Connect with us

Hi, what are you looking for?

Citrix XenApp

How to handle Citrix configuration changes for Citrix teams with many Citrix Admins

When was this app published and who did it? We’ve all been in this situation before. We don’t know where the app came from or who published it and have to go through change tickets and emails to track down where it came from. In very large dynamic Citrix environments with many Citrix Admins working on things, this can become a challenge. Citrix change tracking is vital.

One sometimes overlooked feature of XenApp is that it has built in configuration logging. Any time a Citrix Admin makes a change it gets written to the database where it can be reported on. On XenApp 6.5 and older you have to create a separate database for this. With XenApp 7.5 you don’t, it will all get written to the same database that your delivery controller configuration is in.

Here’s a quick run down on how to get it working for XenApp 6.5 (with XenApp 7.5 it’s automatically turned on):

1. Go to AppCenter and right click your farm. Then hit Farm properties:

1

2. Click Configuration Logging in the properties bar and click “Configure Database”

2

3. Type in your SQL Server name and service account user credentials. And yup, you can use an Oracle database if you choose to.

3

4. Type in a database name. I am assuming you have had your DBA create an empty database for you already.

4

5. Leave all the advanced options default except for “Use encryption”. Set this to No. In most environments you are not going to be using SSL to connect to your SQL environment. If you leave it set to Yes you will get an error saying something like this later when you attempt to test the connection:

Failed to connect to the logging database.

The database returned the following error:

A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 – The certificate chain was issued by an authority that is not trusted.)

5

6. Verify all your settings are correct and hit “Test Database Connection”

6

7. You should get a confirmation like this. Hit Finish.

7

8. Now you’ll be returned to the configuration logging setup box. Check “Log administrative tasks to Configuration Logging datbase” and “Require administrators to enter database credentials before clearing the log”. Hit Ok.

8

9. Now right click History (which is called Logging in XenApp 7.5 Citrix Studio) and click Get log.

9

10. It’s going to give you a warning saying you don’t have a filter applied, don’t worry just hit Yes to continue.

10

11. You’ll get a popup asking to enter your logging credentials again, the same credentials you used to setup the database. Type them in and hit OK.

12. Voila, there’s your first entry of you turning on configuration logging. From here on out any change a Citrix Admin makes will be logged.

11

13. You can set filters to return just the data you’re looking for.

12

14. This is great but what if you want to have a daily report emailed to you and other Citrix Admins at the end of the day with all the changes that happened on the Citrix farm? This is where Powershell comes in. You can get all this data pulled in via Powershell and emailed out very easily. I’m working on a script and will post it right here on my blog once it’s done.

5 Comments

5 Comments

  1. Phil

    June 2, 2014 at 6:53 AM

    Hi Jason

    Any news on the reporting script 😉

  2. Mark Liechty

    June 24, 2014 at 11:58 PM

    Thanks for the great walk-thru. You said at the end of the post you were going to be putting up a change script to e-mail changes. Any luck with getting it tuned. I appreciate the help.

  3. Jason Samuel

    July 1, 2014 at 11:51 PM

    Sorry guys, I was about half way through it and haven’t had a chance to finish it. Several new projects on my plate recently. I will definitely update you both as soon as it’s ready.

  4. Nil

    August 14, 2014 at 7:33 PM

    I’m also looking forward to the script. Thanks Jason!

  5. Todd

    May 13, 2015 at 8:31 AM

    Thanks for the tip in #5, fixed my issue!

Leave a Reply

Your email address will not be published. Required fields are marked *

You May Also Like

Apache

Today I would like to go over proper URL redirection when using SSL but first I would like to preface this by describing what...

Citrix Workspace

You can use FIDO2 hardware security keys plugged into your physical desktop over the Citrix HDX remoting protocol for use with virtualized Windows Desktop...

Exchange 2003

A useful Exchange 2003 guide I wrote for a friend’s blog originally but I am posting it here on mine now for your viewing...

Cloud Design Architecture

The community-driven paperback book initiated by my friends Bas van Kaam and Christiaan Brinkhoff is available for sale on Amazon. If you haven’t picked...

JasonSamuel.com began in 2008 as a way for me to give back to the IT community. This website features the latest news and how-to's on enterprise mobility, security, virtualization, cloud architecture, and other technologies I work with. This website has evolved over time to become a go-to reference hub for these technologies. It receives hundreds of thousands of unique visitors from all over the world each month. More details on the About Me page.
Copyright © 2008-2023 JasonSamuel.com