Product Documentation

Deploy and configure

Mar 19, 2015

Director is installed by default as a website on the Delivery Controller. For prerequisites and other details, see the System Requirements for this release.

To upgrade Director or VDAs, see Upgrade XenDesktop 5 to XenDesktop 7.

This release of Director is not compatible with XenApp deployments or XenDesktop deployments earlier than 7. The Director monitoring console can monitor and manage only XenDesktop 7 Sites.

When Director is used in an environment containing more than one XenDesktop 7 Site, be sure to synchronize the system clocks on all the servers where Controllers, Director, and other core XenDesktop components are installed. Otherwise, the Sites might not display correctly in Director.

Tip: If you intend to monitor XenApp 6.5 and XenDesktop 7 Sites, Citrix recommends installing Director 7 on a separate server from the Director console that is used to monitor XenApp 6.5 sites. For more information, see Important information for XenApp administrators.
Important: To protect the security of user names and passwords sent using plain text through the network, Citrix strongly recommends that you allow Director connections using only HTTPS, and not HTTP. Certain tools are able to read plain text user names and passwords in HTTP (unencrypted) network packets, which creates a security risk for users.

To configure permissions

To log on to Director, administrators with permissions for Director must be Active Directory domain users and must have the following rights:

  • Read rights in all Active Directory forests to be searched (see Advanced configuration).
  • Configured Delegated Administrator roles (see Delegated Administration and Director).
  • To shadow users, administrators must be configured using a Microsoft group policy for Windows Remote Assistance. In addition:
    • When installing VDAs, ensure the Windows Remote Assistance feature is enabled on all user devices (selected by default).
    • When you install Director on a server, ensure that Windows Remote Assistance is installed (selected by default). However, it is disabled on the server by default. The feature does not need to be enabled for Director to provide assistance to end users. Citrix recommends leaving the feature disabled to improve security on the server.
    • To enable administrators to initiate Windows Remote Assistance, grant them the required permissions by using the appropriate Microsoft Group Policy settings for Remote Assistance. For information, see CTX127388: How to Enable Remote Assistance for Desktop Director.
  • For user devices with VDAs earlier than 7, additional configuration is required. See Configure permissions for VDAs earlier than 7.

To install Director

Install Director using the XenDesktop installer, which checks for prerequisites, installs any missing components, sets up the Director website, and performs basic configuration. The default configuration provided by the installer handles typical deployments. If Director was not included during installation, use the installer to add Director. To add any additional components, rerun the installer and select the components to install. Citrix recommends that you install using the installer only, not the .MSI file.

When Director is installed on the Controller, it is automatically configured with localhost as the server address, and Director communicates with the local controller by default.

To install Director on a dedicated server that is remote from a Controller, you are prompted to enter the FQDN or IP address of a Controller. Director communicates with that specified Controller by default. Specify only one Controller address for each Site that you will monitor. Director automatically discovers all other Controllers in the same Site and falls back to those other Controllers if the Controller you specified fails.

Note: Director does not load balance between Controllers.

To secure the communications between the browser and the Web server, Citrix recommends that you implement SSL on the IIS website hosting Director. Refer to the Microsoft IIS documentation for instructions. Director configuration is not required to enable SSL.

To log on to Director

The Director website is located at https or http://<Server_FQDN>/Director.

If one of the Sites in a multisite deployment is down, the logon for Director takes a little longer while it attempts to connect to the Site that is down.