May 28, 2016
You can use a diagnostic tool to monitor the changes made by users to both parts of their Personal vDisks (the user data and the application parts). These changes include applications that users have installed and files they have modified. The changes are stored in a set of reports.
- On the machine that you want to monitor, run C:\Program Files\Citrix\personal vDisk\bin\CtxPvdDiag.exe.
- Browse to a location where you want to store the reports and logs, select which reports to generate, and click OK. The following reports are available:
Report or Log Generated Files Changes Monitored Software hive report Software.Dat.Report.txt, Software.Dat.delta.txt
Software.Dat.Report.txt records the changes made by the user to the HKEY_LOCAL_MACHINE\Software hive. It consists of the following sections:
- List of Applications installed on the base — The applications that were installed in Layer 0.
- List of user installed software — the applications that were installed by the user on the application part of the vDisk.
- List of software uninstalled by user — the applications removed by the user that were originally present in Layer 0.
See Hive delta report for information on Software.Dat.delta.txt.
System hive report SYSTEM.CurrentControlSet.DAT.Report.txt This file records the changes made by the user to the HKEY_LOCAL_MACHINE\System hive. It contains the following sections:
- List of user installed services — the services and drivers installed by the user.
- Startup of following services were changed — the services and drivers whose start type was modified by the user.
Security hive report SECURITY.DAT.Report.txt This file monitors all changes that the user makes in the HKEY_LOCAL_MACHINE\Security hive. Security Account Manager(SAM) hive report SAM.DAT.Report.txt This file monitors all changes that the user makes in the HKEY_LOCAL_MACHINE\SAM hive. Hive delta report Software.Dat.delta.txt This file records all registry keys and values added or removed, and all values modified, by the user in the HKEY_LOCAL_MACHINE\Software hive. Personal vDisk logs Pud-IvmSupervisor.log, PvDActivation.log, PvDSvc.log, PvDWMI.log, SysVol-IvmSupervisor.log, vDeskService-<#>.log These files are generated by default in P:\Users\<user account>\AppData\Local\Temp\PVDLOGS but are moved to the selected location. Windows operating system (OS) log EvtLog_App.xml, EvtLog_System.xml, setupapi.app.log, setuperr.log, setupapi.dev.log, msinfo.txt
EvtLog_App.xml and EvtLog_System.xml are the application and system event logs in XML format from the Personal vDisk volume.
Setupapi.app.log and setuperr.log contain log messages from when msiexec.exe was run during Personal vDisk installation.
Setupapi.dev.log contains device installation log messages.
Msinfo.txt contains the output of msinfo32.exe. For information on this output, see your Microsoft documentation.
File system report FileSystemReport.txt This file records changes made by the user to the file system. It consists of the following sections:
- Files Relocated — the files in Layer 0 that were moved by the user to the vDisk. Layer 0 files are those that were inherited from the master image by the machine to which the Personal vDisk is attached.
- Files Removed — the files in Layer 0 that were hidden by a user's action (for example, removing an application).
- Files Added (MOF,INF,SYS) — the files with .mof, .inf, or .sys extensions that the user added to the vDisk (for example, when they installed an application such as Visual Studio 2010 that registers a .mof file for autorecovery).
- Files Added Other — Other files that the user added to the vDisk (for example, when they installed an application).
- Base Files Modified But Not Relocated — the files in Layer 0 that the user modified but that the Personal vDisk Kernel-Mode drivers did not capture in the vDisk.