Tags

Last published : Oct 15, 2026

Note:

You can manage your Citrix Virtual Apps and Desktops™ deployment using two management consoles: Web Studio (web-based) and Citrix Studio (Windows-based). This article covers only Web Studio. For information about Citrix Studio, see the equivalent article in Citrix Virtual Apps and Desktops 7 2212 or earlier.

Introduction

Tags are strings that identify items such as machines, applications, desktops, delivery groups, application groups, and policies. After creating a tag and adding it to an item, you can tailor certain operations to apply to only items that have a specified tag.

Tailor search displays in Web Studio.

For example, to display only applications that have been optimized for testers, create a tag named "test" and then add (apply) it to those applications. You can now filter the Web Studio search with the tag "test".
Publish applications from an application group or specific desktops from a delivery group, considering only a subset of the machines in selected delivery groups. This is called a tag restriction.

With tag restrictions, you can use your existing machines for more than one publishing task, saving the costs associated with deploying and managing more machines. A tag restriction can be thought of as subdividing (or partitioning) the machines in a delivery group. Its functionality is similar, but not identical, to worker groups in XenApp releases earlier than 7.x.

Using an application group or desktops with a tag restriction or can be helpful when isolating and troubleshooting a subset of machines in a delivery group.
Schedule periodic restarts for a subset of machines in a delivery group.

Using a tag restriction for machines enables you to use new PowerShell cmdlets to configure multiple restart schedules for subsets of machines in a delivery group. For examples and details, see Manage delivery groups.
Tailor the application (assignment) of Citrix policies to a subset of machines in delivery groups, delivery group types, or OUs that have (or do not have) a specified tag.

For example, if you want to apply a Citrix policy only to the more powerful workstations, add a tag named "high power" to those machines. Then, on the Assign Policy page of the Create Policy wizard, select that tag and the Enable check box. You can also add a tag to a delivery group and then apply a Citrix policy to that group. For details, see Create policies.

You can apply tags to:

Machines
Applications
Machine catalogs (PowerShell only; see Tags on machine catalogs)
Delivery groups
Application groups

You can configure a tag restriction can be configured when creating or editing the following in Web Studio:

A desktop in a shared delivery group
An application group

Important:

A tag can be explicitly applied to a machine or can be explicitly applied at the machine catalog or delivery group level. When a tag is applied at the machine catalog or delivery group level, all machines within that catalog or delivery group implicitly inherit the tag. These inherited tags cannot be removed at the machine level. To remove the tag effect, the tag must be removed from the machine catalog or delivery group level.

Tag restrictions for a desktop or an application group

A tag restriction involves several steps:

Create the tag and then add (apply) it to machines.
Create or edit a group with the tag restriction (in other words, "restrict launches to machines with tag x").

A tag restriction extends the broker's machine selection process. The broker selects a machine from an associated delivery group subject to access policy, configured user lists, zone preference, and launch readiness, plus the tag restriction (if present). For applications, the broker falls back to other delivery groups in priority order, applying the same machine selection rules for each considered delivery group.

Example 1: Simple layout

This example introduces a simple layout that uses tag restrictions to limit which machines are considered for certain desktop and application launches. The site has one shared delivery group, one published desktop, and one application group configured with two applications.

Example using tag restrictions in a simple layout.

Tags have been added to each of the three machines (VDA 101–103).
The desktop in the shared delivery group was created with a tag restriction named "Red". A desktop can be launched only on machines in that delivery group that have the tag "Red": VDA 101 and 102.
The application group was created with the "Orange" tag restriction, so each of its applications (Calculator and Notepad) can be launched only on machines in that delivery group that have the tag "Orange": VDA 102 and 103.

Machine VDA 102 has both tags (Red and Orange), so it can be considered for launching the applications and the desktop.

Example 2: More complex layout

This example contains several application groups that were created with tag restrictions. This results in the ability to deliver more applications with fewer machines than would otherwise be needed if you used only delivery groups.

How to configure example 2 shows the steps used to create and apply the tags, and then configure the tag restrictions in this example.

Example using tag restrictions in a complex layout.

