Roberto Alves

Scripting and server based computing

Forcing PN Agent address with Group Policies

On last year, with Presentation Server client version 10.x Citrix finally introduced a template .adm to administration of clients configurations through Windows Group Policies. This icaclient.adm template is very useful to ensure to you that all configurations were applied to all users that you want.

With this .adm you can do somethings like:

  • Configure single Sign-On for Web Interface
  • Set other user authentication configurations
  • Force policies of drive mapping, printers, microphone, clipboard, etc
  • Force graphics settings like SpeedScreen Browser Acceleration and SpeedScreen Latency Reduction
  • Simple client version control

*Remember that some configurations will work only if you configure them correctly at Farm level. The icaclient.adm give to you the option of force the configurations only at client level.

But Citrix forgot to put a policy that I needed: PN Agent address. Then I modified the .adm, including a policy that can be configured at Computer policy or/and User policy to force the Program Neighborhood Agent adress (or XenApp PlugIn address if you prefer).

This policy is useful to ensure that all PN Agent clients are using the correct address, after migrations or at new machines recently installed by a help desk guy that didn’t read the procedures to installation.

You can get my modified icaclient.adm template here. I use this .adm with client version 11 and I didn’t tested with older clients version, but if you have older versions you just need check if Program Neighborhood  Agent stores his address is:




If the address is different, you can replace the address on the icaclient.adm file and add it again to your Group Policy. Or you can add more policies to different client versions. In my case, I prefer force the client version 11, and if someone complain that can’t access using older versions I just say: “If you want access, install the version required.”

The PN Agent Address is not a fully managed policy then, to see the policy, you need enable your console to show policy settings that can’t be fully managed on Filtering options of View menu.

Or if you prefer you can get the original .adm at

There is other Citrix article teaching how to add the .adm template and set Web Interface single Sign-On.

Your email address will not be published. Required fields are marked *