Work with policies

Configure Citrix policies to control user access and session environments. Citrix policies are the most efficient method of controlling connection, security, and bandwidth settings. You can create policies for specific groups of users, devices, or connection types. Each policy can contain multiple settings.

Tools for working with Citrix policies

• Studio - Policies that are created using Studio are stored in the site database, and the updates are pushed to the VDA either of the following happens:

  • When that VDA registers with Controller
  • When a user launches a session

• Group Policy Management Console -If your network environment uses Active Directory and you have permission to manage group policy, you can use the Group Policy Management Console (GPMC) to create and edit policies for your Site. In the console, you can configure Group Policy Objects (GPOs) with your desired settings and filters. These policies will take priority over policies configured in Studio. For more information, seeCTX238166.

Policy processing order and precedence

Group policy settings are processed in the following order:

1. Citrix DaaS Site GPO (stored in the Site database)
2. Domain-level GPOs
3. Organizational Units

However, if different settings are applied for the same policy in two GPOs, the policy settings processed last overwrite the settings processed earlier. This configuration means that policy settings take precedence in the following order:

1. Organizational Units
2. Domain-level GPOs
3. Citrix DaaS site GPO (stored in the Site database)

When using multiple policies, you can prioritize policies that contain conflicting settings. For more information, seePrioritize, model, compare, and troubleshoot policies.

Workflow for Citrix policies

The process for configuring policies is as follows:

1. Create the policy.
2. Configure policy settings.
3. Assign the policy to machine and user objects.
4. Prioritize the policy.

5. Verify the effective policy by running the Citrix Group Policy Modeling wizard.

   Note:

   You open the Citrix Group Policy Modeling wizard by navigating to thePolicies > Modelingtab and then clickingLaunch Modeling Wizardin theActionspane. TheModelingtab is available in Web Studio hosted in Citrix Cloud per customer request.

Navigate Citrix policies and settings

Policy settings are sorted into categories based on the functionality or feature they affect. For example, the Profile Management section includes policy settings for Profile Management.

• Computer settings (policy settings applying to machines) define the behavior of virtual desktops and are applied when a virtual desktop starts. These settings apply even when there are no active user sessions on the virtual desktop.
• User settings define the user experience. User settings are applied when a user connects or reconnects

To access policies, settings, or templates, selectPoliciesin the Web Studio navigation pane.

• ThePoliciestab lists all policies. When you select a policy, tabs to the bottom display:
  • Overview - Lists name, priority, enabled/disabled status, and description
  • Settings - Lists all configured settings
  • Assigned To - Lists delivery group. You can edit or remove assigned to settings. Apply policy based on the delivery group membership of the desktop running the session. For more information, seeCreate policies.
• TheTemplatestab lists Citrix-provided and custom templates that you created. When you select a template, tabs to the bottom display:
  • Description (why you might want to use the template)
  • Settings (list of configured settings). For more information, seePolicy templates.
  • TheComparisontab enables you to compare the settings in a policy or template with those settings in other policies or templates. For example, you might want to verify setting values to ensure compliance with best practices. For more information, seePrioritize, model, compare, and troubleshoot policies.
  • From theModelingtab, you can simulate connection scenarios with Citrix policies. For more information, seePrioritize, model, compare, and troubleshoot policies.

  To search for a setting in a policy or template:

  1. Select the policy or template.
  2. SelectEdit policyorEdit Templatetab.
  3. On theSelect Settingspage, begin to type the name of the setting.

  You can refine your search by selecting:

  • A category (for example, Bandwidth)
  • TheView selected onlycheck box
  • To search only the settings that have been added to the selected policy.

• To search for a setting within a policy:

  1. Select the policy.
  2. Select theSettingstab and type the name of the setting.

A policy, once created, is independent of the template used. You can use theDescriptionfield on a new policy to track the source template used.