynchronous Writes, then apply the policy to the users or servers as needed to resolve this issue.

   [From XAE500W2K8X64009][#198090]

10. Incorrect fonts might appear in printouts. Font substitution occurs when fonts installed on the client device fail to be included in the spool file. To enable this fix, you must also deploy the corresponding client-side Fix #179220.

    [From XAE500W2K8X64011][#179220]

11. After applying Fix #179220, the print spooler might stop responding. To enable this fix, you must also deploy the corresponding client-side Fix #192617.

    [From XAE500W2K8X64011][#192617]

12. After applying Fix #179220, the size of PDF print spooler files grows unexpectedly large; some font substitutions might also occur. To enable this fix, you must also deploy the corresponding client-side Fix #201114.

    [From XAE500W2K8X64011][#201114]

13. The size of EMF spool files can be very large if the document to be printed contains a large number of fonts. This enhancement introduces support for a registry key that allows you to fine-tune in a more granular way what fonts to include in the spool file:

    HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print
    Name: IncludeFonts
    Type: REG_SZ
    Data: All, None, Required, Legacy*

    * All = Include all fonts contained in the document; None = Include no fonts; Required = Include differential of fonts contained in the document but not available on the printer; Legacy = Include client fonts

    [From XAE500W2K8X64011][#206372]

14. On systems where Fixes #202900, #195908, or #179220 are installed, the Citrix Print Manager Service (CpSvc.exe) uses excessive amounts of memory when printing to legacy printers.

    [From XAE500W2K8X64011][#207148]

15. On systems where Fixes #179220, #192617, or #201114 are installed, the Citrix Print Manager Service (CpSvc.exe) uses excessive amounts of memory when printing to legacy printers and might exit unexpectedly.

    [From XAE500W2K8X64011][#207157]

16. Cross-server shadowing does not work on Windows Server 2008 unless you set the "Remote Control" permission on the ICA listener.

    [From XAE500W2K8X64023][#206699]

17. The Access Management Console displays a session as active even if it is disconnected after the idle time-out as set through Terminal Services configuration has elapsed.

    [From XAE500W2K8X64023][#206969]

18. Cross-server shadowing of sessions running on Windows Server 2008 fails.

    [From XAE500W2K8X64023][#208207]

19. Anonymous user accounts are not returned to the pool of anonymous accounts after a session is disconnected and reset. As a result, the account is eventually used up even though the account limit is not reached. For more information about Troubleshooting Common Anonymous User Account Scenarios, see Knowledge Center article CTX153078.

    [From XAE500W2K8X64023][#209610]

20. When attempting to shadow a user on a different server, some user sessions running on that server might not enumerate.

    [From XAE500W2K8X64023][#216167]

21. When attempting to shadow from a shadow taskbar running inside an RDP session and selecting a user on a different server to be shadowed, the shadow session fails. The following error message appears instead: "Session no longer exists on the server."

    [From XAE500W2K8X64023][#218083]

22. The ICA Listener setting "By default, connect only the client's main printer" is not honored on Windows Server 2008.

    [From XAE500W2K8X64032][#199378]

23. The Citrix Print Manager Service (cpsvc.exe) might exit unexpectedly and continue to exit after manually restarting it.

    [From XAE500W2K8X64032][#215074]

24. This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX133159.

    [From XAE500W2K8X64033][#210814]

25. On systems where Fix #209610 is installed, licenses are not properly released when user sessions are logged off or disconnected.

    [From XAE500W2K8X64033][#219896]

26. If the presenter starts a Microsoft Office Live Meeting inside an ICA session, attendees cannot see the meeting onscreen.

    [From XAE500W2K8X64036][#219170]

27. HDX IntelliCache:

    This feature enhancement enables the Citrix Branch Repeater appliance to perform cross-session data compression for XenApp traffic. Cross-session compression reduces and streamlines traffic sent over the wide area network (WAN) when used in conjunction with the Branch Repeater TCP flow control and ICA-aware Quality-of-Service (QoS).

    For users behind one Branch Repeater appliance, this data compression can be utilized by sessions that contain compressible traffic, such as:

    • Sessions for text-heavy applications (such as a word processing application) of identical window size and resolution in owned by multiple users
    • Single-user sessions of fixed window size and resolutions scrolling through a text-heavy document
    • Printing identical files inside a single session, multiple users printing identical files
    • Repetitive file transfers, such as to and from mapped client drives, such as uploading or downloading email attachments

    After applying this release to the appropriate servers in your environment, you can adjust the listed registry settings on each server as needed. You must disconnect, then reconnect any session used for testing after a registry change is made to verify the effect of the registry change.

