I am a very driven and highly motivated person in the workplace as well as in my private sphere. I continuously strive to become a better system engineer as well as a better father and husband. In all aspects of live I am always looking for new challenges.View the profile
About the talk
This session answers the most common questions heard in the field, from how to configure Profile Management policies to how to support Office 365 users in Cached Exchange Mode. We will be discussing best practices around Profile Management, Windows 10 optimization, Windows Server 2016 optimization, Citrix App Layering, Office 365, Google Chrome, and more. This is a technology packed session full of tips and best practices for the Citrix administrator.Note: This session will be live-streamed during the event and available for on-demand viewing post-event on Citrix Synergy TV.
All right. Let's get started. First of all, welcome everybody to to our session in the next 45 minutes. We will discuss a couple of practices concerning some common components that are used in a year bridge collapse in desktop environment. My name is Dennis. I work for a large insurance company in Vienna in Austria. I've been working with the Citrix technology for more than 15 years, septic Architects and recently a Citrix CPP, which is quite Moana. Thank you. I'm also the author of a block Golden
Spoon. Come. And since I got this question about a hundred times last 3 days, I'm 6 with 8. Hi, I'm David Wilkinson. I work for a company called the whole school based out of Belfast. I've been working with Citrix technology for 15 plus years. I'm also currently CTP in the last 6 months. I also block Caldwell giti.com on Twitter handle won't git technology professional. I run the dog teddy spirits.com on my Twitter handle is at JJ's Pierce into the agenda. Today. We're talkin
about tips and best practices and Technologies. We're going to focus on is Office 365 profile management app layering optimization ceiling Google Chrome and Wham so let's get started. I'm short. So we're going to talk about office365 is in the journey on Office 365 you can raise your hand. Yep, pretty good response, that's good. So you'll enjoy these slides. So there's three main challenges around office365 and deployment deployment with an eccentric spiritual environment Outlook cache the OST file. So the directional online isn't really recommended any
more Microsoft and recommended that fixed it recommended to that. Look A Westie Cash 5 has to exist somewhere within your virtual environment and it pretty much brings back what P St. Kilda spend years ago. So we know I have to fix the same issue that was there ten years ago. OneDrive for business we know that there is one terabyte of available data that we all look so it's a challenge in a virtual environment. Where do you put that one terabyte hard? He got to run. Rd access. It's a crate Alex and then finally 3 so the Outlook starts roaming. So whenever a
user a section in your mailbox in a virtual environment, especially non-persistent, how do they get that search index? Does it room between sessions? Do you have to rebuild it? So those are the three main challenges around office365. They're not the only challenges there's teams and so on there, but we'll cover 3 So choosing the right product. There's many products are therapy actually. So I guess those challenges will cover the Citrix products. So we've got a playing with trees. I got Solutions with an operating Office 365 user layers on Office
365 user there and neuter layers. So if you look at the icons they represent what they actually so so office365 user there Culver's off the Outlook OST cash where the user lad self. Can I see cover off-white logo St. OneDrive for business on the starch index just with a small caveat that it needs to be a persistent all that you desire. We have Centex user profile management. So 7. 18 or above of the nine stock see this time last year and some energy support for Outlook OST on certain dachshund just be careful of the version of Sergeant especially around user profile manager
at least meet with wealthy Civics currently support and then of course there is other products out there as it always has to solve these problems. I began the Journey 3 years ago and office365 an acidic environment on there wasn't as many options as this so, you know today about the Microsoft fslogix office365 containers Avanti workspace Lakewood wire. So there are options out there and understanding the limitations of each. I don't understand what you're actually needs to deliver. Not everybody will want the combination of all three
to be delivered to its really choosing the right product for you. So if we go throw you some tips around Office 365 and Outlook. So honey, get around. OST cash. If you've got a big mailbox or 10 gave me the Box. What where does the OST said? How can you let me hear sorry so we can read just the same. Or the actual are you a cash itself an example here in the screen the right hand side you can say there's three days of being selected. So that's three days worth of mail that stored in your outlook OST who's all the advantages arrived how much nipple storage that you would require versus
