Supporting a XenDesktop environment is not just about being able to collect and consume detailed log files and traces. The fact is, it is much more than this. A good understanding of the FMA architecture and expected behavior can go a long way to resolving various technical issues. Join Kimberly Ferrie and Mick Glover as they discuss and demonstrate how to apply this knowledge when supporting a XenDesktop environment. What you will learn - How the various FMA services interact with each other and the Site Database - How to check the true state of FMA services and validate site functionality through PowerShell - How to create various types of Service and Database Schema scripts - How to configure Site policies to control access to resources

1. A Deep Dive into Supporting XenDesktop
May 2014
Kim Ferrie, Mick Glover

2. © 2014 Citrix. Confidential.2
Agenda
A Deep Dive into Supporting XenDesktop
Architecture
FMA Service States
Service SQL Scripts
Site Policies

3. The Architecture
XenDesktop 7x

4. © 2014 Citrix. Confidential.4
XenDesktop 7.x Architecture
Controller
Citrix Studio Citrix Director
WCF
[80]
Virtual
Desktop
(VDA)
Citrix Desktop
Service
[5985/5986]
WCF
[80]
PoSH PoSH
Citrix ICA
Service
(PicaSvc2.exe)
SQL Server SQL Server
Environment
Test Service
Configuration
Service
Host Service
Monitor
Service
Machine
Creation
Service
AD Identity
Service
Configuration
Logging
Service
Storefront
Service
Broker
Service
Delegated
Admin
Service
SQL Server
Machine
Creation
Services
Infrastructure
Services
Broker
Service
Machine Creation
Services
Feature & Integration
Services
SQL Server

5. FMA Service States

6. © 2014 Citrix. Confidential.6
Viewing service states through Windows only tells half the story
Example: Broker Service

7. © 2014 Citrix. Confidential.7
Validating a Service Status
Get-BrokerServiceStatus (Broker)
Get-ConfigServiceStatus (Configuration)
Get-HypServiceStatus (Host Service)
Get-AcctServiceStatus (AD Identity)
Get-ProvServiceStatus (MCS)
Get-MonitorServiceStatus (Monitoring)
Get-AdminServiceStatus (Delegated Admin)
Get-LogServiceStatus (Configuration Logging)
Get-SFServiceStatus (StoreFront)
Get-EnvTestServiceStatus (Test Service)

8. © 2014 Citrix. Confidential.8
Get-BrokerServiceStatus - Return Values
Status Meaning
OK The broker is connected to a database that is valid, and the
service is running.
DBUnconfigured The broker does not have a database connection configured
DBRejectedConnection The database rejected the logon from the Broker Service. This
may be caused by bad credentials, or the database not being
installed.
InvalidDBConfigured The database schema is missing (possibly just the stored
procedures in it).
DBNotFound The specified database could not be located with the
configured connection string.
DBMissingOptionalFeature The broker is connected to a database that is valid, but it does
not have the full functionality required for optimal performance.
Upgrading the database is advisable.
DBMissingMandatoryFeature
The broker is connected to a database that is valid, but it does
not have the full functionality required so the broker cannot
function. Upgrading the database is required.

9. Demo
FMA Service States

10. SQL Service Scripts

11. © 2014 Citrix. Confidential.11
SQL Service Scripts
4 script types for each FMA service
FullDatabase
Instance
Evict
Login

12. © 2014 Citrix. Confidential.12
Examples of when to use each Script
A Script for every occasion…
FullDatabase
• Manually create or script the creation of a new Site
Instance
• Manually add a controller to an existing Site
Evict
• Manually remove an orphaned Controller from a Site
Login
• Create DB Security Logon

13. © 2014 Citrix. Confidential.13
Generating Service Scripts
Use the PoSH SDK
Get-<ServiceAlias>DBSchema - DatabaseName -ScriptType
• Broker, Config, Hyp, Prov, Acct, SF, Monitor EnvTest, Log & Admin
Examples
• Get-BrokerDBSchema -DatabaseName CitrixSynergy606 -Adminaddress DC2.training.lab -
ScriptType instance | out-file c:join.sql
• Get-ConfigDBSchema -DatabaseName CitrixSynergy606 -Adminaddress DC2.training.lab -
ScriptType instance | out-file c:join.sql -append

14. © 2014 Citrix. Confidential.14
Generating Service Scripts
Use the PoSH SDK
Get-<ServiceAlias>DBSchema - DatabaseName -ScriptType
• Broker, Config, Hyp, Prov, Acct, SF, Monitor EnvTest, Log & Admin
Examples
• Get-BrokerDBSchema -DatabaseName CitrixSynergy606 -Adminaddress DC2.training.lab -
ScriptType instance | out-file c:join.sql
• Get-ConfigDBSchema -DatabaseName CitrixSynergy606 -Adminaddress DC2.training.lab -
ScriptType instance | out-file c:join.sql -append

15. © 2014 Citrix. Confidential.15
Citrix Studio uses the same Scripts
FullDatabase & Login

16. Demo
Manually joining a Controller to an existing Site

17. Site Policies

18. © 2014 Citrix. Confidential.18
XenDesktop Site Policies
Overview
Entitlement Policy (Pooled/Shared Desktops)
• Get-BrokerEntitlementPolicyRule
• Get-BrokerAppEntitlementPolicyRule
Assignment Policy (Dedicated/Private Desktops)
• Get-BrokerAssignmentPolicyRule
• Get-BrokerAppAssignmentPolicyRule
Access Policy
• Get-BrokerAccessPolicyRule

19. Demo
Restricting access to resources through Site Policies

20. © 2014 Citrix. Confidential.20
Tweet Tweet...
Stay Informed with the latest XenDesktop Tips
@XDinformer
• Kim Ferrie
@XDtipster
• Mick Glover

21. © 2014 Citrix. Confidential.22
WORK BETTER. LIVE BETTER.