This example uses 10 machines (VDA 101–110), one delivery group (D01), and three application groups (A100, A200, A300). By applying tags to each machine and then specifying tag restrictions when creating each application group:

Accounting users in the group can access the apps they need on five machines (VDA 101–105)
CAD designers in the group can access the apps they need on five machines (VDA 106-110)
Users in the group who need Office applications can access the Office apps on 10 machines (VDA 101–110)

Only 10 machines are used, with only one delivery group. Using delivery groups alone (without application groups) would require twice as many machines, because a machine can belong to only one delivery group.

Manage tags and tag restrictions

Tags are created, added (applied), edited, and deleted from selected items through the Manage Tags action in Web Studio.

(Exception: Tags used for policy assignments are created, edited, and deleted through the Manage Tags action in Web Studio. However, tags are applied (assigned) when you create the policy. See Create policies for details.)

Tag restrictions are configured when you create or edit desktops in delivery groups, and when you create and edit application groups.

Use the Manage Tags dialogs in Web Studio

In Web Studio, select the items you want to apply a tag to (one or more machines, applications, a desktop, a delivery group, or an application group) and then select Manage Tags in the action bar. The dialog box lists all the tags that have been created in the Site, not just for the items you selected.

A check box containing a check mark indicates that the tag has already been added to the selected items. (In the screen capture below, the selected machine has the tag named "Tag1" applied.)
If you selected more than one item, a check box containing a hyphen indicates that some, but not all selected items have that tag added.

The following actions are available from the Manage Tags dialog box. Be sure to review Cautions when working with tags.

To create a tag:

Click Create. Enter a name and description. Tag names must be unique and are not case-sensitive. Then click OK. (Creating a tag does not automatically apply it to any items you have selected. Use the check boxes to apply the tag.)
To add (apply) one or more tags:

Enable the check box next to the tag name. If you selected multiple items and the check box next to a tag contains a hyphen (indicating that some, but not all selected items already have the tag applied), changing it to a check mark affects all selected machines.

If you attempt to add a tag to one or more machines, and that tag is being used as a restriction in an application group, you are warned that the action can result in making those machines available for launch. If that's what you intended, proceed.
To remove one or more tags:

Clear the check box next to the tag name. If you selected multiple items and the check box next to a tag contains a hyphen (indicating that some, but not all selected items already have the tag applied), clearing the check box removes the tag from all selected machines.

If you attempt to remove a tag from a machine that is using that tag as a restriction, you are warned that the action can affect which machines are considered for launch. If that's what you intended, proceed.
To edit a tag:

Select a tag and then click Edit. Enter a new name, description, or both. You can edit only one tag at a time.
To delete one or more tags:

Select the tags and then click Delete. The Delete Tag dialog box indicates how many items currently use the selected tags (for example "2 machines"). Click an item to display more information. For example, clicking a "2 machines" item displays the names of the two machines that have that tag applied. Confirm whether you want to delete the tags.

You cannot use Web Studio to delete a tag that is used as a restriction. First, edit the application group and remove the tag restriction or select a different tag.

When you're done in the Manage Tags dialog box, click Save.

To see if a machine has any tags applied: Select Delivery Groups in the left pane. Select a delivery group in the middle pane and then select View Machines in the action bar. Select a machine in the middle pane and then select the Tags tab on the Details pane.

Manage tag restrictions

Configuring a tag restriction is a multi-step process: You first create the tag and add/apply it to machines. Then, you add the restriction to the application group or the desktop.

Create and apply the tag:

Create the tag and then add (apply) it to the machines affected by the tag restriction, using the Manage Tags actions described earlier.
To add a tag restriction to an application group:

Create or edit the application group. On the Delivery Groups page, select Restrict launches to machines with the tag and then select the tag from the list.
To change or remove the tag restriction on an application group:

Edit the group. On the Delivery Groups page, either select a different tag from the list or remove the tag restriction entirely by clearing Restrict launches to machines with the tag.
To add a tag restriction to a desktop:

Create or edit a delivery group. Click Add or Edit on the Desktops page. In the Add Desktop dialog box, select Restrict launches to machines with the tag and then select the tag from the menu.
To change or remove the tag restriction on a delivery group:

Edit the group. On the Desktops page, click Edit. In the dialog box, either select a different tag from the lists or remove the tag restriction entirely by clearing Restrict launches to machines with the tag.