story and everything. So I'm not there just as I'm say that the local storage that your it Department have to provide. So the network in the storage and talk to him. So Faith House of showing, you know delivering these container-based Solutions the 300 plus I office or generated for the actual initial creation. So Cancer Centers Friday nights onboarding are on this because 300 is a lot if you have a lot of users and they're all logging in and then created a lot of bottlenecks in the environment and then from a concurrency on TV and office365, you know, there's an average of 5 right eye
out as well as in 08 R8 aiops. So consider your concurrent users and what your storage needs to provide an order for know that she was Poor Man's ensure that the appropriate permission is granted to the actual V hitch be directly. So there's different permissions required all other than user profile management and ordered a lawyer that PhD to create the double check. Your permissions are set properly on again. We recommend always using cash mode on his books recommended by Microsoft on suffix. So search and ex-wife. So before we all had in the key of the
keynote speech experience is key and user is King to be honest. Why do you need to roam the search index because it rebuilds every time if you don't want reel it in which case you'll have a degraded performance when I see searching something it'll take longer and actually it'll create more issues with performance on your bda's. I'm older with those take a step back. So the search service quick temper on Windows 2012 R2 it's not actually enabled by default. So we need to actually and Mabel it by enable it so not fair to Hyundai Santa Fe automatic and make sure that's
running I make sure the new wall are provisioning pills actually going to say but I think so, you'll see the provisioning services will disable the Windows start service, which means you're trash doesn't room. I'm free. Look at the before option. If you don't Rumi on back as soon as the faction starts, you'll see that it begins indexing. I'm not going to take that considerable amount of time depending on how much mailbox do you have? I'm so you're you're searching performance will be degraded when you're looking for an email assoc Anthem Lynn Sandy of the solutions that do you rubbing and
backs you say then whenever you log into the fashion, you can see that everything is actually being charged with it uneven going straight away and they are look on search for your mail without an issue. The OneDrive for business one of the types of is to ensure that your Nable fires going to Mom's. So that's pretty key. It's like the same. And you know, there's one terabyte of data that are funny you were just stopped on a local storage ensure that only. Take box of safe space and download files as you use them as selected. That means anything that you access is is Dar note of
anything. You don't access isn't actually cash which can save a considerable amount of space options with Pfizer share file is a space in the personal Clyde connector in OT OneDrive for business by the product which works on an on demand on demand basis as well. A little bit George never going to take some best practices for profile management. He take a look at the picture at the top of the screen. You can see the impact of a 10-second increase in log on to hear you got one so I can go guns with a 10-second increase results in 2.7
hours of lost productivity the highlights of criticality of time and making sure it was possible some tips to log on as long as possible and exclude from the profile as you can it's more proof. I was going to be the preterite loads you can do that. But I a fool to redirection redirecting as much at the profile as possible and you can exclude update a local something I recommend if you need folders within the update of local to be present. You can create specific conclusions. I'm suffix have some at the fault exclusion list for files and registry keys. So you can enable to
keep them out of the profile as well. Container best Technologies is probably the future of fake profiles management historically are in traditional you if you found this technology such as remove profiles and such a profound management. The Enterprise is moving towards its container best approach because it's easier to manage the container and they generally offer better if y'all gon X as well, so essentially a container B has technology profiles as your profile is stored in a fierce DX disc witches dance store on the network FS. Jake's have been doing this
for many years Microsoft just acquire those guys for help with the Windows Virtual desktop at technology 2/3 a plane. Monitoring your profiles closely a macro file server that has high CP A High rom-com Street and IHOPs is going to cause massive log on X your desktop to be behind to make sure that your pool could be monitoring your profile servers. Start my new tile Express in Windows 10 understand it. I suggest you to an XML file to find the tiles that appear in your start menu. You have the option off the fan in the towels at an administrative. Apple allow
users to the finer open piles, or you can block leaders from the dining room couch. And also if you're using profile management, make sure that the profile management first and you run it supported with the CDA first night you run. So sample, you're looking to upgrade from Windows 10 1803 or higher double check that the profile management first. May you have as compatible as loud as well. Citrix have created a couple policies that helped Drive Dino Kong x t of lose its large file handling and profile containers. They do similar things large file handling is available in stand up
