Internet Explorer settings Security tab are greyed out


When logging in as a new user my Internet Explorer Security Settings are greyed out, when I perform a reset everything is working perfect. I don’t use any GPO’s the change settings.


1) Login as user with the problem.

2) Reset the internet Explorer setting in the Advanced tab.

3) Export the registry settings of the following key:
     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\

4) Load the ntuser.dat from the default user as “Default” using Load Hive in Regedit.

5) Edit the Exported .reg file and use find and replace
        Replace: HKEY_Users\Default

6) Import the changed settings.

7) Unload the hive for Default.

Now when a new user logs in the Internet Eplorer settings are correct.




View if all servers are using the latest Disk Image MCS


When updating a machine Catalog in XenDesktop with a new Disk Image (MCS) and you reboot the machines you would like to know if all the machines use the latest dick images.

This only works when using Machine Creation Service


Use the following powershell command to see if there are machines using a older version of de image:

Add-PsSnapin Citrix.*
Get-BrokerMachine -ImageOutOfDate 1

Now you see all the machines that have a Out Of Date image. You can check the Machine name to see which machine it is and ImageOUtOfDate if it is True than it needs to update.


When you only need to see the MachineNames then use the following command:

Get-BrokerMachine -ImageOutOfDate 1 | select machineName

After a reboot you can use the following powershell command:

Get-BrokerMachine -MachineName “domain\MachineName” -ImageOutOfDate 1



Failed to connect to data source


I was receiving the following error: Failed to connect to data source ‘The broker service reported an error. See the event log for more information.’  in the event viewer ( Event ID 5) when using Desktop Director, and the latency wasn’t displayed.



It looks like the performance counters are corrupted, I repaired them using the following command lodctr /r.







Reset startcount adding machines



When you delete machines added through XenDesktop and want to add new machines with the same name this isn’t possible.


Use the following command to view the startcount of the current machines:

Add-PsSnapin Citrix.*
Get-AcctIdentityPool > c:\pools.txt

MCS StartCount

When you want to reset the Startcount to 1 (new machines will start with XA01 and so on) the use the following command:

New-AcctADAccount -IdentityPoolName “” -Count 1 -StartCount 1

When you now use: Get-AcctIdentityPool > c:\pools.txt then the StartCount is set to 1.



Network path not found when using Published Application


When opening a file which is located at a Mapped network drive (f:\ which is mapped to \\fileserver\data$\) you receive the error: the network path not found. I used Process Monitor on the server where the published application is located to see the following message: BAD NETWORK PATH  and the path is: \\Client\F$\Rapportages en begrotingen\



Because we don’t allow “Client network drives” the mapped drive isn’t redirected to the new session. Allowing Client network drives solves the problem.