February 24, 2014

Citrix XenDesktop 7.1 Slow Logon Black Screen

Purpose:
This article explains slow logon times for XenDesktop v7.1.  In addition to slow logons, the wallpaper may show as black during the initial logon process.

Symptom:
A slow logon is a relative thing and depends on a myriad of factors.  If your server or desktop logon does not show the progress wording on logon but instead has only black wallpaper then it is definitely worth testing out this registry key.  If you just think that your logon is slow, then it still may be worth the effort to test.

Resolution:
Add a new registry key to the master image (desktop or server).

Registry Key:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Logon
Name: DisableStatus
Type: REG_DWORD
Value: 00000001 

Before you add the key, establish a logon time baseline.  I historically like to do this manually using a stopwatch (iPhone) but the built in Director logon time functionality is an exciting new feature and will give you additional insight.  Here is an example of a Windows 7 baseline from the SageLike lab:


After adding the key, time another logon to see if your logon duration has improved.  Here is an example of the after:


This is a big improvement but YMMV.  An interesting side effect for Windows 2008 R2 server deployments is the return of the status text while establishing a session.  A blank black screen leaves the user to wonder if anything is happening at all.  This fix replaces the black wallpaper with the rapidly changing logon status information.  This cues the user that many things are happening to build their session.

Cause:
I have not found the history of this registry key or why it is absent when using the v7.1 VDA.  I have observed this working quite well for both Windows 7 and Windows 2008 R2 in a lab environment.  At the time this was written, the reference CTX article below only indicates it is applicable to XenApp 6.5

SageLike Post ID: SL0006

Applies to:
Windows 7
Windows 2008 R2
XenApp 6.5
XenDesktop 7.1
Maybe others

References:
CTX135782 Black Screen Logging on to a Published Desktop

January 14, 2014

Getting Things Done

Purpose:
To discuss the tools I use to get things done.

Often when I meet a new system administrator, the conversation of tools comes up.  Part of the fun of  being a consultant is learning new ways to get things done.  I have always wanted to collect this information into one place but the the closest thing we have to this idea on sagelike.com is "Windows 2008 R2 on a Laptop".  I have run into posts like this before, my favorite is probably @thurrott's "What I Use".  He updates his from time to time and I intend to do the same.



Devices:
On Black Friday, I pulled the trigger on a late 2013 Retina MacBook Pro 13" 512 GB.  This is a paradigm shift for me as my whole career revolves around Microsoft Windows.  In the month that I have been using it, I am totally in love.  It is the first laptop that fits in my messenger bag laptop sleeve and I barely know it is there.  The battery life has routinely gone a full work day and the trackpad / gestures have changed the way I interact with applications.

That being said, my favorite computer is my Windows 7 virtual desktop that runs in the SageLike lab.  I have a constantly changing pool of non-persistent desktops of various OSs available but I most often use the persistent Windows 7.  Outlook 2010 is alway running along with Dropbox, ShareFile, and SkyDrive so the second I connect--everything is ready to go.  XenDesktop does a great job of adjusting the resolution to any form factor and I can get to it from any place that has ultranet connectivity.

For over a year, I have been enjoying the iPad 2.  Oddly, I rarely take it out of the house because I always carry a laptop.  There is something really enjoyable about surfing the web or reading email while kicked back on the couch.  My favorite book reader is an older e-ink Amazon Kindle which is an ideal unitasker.

I'm a year into the iPhone 5 and still happy with it.  The power button is starting to go but the rest of the phone is solid.  I want to complain about the battery life but if I honestly look at my typical day I should not be surprised.  My morning commute often involves streaming a podcast (see below) from the internet and then, via Bluetooth, to my car stereo while simultaneously running Waze to avoid traffic issues and speed traps.

They say the best camera is the one you have with you and that is certainly true of the iPhone 5.  It really takes amazing photos for its size and coupled with a variety of apps and internet access it is a total package.  The Canon EOS T3i is my choice for those less spontaneous moments.  I'm also a big fan of using the Patagonia Atom Bag as a camera bag.  It is not meant to be a camera bag which is kind of the point.  Nothing says 'expensive camera' like a big over-padded Canon bag hanging off your shoulder.  Besides being more discreet, the sling nature of the bag allows for quick access to retrieve or store your camera.

Servers:
Stay tuned for a separate post on this subject.

Windows Software:
I still prefer Microsoft Office 2010 for professional document creation but I do have Office 2013 on some devices.  OneNote, also a part of the Office suite, is an app I can't live without.  OneNote contains five years of my notes, screenshots, white papers, and drawings.  They are organized by vendor and technology but a single search will span all sections.  OneNote does a great job of fitting all this information into 400 MB which syncs from computer currently via with Dropbox.