stand desktop 7/16 on the bus and essentially allows you to pick any number of fouls put in this policy here and when users log on to their desktop refers and they file cashing or streaming to the desktop a symbolic blank is Created from the CDA to the profile server. Another feature is the profile containers. It's near its are available in 1903 for sale apps and desktops and above in a sense. That's you need to find a set of folders that you can taste in a container and that will drive time log on times as well. I
finally Logan exclusion check and if we take the scenario where you've deployed cific profile management, I'd be later to you later discover that there's lots of Skype for business log files and every user profile which takes up a lot of space. Traditional you would use Powershell script to remove all those files from the profile store, but you can use what the policy-setting is called Logan exclusion check today, one of two things. You can never keep log files on profile store, but don't synchronize them accustomed to the surface desktop. Or you can actually completely delete the
files. So when a user logs on a next time I have those dark clouds will completely disappear from the profile store and jewelry claim your free space. All right, and the following section we will take a look at some of the year optimizations that are definitely very very interesting in a virtual Epson desktops environment both the image and more as well as a mixed feeling need traditional image creation process basically starts with an operating system. Then of course you have for your Microsoft stack plus other vendors anything from antivirus components or
visual ramp times. Then of course you after you disrespect which may depends a little bit you deploy using PBS or use machine creation Services of the biggest airport Saudi applications, and then of course the optimization of the image and at the end of the ceiling of the image, so optimizations and why the video optimizations we did for better performing desktops lower Logan X Laura Ramsey CPA and increase their densities to more users and desktops for hypervisor host.
Richard Nixon pull to the left of the screen essentially. What I was going to hear is built a server 2016 FDA vanilla until nothing else. I've tested free dog on times. You can see those times range from 67 to 70 seconds then afterwards I have applied my Windows Server 2016 logon script and you can see the dog on straight away drop on average by 30 seconds. That's really highlights the importance of optimizations. So what are what is optimization? It's the act of making an operating system is effective is it can possibly be? We do not fight disabling services
such as to fax service schedule tasks schedule defrag disable. It get rid of some of uwp apps like Xbox app registry tweaks and the furriest number of miscellaneous optimizations like the ceiling system recovery. The number of available methods today for Logan optimizations. The first one is the Citrix Optimizer. I don't know if Martin sudakis hear about credit to be him and his team for this to a script. There's a number of templates available ranging from server 2012 to 2019 on farias Windows 10 optimization templates as well. Michael
percent are dinosaurs created Windows Server 2016 at template on the high today because you can create your own templates for this to make over sensor David create a script from Windows Server 2016 on Windows 10, and I have also created scripts for Windows Server 2012 2016 on Windows 10 Some of these scripts and tools are more aggressive than others, but we have all used a cyber varsales or with customers so they can follow they always methods. Image optimization is very important. But when you're building a race car,
you don't just look at the engine. It's it's all about a holistic view that you want to maintain also in this case when it comes to us to a safe environment. Spock sample starts with with group policies. I think most of us are many of us will be using group policy and guidelines are used to use as few as possible that a question is always what does it mean if you I mean 5 1/15 and nobody will really answer will be able to answer. This question is based K Metal testing. It depends on how much you have
a setting to have within your policies, but try to use as few as possible in your environment. And lost Enterprise environments with Tom Thumb safety issue while you have to placate it settings. Where are the one policy disable something the other one there still unable to steam setting on a different level. If you have a more complex structure try to avoid it because it's just a waste of time anything when it comes to filtering themselves. But also if you use the item item level parking filters, they made completely reduced or
external increase your volume times two, so be careful without physically any query that you do outside of the image is something that affects local time in a negative way. Of course, they're all so different ways said that the last item on the on the screen different ways to deal with you set things you can use it from excited for Christmas Vine with Minotaur and move away from group policy for a houston-based epic. There are two group policies that are definitely a highly recommend. Oh, you really really want to set these group policies these concern the synchronous vs.
