Add users, remove users, and enable/disable access to unauthenticated (anonymous) users
There are two types of users: authenticated and unauthenticated (unauthenticated is also called anonymous). You can configure one or both types.
- Authenticated - The users and group members you specify by name must present credentials (such as smart card or user name and password) to StoreFront or Citrix Receiver to access applications and desktops.
- Unauthenticated (anonymous) - For Delivery Groups containing Server OS machines, you can select a check box that will allow users to access applications and desktops without presenting credentials to StoreFront or Citrix Receiver. For example, when users access applications through kiosks, the application might require credentials, but the Citrix access portal and tools do not. An Anonymous Users Group is created when you install the VDA.
- To grant access to unauthenticated users, each machine in the Delivery Group must have a VDA for Windows Server OS (minimum version 7.6) installed. When unauthenticated users are enabled, you must have an unauthenticated StoreFront store.
- Unauthenticated user accounts are created on demand when a session is launched, and named AnonXYZ, in which XYZ is a unique three-digit value.
- Unauthenticated user sessions have a default idle timeout of 10 minutes, and are logged off automatically when the client disconnects. Reconnection, roaming between clients, and Workspace Control are not supported.
- Select Delivery Groups in the Studio navigation pane.
- Select a Delivery Group, and then select Edit Delivery Group in the Actions pane.
- The following table describes your choices.
|Enable access for
||Add/assign users and user groups?
||Enable the "Give access to unauthenticated users" check box?
|Only authenticated users
|Only unauthenticated users
|Both authenticated and unauthenticated users
For Desktop Groups containing Desktop OS machines, you can import user data (a list of users) after you create the Delivery Group. See Import or export user lists below.
export user lists
Groups containing physical Desktop OS machines, you can import user information
from a .csv file after you create the Delivery Group. You can also export user
information to a .csv file. The .csv file can contain data from a previous
The first line in
the .csv file must contain comma-separated column headings (in any order),
which can include: ADComputerAccount, AssignedUser, VirtualMachine, and HostId.
Subsequent lines in the file contain comma-separated data. The
ADComputerAccount entries can be common names, IP addresses, distinguished
names, or domain and computer name pairs.
To import or
export user information:
Delivery Groups in the Studio navigation pane.
- Select a
Delivery Group, and then select
Delivery Group in the Actions pane.
- On the
Allocation page, select the
list button, and then browse to the file location.