Deploying the NetScaler Gateway plug-in from Active Directory

If users do not have administrative privileges to install the NetScaler Gateway plug-in on the user device, you can deploy the plug-in for users from Active Directory.

When you use this method to deploy the NetScaler Gateway plug-in, you can extract the installation program and then use a group policy to deploy the program. The general steps for this type of deployment are:

  • Extracting the MSI package.
  • Distributing the plug-in by using a group policy.
  • Creating a distribution point.
  • Assigning the NetScaler Gateway plug-in package by using a Group Policy Object.

    Note: Distribution of the NetScaler Gateway plug-in from Active Directory is only supported on Windows XP, Windows Vista, Windows 7, and Windows 8.

You can download the MSI package from the configuration utility or from the Citrix website.

To download the NetScaler Gateway plug-in MSI package from the configuration utility

  1. In the configuration utility, click Downloads.

  2. Under NetScaler Gateway plug-in, click Download NetScaler Gateway plug-in for Windows and then save the file nsvpnc_setup.exe to your Windows server.


    • For 64-bit machines, you must save the file Agee_setup.exe to your Windows server.

    • If the File Download dialog box does not appear, press the CTRL key when you click the link Download NetScaler Gateway plug-in for Windows.

  3. At a command prompt, navigate to the folder where you saved nsvpnc_setup.exe to and then type:

    nsvpnc_setup /c

    This extracts the file agee.msi.

    Note: For 64-bit machines, navigate to the folder where you saved Agee_setup.exe to and then type:

    Agee_setup.exe /c

    This extracts the file agee64.msi.

  4. Save the extracted file to a folder on the Windows server.

After you extract the file, you use a group policy on Windows Server to distribute the file.

Before starting the distribution, install the Group Policy Management Console on Windows Server 2003, Windows Server 2008, or Windows Server 2012. For more information, see the Windows online help.

Note: When you use a group policy to publish the NetScaler Gateway plug-in, Citrix recommends assigning the package to the user device. The MSI package is installed on a per-device basis.

Before you can distribute the software, create a distribution point on a network share on a publishing server, such as Microsoft Internet Security and Acceleration (ISA) Server.

To create a distribution point

  1. Log on to the publishing server as an administrator.
  2. Create a folder and share it on the network with read permission for all accounts that need access to the distribution package.
  3. At the command prompt, navigate to the folder where you save the extracted file and then type: msiexec -a agee.msi
  4. On the Network Location screen, click Change and then navigate to the shared folder where you want to create the administrative installation of the NetScaler Gateway plug-in.
  5. Click OK and then click Install.

After you have added the extracted package on the network share, assign the package to a Group Policy Object in Windows.

After you configure the NetScaler Gateway plug-in successfully as a managed software package, the plug-in is installed automatically the next time the user device starts.

Note: When the installation package is assigned to a computer, the user must restart the computer.

When the installation starts, users receive a message that the NetScaler Gateway plug-in is installing.