Recommended Citrix and Microsoft Hotfixes for XenApp 6 and Windows Server 2008 R2

Recommended Citrix Hotfixes

Hotfix Rollup Pack 1 for Citrix XenApp 6 for Microsoft Windows Server 2008 R2 contains most of the following Hotfixes (exceptions noted inline). For a list of all New Fixes, Enhancements, Replaced Hotfixes, and Fixes from Previously Released Hotfixes included in XenApp 6 Rollup Pack 1 for Windows Server 2008 R2, refer to: Documentation for Hotfix Rollup Pack 1 for Citrix XenApp 6 for Microsoft Windows Server 2008 R2 (CTX130473) (Added 12/1/2011) ^NEW

XA600W2K8R2X64R01 (Included in Rollup Pack 1)

This hotfix rollup pack contains Fix #241756, which addresses security vulnerability. For more information, see Knowledge Center article CTX128169

XA600W2K8R2X64012 (Included in Rollup Pack 1)

This fix addresses security vulnerability. For more information, see Knowledge Center article CTX123359.

XA600W2K8R2X64017 (Included in Rollup Pack 1)

This fix addresses session reliability issues that can occur when using multiple, disparate, client devices to reconnect to the same session.

XA600W2K8R2X64021 (Included in Rollup Pack 1)

This fix addresses security vulnerability. For more information, see Knowledge Center article CTX128169

XA600W2K8R2X64029 (Included in Rollup Pack 1)

Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 0xf4 on IMAAdvanceSrv.exe.
Servers attempt to launch Windows Internet Explorer from an http, https, or mms hyperlink embedded in a streamed application failure. The issue occurs because XenApp 6 does not create the HKEY_CLASSES_ROOT\htmlfile\shell\opennew\command_backup registry key as part of the server file type association.

XA600W2K8R2X64046 (Added 7/16/11, replaces XA600W2K8R2X64018) (Included in Rollup Pack 1)

Servers running XenApp 6 can become unresponsive when shutting down. The issue occurs when the picadm.sys driver encounters certain error conditions that prevent it from shutting down in an orderly fashion. Also, servers might experience a fatal exception, displaying a blue screen on picadm.sys with bugcheck code 0x22 (FILE_SYSTEM).
If a session is disconnected while it is still reading or writing a Client Drive Mapping (CDM) file, the resulting deadlock condition can prevent servers from accepting new session requests.
Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. The issue occurs when the user removes a thumb drive from a client device while connected to a session. Dumps indicate that picadm.sys is referencing invalid, possibly disconnected volumes.
When the ReadOnlyMappedDrive registry key (HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\services\picadm\Parameters) is set to 1, published applications can no longer access and browse mapped client drives.
With folder redirection enabled, servers can experience a fatal exception, displaying a blue screen, on picadm.sys. The issue can be observed when attempting to save a file that was introduced into the session on a USB device attached to and then removed from a thin client device.
Servers with Hotfix XA600W2K8R2X64018 installed can become unresponsive intermittently. The issue occurs when a scheduled reboot is triggered by a Citrix policy while there are active sessions on the server.
Unplugging a USB device from a thin client while a file is being copied to or from the USB device, can cause the following error message to appear: "An error has occurred. The destination you have specified does not exist. It might be an offline network location or an empty CD or DVD drive. Check the location and try again."

XA600W2K8R2X64058 (Added 9/21/2011) ^NEW (Included in Rollup Pack 1)

With Session Reliability enabled, ICA connection attempts fail if the ICA Listener is bound to a single NIC in a multi-homed environment.
The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time the server restarts, the correct policies are in place.

XA600W2K8R2X64060 (Added 8/23/2011, replaces XA600W2K8R2X64002) (Included in Rollup Pack 1)

This fix addresses two installation issues:

§ Hotfixes fail to install on a XA6 server that has not yet had the XenApp Server Role configured.
§ Installing hotfixes or performing a repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component, if present, from the system. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes.

Installing hotfixes or performing a Repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component from the system, if present. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes.

XA600W2K8R2X64062 (Included in Rollup Pack 1)

Servers might experience a fatal exception, displaying a blue screen while shadowing is started.

XA600W2K8R2X64063 (Included in Rollup Pack 1)

This fix addresses security vulnerability. For more information, see Knowledge Center article CTX129430.

XA600W2K8R2X64068 (Added 7/2/11, replaces XA600W2K8R2X64056) (Included in Rollup Pack 1)

Certain applications fail to launch when Administrator Approval Mode is enabled in User Account Control.
This fix addresses the following issues for sessions launched as streamed to server or by a script: 1) The application name can be missing from the session information of the Delivery Services Console Session and not appear under the Applications folder of the Delivery Services Console. 2) Application limits might be ignored. 3) Attempts to reconnect to disconnected sessions might fail.
Certain applications can perform slowly when run in seamless mode
The CPU consumption of the winlogon.exe process can be higher than usual and it might cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted.