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Citrix\WanScaler
    Name: UchBehavior
    Type: REG_DWORD
    Data: see chart

    Value	Behavior
    0	The universal cache handling information is not reported by the server.
    1	The universal cache handling information is always reported by the server.
    2	The universal cache handling information is reported by the server if a Branch Repeater device is used to optimize the client connection between servers and clients. This is the default value.

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Citrix\WanScaler
    Name: EnableWanScalerOptimization
    Type: REG_DWORD
    Data: see chart

    Value	Behavior
    0	Disable Branch Repeater optimization.
    1	Enable Branch Repeater optimization. This is the default value.

    Note: If secure client traffic is blocked from optimization (EnableForSecureIca), the EnableWanScalerOptimization settings are ignored and no optimizations are utilized for secure sessions.

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Citrix\WanScaler
    Name: EnableForSecureIca
    Type: REG_DWORD
    Data: see chart

    Value	Behavior
    0	Disable Branch Repeater optimization for secure connections. This is the default value.
    1	Enable Branch Repeater optimization for secure connections.

    [From XAE500W2K8X64042][#194626]

28. Certain user activities, particularly prolonged panning in memory-intensive graphics applications, can cause server memory consumption to grow to almost 100 percent. As a result, the session becomes unresponsive and the server refuses to accept new connections until it is restarted.

    [From XAE500W2K8X64042][#201274]

29. Servers might experience a fatal exception on vdtw30.dll while shadowing sessions.

    [From XAE500W2K8X64042][#206620]

30. Servers where Fix #160592 is installed might experience a fatal exception, displaying a blue screen, on vdtw30.dll.

    [From XAE500W2K8X64044][#204955]

31. Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 3B.

    [From XAE500W2K8X64044][#218613]

32. This hotfix contains a server stability fix for XenApp.

    [From XAE500W2K8X64048][#208911]

33. On systems with Fix #211736 installed, session printer autocreation fails on occasion.

    [From XAE500W2K8X64048][#226969]

34. On systems with Fix #197616 installed, Terminal Services refuses to accept connections.

    [From XAE500W2K8X64060][#220936]

35. After refreshing, custom administrators might not see the entire number of sessions in the Access Management Console.

    [From XAE500W2K8X64070][#201270]

36. Custom administrators can see and manage published applications without permissions to do so.

    [From XAE500W2K8X64070][#206929]

37. After installing Hotfix Rollup Pack 3, the system beep no longer works.

    [From XAE500W2K8X64070][#208760]

38. Users might not be able to connect when there are communication problems between the server and the license server. After applying this fix, the connection to the license server is reinitialized when communication errors occur and the following message is written to the System Event log:

    Source: MetaFrame
    Event ID: 9034
    Description: A Citrix licensing request has timed out. This might be an indication of communication problems between this server and the license server. As a result, the server has reinitialized its connection with the license server. All licenses checked out by this server have been checked back in and attempts will be made to check the licenses out again.

    Reinitiating the connection to the license server works around temporary communication problems. However, if the event is logged repeatedly, Citrix recommends that you investigate your network health.

    [From XAE500W2K8X64070][#209944]

39. Changes to client printer mapping policies are applied to new sessions, but do not take effect for reconnected sessions. With this fix, printing policies are refreshed upon reconnect and session printers rebuilt accordingly.

    [From XAE500W2K8X64070][#220641]

40. This fix addresses a reliability issue with the Citrix Print Manager Service, CpSvc.exe.

    [From XAE500W2K8X64070][#223002]

41. When connected to a published desktop or to an instance of Windows Media Player published on XenApp 5 running on Windows Server 2008, Macintosh clients lack audio capabilities. The issue occurs because the server fails to enable the proper audio device for those clients.

    [From XAE500W2K8X64070][#223323]

42. When using a UPD driver for autocreated printers, the system occasionally experiences a fatal exception with stop code 0x0000003B.

    [From XAE500W2K8X64070][#223697]

43. Local printer properties might not be properly applied to session printers.

    [From XAE500W2K8X64070][#223899]

44. On occasion, session logoffs fail and the following notification appears: "Please wait for System Event Notification Service." Attempts to reconnect to such sessions fail as well, while new sessions can be launched without issues.

    [From XAE500W2K8X64070][#224169]

45. An error occurs when custom administrators attempt to enumerate users while RADE sessions are present.

    [From XAE500W2K8X64070][#224357]

46. Terminal Services might exit unexpectedly at shutdown.

    [From XAE500W2K8X64070][#226749]

47. The server restart message that appears in user sessions before a scheduled server restarts ("The Citrix XenApp you are using will be restarted in X minutes. Please save all data and log off. Any unsaved data will be lost") is missing the word "server" after Citrix XenApp.

    [From XAE500W2K8X64070][#229526]

48. Vdtw30.dll can cause servers to become unresponsive.

    [From XAE500W2K8X64070][#229659]

49. If the security setting "System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing" is enabled, RDP connections fail.

