Group Policy Settings

Important:

WEM service currently supports adding and editing only Group Policy settings that are associated with the HKEY_LOCAL_MACHINE and the HKEY_CURRENT_USER registry hives.

In previous releases, you could migrate only Group Policy Preferences (GPP) into Workspace Environment Management (WEM). For more information, see the description of the Migrate wizard in Ribbon. You can now also import Group Policy settings (registry-based settings) into WEM.

After importing the settings, you can have an itemized view of the settings associated with each GPO before you decide which GPO to assign. You can assign the GPO to different users or user groups, just like you assign other actions. You can also assign the GPO to groups containing AD machines. WEM applies machine settings that the GPO contains to machines in the assigned group.

Group Policy settings

Note:

To ensure that Group Policy settings can be processed properly, verify that Citrix WEM User Logon Service is enabled on the WEM agents.

Enable Group Policy Settings Processing. Controls whether to enable WEM to process Group Policy settings. If disabled, you cannot configure Group Policy settings, and WEM does not process Group Policy settings even if they are already assigned to users or user groups. By default, this option is disabled.

Group Policy Object list

Displays a list of your existing GPOs. Use Find to filter the list by name or description.

  • Refresh. Refreshes the GPO list.
  • Import. Opens the Import Group Policy Settings wizard, which lets you import Group Policy settings into WEM.
  • Edit. Lets you edit an existing GPO.
  • Delete. Deletes the GPO you select.

Import Group Policy settings

Before importing Group Policy settings, back up your Group Policy settings on your domain controller:

  1. Open the Group Policy Management Console.

  2. In the Group Policy Management window, right-click the GPO you want to back up and then select Back Up.

  3. In the Back Up Group Policy Object window, specify the location where you want to save the backup. Optionally, you can give the backup a description.

  4. Click Back Up to start the backup and then click OK.

  5. Navigate to the backup folder and then compress it into a zip file.

    Note:

    WEM also supports importing zip files that contain multiple GPO backup folders.

To import your Group Policy settings, complete the following steps:

  1. Use Upload, available in the menu on the WEM service Manage tab, to upload the zip file of your GPOs to the default folder in Citrix Cloud.

  2. Navigate to the Administration Console > Actions > Group Policy Settings tab, select Enable Group Policy Settings Processing, and then click Import to open the import wizard.

  3. On the File to Import page of the import wizard, click Browse and then select the applicable file from the list. You can also type the name of the file and then click Find to locate it.

    • Overwrites GPOs you imported previously. Controls whether to overwrite existing GPOs.
  4. Click Start Import to start the import process.

  5. After the import completes, click Finish. Imported GPOs appear on the Group Policy Settings tab.

Edit Group Policy settings

Double-click a GPO from the list for an itemized view of its settings and to edit the settings if needed.

To clone a GPO, right-click the GPO and select Copy from the menu. The clone is automatically created after you click Copy. The clone inherits the name of the original and has a suffix “-Copy.” You can use Edit to change the name.

The Edit Group Policy Object window appears after you click Edit.

Name. The name of the GPO as it appears in the GPO list.

Description. Lets you specify additional information about the GPO, which appears in the GPO list.

Registry Operations. Displays registry operations that the GPO contains.

Warning:

Editing, adding, and deleting registry-based settings incorrectly can prevent the settings from taking effect in the user environment.

  • Add. Lets you add a registry key.
  • Edit. Lets you edit a registry key.
  • Delete. Lets you delete a registry key.

To add a registry key, click Add on the right-hand side. The following settings become available:

  • Order. Lets you specify the order of deployment for the registry key.

  • Action. Lets you specify the type of action for the registry key.
    • Set value. Lets you set a value for the registry key.
    • Delete value. Lets you delete a value for the registry key.
    • Create key. Lets you create the key as specified by the combination of the root key and the subpath.
    • Delete key. Lets you delete a key under the registry key.
    • Delete all values. Lets you delete all values under the registry key.
  • Root Key. Supported values: HKEY_LOCAL_MACHINE and HKEY_CURRENT_USER.

  • Subpath. The full path of the registry key without the root key. For example, if HKEY_LOCAL_MACHINE\Software\Microsoft\Windows is the full path of the registry key, Software\Microsoft\Windows is the subpath.

  • Value. Lets you specify a name for the registry value. The highlighted item in the following diagram as a whole is a registry value.

    Registry value in the registry editor

  • Type. Lets you specify the data type for the value.
    • REG_SZ. This type is a standard string used to represent human readable text values.
    • REG_EXPAND_SZ. This type is an expandable data string that contains a variable to be replaced when called by an application. For example, for the following value, the string “%SystemRoot%” will be replaced by the actual location of the folder in an operating system.
    • REG_BINARY. This type stores the value as raw binary data.
    • REG_DWORD. This type represents the data by a four-byte number and is commonly used for Boolean values. For example, “0” means disabled and “1” means enabled.
    • REG_DWORD_LITTLE_ENDIAN. A 32-bit number in little-endian format.
    • REG_QWORD. A 64-bit number.
    • REG_QWORD_LITTLE_ENDIAN. A 64-bit number in little-endian format.
    • REG_MULTI_SZ. This type is a multi-string used to represent values that contain lists or multiple values. Each entry is separated by a null character.
  • Data. Lets you type data corresponding to the registry value. For different data types, you might need to type different data in different formats.

Your changes might take some time to take effect. Keep the following in mind:

  • Changes associated with the HKEY_LOCAL_MACHINE registry hive take effect when Citrix WEM Agent Host Service starts or the specified SQL Settings Refresh Delay times out.
  • Changes associated with the HKEY_CURRENT_USER registry hive take effect when users log on.

Group Policy Settings