Any update or solution on this? Thanks ... View more

Well we have made progress, but I failed to update things here. Using the CMC program we created an Office Desktop.ica file [WFClient] Version=2 TcpBrowserAddress=172.23.202.xx TcpBrowserAddress2=172.23.202.xx TcpBrowserAddress3=172.23.202.xx TcpBrowserAddress4=172.23.202.xx TcpBrowserAddress5=172.23.202.xx HttpBrowserAddress=172.23.202.xx [ApplicationServers] Office Desktop= [Office Desktop] Address=Office Desktop InitialProgram=#Office Desktop ClientAudio=On AudioBandwidthLimit=2 Compress=On DesiredHRES=1024 DesiredVRES=768 DesiredColor=4 TransportDriver=TCP/IP WinStationDriver=ICA 3.0 BrowserProtocol=HTTPonTCP In Juniper under the Resource Profile >Terminal Services I uploaded he custom file Then under the Autopolicy I put in the IP's of the above servers. I've used this for a number of our Citrix server applications. The curious thing is that we just discovered is it does not load balance.. it picks the first IP in the list. Matches it with the IP in the autopolicy and the user gets their OD. Didn't have issues till we needed to stop logins on that first in the list server to reboot it and users could not log in. Any thoughts? I can do a number of changes to the file that work in windows, but fails via this profile. ... View more

Thanks, I did look at the variables, but still didn't know what to do with them or where they should go. It's just not my area. So again thanks for clarifying. I'll give it a go. ... View more

Thanks, however I was speaking exculsively regarding the custom sign-in pages. I have already done all the configuring for the Default sign in page. So again if someone has or can provide a sample custom loging / logout page showing how one can put in their own welcome page / extra notes / change sign in button text etc that would be greatly appreciated. Thanks ... View more

ok, I have read and serched everything I could and finally I just want something simple and up to date. I'm running ver 6.4 R4.1. I am not a code person at all, my head is full enough.. lol. the KB articles are out of date and the code has changed. Template toolkit was a waste of a day for me So... what I would really love to see is a sample login and logout page regarding how I can simply change my Welcome message and add a disclaimer.. basically edit the same fields that one can on the actual Default Sign-in page on the IVE. Personally I think Juniper should just make the Default Sign-in page into something you can copy and rename... click / type .. done. Anyways if someone has a sample of how they made these simple changes on the login and logout page thtat would be greatly appreciated. Thanks Dave ... View more

Screen shots are very welcome as I'm thinking it is just not set up right on the AD sever. It just doesn't make sense why it was working an now the new users I have added to the group fail. Previously added users are fine. So it would be good to see if LDAP works or not or maybe we have something more serious going on. I definitly see the benefits of LDAP just something more I have to learn though... lol. OW, my head. Seems like these days you barely get a handle on one thing and then VP's want to do this / do that. It's all good stuff, but it is challenging enough to keep up. Dave ... View more

Yes I have double checked all that.. the list shows up without issue. I have not tried LDAP I have not tried packet capture as it is not an area I have dabled in. LDAP I set it to be my authenticating server and i could not log on at all with that username / password. Would it not take the same logon name? (my dumb question of the day) LDAP .... do you have a recommendation for a book on understanding LDAP in relation to AD? ... View more

I get this for me and I can log in...... Info PTR23397 2009/04/24 07:51:05 - [71.17.218.144] - KTHR\dlittle(Remote Access)[] - Groups obtained during winbind auth.... Info PTR23397 2009/04/24 07:51:05 - [71.17.218.144] - KTHR\dlittle(Remote Access)[] - Groups obtained for the user KTHR\dlittle are - and this for her under the Remote Realm it can't find her group. Info PTR23397 2009/04/24 07:54:30 - [71.17.218.144] - KTHR\asettee(Remote Access)[] - Groups obtained during winbind auth.... Info PTR23397 2009/04/24 07:54:30 - [71.17.218.144] - KTHR\asettee(Remote Access)[] - Trying for global,local AD groups from domain KTHR... Info PTR23397 2009/04/24 07:54:30 - [71.17.218.144] - KTHR\asettee(Remote Access)[] - GetUserGroups: No GC is found. Returning from getADGroups() Info PTR23397 2009/04/24 07:54:30 - [71.17.218.144] - KTHR\asettee(Remote Access)[] - Getting AD groups done Info PTR23397 2009/04/24 07:54:30 - [71.17.218.144] - KTHR\asettee(Remote Access)[] - There are no groups obtained for the user this for her under the Staff Realm and it has no issue. Info PTR23397 2009/04/24 07:59:20 - [71.17.218.144] - KTHR\asettee(Staff Access)[] - Groups obtained during winbind auth.... Info PTR23397 2009/04/24 07:59:20 - [71.17.218.144] - KTHR\asettee(Staff Access)[] - Groups obtained for the user KTHR\asettee are - Info PTR23397 2009/04/24 07:59:20 - [71.17.218.144] - KTHR\asettee(Staff Access)[] - Group : KTHR/Domain Users No other users I have set up have issues with any groups / roles under this Realm. It doesn't seem to make sense when other users who are members of the AD group I created can access the Remote Realm, but anyone new I have tried to add to this AD group fails. Is this an AD problem? ... View more

