I've installed an application on a newly installed Citrix PS 4.0. This application is TS aware and has already successfully been installed and executed on another Citrix farm. The Citrix PS is installed on a Windows Server 2003 SE w/ SP2.
The newly installed application now won't start within an ICA or RDP session. For debugging purposes I allowed logging on to the Console using ICA and/or RDP. The user account has limited rights on the server. GPO settings are in place. During further testing I deactivated GPO settings for the user account and added it to the local Administrators group. But the application still won't work. Task Manager shows the executable for a split second and then it disappears. Apparently this is not an user rights issue.
Upon further looking into this issue I found out that the executable can only be run while being at the Console level using RDP (RDP session ID 0) initiated by mstsc /console. Then the application will start and work as expected. Connections other than session 0 won't work. Connecting via ICA directly to the published desktop doesn't work either.
Is there a difference in session behaviour in terms of session 0 and subsequent, non-console sessions? Does it make any difference what kind of protocol is being used while connecting to the Citrix server?
Any help would be greatly appreciated.Alex
deactivating DEP (Data Execution Prevention) and a subsequent reboot solved it. Thank you very much.
My understanding of the console session is that it’s analogous to being at the keyboard of the server itself and therefore has special properties. Normal TS sessions are not real desktop sessions and also cannot interact fully; they are virtual desktop sessions.
We have only one app that needs to run at console level and fortunately doesn’t require to be run on Citrix.
But what I don’t understand is that it runs OK on another Citrix system? Maybe it’s worth running as an isolated environment to test?
Have you tried adding the app as a DEP exception or disabling DEP temporarily?
President (MCSE, CCNA, VCP, CCA)
VCIT Consulting - Citrix/Terminal Services Remote Desktop Solutions for SMB
VCIT website My Blog
Dear Alan,I'll give it a try. DEP is still running and will be deactivated ASAP. I'll keep you posted.ThanksAlex
You're welcome. Note that you can also enable DEP for system processes only and you can also enable it for everything, then exclude problem executables. DEP in Windows Server 2003 is sort of half baked anyways as it doesn't implement ASLR...