Cautions when working with tags

A tag applied to an item can be used for different purposes, so keep in mind that adding, removing, and deleting a tag can have unintended effects. You can use a tag to sort machine displays in the Web Studio search field. You can use the same tag as a restriction when configuring an application group or a desktop. The tag limits launch consideration to only machines in specified delivery groups that have that tag.

When you try to add a tag to machines after that tag has been configured as a tag restriction for a desktop or an application group, a warning appears. Adding that tag might make the machines available for launching additional applications or desktops. If that is what you intended, proceed. If not, you can cancel the operation.

For example, let's say you create an application group with the "Red" tag restriction. Later, you add several other machines in the same delivery groups used by that application group. If you then attempt to add the "Red" tag to those machines, Web Studio displays a message similar to: "The tag "Red" is used as a restriction on the following application groups. Adding this tag might make the selected machines available to launch applications in this application group." You can then confirm or cancel adding that tag to those additional machines.

Similarly, if an application group uses a tag to restrict launches, Web Studio warns that you cannot delete the tag until you edit the group to remove it as a restriction. (If you were allowed to delete a tag that's used as a restriction in an application group, that might result in allowing applications to launch on all machines in the delivery groups associated with the application group.) The same prohibition against deleting a tag applies if the tag is being used as a restriction for desktop launches. After you edit the application group or desktops in the delivery group to remove that tag restriction, you can delete the tag.

All machines might not have the same sets of applications. A user can belong to more than one application group, each with a different tag restriction and different or overlapping sets of machines from delivery groups. The following table lists how machine considerations are decided.

When an application has been added to	These machines in the selected delivery groups are considered for launch
One application group with no tag restriction	Any machine.
One application group with tag restriction A	Machines that have tag A applied.
Two application groups, one with tag restriction A and the other with tag restriction B	Machines that have tag A and tag B. If none are available, then machines that have tag A or tag B.
Two application groups, one with tag restriction A and the other with no tag restriction	Machines that have tag A. If none are available, then any machine.

If you used a tag restriction in a machine restart schedule, any changes you make that affect tag applications or restrictions affect the next machine restart cycle. It does not affect any restart cycles that are in progress while the changes are being made.

How to configure example 2

The following sequence shows the steps to create and apply tags, and then configure tag restrictions for the application groups illustrated in the second example.

VDAs and applications have already been installed on the machines and the delivery group has been created.

Create and apply tags to the machines:

In Web Studio, select delivery group D01 and then select View Machines in the action bar.
Select machines VDA 101–105 and then select Manage Tags in the action bar.
In the Manage Tags dialog box, click Create and then create a tag named CADApps. Click OK.
Click Create again and create a tag named OfficeApps. Click OK.
While still in the Manage Tags dialog box, add (apply) the newly created tags to the selected machines by enabling the check boxes next to each tag's name (CADApps and OfficeApps). When you're done, close the dialog box.
Select delivery group D01, select View Machines in the action bar.
Select machines VDA 106–110 and then select Manage Tags in the action bar.
In the Manage Tags dialog box, click Create. Create a tag named AcctgApps. Click OK.
Apply the newly created AcctgApps tag and the OfficeApps tag to the selected machines by clicking the check boxes next to each tag's name, and then close the dialog box.

Create the application groups with tag restrictions.

In Web Studio, select Applications in the left pane, select the Application Groups tab, and then select Create Application Group in the action bar. The Create Application Group wizard launches.
On the Delivery Groups page of the wizard, select delivery group D01. Select Restrict launches to machines with tag and then select the AcctgApps tag from the list.
Complete the wizard, specifying the accounting users and the accounting applications. (When adding the application, choose the From Start menu source, which searches for the application on the machines that have the AcctgApps tag.) On the Summary page, name the group A100.
Repeat the preceding steps to create application group A200, specifying machines that have the CADApps tag, plus the appropriate users and applications.
Repeat steps to create application group A300, specifying machines that have the OfficeApps tag, plus the appropriate users and applications.

