XenApp 6与Windows Server 2008 R2推荐安装的更新

以下内容基于Citrix Technicial Support的经验，由Citrix官方建议应该安装的Citrix XenApp 6的一些hotfix以及Windows Server 2008 R2需要安装的一些更新，这些补丁和更新解决了XenApp 6在windows 2008 R2上使用的一些常见问题，比如windows 2008 R2 SP1上使用的一些问题等等，所以推荐安装。

但是仍然希望Citrix能够出Rollup Pack解决逐个安装的效率问题，逐个安装时间实在是有点长，而且麻烦。

另外更新也解决了一些已知的安全问题，详细列表如下：

Summary

Based on Citrix Technical Support experience and customer feedback, the following Citrix and Microsoft hotfixes are found to resolve the most common issues with XenApp 6 running on a Windows Server 2008 R2 server. These hotfixes focus on basic functionality and stability. For a complete list of Citrix hotfixes for XenApp 6, click here.

Note: Refer to individual readme files for each of the following hotfixes to review complete details of issues addressed. Details listed below only mention the most common issues known to be resolved with each hotfix. Also, see CTX126711 for our support statement and a list of known issues with Windows 2008 R2, SP1.

Recommended Citrix Hotfixes

XA600W2K8R2X64012

• This fix addresses security vulnerability. For more information, see CTX123359.

XA600W2K8R2X64017

• This fix addresses session reliability issues that can occur when using multiple, disparate, client devices to reconnect to the same session.

XA600W2K8R2X64021

• This fix addresses a security vulnerability. For more information, see CTX128169

XA600W2K8R2X64029

• Servers might experience a fatal exception, displaying a blue screen, with bugcheck code 0xf4 on IMAAdvanceSrv.exe.
• Servers attempt to launch Windows Internet Explorer from an http, https, or mms hyperlink embedded in a streamed application failure. The issue occurs because XenApp 6 does not create the HKEY_CLASSES_ROOT\htmlfile\shell\opennew\command_backup registry key as part of the server file type association.

XA600W2K8R2X64046 (Added 7/16/11, replaces XA600W2K8R2X64018)

• Servers running XenApp 6 can become unresponsive when shutting down. The issue occurs when the picadm.sys driver encounters certain error conditions that prevent it from shutting down in an orderly fashion. Also, servers might experience a fatal exception, displaying a blue screen on picadm.sys with bugcheck code 0x22 (FILE_SYSTEM).
• If a session is disconnected while it is still reading or writing a Client Drive Mapping (CDM) file, the resulting deadlock condition can prevent servers from accepting new session requests.
• Servers might experience a fatal exception, displaying a blue screen, on picadm.sys. The issue occurs when the user removes a thumb drive from a client device while connected to a session. Dumps indicate that picadm.sys is referencing invalid, possibly disconnected volumes.
• When the ReadOnlyMappedDrive registry key (HKEY_LOCAL_MACHINE\SYSTEM\Current Control Set\services\picadm\Parameters) is set to 1, published applications can no longer access and browse mapped client drives.
• With folder redirection enabled, servers can experience a fatal exception, displaying a blue screen, on picadm.sys. The issue can be observed when attempting to save a file that was introduced into the session on a USB device attached to and then removed from a thin client device.
• Servers with Hotfix XA600W2K8R2X64018 installed can become unresponsive intermittently. The issue occurs when a scheduled reboot is triggered by a Citrix policy while there are active sessions on the server.
• Unplugging a USB device from a thin client while a file is being copied to or from the USB device, can cause the following error message to appear: "An error has occurred. The destination you have specified does not exist. It might be an offline network location or an empty CD or DVD drive. Check the location and try again."

XA600W2K8R2X64058 (Added 9/21/2011) ^NEW

• With Session Reliability enabled, ICA connection attempts fail if the ICA Listener is bound to a single NIC in a multi-homed environment.
• The Citrix SSL Relay Configuration tool can fail to correctly create the outbound connection policies defined in its Connection tab. After applying this fix on affected deployments, the policies are modified to disallow all outgoing connections. As a result, SSL connections can stop working. In order to recreate the correct policies and allow SSL connections to work again, you must rerun the Citrix SSL Relay Configuration tool, verify the policies in its Connection tab and click Apply. The next time server restarts, the correct policies are in place.

XA600W2K8R2X64060 (Added 8/23/2011, replaces XA600W2K8R2X64002)

• This fix addresses two installation issues:

§ Hotfixes fail to install on a XA6 server that has not yet had the XenApp Server Role configured.

§ Installing hotfixes or performing a repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component, if present, from the system. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes.

• Installing hotfixes or performing a Repair on the base product for Citrix XenApp 6 for Windows Server 2008 R2 can inadvertently remove the Citrix Licensing component from the system, if present. This fix prevents the Citrix Licensing component from being removed when installing subsequent hotfixes.

XA600W2K8R2X64062

• Servers might experience a fatal exception, displaying a blue screen while shadowing is started.

XA600W2K8R2X64063

• This fix addresses a security vulnerability. For more information, see Knowledge Center article CTX129430.

XA600W2K8R2X64068 (Added 7/2/11, replaces XA600W2K8R2X64056)

• Certain applications fail to launch when Administrator Approval Mode is enabled in User Account Control.
• This fix addresses the following issues for sessions launched as streamed to server or by a script: 1) The application name can be missing from the session information of the Delivery Services Console Session and not appear under the Applications folder of the Delivery Services Console. 2) Application limits might be ignored. 3) Attempts to reconnect to disconnected sessions might fail.
• Certain applications can perform slowly when run in seamless mode
• The CPU consumption of the winlogon.exe process can be higher than usual and cause new connection attempts to fail once a server hosts 70 connections or more. Eventually, servers can experience a fatal exception and need to be restarted.