Asynchronous Group Policy processing. This is very important for both of these settings are very important, especially when it comes to remote desktop services. So the ones on the left table that means you want that asynchronous processing instead of thankfulness policy with you said to disable the always wait for Network actually depends on the first one being disabled. So that's very important checking your own environment. That's a quick question. Next item scripts who is using
logon scripts or any use for bass with right now in their environment anything running for the use of which is quite a few people know if you're still using you to think about very important whether the best stop the buildup of the desktop is waiting for the local skip to finish that's really makes a big difference when it comes to Logan X. So make sure to configured correctly. And also consider the fact that with operating systems from 2012 and higher and there's a bit of a change where a Logan script
by default as a Fife and manipulate. So you want to reduce this 2-0 in most cases. When it comes to Scripps, there are also some other important things to say. I personally do not think that it's a problem to use scripts scripts can negatively impact performance. But if you do it correctly the Babel mop, first of all, you can use all kinds of Stripes the actual logon scripts or the soul of a Demon Lord on Scripps, when is scheduled you can use one key makers Factory object and sweat invited 5212. Whatever you do first considered do I need the
script or can I have to move it to a different product manager Orthopedic Stuart party software If you do use scripts always try to optimize him as much as possible is also means that it's time to have to respect her existing scripts that you have to take a look at the existing ones. They may contain some functionality for an older version of a pure Citrus product. It may be that they don't use if statements or for sample wear crosses Avenue. NW my check the mixture with you optimize in this type of query using where Clauses
anything negative impact performance. Drive mapping friend of my thing also one of those topics and this can also definitely have a negative effect if possible make them persistence. I also think about the fact that sometimes happens in larger Enterprises that the Expo Drive nothing exists. I mean, it will be the first time that script is running and running back simply because the Sheraton Barrymore has been renamed So the next issue very important always consider antivirus. This may be
overlooked sometimes or maybe only configured for the VA but also operational server requirements to enter virus configurations of Citrix has a relatively new area in the Citrix film acceptance.com website with a pole on Hardcore technical articles. So great for people and the antivirus article beer did that's the most relevant one take a look at that article. That's still the best one you find out there. A little off iPhone which recovered partially in the last section. Whatever is your profile solution or if they can look at as to their did the reference
architecture make sure you you up to my sister the way it should be for that particular solution. I'm also an important parts are we mentioned in the beginning of the section that the thing is you you optimize the image, but that's not the end of the story because most of us create Foster image image of the end has to be before but now you have to do off course a ceiling because otherwise the image is not going to be generic now, that's a very important process. It's impossible for me information ceiling and not to mention the base image
secret framework. This is one of the great Community to see if we have it said that you sitting in the audience right there. So use the opportunity to talk to the developer. definitely It's a really really great too. And it takes care of pretty much everything that you need to take care of when it comes to this evening. So removes Windows updates IDs and IPS event logs take care of Venus and stuff like that. Those are the links. Very nice. Very nice. Cool. Brilliant.
XS I will talk to you on some best practices and tips for a blaring. Vagina lips and machine West Hills do not need upgraded when you upgrade the Atlanta Appliance. If there are new scripts of being released as part of the machine West Hills, and yes, certainly. You can do an upgrade machine with tools. Otherwise, it's not necessary when you publish any damage and drivers are automatically injected into the NHL publishing time. You can use the export and import feature about blaring you could use that to make yourself
secondary appliances such as test environments or back up. If you're running into an update to finalize layers, if he use my script you probably are and there is a bug where they packaging machine will run out of disk space to fix our were off this bug they were crying for now is disabled cashing on the connector to publish is out your packaging machine. Mount Zion interior door.. In multiple layers does not work and you can only get in one layer because they don't merge. If you need to create user base registry case, I suggest using technology such as Group Policy preferences or Citrix
workspace environment management. I do not create any uterus or groups and anywhere other than a OS layer as it's the only there that can write to the Sam database. Some more tips when creating a directory Junction simply fit in with the man name and it will scan all the main controller than your environment. I see customers create a New Balance fresh will servers for this purpose so unnecessary and see the simply fit into the man that are showing in a screenshot. And when grading lmcu snap shots at the rollback feature to make sounds
like a simple tip, but at a customer's actually do you ask this question and citrus hops dad's snapshots of the falls school back method. Elastic, where's the elastic? Where is an application which is packaged into virtual disk and then stored on the network as your logs on. Elastic player desk is mount to the recession and they can access to the application come sometimes around lot is Citrix recommend a 10 gigabit connection from the CDA to the file server. And also let the file server uses smb3 which would be Server 2012 R2 and above.
