Product Documentation

Determine which policies apply to a connection

Jun 28, 2013

Sometimes a connection does not respond as expected because multiple policies apply. If a higher priority policy also applies to a connection, it can override the settings you configure in the original policy. You can determine how final policy settings are merged for a connection by calculating the Resultant Set of Policy.

You can calculate the Resultant Set of Policy in the following ways:
  • Use the Citrix Group Policy Modeling Wizard to simulate a connection scenario and discern how Citrix policies might be applied
  • Use Group Policy Results to produce a report describing the Citrix policies in effect for a given user and controller

You can launch the Citrix Group Policy Modeling Wizard from the Action pane in Studio. If your environment includes Active Directory, you can launch both tools from the Group Policy Management Console in Windows.

Model Citrix Group Policy

With the Citrix Group Policy Modeling Wizard, you can specify conditions for a connection scenario such as domain controller, users, Citrix policy assignment evidence values, and simulated environment settings such as slow network connection. The report that the wizard produces lists the Citrix policies that would likely take effect in the scenario.

If you are logged on to the controller as a domain user and your environment includes Active Directory, the wizard calculates the Resultant Set of Policy using both site policy settings and Active Directory Group Policy Objects (GPOs).

Check Group Policy results

The Group Policy Results tool helps you evaluate the current state of GPOs in your environment and generates a report that describes how these objects, including Citrix policies, are currently being applied to a particular user and controller.

Decide which policy modeling tool to use

If you run the Citrix Group Policy Modeling Wizard or Group Policy Results tool from the Group Policy Management Console, site policy settings created using Studio are not included in the Resultant Set of Policy.

To ensure you obtain the most comprehensive Resultant Set of Policy, Citrix recommends launching the Citrix Group Policy Modeling wizard from Studio, unless you create policies using only the Group Policy Management Console.

Troubleshoot policies

Users, IP addresses, and other assigned objects can have multiple policies that apply simultaneously. This can result in conflicts where a policy may not behave as expected. When you run the Citrix Group Policy Modeling Wizard or the Group Policy Results tool, you might discover that no policies are applied to user connections. When this happens, users connecting to their applications and desktops under conditions that match the policy evaluation criteria are not affected by any policy settings. This occurs when:
  • No policies have assignments that match the policy evaluation criteria
  • Policies that match the assignment do not have any settings configured
  • Policies that match the assignment are disabled
If you want to apply policy settings to the connections that meet the specified criteria:
  • Make sure the policies that you want to apply to those connections are enabled
  • Make sure the policies that you want to apply have the appropriate settings configured