For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Mar 05, 2014

Let's validate a few settings:

  1. IIS CtxAdminPool and CtxScriptsPool application pools set to use LocalSystem (CTX130480)

  2. IIS authentication for Default Web Site set to Windows Authentication only (Anonymous not required)

  3. XenApp Hotfix rollup 3 - you need at least XA650W2K8R2X64025

  4. The following registry entry (CTX124603)

    HKLM\SYSTEM\CurrentControlSet\Control\TerminalServer
    IgnoreRegUserConfigErrors (DWORD) = 1

  5. XenApp global policy enabled for "Trust XML requests"

  6. The XML brokers must be configured to delegate HTTP and HOST to themselves, HOST to all other XenApp servers, and CIFS and LDAP to the DCs (Use Kerberos only)

  7. The XenApp servers must be configured to delegate HOST to themselves, CIFS and LDAP to the DCs, and HTTP to the XML brokers

This should be the bare minimum configuration required. Are you testing with a browser or Receiver directly?