XA600W2K8R2X64077 (Added 8/23/2011, replaces XA600W2K8R2X64026) (Included in Rollup Pack 1)

Attempts to log on to a XenApp 6 server using Version 7 or earlier versions of the clients can cause svchost.exe to exit unexpectedly. As a result, further connection attempts to the server fail until it is restarted.
The CPU consumption of the CitrixCseEngine.exe process can spike unexpectedly and cause logon delays.
Attempts to launch a published application that resides on a mapped network drive rather than on a XenApp server failure
When connecting to a server running Windows Server 2008 R2 with Service Pack 1, Terminal Services can exit unexpectedly. This causes users to experience a black screen when logging on and the logon process fails to complete.
A rare race condition that occurs when a shadowee disconnects at roughly the same time a shadower connects can cause servers to experience a fatal exception, displaying a blue screen on RPM.dll.
The shadow logging policies might not log events to the Event viewer properly.
The fix addresses an issue where the IMA Service exits unexpectedly when a network adapter is not bound to an IP address.
Servers might become unresponsive or experience a fatal exception on rpm.dll when an administrator initiates a shadowing session.
Pass-through authentication fails after applying Hotfix XA600W2K8R2X64048.
more...

XA600W2K8R2X64079 (Added 8/17/11, replaces XA600W2K8R2X64010) (Included in Rollup Pack 1)

This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements, required components, and known issues, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.
This enhancement allows printing within a session using ICA Proxy through Branch Repeater.

XA600W2K8R2X64089 (Added 9/21/11) ^NEW (Included in Rollup Pack 1)

During times of heavy logon/logoff activity, sessions can become unresponsive while connecting. The "Starting <application name>" message appears but the connection attempt fails to complete.

For XenApp 6 Fundamentals Edition

XA600W2K8R2X64044 (Included in Rollup Pack 1)

When a server running Access Fundamentals/XenApp 6 Fundamentals Edition is in a workgroup, the Citrix license cannot be retrieved and application launch fails, resulting in the following error message: "License Acquisition failed..."

Other Citrix Hotfixes

XASCTW2K8R2X64003 (Added 8/17/11, replaces XASCTW2K8R2X64001) - (Not Included in Rollup Pack 1)

This hotfix contains an updated version of the XenApp Server Configuration Tool, which is used to configure XenApp 6 for Windows Server 2008 R2 server role installations. The XenApp image can be prepared for imaging and provisioning before, during, or after configuring XenApp.
Version 1.0 of the Server Configuration Tool exits unexpectedly in the XenApp Server Role manager wizard when entering credentials for SQL server if the policy, "Require trusted path for credential entry" is enabled by way of a GPO.
XenApp server configuration fails when using Version 1.1 of the Server Configuration Tool if you chose not to install XenApp Management as part of the XenApp 6 installation. Instead, the following error message appears: "A parameter cannot be found that matches parameter name 'localgpo'.

DSCXAGPMX100WX64001 (Not Included in Rollup Pack 1)

This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements and required components, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.

Recommended Microsoft Hotfixes

Windows Server 2008 R2 SP1 contains most of the following hotfixes (exceptions noted inline). For a list of all Microsoft Hotfixes included in Windows Server 2008 R2 SP1, refer to: Documentation for Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932) and click the download link for “WS08R2 SP1.xls”. Microsoft has published the following KB article specific to Remote Desktop Services: Available Updates for Remote Desktop Services (Terminal Services) in Windows Server 2008 R2

KB979530

A Windows Server 2008 R2-based Remote Desktop server denies some connection requests randomly under heavy logon or logoff conditions.

KB975777

There is a delay when you shut down, restart, or log off on a Windows Server 2008 R2.

KB980663

If a heavy load situation exists or if connectivity issues exist, there is a stop error message in Windows 7 and in Windows Server 2008 R2 as follows:
"STOP: 0x000000B8"

KB2265716

A computer that is running Windows Server 2008 R2 stops responding randomly.

KB2465772

An application or service that uses Winsock API or Winsock Kernel API might randomly stop responding in Windows Server 2008 R2 (Not included in SP1).

KB917607

Installing a 32-bit help System 2008R2 might be required if hosting 32-bit applications (Not included in SP1).

KB2383928

Remote desktop sessions do not exit completely and you cannot establish new remote desktop sessions to a computer that is running Windows Server 2008 R2.

KB983460

Startup takes a long time on a Windows 7 or Windows Server 2008 R2-based computer that has an Intel Nehalem-EX CPU installed.

KB2388142

A computer that is running Windows 7 or Windows Server 2008 R2 intermittently cannot use a shared network printer to print.

KB2444328 (Added 7/16/11)

You cannot access shared files or shared printers in Windows 7 or in Windows Server 2008 R2 (Not included in SP1)

KB2551503 (Added 8/23/11)

A mapped drive that has the non-persistent flag set is displayed as a disconnected drive in Windows 7 or in Windows Server 2008 R2 (Not included in SP1)

KB2578159 (Added 9/21/11)

The logon process stops responding in Windows Server 2008 R2 or in Windows 7 (Not included in SP1)

KB2620656 (Added 10/27/11)

Invalid redirected printers may be available in a Remote Desktop Services session that connects to a RD Session Host server that is running Windows Server 2008 R2 (Not included in SP1)

KB2617858 (Added 12/29/11) ^NEW

Unexpectedly slow startup or logon process in Windows Server 2008 R2 or in Windows 7 (Not included in SP1)