Configuring Citrix Access Gateway with Advanced Access Control 4.0 for use with an ISA Forward Proxy
Configuring Citrix Access Gateway with Advanced Access Control 4.0 for use with an ISA Forward Proxy Configuring Citrix Access Gateway with Advanced Access Control 4.0 for use with an ISA Forward Proxy
Citrix states in their article: CTX109036
Document ID: CTX109036, Created on: Mar 7, 2006, Updated: May 23, 2006
Products: Citrix Access Gateway 4.0
Citrix Presentation Server 4.0 introduces a new printing architecture which allows the following Printing Registry Settings to be used:
Note: The following is taken from Chapter 11 (Printer Management) of the Advanced Concepts Guide for Citrix Presentation Server 4.0:
CTX107059 – Advanced Concepts Guide
The values for each setting are given in hexadecimal format – keep this in mind when combining them.
For example, 0x20 + 0x80 = 0xA0 (not 0x100).
Printing Registry Settings
Presentation Server 4.0 provides registry settings that can be used to change printing behavior. These settings track the various printing-related settings on a per-session basis. During a logon, the session settings for printing are derived from a combination of policies, base Terminal Services defaults, and an optional "DefaultPrnFlags" value in the server’s registry. In the absence of a configured policy or modifications to base Terminal Services defaults, default values for all bit flags listed are initially zero. Setting a bit to 1 enables one of the documented functions. Enabling the bit flag is often used to disable default behavior.
Caution! This fix requires you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.
To modify the system default values:
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Add a REG_DWORD value named DefaultPrnFlags to the registry key.
For some settings, default values (before policy application) are taken from settings managed by the Terminal Services base functionality instead of the DefaultPrnFlags value. All settings with an initial default provided by Terminal Services are highlighted. These defaults apply unless you set the CTXPRN_OVERRIDE_TS_DEFAULTS bit in the DefaultPrnFlags value.
Note: Configured and enabled Presentation Server policy rules always override default settings whether they are read from the registry or provided by Terminal Services. However, policies do not exist for many of these settings because they may not be of general interest or are intended only as a fail-safe to disable certain features for troubleshooting.
CTXPRN_OVERRIDE_TS_DEFAULTS (0x00000080)
Windows manages several printing-related session settings it derives from group policies, user settings, or the connection type defaults. Unless overridden, these settings are used as intended defaults. Settings that give precedence to a default provided by Terminal Services are highlighted. To override Terminal Services defaults for any of the identified settings, this flag must be set in the DefaultPrnFlags registry value read from HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print in the system registry. If this flag is not set, the normal Terminal Services defaults apply.
Client Printer Autocreation Flags
CTXPRN_CLNTPRN_AUTOCREATE_NONE (0x00000004)
CTXPRN_CLNTPRN_AUTOCREATE_LOCAL_ONLY (0x00000002)
CTXPRN_CLNTPRN_AUTOCREATE_DEFAULT_ONLY (0x00000001)
Description: By default, all discovered client printers are autocreated. However, if any of these flags are set, only a subset of discovered client printers is autocreated.
If CTXPRN_CLNTPRN_AUTOCREATE_NONE is set, none of the discovered client printers are autocreated.
If AUTOCREATE_NONE is not set and CTXPRN_CLNTPRN_AUTOCREATE_LOCAL_ONLY is set, only printers that appear to be local to the client are auto-created.
If AUTOCREATE_NONE and AUTOCREATE_LOCAL_ONLY are not set but CTXPRN_CLNTPRN_AUTOCREATE_DEFAULT_ONLY is set, only the default client printer is autocreated.
Default Value: Unless overridden, Terminal Services defaults for these settings are used. If the CTXPRN_OVERRIDE_TS_DEFAULTS flag is set in the DefaultPrnFlags value at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\, the Terminal Services defaults are ignored and default bit values are taken from this REG_DWORD value.
Overriding Presentation Server policy rule location: Printing > Client Printers > Auto-creation.
CTXPRN_DISABLE_DIRECT_CONNECT_FOR_CLNTPRNS (0x00200000)
Description: When autocreating a client printer that is a connection to a shared network printer using the logon credentials of the server session, the system first establishes a direct connection from the server session to the network print server. Failing this, the printer remains connected as a client printer. If this flag is set, a direct printer connection from the server to the print server is not established, forcing all client printers to be connected indirectly through the client.
Default Value: Zero, unless bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: Printing > Client Printers > Print job routing.
CTXPRN_DONT_SET_DEFAULT_CLIENT_PRINTER (0x00000800)
Description: By default, the system sets the session user’s default printer to the client’s default printer. If this flag is set, the client’s default printer is not set as the session user’s default.