Make sure. Shows how the available using technology such as Microsoft DFS. Applying for 14 load elastic Claire's after log on this is a new feature not all elastic layers will work with this method sooner is a compatibility mode that you can enable whisper Orlando dollastic wears out during the log on time as it did in previous versions. Interpret and on the elastic set feature if it tells you that I am not an application won't work. Elastically that does not necessarily whole tree. The only way to truly determine is
to carry out your own testing. Office 2016 cannot be used as an elastic layer. And you can reuse application. There's with different OS there's but not comes at your own risk. So for example, if you create an up there with Windows 10 and try and use that on a 2016 OS there it might work. But if it doesn't feel not kids any support from Citrix. Okay, so only Section 5 which is to have some best practices are on Google Chrome Jordy of people don't use Google Chrome rather than I eat for
obvious reasons. So I guess there's there's always been a weird that shift is actually Google Chrome supported an acidic environment the screenshot that showing their kind of quite clear on the subject Friday Marketplace at is a supported product with an acidic environment environment. Hope publishing Chrome previous versions. You have a published with a new Sandbox job under the table GP. I'm lucky enough as a version 58 you don't need to do that anymore and you can actually published to the Chrome within the program files directory itself.
Ever heard that a snap screenshot their this only applies really enough 32-bit Chrome environment on a 64-bit operating system. There's two executables that you can see that I actually need to be excluded in Citrix API and you'll see at the bottom there at the support article from Citrix if he ever have that actual issue. For some reason I've been decided that it's quite a good idea to include executables and the user profile. I'm not quite sure how this happened. But the Chrome has a fool to
call T social reporting tool which is part of the Chrome cleanup tool. This is the first night. They located in the user profile which was an interesting issue for me and in my environments it was an issue environment, but is actually an important where the machine is running. We had a lot of a blue screens and unexpected shutdowns of the virtual machines have no idea what was happening. So I need to be a typical analysis Windows debugging and it ended up that this process was running unexpectedly at certain moments. The best thing is that this tool who is XV oil beer and
profiling beginning if it download automatically in the background, so we had it is not included we should great. Stool using the standard Chrome policies. So if you're using Chrome and I highly recommend to disable these two settings there. Yeah, Chrome of course has extensions least expensive if they do not have to be included in the master image because extensions are installed in the user profile Comenity extensions. You can use group policies the group policies through the Chrome
ones. They are included in the Chrome bundle which include bhosle the installers the bundle includes documentation as well as the 80 mix files you add them to your essential oil flu policy repository and then you can manage Chrome lightly using many many different policies. In order to ask how to install an expansion in the in the use of profile you have to first we'll use a user policy as you see on the left side and other machine policy and what you need in order to go Secrets is on the one hand extension ID and secondly you needs an update URL for any future
update of this of this extension at the bottom. You can see it clear or not. A question is how do you find out? What is the extension ID the easiest way is to Simply install the extension on your test machine or your local machine switch on the developer mode that you see on the top right corner of the Chrome extensions page and there you can see the ID or if it's installed you go to the left. Where are you go to the user profile itself and the extensions folder contains subfolders and the name is the same as the extension ID. Benefit of the second part is the
the update URL what you can see in the bottom picture down. There is included in the Manifest Json file, which again is included in the folder in the extension folder so far the object URL and it's always the same so you can pretty much guess. It's this one was it still always good to to check. Resource consumption powerful bass no honesty if it could have been even wrong like c-plus Plus application to everything. So it's much more than it used to be if you have 10 to 15 Steps open as usual. You will be used in quite some Ram. There's a park manager included within Chrome and
