XenApp and XenDesktop

Default policy settings

The following tables list policy settings, their default, and the Virtual Delivery Agent (VDA) versions to which they apply.

ICA

Name Default setting VDA
Client clipboard redirection Allowed All VDA versions
Desktop launches Prohibited VDA for Server OS 7 through current
EDT Off VDA 7.13. See Adaptive Transport.
ICA listener connection timeout 120000 milliseconds VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
ICA listener port number 1494 All VDA versions
Launching of non-published programs during client connection Prohibited VDA for Server OS 7 through current
Client clipboard write allowed formats No formats are specified VDA 7.6 through current
Restrict client clipboard write Prohibited VDA 7.6 through current
Restrict session clipboard write Prohibited VDA 7.6 through current
Session clipboard write allowed formats No formats are specified VDA 7.6 through current

ICA/Adobe Flash Delivery/Flash Redirection

Name Default setting VDA
Flash video fallback prevention Not configured VDA 7.6 FP3 through current
Flash video fallback prevention error *.swf   VDA 7.6 FP3 through current

ICA/Audio

Name Default setting VDA
Audio Plug N Play Allowed VDA for Server OS 7 through current
Audio quality High - high definition audio All VDA versions
Client audio redirection Allowed All VDA versions
Client microphone redirection Allowed All VDA versions

ICA/Auto Client Reconnect

Name Default setting VDA
Auto client reconnect Allowed All VDA versions
Auto client reconnect authentication Do not require authentication All VDA versions
Auto client reconnect logging Do not log auto-reconnect events All VDA versions

ICA/Bandwidth

Name Default setting VDA
Audio redirection bandwidth limit 0 Kbps All VDA versions
Audio redirection bandwidth limit percent 0 All VDA versions
Client USB device redirection bandwidth limit 0 Kbps VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Client USB device redirection bandwidth limit percent 0 VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Clipboard redirection bandwidth limit 0 Kbps All VDA versions
Clipboard redirection bandwidth limit percent 0 All VDA versions
COM port redirection bandwidth limit 0 Kbps All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
COM port redirection bandwidth limit percent 0 All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
File redirection bandwidth limit 0 Kbps All VDA versions
File redirection bandwidth limit percent 0 All VDA versions
HDX MediaStream Multimedia Acceleration bandwidth limit 0 Kbps VDA 5.5, 5.6 FP1, VDA for Server OS 7 and VDA for Desktop OS 7 through current VDA for Server OS and VDA for Desktop OS
HDX MediaStream Multimedia Acceleration bandwidth limit percent 0 VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
LPT port redirection bandwidth limit 0 Kbps All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
LPT port redirection bandwidth limit percent 0 All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
Overall session bandwidth limit 0 Kbps All VDA versions
Printer redirection bandwidth limit 0 Kbps All VDA versions
Printer redirection bandwidth limit percent 0 All VDA versions
TWAIN device redirection bandwidth limit 0 Kbps VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
TWAIN device redirection bandwidth limit percent 0 VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Client Sensors

Name Default setting VDA
Allow applications to use the physical location of the client device Prohibited VDA 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Desktop UI

Name Default setting VDA
Desktop Composition Redirection Disabled (7.6 FP3 through current), Enabled (5.6 through 7.6 FP2) VDA 5.6, VDA for Desktop OS 7 through current
Desktop Composition Redirection graphics quality Medium VDA 5.6, VDA for Desktop OS 7 through current
Desktop wallpaper Allowed All VDA versions
Menu animation Allowed All VDA versions
View window contents while dragging Allowed All VDA versions

ICA/End User Monitoring

Name Default setting VDA
ICA round trip calculation Enabled All VDA versions
ICA round trip calculation interval 15 seconds All VDA versions
ICA round trip calculations for idle connections Disabled All VDA versions

ICA/Enhanced Desktop Experience

Name Default setting VDA
Enhanced Desktop Experience Allowed VDA for Server OS 7 through current

