Group Policy Settings

Important:

WEM service currently supports adding and editing only Group Policy settings that are associated with the HKEY_LOCAL_MACHINE and the HKEY_CURRENT_USER registry hives.

In previous releases, you could migrate only Group Policy Preferences (GPP) into Workspace Environment Management (WEM). For more information, see the description of the Migrate wizard in Ribbon. You can now also import Group Policy settings (registry-based settings) into WEM.

After importing the settings, you can have an itemized view of the settings associated with each GPO before you decide which GPO to assign. You can assign the GPO to different users or user groups, just like you assign other actions. You can also assign the GPO to groups containing AD machines. WEM applies machine settings that the GPO contains to machines in the assigned group.

Group Policy settings

Note:

To ensure that Group Policy settings can be processed properly, verify that Citrix WEM User Logon Service is enabled on the WEM agents.

Enable Group Policy Settings Processing. Controls whether to enable WEM to process Group Policy settings. If disabled, you cannot configure Group Policy settings, and WEM does not process Group Policy settings even if they are already assigned to users or user groups. By default, this option is disabled.

Group Policy Object list

Displays a list of your existing GPOs. Use Find to filter the list by name or description.

  • Refresh. Refreshes the GPO list.
  • Import. Opens the Import Group Policy Settings wizard, which lets you import Group Policy settings into WEM.
  • Edit. Lets you edit an existing GPO.
  • Delete. Deletes the GPO you select.

Import Group Policy settings

Before importing Group Policy settings, back up your Group Policy settings on your domain controller:

  1. Open the Group Policy Management Console.

  2. In the Group Policy Management window, right-click the GPO you want to back up and then select Back Up.

  3. In the Back Up Group Policy Object window, specify the location where you want to save the backup. Optionally, you can give the backup a description.

  4. Click Back Up to start the backup and then click OK.

  5. Navigate to the backup folder and then compress it into a zip file.

    Note:

    WEM also supports importing zip files that contain multiple GPO backup folders.

To import your Group Policy settings, complete the following steps:

  1. Use Upload, available in the menu on the WEM service Manage tab, to upload the zip file of your GPOs to the default folder in Citrix Cloud.

  2. Navigate to the Administration Console > Actions > Group Policy Settings tab, select Enable Group Policy Settings Processing, and then click Import to open the import wizard.

  3. On the File to Import page of the import wizard, click Browse and then select the applicable file from the list. You can also type the name of the file and then click Find to locate it.

    • Overwrites GPOs you imported previously. Controls whether to overwrite existing GPOs.
  4. Click Start Import to start the import process.

  5. After the import completes, click Finish. Imported GPOs appear on the Group Policy Settings tab.

Edit Group Policy settings

Double-click a GPO from the list for an itemized view of its settings and to edit the settings if needed.

To clone a GPO, right-click the GPO and select Copy from the menu. The clone is automatically created after you click Copy. The clone inherits the name of the original and has a suffix “-Copy.” You can use Edit to change the name.

The Edit Group Policy Object window appears after you click Edit.

Name. The name of the GPO as it appears in the GPO list.

Description. Lets you specify additional information about the GPO, which appears in the GPO list.

Registry Operations. Displays registry operations that the GPO contains.

Warning:

Editing, adding, and deleting registry-based settings incorrectly can prevent the settings from taking effect in the user environment.

  • Add. Lets you add a registry setting.
  • Edit. Lets you edit a registry setting.
  • Delete. Lets you delete a registry setting.

Your changes might take some time to take effect. Keep the following in mind:

  • Changes associated with the HKEY_LOCAL_MACHINE registry hive take effect when the specified SQL Settings Refresh Delay times out.
  • Changes associated with the HKEY_CURRENT_USER registry hive take effect when users log on.

Group Policy Settings