CitrixReceiver.exe /help

The related option, ENABLE_SSON, is enabled when /includeSSON is on the command line. If you use ADDLOCAL= to specify features and you want to install single sign on, you must also specify the value SSON.

To enable pass-through authentication for a user device, you must install Citrix Receiver for Windows with local administrator rights from a command line that has the option /includeSSON. On the user device, you must also enable these policies located in Administrative Templates > Classic Administrative Templates (ADM) > Citrix Components > Citrix Receiver > User authentication:

• Local user name and password
• Enable pass-through authentication
• Allow pass-through authentication for all ICA (might be needed, depending on the Web Interface configuration and security settings)

After the changes are completed, restart the user device. For more information, see the article How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication.

Note: Smart card, Kerberos and Local user name and password policies are inter-dependent. The order of configuration is important. We recommend to first disable unwanted policies, and then enable the policies you require. Carefully validate the result.

If you use this option and specify an Installation directory, you must install RIInstaller.msi in the installation directory\Receiver directory and the other .msi files in the installation directory.

Citrix recommends that you use the ADDLOCAL Sample Usage given below. If the Sample Usage is not used as described, it might possibly cause unexpected behavior.

Components include:

• ReceiverInside – Installs the Citrix Receiver experience (required component for Receiver operation).
• ICA_Client – Installs the standard Citrix Receiver (required component for Receiver operation).
• WebHelper –Installs the WebHelper component. This component retrieves the ICA file from Storefront and passes it to the HDX Engine. In addition, if verifies environment parameters and shares them with Storefront (similar to ICO client detection).
• [Optional] SSON – Installs single sign on. Requires administrator rights.
• AM – Installs the Authentication Manager.
• SELFSERVICE – Installs the Self-Service Plug-in. The AM value must be specified on the command line and .NET 3.5 Service Pack 1 must be installed on the user device. The Self-Service Plug-in is not available for Windows Thin PC devices, which do not support .NET 3.5.
• For information on scripting the Self-Service Plug-in (SSP), and a list of parameters available in Receiver for Windows 4.2 and later, see Knowledge Center article CTX200337
• The Self-Service Plug-in allows users to access virtual desktops and applications from the Receiver window or from a command line, as described later in this section in To launch a virtual desktop or application from a command line.
• USB – Installs USB support. Requires administrator rights.
• DesktopViewer – Installs the Desktop Viewer.
• Flash – Installs HDX media stream for Flash.
• Vd3d – Enables the Windows Aero experience (for operating systems that support it).

• N – Never allow users to add or remove their own store.
• S – Allow users to add or remove secure stores only (configured with HTTPS).
• A – Allow users to add or remove both secure stores (HTTPS) and non-secure stores (HTTP). Not applicable if Citrix Receiver is installed per user.

You can also control this feature by updating the registry key HKLM\Software\[Wow6432Node\]Citrix\Dazzle\AllowAddStore.

Note: Only secure (HTTPS) stores are allowed by default and are recommended for production environments. For test environments, you can use HTTP store connections through the following configuration:

1. Set HKLM\Software\[Wow6432Node\]Citrix\Dazzle\AllowAddStore to A to allow users to add non-secure stores.
2. Set HKLM\Software\[Wow6432Node\]Citrix\Dazzle\AllowSavePwd to A to allow users to save their passwords for non-secure stores.
3. To enable the addition of a store that is configured in StoreFront with a TransportType of HTTP, add to HKLM\Software\[Wow6432Node\]Citrix\AuthManager the value ConnectionSecurityMode (REG_SZ type) and set it to Any.
4. Exit and restart Citrix Receiver.

• N – Never allow users to save their passwords.
• S – Allow users to save passwords for secure stores only (configured with HTTPS).
• A – Allow users to save passwords for both secure stores (HTTPS) and non-secure stores (HTTPS) and non-secure stores (HTTP).

You can also control this feature by updating the registry key HKLM\Software\[Wow6432Node]\Citrix\Dazzle\AllowSavePwd.

Note: The following registry key must be added manually if AllowSavePwd does not work:

• Key for 32bit OS client: HKLM\Software\Citrix\AuthManager
• Key for 64bit OS client: HKLM\Software\wow6432node\Citrix\AuthManager
• Type: REG_SZ
• Value: never – never allow users to save their passwords. secureonly – allow users to save passwords for secure stores only (configured with HTTPS). always – allow users to save passwords for both secure stores (HTTPS) and non-secure stores (HTTP).

You can also control this feature by updating the registry key HKCU or HKLM\Software\[Wow6432Node\]Citrix\AuthManager:CertificateSelectionMode={ Prompt | SmartCardDefault | LatestExpiry }. Values defined in HKCU take precedence over values in HKLM to best assist the user in selecting a certificate.

You can also control this feature through a registry key: Create the entry REG_SZ for StartMenuDir and give it the value “\RelativePath”. Location:

HKLM\Software\[Wow6432Node\]Citrix\Dazzle

HKCU\Software\Citrix\Dazzle

For applications published through XenApp with a Client applications folder (also referred to as a Program Neighborhood folder) specified, you can specify that the client applications folder is to be appended to the shortcuts path as follows: Create the entry REG_SZ for UseCategoryAsStartMenuPath and give it the value “true”. Use the same registry locations as noted above.

Note: Windows 8/8.1 does not allow the creation of nested folders within the Start Menu. Applications will be displayed individually or under the root folder but not within Category sub folders defined with XenApp.

Examples

• If client application folder is \office, UseCategoryAsStartMenuPath is true, and no StartMenuDiris specified, shortcuts are placed under Start > All Programs > Office.
• If Client applications folder is \Office, UseCategoryAsStartMenuPath is true, and StartMenuDir is \Receiver, shortcuts are placed under Start > All Programs > Receiver > Office.

Changes made to these settings have no impact on shortcuts that are already created. To move shortcuts, you must uninstall and re-install the applications.

• x and y – Integers 0 through 9.
• storename – Defaults to store. This must match the name configured on the StoreFront Server.
• servername.domain – The fully qualified domain name of the server hosting the store.
• IISLocation – the path to the store within IIS. The store URL must match the URL in StoreFront provisioning files. The store URLs are of the form “/Citrix/store/discovery”. To obtain the URL, export a provisioning file from StoreFront, open it in notepad and copy the URL from the
  
   element.
• On | Off – The optional Off configuration setting enables you to deliver disabled stores, giving users the choice of whether or not they access them. When the store status is not specified, the default setting is On.
• storedescription – An optional description of the store, such as HR App Store.

Note: In this release, it is important to include “/discovery” in the store URL for successful pass-through authentication.

Note: When using the DESKTOPDIR option, set the PutShortcutsOnDesktop key to True.