ICA/File Redirection

Name Default setting VDA
Auto connect client drives Allowed All VDA versions
Client drive redirection Allowed All VDA versions
Client fixed drives Allowed All VDA versions
Client floppy drives Allowed All VDA versions
Client network drives Allowed All VDA versions
Client optical drives Allowed All VDA versions
Client removable drives Allowed All VDA versions
Host to client redirection Disabled VDA for Server OS 7 through current
Preserve client drive letters Disabled VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Read-only client drive access Disabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Special folder redirection Allowed Web Interface deployments only; VDA for Server OS 7 through current
Use asynchronous writes Disabled All VDA versions

ICA/Graphics

Name Default setting VDA
Allow visually lossless compression Disabled VDA 7.6 through current
Display memory limit 65536 Kb VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Display mode degrade preference Degrade color depth first All VDA versions
Dynamic windows preview Enabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Image caching Enabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Legacy graphics mode Disabled VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Maximum allowed color depth 32 bits per pixel All VDA versions
Notify user when display mode is degraded Disabled VDA for Server OS 7 through current
Queuing and tossing Enabled All VDA versions
Use video codec for compression Use video codec when preferred VDA 7.6 FP3 through current
Use hardware encoding for video codec Enabled VDA 7.11 through current

ICA/Graphics/Caching

Name Default setting VDA
Persistent cache threshold 3000000 bps VDA for Server OS 7 through current

ICA/Graphics/Framehawk

Name Default setting VDA
Framehawk display channel Disabled VDA 7.6 FP2 through current
Framehawk display channel port range 3224, 3324 VDA 7.6 FP2 through current

ICA/Keep Alive

Name Default setting VDA
ICA keep alive timeout 60 seconds All VDA versions
ICA keep alives Do not send ICA keep alive messages All VDA versions

ICA/Local App Access

Name Default setting VDA
Allow local app access Prohibited VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
URL redirection black list No sites are specified VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
URL redirection white list No sites are specified VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Mobile Experience

Name Default setting VDA
Automatic keyboard display Prohibited VDA 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Launch touch-optimized desktop Allowed VDA 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current. This setting is disabled and not available for Windows 10 and Windows Server 2016 machines.
Remote the combo box Prohibited VDA 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Multimedia

Name Default setting VDA
HTML5 video redirection Prohibited VDA 7.12 through current
Limit video quality Not configured VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Multimedia conferencing Allowed All VDA versions
Optimization for Windows Media multimedia redirection over WAN Allowed VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Use GPU for optimizing Windows Media multimedia redirection over WAN Prohibited VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Windows media fallback prevention Not configured VDA 7.6 FP3 through current
Windows Media client-side content fetching Allowed VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Windows Media Redirection Allowed All VDA versions
Windows Media Redirection buffer size 5 seconds VDA 5, 5.5, 5.6 FP1
Windows Media Redirection buffer size use Disabled VDA 5, 5.5, 5.6 FP1

ICA/Multi-Stream Connections

Name Default setting VDA
Audio over UDP Allowed VDA for Server OS 7 through current
Audio UDP port range 16500, 16509 VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Multi-Port policy Primary port (2598) has High Priority VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Multi-Stream computer setting Disabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Multi-Stream user setting Disabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Port Redirection

Name Default setting VDA
Auto connect client COM ports Disabled All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
Auto connect client LPT ports Disabled All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
Client COM port redirection Prohibited All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry
Client LPT port redirection Prohibited All VDA versions; for VDA 7.0 through 7.8, configure this setting using the registry

ICA/Printing

Name Default setting VDA
Client printer redirection Allowed All VDA versions
Default printer Set default printer to the client’s main printer All VDA versions
Printer assignments User’s current printer is used as the default printer for the session All VDA versions
Printer auto-creation event log preference Log errors and warnings All VDA versions
Session printers No printers are specified All VDA versions
Wait for printers to be created (desktop) Disabled All VDA versions

ICA/Printing/Client Printers

Name Default setting VDA
Auto-create client printers Auto-create all client printers All VDA versions
Auto-create generic universal printer Disabled All VDA versions
Client printer names Standard printer names All VDA versions
Direct connections to print servers Enabled All VDA versions
Printer driver mapping and compatibility No rules are specified All VDA versions
Printer properties retention Held in profile only if not saved on client All VDA versions
Retained and restored client printers Allowed VDA 5, 5,5, 5.6 FP1

