Tuesday, 31 December 2013

Enable or Disable Logon for Citrix XenApp Servers via Command Line

Well, as a Citrix Admin, you are able to prevent any users from accessing your Citrix XenApp servers, especially when the server is under maintenance mode, or you purposely want to put the server out-of-loads. there are 2 ways to do this; GUI or command. 

But bear in mind that :-

  • Users are not able to remote to the server, no RDP, no ICA, nothing.
  • Once logon disabled, users only able access the server via virtualization Console like VMware Client or XenCenter (Virtual server). For physical server, it is either physically sitting before the server, KVM or Remote Access Card (DRAC, or HP iLO)
  • For Command Line, it only can be used locally. I haven't try using PSTOOL yet, but I will update this post whether I can access the server using PSTOOL after logon disabled.
  • For GUI, as we will use Citrix Console, hence it can be done remotely from other Citrix XenApp servers, within the same farm. Hence, if the farm only has one Citrix XenApp server, then you need to get in the box via physically there or virtualization client.

  • Disable / enable logon for Citrix XenApp servers via Command Line.

How To Do :
  1. RDP to the Citrix XenApp server, and open Command prompt. firstly, you may want to type Change Logon in order to know what commands can be used.

    These are commands that can be used :
    /QUERY     Query current session login mode
    /ENABLE    Enable user login from sessions
    /DISABLE   Disable user login from sessions

  2. In order to check current logon mode, type Change Logon /Query. It will let you know whether session logins are enabled or disabled.

  3.  In order to disable it, type Change Logon /disable. After a few moemnt, you will be prompted with the new status of session logins.

  4.  Hence, when users try to RDP the server, they will see this. For ICA connections, this server will not be used. If one published application was published only to that server, then users will not be able to access that application.

  5.  if you want to enable logon back, just type Change Logon /enable. Users will able to access the server back after a few moments.


Post a Comment