Citrix DaaS

Work with policies

Configure Citrix policies to control user access and session environments. Citrix policies are the most efficient method of controlling connection, security, and bandwidth settings. You can create policies for specific groups of users, devices, or connection types. Each policy can contain multiple settings.

Tools for working with Citrix policies

You can use the Web Studio to work with Citrix policies. Policies that are created using Web Studio are stored in the site database, and the updates are pushed to the VDA either of the following happens:

  • When that VDA registers with Controller
  • When a user connects to that VDA

Policy processing order and precedence

Group policy settings are processed in the following order:

  1. Citrix DaaS Site GPO (stored in the Site database)
  2. Domain-level GPOs
  3. Organizational Units

However, if different settings are applied for the same policy in two GPOs, the policy settings processed last overwrite the settings processed earlier. This configuration means that policy settings take precedence in the following order:

  1. Organizational Units
  2. Domain-level GPOs
  3. Citrix DaaS site GPO (stored in the Site database)

When using multiple policies, you can prioritize policies that contain conflicting settings. For more information, see Prioritize, model, compare, and troubleshoot policies.

Workflow for Citrix policies

The process for configuring policies is as follows:

  1. Create the policy.
  2. Configure policy settings.
  3. Assign the policy to machine and user objects.
  4. Prioritize the policy.
  5. Verify the effective policy by running the Citrix Group Policy Modeling wizard.


    You open the Citrix Group Policy Modeling wizard by navigating to the Policies > Modeling tab and then clicking Launch Modeling Wizard in the Actions pane. The Modeling tab is available in Web Studio hosted in Citrix Cloud per customer request.

Policy settings are sorted into categories based on the functionality or feature they affect. For example, the Profile Management section includes policy settings for Profile Management.

  • Computer settings (policy settings applying to machines) define the behavior of virtual desktops and are applied when a virtual desktop starts. These settings apply even when there are no active user sessions on the virtual desktop. User settings define the user experience.
  • User settings are applied when a user connects or reconnects

To access policies, settings, or templates, select Policies in the Web Studio navigation pane.

  • The Policies tab lists all policies. When you select a policy, tabs to the bottom display:
    • Overview - Lists name, priority, enabled/disabled status, and description
    • Settings - Lists all configured settings
    • Assigned To - Lists delivery group. You can edit or remove assigned to settings. Apply policy based on the delivery group membership of the desktop running the session. For more information, see Create policies.
  • The Templates tab lists Citrix-provided and custom templates that you created. When you select a template, tabs to the bottom display:


    The Modeling tab is available in preview for certain customers.

    To search for a setting in a policy or template:

    1. Select the policy or template.
    2. Select Edit policy or Edit Template tab.
    3. On the Select Settings page, begin to type the name of the setting.

    You can refine your search by selecting:

    • A category (for example, Bandwidth)
    • The View selected only check box
    • To search only the settings that have been added to the selected policy.
  • To search for a setting within a policy:

    1. Select the policy.
    2. Select the Settings tab and type the name of the setting.

A policy, once created, is independent of the template used. You can use the Description field on a new policy to track the source template used.

Work with policies