ICA/Printing/Drivers

Name Default setting VDA
Automatic installation of in-box printer drivers Enabled All VDA versions
Universal driver preference EMF; XPS; PCL5c; PCL4; PS All VDA versions
Universal print driver usage Use universal printing only if requested driver is unavailable All VDA versions

ICA/Printing/Universal Print Server

Name Default setting VDA
Universal Print Server enable Disabled All VDA versions
Universal Print Server print data stream (CGP) port 7229 All VDA versions
Universal Print Server print stream input bandwidth limit (kpbs) 0 All VDA versions
Universal Print Server web service (HTTP/SOAP) port 8080 All VDA versions
Universal Print Servers for load balancing   VDA versions 7.9 through current
Universal Print Server out-of-service threshold 180 (seconds) VDA versions 7.9 through current

ICA/Printing/Universal Printing

Name Default setting VDA
Universal printing EMF processing mode Spool directly to printer All VDA versions
Universal printing image compression limit Best quality (lossless compression) All VDA versions
Universal printing optimization defaults Image Compression: Desired image quality = Standard quality, Enable heavyweight compression = False. Image and Font Caching: Allow caching of embedded images = True, Allow caching of embedded fonts = True. Allow non-administrators to modify these settings = False. All VDA versions
Universal printing preview preference Do not use print preview for auto-created or generic universal printers All VDA versions
Universal printing print quality limit No limit All VDA versions

ICA/Security

Name Default setting VDA
SecureICA minimum encryption level Basic VDA for Server OS 7 through current

ICA/Server Limits

Name Default setting VDA
Server idle timer interval 0 milliseconds VDA for Server OS 7 through current

ICA/Session Limits

Name Default setting VDA
Disconnected session timer Disabled VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Disconnected session timer interval 1440 minutes VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Session connection timer Disabled VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Session connection timer interval 1440 minutes VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Session idle timer Enabledf VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current
Session idle timer interval 1440 minutes VDA 5, 5.5, 5.6 FP1, VDA for Desktop OS 7 through current

ICA/Session Reliability

Name Default setting VDA
Session reliability connections Allowed All VDA versions
Session reliability port number 2598 All VDA versions
Session reliability timeout 180 seconds All VDA versions

ICA/Time Zone Control

Name Default setting VDA
Estimate local time for legacy clients Enabled VDA for Server OS 7 through current
Use local time of client Use server time zone All VDA versions

ICA/TWAIN Devices

Name Default setting VDA
Client TWAIN device redirection Allowed VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
TWAIN compression level Medium VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/USB Devices

Name Default setting VDA
Client USB device optimization rules Enabled (VDA 7.6 FP3 through current), Disabled (VDA 7.11 through current). By default, no rules are specified. VDA 7.6 FP3 through current
Client USB device redirection Prohibited All VDA versions
Client USB device redirection rules No rules are specified All VDA versions
Client USB Plug and Play device redirection Allowed VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Visual Display

Name Default setting VDA
Preferred color depth for simple graphics 24 bits per pixel VDA 7.6 FP3 through current
Target frame rate 30 fps All VDA versions
Visual quality Medium VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Visual Display/Moving Images

Name Default setting VDA
Minimum image quality Normal VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Moving image compression Enabled VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Progressive compression level None VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Progressive compression threshold value 2147483647 Kbps VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Target minimum frame rate 10 fps VDA 5.5, 5.6 FP1, VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

ICA/Visual Display/Still Images

Name Default setting VDA
Extra color compression Disabled All VDA versions
Extra color compression threshold 8192 Kbps All VDA versions
Heavyweight compression Disabled All VDA versions
Lossy compression level Medium All VDA versions
Lossy compression threshold value 2147483647 Kbps All VDA versions

ICA/WebSockets

Name Default setting VDA
WebSockets connections Prohibited VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
WebSockets port number 8008 VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
WebSockets trusted origin server list The wildcard, *, is used to trust all Receiver for Web URLs VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

