The IT Stories

The Good, the Bad and the Ugly

  • Notes from the lab: NetScaler Secure Web Gateway

    Finally had some time to implement the NetScaler Secure Web Gateway in my lab. I’ve put together a small document with my findings attached here: NFTL_TF_NSWG comments or questions please let me know. Cheers.

  • Notes from the lab: Exchange Server 2016 CU6 broken by default??

    I came across the most peculiar issue I’ve seen so far with Exchange 2016. Installed a greenfield setup and the ECP/OWA page was broken by default with the following entry in event viewer: ——————————————————————————————————————————————————– Event code: 3005 Event message: An unhandled exception has occurred. Event time: 9-9-2017 22:26:57 Event time (UTC): 9-9-2017 20:26:57 Event ID:…

  • Notes from the lab: Windows Server 2016 black screen when launching any application

    I came across an issue in my lab environment where the screen will go black while launching a session on Windows Server 2016. This is with XenApp/XenDesktop 7.15 LTSR The following registry entry: DisableLogonUISuppression (D WORD Value 0) did not resolve the issue as stated in the following articles: https://support.microsoft.com/en-us/help/4034661/windows-10-update-kb4034661 and https://support.citrix.com/article/CTX225819 Ultimatly after some…

  • Notes from the lab: Windows Server 2016 and MDT gen2 secure boot

    For some upcoming projects and also lab use cases I’ve decided to brush up on some MDT/Automation tasks. For this I’ve deployed a new Windows Server 2016 Hyper-V VirtualMachine Gen2 with secure boot enabled and installed MDT server and configured it to an up and running environment(yeah.. right). At first I thought there were some…

  • Notes from the field: XenMobile Certificate Based Authentication lessons learned

    Throughout the XenMobile deployments with Certificate Based Authentication(CBA) I came across some items which I thought was worth mentioning. 1. CBA up until Secure Mail 10.6.20 / Secure Hub 10.6.20 was requesting new certificates on SSL exceptions, in effect the exceptions were triggered on every SSL connection error that occurred and thus requesting a new…

  • Notes from the field: Be Proactive! Apple ATS is coming

    For those who are not aware Apple has an upcoming change regarding App Transport Security (ATS) https://developer.apple.com/news/?id=12212016b The date it should be in effect was originally January 2017… but was pushed back for migration purposes, and the new date is yet a mystery. It will have impact! Be proactive and check your XenMobile / NetScaler…

  • Notes from the field: NetScaler SDX LACP Flapping issue

    I came across a peculiar issue regarding a new NetScaler SDX 14020 setup in combination with a Cisco Nexus C9372-PX-E and C9336PQ infrastructure, a new buildup of the SDX/VPX with multiple HA instances spinning and a working environment. LA sets configured for HA probes and everything nice and easy separated through vlan access. Long story…

  • Notes from the field: XenMobile Location services and SQL deadlocks

    Came across a pretty specific issue in a large mobility environment regarding an old value from XenMobile 9 and still present in XenMobile 10, this is called device triangulation, with this the mobile service provider can triangulate the exact location from the device with constant updates regarding there location (this was an old value which…

  • Notes from the field: Provisioning Services 7.11/7.12 TLS 1.2 issue

    Citrix Provisioning Servers can be showing a offline status because the SQL native client version (11.0.2100.60) installed with it will not support TLS 1.2 and due to this it will give an error in event viewer with event ID 11 – Undefined database error Installing the latest version of SQL native client on the PVS…

  • Notes from the field: Quick win: XenMobile remove bulk redeemed enrollments

    When you are using enrollment invitations and you don’t clean this up for let’s say an environment with a few thousand of users/devices this could be a time absorbing action to do. Luckily there is a quick win for this and you’ll want to create a query for “dbo.ENROLLMENT_PASS” on the Database server and remove…

Archives