Citrix DaaS

Work with policies

Configure Citrix policies to control user access and session environments. Citrix policies are the most efficient method of controlling connection, security, and bandwidth settings. You can create policies for specific groups of users, devices, or connection types. Each policy can contain multiple settings.

Tools for working with Citrix policies

  • Studio - Policies that are created using Studio are stored in the site database, and the updates are pushed to the VDA either of the following happens:

    • When that VDA registers with Controller
    • When a user launches a session
  • Group Policy Management Console -If your network environment uses Active Directory and you have permission to manage group policy, you can use the Group Policy Management Console (GPMC) to create and edit policies for your Site. In the console, you can configure Group Policy Objects (GPOs) with your desired settings and filters. These policies will take priority over policies configured in Studio. For more information, see CTX238166.

Policy processing order and precedence

Group policy settings are processed in the following order:

  1. Citrix DaaS Site GPO (stored in the Site database)
  2. Domain-level GPOs
  3. Organizational Units

However, if different settings are applied for the same policy in two GPOs, the policy settings processed last overwrite the settings processed earlier. This configuration means that policy settings take precedence in the following order:

  1. Organizational Units
  2. Domain-level GPOs
  3. Citrix DaaS site GPO (stored in the Site database)

When using multiple policies, you can prioritize policies that contain conflicting settings. For more information, see Prioritize, model, compare, and troubleshoot policies.

Workflow for Citrix policies

The process for configuring policies is as follows:

  1. Create the policy.
  2. Configure policy settings.
  3. Assign the policy to machine and user objects.
  4. Prioritize the policy.
  5. Verify the effective policy by running the Citrix Group Policy Modeling wizard.

    Note:

    You open the Citrix Group Policy Modeling wizard by navigating to the Policies > Modeling tab and then clicking Launch Modeling Wizard in the Actions pane. The Modeling tab is available in Web Studio hosted in Citrix Cloud per customer request.

Policy settings are sorted into categories based on the functionality or feature they affect. For example, the Profile Management section includes policy settings for Profile Management.

  • Computer settings (policy settings applying to machines) define the behavior of virtual desktops and are applied when a virtual desktop starts. These settings apply even when there are no active user sessions on the virtual desktop.
  • User settings define the user experience. User settings are applied when a user connects or reconnects

To access policies, settings, or templates, select Policies in the Web Studio navigation pane.

  • The Policies tab lists all policies. When you select a policy, tabs to the bottom display:
    • Overview - Lists name, priority, enabled/disabled status, and description
    • Settings - Lists all configured settings
    • Assigned To - Lists delivery group. You can edit or remove assigned to settings. Apply policy based on the delivery group membership of the desktop running the session. For more information, see Create policies.
  • The Templates tab lists Citrix-provided and custom templates that you created. When you select a template, tabs to the bottom display:

    To search for a setting in a policy or template:

    1. Select the policy or template.
    2. Select Edit policy or Edit Template tab.
    3. On the Select Settings page, begin to type the name of the setting.

    You can refine your search by selecting:

    • A category (for example, Bandwidth)
    • The View selected only check box
    • To search only the settings that have been added to the selected policy.
  • To search for a setting within a policy:

    1. Select the policy.
    2. Select the Settings tab and type the name of the setting.

A policy, once created, is independent of the template used. You can use the Description field on a new policy to track the source template used.

Work with policies