Load Management

Name Default setting VDA
Concurrent logon tolerance 2 VDA for Server OS 7 through current
CPU usage Disabled VDA for Server OS 7 through current
CPU usage excluded process priority Below Normal or Low VDA for Server OS 7 through current
Disk usage Disabled VDA for Server OS 7 through current
Maximum number of sessions 250 VDA for Server OS 7 through current
Memory usage Disabled VDA for Server OS 7 through current
Memory usage base load Zero load: 768MB VDA for Server OS 7 through current

Profile Management/Advanced settings

Name Default setting VDA
Disable automatic configuration Disabled All VDA versions
Log off user if a problem is encountered Disabled All VDA versions
Number of retries when accessing locked files 5 All VDA versions
Process Internet cookie files on logoff Disabled All VDA versions

Profile Management/Basic settings

Name Default setting VDA
Active write back Disabled All VDA versions
Enable Profile management Disabled All VDA versions
Excluded groups Disabled. Members of all user groups are processed. All VDA versions
Offline profile support Disabled All VDA versions
Path to user store Windows All VDA versions
Process logons of local administrators Disabled All VDA versions
Processed groups Disabled. Members of all user groups are processed. All VDA versions

Profile Management/Cross-Platform Settings

Name Default setting VDA
Cross-platform settings user groups Disabled. All user groups specified in Processed groups are processed All VDA versions
Enable cross-platform settings Disabled All VDA versions
Path to cross-platform definitions Disabled. No path is specified. All VDA versions
Path to cross-platform settings store Disabled. Windows\PM_CM is used. All VDA versions
Source for creating cross-platform settings Disabled All VDA versions

Profile Management/File System/Exclusions

Name Default setting VDA
Exclusion list - directories Disabled. All folders in the user profile are synchronized. All VDA versions
Exclusion list - files Disabled. All files in the user profile are synchronized. All VDA versions

Profile Management/File System/Synchronization

Name Default setting VDA
Directories to synchronize Disabled. Only non-excluded folders are synchronized. All VDA versions
Files to synchronize Disabled. Only non-excluded files are synchronized. All VDA versions
Folders to mirror Disabled. No folders are mirrored. All VDA versions

Profile Management/Folder Redirection

Name Default setting VDA
Grant administrator access Disabled All VDA versions
Include domain name Disabled All VDA versions

Profile Management/Folder Redirection/AppData(Roaming)

Name Default setting VDA
AppData(Roaming) path Disabled. No location is specified. All VDA versions
Redirection settings for AppData(Roaming) Contents are redirected to the UNC path specified in the AppData(Roaming) path policy settings All VDA versions

Profile Management/Folder Redirection/Contacts

Name Default setting VDA
Contacts path Disabled. No location is specified. All VDA versions
Redirection settings for Contacts Contents are redirected to the UNC path specified in the Contacts path policy settings All VDA versions

Profile Management/Folder Redirection/Desktop

Name Default setting VDA
Desktop path Disabled. No location is specified. All VDA versions
Redirection settings for Desktop Contents are redirected to the UNC path specified in the Desktop path policy settings All VDA versions

Profile Management/Folder Redirection/Documents

Name Default setting VDA
Documents path Disabled. No location is specified. All VDA versions
Redirection settings for Documents Contents are redirected to the UNC path specified in the Documents path policy settings. All VDA versions

Profile Management/Folder Redirection/Downloads

Name Default setting VDA
Downloads path Disabled. No location is specified. All VDA versions
Redirection settings for Downloads Contents are redirected to the UNC path specified in the Downloads path policy settings All VDA versions

Profile Management/Folder Redirection/Favorites

Name Default setting VDA
Favorites path Disabled. No location is specified. All VDA versions
Redirection settings for Favorites Contents are redirected to the UNC path specified in the Favorites path policy settings All VDA versions
Name Default setting VDA
Links path Disabled. No location is specified. All VDA versions
Redirection settings for Links Contents are redirected to the UNC path specified in the Links path policy settings All VDA versions

Profile Management/Folder Redirection/Music

Name Default setting VDA
Music path Disabled. No location is specified. All VDA versions
Redirection settings for Music Contents are redirected to the UNC path specified in the Music path policy settings All VDA versions

Profile Management/Folder Redirection/Pictures

Name Default setting VDA
Pictures path Disabled. No location is specified. All VDA versions
Redirection settings for Pictures Contents are redirected to the UNC path specified in the Pictures path policy settings All VDA versions