    [From XAE500W2K8X64070][#230249]

50. On systems with Fix #220641 installed, session printers are deleted when legacy printer naming is in use or when an administrator account with permissions to manage printers (HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Print\DefaultPrnFlags = 0x4000) reconnects to a disconnected session after changing printing policies.

    [From XAE500W2K8X64070][#230833]

51. The "Allow only one instance of the application for each user" application limit, set under advanced application properties in the Delivery Services Console, is not honored for applications that are streamed to server. As a result, a single user can launch multiple instances of the application.

    [From XAE500W2K8X64070][#232777]

52. In scenarios where the XenApp Acceleration feature of Branch Repeater 5.5 is enabled (default) to compress and accelerate ICA traffic over WANs, shadowing a published desktop session across the WAN can cause the client session to disconnect unexpectedly.

    [From XAE500W2K8X64070][#236597]

53. Session enumeration - from the console or using MFCOM scripts - can be slow for custom administrators.

    [From XAE500W2K8X64070][#239806]

54. On servers with Hotfix Rollup Pack 1 installed, local file type associations for Windows Internet Explorer no longer work after a published application is run.

    [From XAE500W2K8X64070][#250962]

55. EdgeSight does not properly collect data for published desktop launches and does not properly display such data in its reports.

    [From XAE500W2K8X64071][#240414]

56. The Wfshell.exe process might cause CPU consumption to rise and remain above 25 percent.

    [From XAE500W2K8X64072][#205292]

57. Under certain circumstances, disconnected sessions do not reconnect.

    [From XAE500W2K8X64076][#175501]

58. Users might experience delays logging on when the domain controller is offline.

    [From XAE500W2K8X64076][#195628]

59. Servers might experience a fatal exception, displaying a blue screen. The dump file displays: "PAGE_FAULT_IN_NONPAGED_AREA (50) at vdtw30!PublishEverything+0x1b."

    [From XAE500W2K8X64076][#243393]

60. This is an enhancement aiming to increase the robustness of the Automatic Client Reconnection feature.

    [From XAE500W2K8X64076][#247586]

61. At times of heavy server utilization, published applications can fail to launch. Instead, double-clicking an application icon causes the application to connect to the session but the session logs off immediately, without launching the application.

    [From XAE500W2K8X64076][#249027]

62. Configuring the NetScaler Citrix XML Service monitor probe to point to a server running XenApp 5 for Windows Server 2008 causes the load on that server to increase to 9,990 as evidenced by running the qfarm /load output command. As a result, the server refuses to accept new connections as long as it is being monitored.

    [From XAE500W2K8X64076][#256301]

Installing and Uninstalling This Release

Notes:

• Before installing this hotfix, make sure to verify the digital certificate chain validation of the MSP package. For more information, see Knowledge Center article CTX129998.
• This hotfix is packaged with Microsoft Windows Installer 3.0 as a .msp file. For more information about deploying .msp files, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.
• This installer program complies with Microsoft User Account Control (UAC). If UAC is enabled, you must run the installer program in elevated mode; that is, with administrative privileges enabled. For more information about UAC, see Microsoft TechNet or visit the Microsoft Web site and search on keyword UAC.
• To install this hotfix successfully, servers must not have registry modification restrictions in place.
• Slipstreaming - installations of the XenApp Server base product packaged with one or more individual hotfixes - is not supported and might leave servers in an unstable state.
• This hotfix might or might not prompt you to restart the server when the installation or uninstallation is complete. If you are using the Access Management Console, you must restart the server after installing or uninstalling this hotfix to ensure that the hotfix is added to or removed from the console's hotfix inventory list.
• If the need arises to restore the original settings and functionality provided by this hotfix, you must uninstall the hotfix before reinstalling it according to the installation instructions below.

To install this hotfix:

1. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.
2. Open the Properties tab of the package and verify the digital certificate chain validation.
3. Close all applications.
4. Run the executable.
5. Restart the server.
6. If you are using the Access Management Console, restart the server to ensure the hotfix is added to the console's hotfix inventory list.

To uninstall this hotfix:

1. From the Start menu, select Control Panel > Programs and Features.
2. Highlight the hotfix you want to uninstall and click Uninstall.
3. Follow the directions on-screen.
4. If you are using the Access Management Console, restart the server to ensure the hotfix is removed from the console's hotfix inventory list.

Files Updated (All Dates/Times UTC)

Copyright © 2012 Citrix Systems, Inc. All rights reserved.
Citrix is a registered trademark, and Citrix Presentation Server and Citrix XenApp are trademarks of Citrix Systems, Inc. in the United States and other countries.
All other trademarks and registered trademarks are the property of their respective owners.