Users

May 11, 2018

Add users, remove users, and enable/disable access to unauthenticated (anonymous) users

There are two types of users: authenticated and unauthenticated (unauthenticated is also called anonymous). You can configure one or both types.

  • Authenticated - The users and group members you specify by name must present credentials (such as smart card or user name and password) to StoreFront or Citrix Receiver to access applications and desktops.
  • Unauthenticated (anonymous) - For Delivery Groups containing Server OS machines, you can select a check box that will allow users to access applications and desktops without presenting credentials to StoreFront or Citrix Receiver. For example, when users access applications through kiosks, the application might require credentials, but the Citrix access portal and tools do not. An Anonymous Users Group is created when you install the VDA.
    • To grant access to unauthenticated users, each machine in the Delivery Group must have a VDA for Windows Server OS (minimum version 7.6) installed. When unauthenticated users are enabled, you must have an unauthenticated StoreFront store.
    • Unauthenticated user accounts are created on demand when a session is launched, and named AnonXYZ, in which XYZ is a unique three-digit value.
    • Unauthenticated user sessions have a default idle timeout of 10 minutes, and are logged off automatically when the client disconnects. Reconnection, roaming between clients, and Workspace Control are not supported.
  1. Select Delivery Groups in the Studio navigation pane.
  2. Select a Delivery Group, and then select Edit Delivery Group in the Actions pane.
  3. The following table describes your choices.

Enable access for

Add/assign users and user groups?

Enable the “Give access to unauthenticated users” check box?

Only authenticated users

Yes

No

Only unauthenticated users

No

Yes

Both authetnicated and unauthenticated users

Yes

Yes

For Desktop Groups containing Desktop OS machines, you can import user data (a list of users) after you create the Delivery Group. See Import or export user lists below.

Import or export user lists

For Delivery Groups containing physical Desktop OS machines, you can import user information from a .csv file after you create the Delivery Group. You can also export user information to a .csv file. The .csv file can contain data from a previous product version.

The first line in the .csv file must contain comma-separated column headings (in any order), which can include: ADComputerAccount, AssignedUser, VirtualMachine, and HostId. Subsequent lines in the file contain comma-separated data. The ADComputerAccount entries can be common names, IP addresses, distinguished names, or domain and computer name pairs.

To import or export user information:

  1. Select Delivery Groups in the Studio navigation pane.
  2. Select a Delivery Group, and then select Edit Delivery Group in the Actions pane.
  3. On the Machine Allocation page, select the Import list or Export list button, and then browse to the file location.