Profile Management/Folder Redirection/Saved Games

Name Default setting VDA
Saved Games path Disabled. No location is specified. All VDA versions
Redirection settings for Saved Games Contents are redirected to the UNC path specified in the Saved Games path policy settings All VDA versions

Profile Management/Folder Redirection/Searches

Name Default setting VDA
Searches path Disabled. No location is specified. All VDA versions
Redirection settings for Searches Contents are redirected to the UNC path specified in the Searches path policy settings All VDA versions

Profile Management/Folder Redirection/Start Menu

Name Default setting VDA
Start Menu path Disabled. No location is specified. All VDA versions
Redirection settings for Start Menu Contents are redirected to the UNC path specified in the Start Menu path policy settings All VDA versions

Profile Management/Folder Redirection/Video

Name Default setting VDA
Video path Disabled. No location is specified. All VDA versions
Redirection settings for Video Contents are redirected to the UNC path specified in the Video path policy settings All VDA versions

Profile Management/Log settings

Name Default setting VDA
Active Directory actions Disabled All VDA versions
Common information Disabled All VDA versions
Common warnings Disabled All VDA versions
Enable logging Disabled All VDA versions
File system actions Disabled All VDA versions
File system notifications Disabled All VDA versions
Logoff Disabled All VDA versions
Logon Disabled All VDA versions
Maximum size of the log file 1048576 All VDA versions
Path to log file Disabled. Log files are saved in the default location; %SystemRoot%\System32\Logfiles\UserProfileManager. All VDA versions
Personalized user information Disabled All VDA versions
Policy values at logon and logoff Disabled All VDA versions
Registry actions Disabled All VDA versions
Registry differences at logoff Disabled All VDA versions

Profile Management/Profile handling

Name Default setting VDA
Delay before deleting cached profiles 0 All VDA versions
Delete locally cached profiles on logoff Disabled All VDA versions
Local profile conflict handling Use local profile All VDA versions
Migration of existing profiles Local and roaming All VDA versions
Path to the template profile Disabled. New user profiles are created from the default user profile on the device where a user first logs on. All VDA versions
Template profile overrides local profile Disabled All VDA versions
Template profile overrides roaming profile Disabled All VDA versions
Template profile used as a Citrix mandatory profile for all logons Disabled All VDA versions

Profile Management/Registry

Name Default setting VDA
Exclusion list Disabled. All registry keys in the HKCU hive are processed when a user logs off. All VDA versions
Inclusion list Disabled. All registry keys in the HKCU hive are processed when a user logs off. All VDA versions

Profile Management/Streamed user profiles

Name Default setting VDA
Always cache Disabled All VDA versions
Always cache size 0 Mb All VDA versions
Profile streaming Disabled All VDA versions
Streamed user profile groups Disabled. All user profiles within an OU are processed normally. All VDA versions
Timeout for pending area lock files (days) 1 day All VDA versions

Receiver

Name Default setting VDA
StoreFront accounts list No stores are specified VDA for Server OS 7 through current, VDA for Desktop OS 7 through current

Virtual Delivery Agent

Name Default setting VDA
Controller registration IPv6 netmask No netmask is specified VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Controller registration port 80 All VDA versions
Controller SIDs No SIDs are specified All VDA versions
Controllers No controllers are specified All VDA versions
Enable auto update of controllers Enabled VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Only use IPv6 controller registration Disabled VDA for Server OS 7 through current, VDA for Desktop OS 7 through current
Site GUID No GUID is specified All VDA versions

Virtual Delivery Agent/HDX 3D Pro

Name Default setting VDA
Enable lossless Enabled VDA 5.5, 5.6 FP1
HDX 3D Pro quality settings   VDA 5.5, 5.6 FP1

Virtual Delivery Agent/Monitoring

Name Default setting VDA
Enable process monitoring Disabled VDA 7.11 through current
Enable resource monitoring Enabled VDA 7.11 through current

Virtual IP

Name Default setting VDA
Virtual IP loopback support Disabled VDA 7.6 through current
Virtual IP virtual loopback programs list None VDA 7.6 through current
Default policy settings

In this article