it starts when I can help you to identify which protists are actually your Which Wich pages are using most of your CPU and also the extensions. Maybe you have an extension running. Does it actually using 300 megabytes for example There are some ways to deal with consumption if you have a GPU in your physical machine than a chrome with able to leverage this as you can see their the heart acceleration is the default to enable if you don't have to do for you than one of the options is workspace environment manager and using the
CPU and RAM and management feature. Also very powerful and there's a third option as well and there are certain extensions Alexa leaves to spend at the steps. So the great suspender is one of those is so there are more extensions out there. But that's also a very interesting want to use the only small disadvantaged maybe that you cannot configure the settings using policy. So you can install the expansion with configuring to set things can only be done for the user for the use of side. What an alternate Dimension this is definitely not an important relatively new
feature from Citrix browser country Direction. It was made available with virtual Epson desktop 716-a but it is ultimately been made backwards compatible and I think the only thing I know that's also that sort of backwards compatible with 715 from update number three. And what did I see if the office is pretty cool if they catch the so-called few ports of the browser, which is the actual window where you see the web page and it is leverages the HDX proud that included in the workspace app. So you can follow up on your Windows machine. It includes the DH DHS
browser engine to Overlay the few port and and that's when the client site also very powerful and take a look at it requires work space at 1808 and a 7 16 Seer 3 or 4 Hire very cool feature. First Basin Family Management for when so we got a guy scratching his head cuz that was me at my computer couple weeks ago when I was trying to find an icon. Also, if I say anything, correct incorrect, we have two guys very smart when guys in front they're going to give me a hard time at the bar later. So I'm going to make sure I say everything correctly. He's is when Quite a lot.
So I'm going to talk about three main features of Wham one is all Kong time optimization. Let me take a look at Wham and if I remember right when we see that when a user logs on they have to go through your mother treat off Group Policy appliances Panther mopping log on Scripps Drive mopping and so on and then eventually they'll reach their desktop wallpaper and it's process can take anywhere from 40 to 80 seconds or sometimes longer. In an apartment with William, we essentially have new user could load onto your desktop first and
then they get everything afterwards to look at the printers there drive Maps registry keys and so on. Logitech anywhere from 15 to 25 seconds, and then they took my pills afterwards as a benefit number one. Number to use CP management. There's going to be times where you have a rogue CPA or process rather that consumes a lot of CPA in his word Wham can come in and help where you can see here is a CPU usage limit except 270 with this CPU specs protection on a sample time limit of 30 seconds simply means that the process consumes more
than 70% of my CPU for 30 seconds or longer way. I'm well aware of the power is out process. That's really good for first sharing specialty in short desktop of garments. There's also less intelligent than CPU optimization feature the women can track processes to continuously Traeger list features aspects protection. That means when a process as starts subsequent times the priority if that proves that has the words automatically. And then memory management. Against our desktops Apartments. This could be a fuse
if we have a look at the left hand side of the screen. We can see Internet Explorer which is an idle process and it's consuming 345 mega ramp 50 times up by 100 200 user's you can correctly say that there's going to be a lot of ROM Wasted by idle sessions in your environment. Ever used what's called Leigh memory optimization when can actually take back ROM from a process silently without affecting the application on the right. You can see the Wham has actually taken back almost 50% of round from the idle process.
Slavoj GT campground to active users in your environment for processes that are active stop going over credit go and important feature of when Soap volcano concludes the main contents, so don't forget to tweet about the station with the hashtags that you can see on screen I guess so I'm from us three. Thanks for your attention. Before we go. If you can get your mobile app watch online feedback, that would be great. Has any questions to ask a microphone with a pizza from? even better.
Buy this talk
Access to all the recordings of the event
Buy this video
With ConferenceCast.tv, you get access to our library of the world's best conference talks.