Tags on machine catalogs

You can use tags on machine catalogs. The overall sequence of creating a tag and then applying it to a catalog is the same as described previously. However, applying tags to catalogs is supported only through the PowerShell interface. You cannot use Web Studio to apply a tag to a catalog or remove a tag from a catalog. Catalog displays in Web Studio do not indicate if a tag is applied.

Summary: You can use Web Studio or PowerShell to create or delete a tag for use on a catalog. Use PowerShell to apply the tag to the catalog.

Here are some examples of using tags with catalogs:

A delivery group has machines from several catalogs, but you want an operation (such as a restart schedule) to affect only the machines in a specific catalog. Applying a tag to that catalog accomplishes that.
In an application group, you want to limit application sessions to machines in a specific catalog. Applying a tag to that catalog accomplishes that.

Affected PowerShell cmdlets:

You can pass catalog objects to cmdlets such as Add-BrokerTag and Remove-BrokerTag.
Get-BrokerTagUsage shows how many catalogs contain tags.
Get-BrokerCatalog has a property named Tags.

For example, the following cmdlets add a tag named fy2018 to the catalog named acctg: Get-BrokerCatalog -Name acctg | Add-BrokerTag fy2018. (The tag was previously created using either Web Studio or PowerShell.)

See the PowerShell cmdlet help for more guidance and syntax.

Auto tags (Preview)

Auto-tagging allows administrators to set and remove tags on various Citrix Virtual Apps and Desktops objects automatically, based on custom rules. This enhancement eliminates the need to maintain different scripts that run periodically for environment optimization.

Use cases

With auto-tagging, you can implement rules relevant to your business drivers, such as reducing costs, optimizing the infrastructure, and driving consumption. The following are some of the use cases:

Reclaim unused VDIs - To release the dedicated workloads that have not been used for more than a pre-configured number of days to the available pool.
Remove App clutter - To reduce application clutter by identifying the applications that have not been used for more than a pre-configured number of days.
DGs with less than X functional level - To find delivery groups with less than a specific functional level.
Inactive users - To reclaim resources of users who have not logged on for more than a pre-configured number of days.

PowerShell commands

You can create autotags using PowerShell commands. After an autotag rule is created, it is evaluated at a frequency of 600 seconds. For more information, see New-BrokerAutoTagRule.

Examples

New-BrokerAutoTagRule uses the same object type and filter parameters as the Get-BrokerMachine commandlet. For more information, see GetBrokerMachine.

Tag dedicated VDIs that have not been used for more than 30 days with and ID 123:
1. Define a tag to tag the unused VDIs with, say unused-VDI.
  - Tag name : unused-VDI
  - Tag ID : 123
2. Create the auto-tagging rule to tag unused machines. Define the rule parameters:
  - Name : Generic name for the rule.
  - Object type : Machine.
  - Rule text : Static, assigned machines whose last connection time is > 30 days or no value.
  - Tag Uid : The tag id that you want to associate with, 123.
  New-BrokerAutoTagRule -Name ‘UnusedVdi’ -ObjectType ‘Machine’ -RuleText “-AllocationType Static -IsAssigned $true -Filter { SummaryState -ne `”InUse`” -and ( LastConnectionTime -lt ‘-30’ -or LastConnectionTime -eq `$null ) }” -TagUid 123
3. Check machines marked with the tag unused-VDI and release them.
To tag delivery groups with less than X functional level (using L7_20 as the threshold functional level):

New-BrokerAutoTagRule -Name 'LowFL' -ObjectType 'DesktopGroup' -RuleText " -Filter { MinimumFunctionalLevel -lt 'L7_20' } " -TagUid 123

To tag user visible apps published without a folder:

New-BrokerAutoTagRule -Name 'NoFolder' -ObjectType 'Application' -RuleText "-Enabled $true -Filter { ClientFolder -eq $null )} " -TagUid 123

More information

Blog post: How to assign desktops to specific servers.

Citrix Virtual Apps and Desktops

Tags

Follow the instructions below to gain editing access to Citrix GitHub documentation repositories

Introduction