I have Ver 6.3R3.. and I'm wondering if it is a time issue. Does anyone know how Juniper sync's with AD? Is there a time delay? I just added a user to a group I am already using with other users. It's been 6 hours. This user can get in under one Realm as a regular user (via Domain Users), but not under the group I added her to today under another Realm I have for remote users. ... View more

Yes I have that book. It is good for additional knowledge, but for me it sucks on the how to. Something just isn't clicking for me. Plus it's a side project and often takes a back seat to other issues. I'm sure if I had more time to focus on it I could get it, but until then I appreciate any helps / tips and how to's from others. I may also have to take the time and call tech support to get some of these issues resolved. As well, I think they gear it that way to get people to sign up for their 2 grand 2 day courses... cha-ching..lol. Nope didn't fix that issue and for a few users I will need to put out the desktops.. which I could likely do by creating an ICA file (more control), but it would be good to do it the other way. ... View more

Icebun007, Glad you have a call in. I've been tied up in another project so Juniper has taken a back seat. I'm looking forward to what support has for a solution. Our situtation is a little different. I can't give them external access to all Hosted applications that they would use internally (privacy / security issues). So I have had to resort to creating ICA files for the published applcations and these work fine provided the user has a Citrix client installed on their PC. For this reason I hope they do fix that Client install issue. Did they say when they would release these updates? Anyways once I create an ICA file i go to the Terminal Service Resource Profile and create a new profile using a Custom ICA file and with this I can specify the servers that run the program and the ports used. This will pretty much be a standard method for me, unless I can find something better. I haven't tried the WSAM. Did you take a course on this or have past experience with Juniper? ... View more

What is it that you are trying to do? Show all the applications or just 1 specific application. I'm no guru at this, just learning as I go myself. ... View more

Please excuse my newness in this. It was just a side project tossed on my lap. Well I looked through the logs and found that port 80 access denied. So I went back to my Custom ICA under TS resource policies and added port 80 to the server IP and it worked. Now I have to deal with printers as the application won't run without at least a fake printer. ... View more

I too would appreaciate some guidance on this. In our enviroment there are some applications we do not what users to run from outside our network for security and privacy issues. So I just want to only make specific applications avaialble to varing groups of usres. Some of our applications are provincial and what I have is an ICA file that points to the provinices citrix servers that host the app and I'm having issues making that work. Any advice / tips would be greatly appreciated. Thanks David ... View more

Based on his information I just give it an IP address from our internal 192.168.x.x and everything continued to work. hope that helps ... View more

Seem like extra work without undestanding the reasons why you are doing it this way. Why not just have users authenticate to AD from the sign in page (rather than local) and just have Sharepoint as a bookmark under the Web tab for the User Role? Message Edited by Daver109 on 01-23-2009 11:39 AM ... View more

Could you post their guidance? Or is it something more than one can type out? thanks ... View more

I retested with <username> and <password> and it still I'm still getting the hosted applications displayed. do you have a terminal services policy? When you go under Terminal Service Resource Profiles you have something under Supporting policies? ... View more

Once I created the resource profile for ours and put in our service account user / password the applications displayed just fine, but that is where it stops working for me. I get a cannot connect message. "The Citrix Metaframe you have selected is not accepting connection." Even though I have a full range of citrix servers that run the application. As well I note that custom ICA files do not show up. However this is something I was working on before and they can be done individually and I seem to be able to get 80% through that but I get other issues. Hopefully we'll be able to piece this together. ... View more

I too am curious as to why the 10.200.200.200? It would be helpful to understand the reasoning behind this. We run an internal managment address of 192.168.88.xxx could we not change the 10. to our 192? Daver109 ... View more

We don't use Cach mode at all as it needs to update all the headers which slows things down and we don't see a benefit of having it turned on.  This is likely why it freezes for 3-5 min especially when it is likely over a slower HS connection compared to your internal network. ... View more