XA600W2K8R2X64077 (Added 8/23/2011, replaces XA600W2K8R2X64026)

• Attempts to log on to a XenApp 6 server using Version 7 or earlier of the clients can cause svchost.exe to exit unexpectedly. As a result, further connection attempts to the server fail until it is restarted.
• The CPU consumption of the CitrixCseEngine.exe process can spike unexpectedly and cause logon delays.
• Attempts to launch a published application that resides on a mapped network drive rather than on a XenApp server failure
• When connecting to a server running Windows Server 2008 R2 with Service Pack 1, Terminal Services can exit unexpectedly. This causes users to experience a black screen when logging on and the logon process fails to complete.
• A rare race condition that occurs when a shadowee disconnects at roughly the same time a shadower connects can cause servers to experience a fatal exception, displaying a blue screen on RPM.dll.
• The shadow logging policies might not log events to the Event viewer properly.
• The fix addresses an issue where the IMA Service exits unexpectedly when a network adapter is not bound to an IP address.
• Servers might become unresponsive or experience a fatal exception on rpm.dll when an administrator initiates a shadowing session.
• Pass-through authentication fails after applying Hotfix XA600W2K8R2X64048.
• more...

XA600W2K8R2X64079 (Added 8/17/11, replaces XA600W2K8R2X64010)

• This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements, required components, and known issues, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.
• This enhancement allows printing within a session using ICA Proxy through Branch Repeater.

XA600W2K8R2X64089 (Added 9/21/11) ^NEW

• During times of heavy logon/logoff activity, sessions can become unresponsive while connecting. The "Starting <application name>" message appears but the connection attempt fails to complete.

For XenApp 6 Fundamentals Edition

XA600W2K8R2X64044

• When a server running Access Fundamentals/XenApp 6 Fundamentals Edition is in a workgroup, the Citrix license cannot be retrieved and application launch fails, resulting in the following error message: "License Acquisition failed..."

Other Citrix Hotfixes

XASCTW2K8R2X64003 (Added 8/17/11, replaces XASCTW2K8R2X64001)

• This hotfix contains an updated version of the XenApp Server Configuration Tool, which is used to configure XenApp 6 for Windows Server 2008 R2 server role installations. The XenApp image can be prepared for imaging and provisioning before, during, or after configuring XenApp.
• Version 1.0 of the Server Configuration Tool exits unexpectedly in the XenApp Server Role manager wizard when entering credentials for SQL server if the policy "Require trusted path for credential entry" is enabled by way of a GPO.
• XenApp server configuration fails when using Version 1.1 of the Server Configuration Tool if you chose not to install XenApp Management as part of the XenApp 6 installation. Instead, the following error message appears: "A parameter cannot be found that matches parameter name 'localgpo'.

DSCXAGPMX100WX64001

• This enhancement is a part of the XenApp Printing Optimization Pack. The Printing Optimization Pack improves the user experience and printing speed by reducing the printer bandwidth required. For more information, including system requirements and required components, see XenApp Printing Optimization Pack in eDocs, the Citrix Product Documentation Library.

Recommended Microsoft Hotfixes

Windows Server 2008 R2 SP1 contains most of the hotfixes listed below (exceptions noted inline). For a list of all Microsoft Hotfixes included in Windows Server 2008 R2 SP1, refer to: Documentation for Windows 7 and Windows Server 2008 R2 Service Pack 1 (KB976932) and click the download link for “WS08R2 SP1.xls”. Microsoft has published the following KB article specific to Remote Desktop Services: Available Updates for Remote Desktop Services (Terminal Services) in Windows Server 2008 R2

KB979530

• A Windows Server 2008 R2-based Remote Desktop server denies some connection requests randomly under heavy logon or logoff conditions.

KB975777

• There is a delay when you shut down, restart, or log off on a Windows Server 2008 R2.

KB980663

• If a heavy load situation exists or if connectivity issues exist, there is a stop error message in Windows 7 and in Windows Server 2008 R2 as follows:
  "STOP: 0x000000B8"

KB2265716

• A computer that is running Windows Server 2008 R2 stops responding randomly.

KB2465772

• An application or service that uses Winsock API or Winsock Kernel API might randomly stop responding in Windows Server 2008 R2 (Not included in SP1).

KB917607

• Installing a 32-bit help System 2008R2 might be required if hosting 32-bit applications (Not included in SP1).

KB2383928

• Remote desktop sessions do not exit completely and you cannot establish new remote desktop sessions to a computer that is running Windows Server 2008 R2.

KB983460

• Startup takes a long time on a Windows 7 or Windows Server 2008 R2-based computer that has an Intel Nehalem-EX CPU installed.

KB2388142

• A computer that is running Windows 7 or Windows Server 2008 R2 intermittently cannot use a shared network printer to print.

KB2444328 (Added 7/16/11)

• You cannot access shared files or shared printers in Windows 7 or in Windows Server 2008 R2

KB2551503 (Added 8/23/11)

• A mapped drive that has the non-persistent flag set is displayed as a disconnected drive in Windows 7 or in Windows Server 2008 R2 (Not included in SP1)

KB2578159 (Added 9/21/11)

• The logon process stops responding in Windows Server 2008 R2 or in Windows 7

KB2620656 (Added 10/27/11) ^NEW

• Invalid redirected printers may be available in a Remote Desktop Services session that connects to a RD Session Host server that is running Windows Server 2008 R27

原址见：http://support.citrix.com/article/CTX129229

http://xenme.com/992