XenApp 6 Tuning Group Policy for Windows 2008 R2


I have posted a new Tuning Policy for Citrix XenApp 6 available in the Download section of this blog. Most of the registry keys have been imported from the previous Terminal Server & XenApp Tuning Tips Group Policy v1.1. There are some Group Policy Best Practices templates around, but the power of mine are that they are ready to go. There are no extra configuration required.

Remember that UPHClean is natively embedded into Windows 2008 and later and it’s recommended to Disable Data Execution Prevention on Windows 2008. This can be done with this command : bcdedit.exe /set {current} nx AlwaysOff

Change log :

  • Moved keys from HKLMSoftware to HKLMSOFTWAREWow6432Node
  • Added more StubPath’s to speed up the profile creation for new users
  • Added instructions on How To Import the settings in GPMC within the zip file
  • Deleted “WFDontAppendUserNameToProfile
  • Deleted “NoRemoteChangeNotify

Resources :

Note :

Please note that these policy’s are provided “as is” and that using these is at your own risk. Please feel free to leave comments below regarding bugs & suggested improvements in future releases.


Automation Framework Community Edition

The fastest way to build your lab environment.

Virtual Expo

Friday 30th of September 2022

46 thoughts on “XenApp 6 Tuning Group Policy for Windows 2008 R2”

  1. Can you explain why you remove those two keys. Should we keep them if we apply those hotfix from Microsoft to optimized things up?

    • Hi Martin,

      The first policy only applies to mandatory profile for Windows 2003. The reason why I removed “NoRemoteChangeNotify” is simple. You could get some better network performance on WAN, but the user experience gets worse. If this setting is on and the user creates a document on a network drive, he’ll need to press F5 to see the document.

    • Hi Martin,

      Are you following the instructions in the pdf that’s included in the zip file ? Make sure to do this with GPMC on a Windows 2008 Server.

  2. Looks like you need to change the default domain parameter for you location. Just a note for people wanting to use this out of the box.

    • Hi Derek,

      Yeah, that’s correct, maybe I missed mention it in the documentation. I will check it up, thanks for the comment.

  3. Hi,

    I’m implementing this template and running into a few questions maybe other users have too.
    I will state them below:

    Settings: KeepAliveTime, KeepAliveInterval, TCPMaxDataRetransmissions

    ?: Are hardcoded according to this blog and cannot be changed via registry

    Setting: LargeSystemCache

    ?: I read it might produce unstable systems. Is this true?
    Setting: IOPageLockLimit

    ?: Doesn’t seem to do anything from W2K SP1

    Settings: LanManServer

    ?: Don’t they have only a positive result when they are set on fileservers etc. as well?

    • Thanks for posting Mark,

      I don’t have to many XA6 solutions running so we have to see what other of the Citrix Community users are coming up with. That being said I’ve not experienced any problems with these settings, more on XA6 that have some bugs…

  4. @Mark B,
    Nice to see someone doing their homework.
    As you’ve found – TCP keepalives are hardcoded.
    IOPageLockLimit does jack shit.

    Lanmanserver settings are good in WS 2000/2003 begin_of_the_skype_highlighting              2000/2003      end_of_the_skype_highlighting, solves freezes in TS (logon/off) MS KB 324446. But I bet that it is unnecessary in 2008, will look into deeper some time.

    LargeSystemCache won’t give you unstable systems, this is the key for the Memory usage setting in System Options/Performance; enabled prioritizes System cache, disabled prioritizes Programs. In a multi user environment you’d rather set this to System cache as in the adm…

    • Hi Michael,

      The policy have not been updated since its release in July, so the content on Pierre’s site is more up to date (December 2010).
      The best thing would be to sort the registry keys and check them one by one. Still my policy would save you a lot of time.

      Please let me know if you find any new or modified registry keys that I should add to the policy. Currently I have no time to do this since I’m working hard on releasing my Citrix XenApp 6 Video Training Course.

  5. Just noticed a new updated “date” for this Sep 2011. Version is the same. Doest it mean there were updates to it?

  6. I’m setting up a new XenApp 6.5 farm and using all server 2008 R2 64 bit policies. Will I be able to use this GPO out of the box?

  7. Hiya

    I’m using this GPO policies on XA65 Win2k8R2 but have problems with one of these settings when mapping network drive (Webdav). Connection works fine (authentication) but browsing the webdav structure doesn’t work. I always get reconnected to the starting point showing the root folder structure.
    Disabling this GPO makes everything work ok. Any idea which of all these reg changes i should change? Using Webdav to a box.com account.
    Thx //(laudio

  8. Applied to a XenApp 6.5 server, absolutely no changes to registry occurred. No errors in the event logs.

  9. Hi,

    As someone already mentioned the GPO refers to a test domain and needs to be changed when importing the settings. Is this done by using a migration table in GPMC or do you have any other tips?


  10. Hello Trond,
    Thank you for the preference export! I found a bug, I believe. Policy Preference #62 (Suppression Policy) has the wrong path (by one character).
    The path I imported was:
    It should be:

    Reference: http://support.microsoft.com/kb/829700/EN-US

    Kind Regards,

  11. I’m looking at all the registry settings in the XenApp Tuning Policy. Why is there repeat entries? Should I delete them and just leave one? Thanks.

  12. I am just curious but apply the policy to my XenApp 6.5 2008 R2 servers there seem to be an error when users launch an application “you cannot access published resources because your encryption level is not fips”.

  13. Is there an updated version of this policy available with the changes mentioned above or any other changes?


  14. Hello Eirik,

    I was wondering your opinion on Windows 2008 R2 Operating Systems and DEP and how it should be set? At the beginning of this thread, you mention….”and it’s recommended to Disable Data Execution Prevention on Windows 2008. ” I assume there you are speaking of R1 for windows 2008.

    I seem to be having some issues with Java.exe crashing on some terminal servers and it possibly might be DEP related.





  15. I noticed the following additional registry mods were not present and recommended by Citrix on a Windows 2008 R2 server:




    HKEY_CURRENT_USER\Control Panel\Desktop
    “UserPreferencesMask”=binary:90,12,01,80 ,10,00,00,00

    Citrix KB Doc: http://support.citrix.com/servlet/KbServlet/download/29413-102-705928/XA%20-%20Windows%202008%20R2%20Optimization%20Guide.pdf.pdf

  16. Hi Eric,

    Hope you are fine. I am just wondering where can i find the training videos of xenapp 6.x version in your blog. Please provide link


Leave a Comment