Citrix Gateway

Manage Citrix Secure Access agent by using Active Directory

Each release of the Citrix Secure Access agent is packaged as a full product installation, instead of as a patch. When users log on and the Citrix Secure Access agent detects a new version of the plug-in, the plug-in upgrades automatically. You can also deploy the Citrix Secure Access agent to upgrade by using Active Directory.

To do so, create a distribution point for the Citrix Secure Access agent. Create a Group Policy Object and assign the new version of the plug-in to it. Then, create a link between the new package and the existing package. After you create the link, the Citrix Secure Access agent is updated.

Remove the Citrix Secure Access agent from user devices

To remove the Citrix Secure Access agent from user devices, remove the assigned package from the Group Policy Object Editor.

When the plug-in is removed from the user device, users receive a message that the plug-in is uninstalling.

Troubleshoot the Citrix Secure Access agent installation using Active Directory

If the assigned package fails to install when the user device starts, you might see the following warning in the application event log:

Failed to apply changes to software installation settings. Software installation policy application has been delayed until the next logon because an administrator has enabled logon optimization for group policy. The error was: The group policy framework must call the extension in the synchronous foreground policy refresh.

This error is caused by Fast Logon Optimization in Windows XP in which users are allowed to log on before the operating system initialized all the networking components, including Group Policy Object processing. Some policies might require more than one restart to take effect. To resolve this issue, disable Fast Logon Optimization in the Active Directory.

To troubleshoot other installation issues for managed software, Citrix recommends using a group policy to enable Windows Installer Logging.

Manage Citrix Secure Access agent by using Active Directory