Default Value: Unless overridden, the Terminal Services default for this setting is used. If the CTXPRN_OVERRIDE_TS_DEFAULTS flag is set in the DefaultPrnFlags value at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\, the Terminal Services default is ignored and default bit value is taken from the REG_DWORD value.
Overriding Presentation Server policy rule location: Printing > Session printers.
CTXPRN_CREATE_LEGACY_CLIENT_PRINTERS (0x00000010)
Description: By default, the system uses printer names and ports qualified by the session ID so they are unique to a particular session. If set, this flag causes printer and port names derived only from the client name to be used. Although less secure, this setting is useful for applications that expect this type of printer name to be used.
Default Value: Zero, unless a bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: Printing > Client Printers > Legacy client printers.
Printer Driver Flags
CTXPRN_DRIVERS_AVOID_REGULAR_DRIVERS (0x00000100)
CTXPRN_DRIVERS_NO_UPD_FALLBACK (0x00000200)
CTXPRN_DRIVERS_ENABLE_UPD (0x00000400)
Description: By default, the system uses standard printer drivers as requested by the client, if they are available. If a driver is not available and the client supports a Universal Printer Driver, the printer is
autocreated using the Universal Printer Driver as an alternative. The default behavior is modified by setting either of the following combinations:
Using the Universal Printer Driver:
CTXPRN_DRIVERS_AVOID_REGULAR_DRIVERS and CTXPRN_DRIVERS_ENABLE_UPD
Using model-specific drivers:
Set CTXPRN_DRIVERS_NO_UPD_FALLBACK, then set the others to 0
Default Values: All zero, unless one or more of the bit values are set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: Printing > Drivers > Universal driver.
CTXPRN_DRIVERS_DISABLE_AUTO_INSTALL (0x00100000)
Description: By default, both the network printer and client printer autocreation processes install the needed drivers from the native sets of printer drivers that ship with Windows (for example, Driver.cab orntprint.inf). If set, this flag disables all automatic driver installations, implying that all drivers must be preinstalled or replicated to all required servers.
Default Value: Zero, unless a bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: Printing > Drivers > Native printer driver auto-install.
CTXPRN_NO_UPD_FALLBACK_FOR_DISALLOWED_DRIVER (0x10000000)
Description: When a driver name presented from the client fails the compatibility test (for example, the driver name is present in an exclude list or not present in an allow-only list) assuming Universal Printer Driver fallback is enabled, the normal behavior is to create the printer using the Universal Printer Driver. If set, this flag changes the default and prevents Universal Printer Driver creation for printers whose drivers fail the compatibility test.
Default Value: Zero, unless bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: None.
Client Printer Properties Retention Flags
CTXPRN_DISABLE_CLNTPRN_PROPS_EXCHANGE_WITH_CLIENT (0x00001000)
CTXPRN_DISABLE_CLNTPRN_PROPS_PROFILE_SAVE_RESTORE (0x00002000)
Description: By default, the system saves modified printer properties by sending them back to the client (if supported). Failing that, the system saves them in the user profile on the server. Setting either flag disables the printer properties’ save and restore to either the client exchange, the user profile, or both.
Default Value: Zero, unless bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: Printing > Drivers > Printer properties retention.
Client Printer Port Management Flags
CTXPRN_CREATE_BOTH_STD_AND_LEGACY_CLNTPRN_PORTS (0x01000000)
CTXPRN_CREATE_PORTS_FOR_AUTOCREATED_CLNTPRNS_ONLY (0x02000000)
CTXPRN_DONT_DELETE_CLNTPRN_PORTS (0x04000000)
Description: By default, during logon or reconnect, the system creates ports for all discovered client printers and deletes them at logoff. The style of port created depends on the CTXPRN_CREATE_LEGACY_CLIENT_PRINTERS flags. If any of these flags are set, the default port creation and deletion is modified as follows:
Instead of creating either legacy style or standard port names, both types of ports are created using:
CTXPRN_CREATE_BOTH_STD_AND_LEGACY_CLNTPRN_PORTSThis setting creates ports only as needed for auto-created printers rather than for every discovered client printer:
CTXPRN_CREATE_PORTS_FOR_AUTOCREATED_CLNTPRNS_ONLY
This setting does not delete ports at logoff. This works around a Windows 2000 Server spooler issue that can trap the spooler service. However, enabling this setting can lead to substantial port and handle accumulations in the spooler service that eventually require the service to be restarted:
CTXPRN_DONT_DELETE_CLNTPRN_PORTS
Default Value: All zero, unless one or more of the bit values is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: None.