I also have a host of the typical admin tools like Citrix: GoToMeetingHDX Monitor, Print DetectiveReceiver, Scout, ShareFileXenCenter; Microsoft Remote Desktop Connection Manager, Putty, WinSCP, VMware Virtual Infrastructure Client,

Macintosh Software:
There is a lot to be said about the default software that comes on every Mac.  iPhoto is an excellent built-in photo organizer and editor but this summer I standardized on Adobe Lightroom because of its dual platform support (Windows, Mac) and good reviews.  My hope is that Lightroom will give me the tools to organize the rapidly growing personal photo collection.  It has only been six months but I'm very happy with the progress.  On this same note, I've only tinkered with iMovie but managed to make an amusing trailer using photos taken over Christmas in twenty minutes.

I don't have enough storage for my music collection but iTunes Radio is nice to have built-in.  The same could be said about Messages being handy for communicating with my iFriends.  I prefer Google Chrome for browsing on all platforms (Windows, Mac, Linux, iPad...).  The Microsoft Remote Desktop app is excellent for remoting to Windows machines.

There are many times when the Mac software ecosystem comes up short.  To solve that issue, I've been using VMware Fusion v6.  It is excellent and the ability to swipe back and forth between Mac and Window has changed the way I work.  I'm not sure if it is an issue with Mavericks or Fusion but it crashes every time I try to close the program--so for now, I don't.

Services:
I don't need three file syncing services but unfortunately that is where I am at today.  All three have their benefits and drawbacks.  Lewan Technology's corporate standard is Citrix ShareFile which works well because I like the robust file delivery options it provides.  Microsoft SkyDrive gives everyone 7 GB which is reason enough but the integration with Office Web Apps and the remote PC connectivity make me think that this is the best of breed.  Moving to SkyDrive means migrating everything out of my 5 GB Dropbox.  Besides the time I invested in referring people and building up to 5 GB, Dropbox just works and I completely trust it.

Since the death of my beloved Google Reader, I started using Feedly which is a slick replacement but the idea of pouring over RSS feeds seems old fashion.  My new methodology for keeping up with announcements, blog posts, and documentation is save them to Pocket.  Pocket is available across all my devices and provides a great interface to keep track of what I have read or watched and what I'll save for later.  These various links primarily come from Twitter but it works just as well if something comes in by email or even SMS.

I have tried a variety of task management systems but my current trusted system for getting things done is Nirvana.   It is web based (key for me) and also has an iPhone app.

I'm also a big fan of Amazon MP3 and Prime, Aereo, Flickr, Blogger, Delicious, IFTTT, and Twitter.

Podcasts:
I do a lot of driving and podcasts are the key to my sanity.  Over the years it has become part of my routine and my main method of getting tech news.

Brian & Gabe Live - Ad-hoc audio of @brianmadden@gabeknuth, @jackmadden talking frankly
MacBreak Weekly - Apple news, ratholes, weekly picks
Old Tech News - Audio version of @ihnatko's various columns
Radiolab - science, philosophy, and the human spirit
TechNet Radio - Microsoft's highly scripted interview show typically centered around a product
TedTalks - "ideas worth spreading"
Windows Weekly - Microsoft news, software and beer picks


SageLike Post ID: SL0005

References:

Everything:
iOS:
Windows:
Mac:

October 29, 2013

Citrix NetScaler Troubleshoot Authentication

Purpose:
This post explains one method of validating authentication while using a Citrix NetScaler.  I use this all the time when setting up Access Gateway but it could be used for any authentication purpose.

Symptom:
When setting up Access Gateway for the first time it can be tricky determining where your authentication is going wrong.  NetScaler provides a laundry list of authentication options but I will just be testing LDAP lookup.

Resolution:
We can use the CLI to view the AAA log for a live view of the processing.  SSH to the NetScaler IP (NSIP) and logon.  Type "shell" and Enter.  Once in the shell, type "cat /tmp/aaad.debug" and Enter.


Depending on traffic to your NetScaler, you may see a lot of messages or none at all.  Either way, you will see live authentication information.  This is invaluable to find out where in the process it is all going wrong or right.  Below you'll see the user name is sagelike.com is authenticating via LDAP and three groups have been retrieved.  The most important line is the last, where we see the accept being sent.  At this point, the user has been successfully been authenticated and the process will move to the next step.  For Access Gateway, this is typically using single sign-on to authenticate the user to Citrix Web Interface.



Cause:
An incorrect logon typically gives you very little feedback. This is the best method I have found to get more detailed information.

SageLike Post ID: SL0004

Applies to:
NetScaler 9.2
NetScaler 9.3
NetScaler 10.0
NetScaler 10.1
Maybe others

References:
CTX114999 - How to Troubleshoot Authentication with aaad.debug