Network Printer Connection Flags
CTXPRN_DISABLE_NETWORK_PRINTER_AUTOCONNECT (0x00400000)
CTXPRN_DISABLE_NETWORK_PRINTER_DISCONNECT (0x00800000)
Description: The Presentation Server policies evaluated at logon and reconnect include a special policy rule called “Session Printers” that you can use to add and delete network printer connections on behalf of the user based on various policy criteria. Normally these network printer connections are added during logons and reconnects and then deleted during logoff. These two flags help the administrator disable all printer connection additions and deletions temporarily without having to disable many different policies. Turning off the disconnection of network printers can improve server scalability at the expense of allowing printer connections made by the Session Printers policy rule to accumulate in user profiles.
Default Value: All zero, unless one or more of the bit values is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server Policy rule location: None.
Miscellaneous Printer Flags
CTXPRN_DISABLE_CLIENT_PRINTER_MAPPING (0x00000008)
Description: By default, the SPL virtual channel is initialized and client printer mapping is enabled. If set, this flag disables the SPL virtual channel and disables the client printer mapping functionality of the system.
Default Value: Unless overridden, the Terminal Services default for this setting is used. If the CTXPRN_OVERRIDE_TS_DEFAULTS flag is set in the DefaultPrnFlags value at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\, the Terminal Services defaults are ignored and the default flag value is taken from this REG_DWORD value.
Overriding Presentation Server policy rule location: Printing > Client Printers > Client printer mapping.
CTXPRN_DONT_AUTO_CONNECT_LPTS (0x00000040)
Description: For compatibility reasons, LPT ports discovered on the client are automatically mapped in client sessions. If the remapped LPT port is never used, there is no reason to map it. If this flag is set, LPT ports can still be mapped in a client session, but they are not automatically mapped. Instead, a net use command or the equivalent WNet* application programming interface (API) must be used to establish any mapping just as you would for a redirected COM port.
Default Value: All zero, unless one or more of the bit values is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: None.
CTXPRN_ADMINS_CAN_MANAGE (0x00004000)
Description: To prevent an administrative user from inadvertently printing to a printer in someone else’s Terminal Services session, the default security descriptor used to autocreate client printers no longer includes any rights for the administrator’s group. Only the user executing in the correct session context has rights to the autocreated printers for the session. Administrators can still grant themselves rights to any client printer by taking ownership of the print queue and adding the desired rights.
Default Value: Zero,
unless the bit value is set in the REG_DWORD registry value “DefaultPrnFlags” at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: None.
CTXPRN_DONT_LOG_AUTOCREATE_FAILURE (0x08000000)
Description: By default, printer autocreation failures cause events to be logged in the event viewer’s application log. Even printers created by the Universal Printer Driver result in an event because this is one of the few ways administrators can determine precisely which printer models are in use by the client population. Because this can result in a flood of events in the event viewer, this flag provides the means to avoid generating event log entries for autocreation failures.
Default Value: Zero, unless the bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location None.
CTXPRN_AUTO_CREATE_GENERIC_UPD_PRINTER (0x00000020)
Description: The latest 32-bit Windows clients are capable of receiving and displaying print jobs in a viewer application on the client. For such a client, it is possible to create a single, generic universal printer that is not bound to any of the underlying client printers. This printer is generic in the sense that it does not know about or manage any device-specific settings. As such, it is also more efficient to use because there is no need for capabilities or document settings exchanges with the client when printing. Because creating an additional printer within a session incurs overhead, by default, the creation of the generic Universal Printer Driver printer is turned off.
If this flag is set, the system autocreates the generic “Citrix Universal Printer” in addition to the other printers dictated by other autocreation flags. For users who do not require special printer capabilities, creating only a single, generic, Universal Printer Driver printer within the session instead of one printer for each underlying client printer can provide scalability savings. To see these savings, this flag must be enabled, and default autocreation polices must be overridden or assigned through policies.
Default Value: Zero, unless the bit value is set in the REG_DWORD registry value DefaultPrnFlags at HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Print\
Overriding Presentation Server policy rule location: None.
More Information
CTX107415 – Imported Network Printers Do Not Retain the Default Printer Setting
CTX106812 – How to Create the Citrix Universal Printer
CTX488760 – Event ID 1106, Client Printer Autocreation Failed
--------------------------------------------------------------------------------
User login
Who's new
- maczugaher
- locksgydff
- isotheces
- ahundredyears7
- Jacomijntjefu