What

What it does

More information

AccessEnum v1.32

AccessEnum gives you a full

view of your file system and
Registry security settings.

Useful in a scenario where an issue

is only seen by a user but not by an
administrator.

AccessEnum uses standard

Windows security APIs to
populate its listview with read,
write, and deny access
information. This tool can be
used to troubleshoot access and
rights issues.

Citrix Utility AppEdit

Simple GUI tool to allow quick

management of published
applications on a Citrix Server
farm.

Useful to quickly move and change

published applications between
servers to isolate a test
environment or take a suspect
server out of the possible causes.
Can be used in conjunction with
CHFarm to isolate a server.

AppManagmentTool Perform Common

Application
Management Tasks with
this MFCOM Utility

Perform common application

CTX106668
management tasks faster and
easier with this handy MFCOM
utility. Use the AppManagement
tool to manage applications. This
tool is written in C#.net and uses
an Mfcom.dll to query the IMA.

Centralis Centinel
Reboot

Monitors connections to a
Terminal Server and reboots it
once all users are logged off or
disconnected. Can also
automatically run a script before
reboot.

This tool can be used to automate

the implementation of a fix or
registry hack and then reboot the
server without causing any data
loss for users.

CHFARM

An administrator can use

CHFARM to move a server from
its current server farm. The
-Available with the
server can be moved to an
Citrix Presentation
existing server farm or can be
Server installation
moved into a new farm which is
created at the same time that the
Presentation Server
Administration Guide - server is moved.
Appendix A
CHFARM can be used to isolate
problems and prove whether the
data store is involved, or causing
the issue.

If the server you want to move

provides information for a
Resource Manager summary
database, update the summary
database before using chfarm.

Citrix Enterprise Tracer Citrix Enterprise Tracer 5.8

5.8
enables IMA debugging trace
information under the instruction
of Citrix Technical Support.

No installation is required. Execute

from a Citrix MetaFrame server
Feature Release 1 Feature
Release 3 / Service Pack 4.

Common Diagnostics
Facility (CDF)

There are many articles on

support.citrix.com detailing which
"IMA modules" to select for tracing
particular types of problems.

- Available with the

Citrix Presentation
Server installation

The Common Diagnostic

Facility (CDF) is a utility
available as part of the Access
Suite Console that allows
administrators to collect traces
for problem analysis/diagnosis.
Traces can be collected on all
retail binaries from MetaFrame
Presentation Server 3.0 onwards
without the need for stopping
and starting services or
disrupting users. Traces can be
started and stopped remotely
through the Access Suite
Console, and can be easily
packaged and uploaded to Citrix
Technical Support to assist in
problem diagnosis and
resolution.

CTX736659

CTX104578

Usage: Generally this tool is

used on the advice of Citrix
Technical Support in relation to a
specific support case.

Viewing Common
Diagnostics Facility
Traces Using
TraceView

CDF Viewer is a utility that

allows you to view the output of
a diagnostics log file that is
created when a CDF trace
session is completed using either
the MetaFrame Access Suite
Console or the CDF Viewer
itself.

CDFControl

CDFControl is a software
To get this tool you need to
debugging utility that captures
authenticate to our support site.
Citrix Diagnostic Facility (CDF) Support.citrix.com
trace output messages that are
output from the various Citrix
product modules.

CtxDataXP

The CTXDataXP utility for

Ipconfig information is useful for
MetaFrame XP that gathers Farm checking issues on Multihomed
information:
computers, and identifying issues
with the routing tables, also useful
to have in conjunction with
IPconfig, qfarm, hotfix
Network traces to identify servers
information, published
applications clicense, queryDC,
queryDS, queryHR, odbcdata,
Qfarm is useful for identifying how
MDAC version, MetaFrame
many servers in the farm and which
Server version, qwinsta, and the ones are Data Collectors along with
winmsd report. This utility
the IP addresses.
gathers real data and pertinent
information that is required to
isolate, troubleshoot, and resolve
issues.

User Profile Deletion

Delprof is a command-line

Can be used in scenarios where

Utility

utility that you can use to delete there is only one user experiencing
user profiles on local or remote the problem or to clean local
computers running Windows
profiles off a Presentation Server.
2000, Windows XP, and
Windows Server 2003. User
profiles can grow large and may
take up considerable disk space,
especially if there are several
users using one computer.

ETHEREAL

Used to analyze Network traces Example case studies: CTX110007

taken in the pcap format. This
tool can capture data off the
wire or can read data saved in
files from previous captures.
Displayed data can be filtered to
narrow down your search to
traffic to and from a particular IP
address. Understanding the
protocol you are analyzing (such
as TCP/IP) is a prerequisite to
understanding the results of this
tool.

ExamDiff

This tool is for comparing text

files.

Very useful for comparing good

CDF traces with bad CDF traces.
Capture two separate traces of any
technical issue experience. Parse
your output pointing to TMF files.
Save the parsed output from
CdfViewer to CSV format and use
Examdiff to speed up the
comparison of the output. Could
also be used for comparing XML
files for Web Interface setups.

FarmAppUtil Tool

The FarmAppUtil tool saves all

the application properties with
users and servers assigned to
those applications in an XML

FarmAppUtil S and FarmAppUtil

<folderstructure.txt>
<FarmName.xml>

file. The tool also creates a text

file with a folder structure. The
XML file created from the
application can be modified and
used for republishing all the
applications and also recreate the
folder structure in the new farm.

fc.exe

Can be used to compare

ntuser.dat files.

fc /?

Permissions issues, such as user

can not perform a task but an
administrator can.

Look for File Not Found or

Permission Denied on specific
registry keys or values or search for
.wav files for system beeps.

- Native to Windows
2000, Windows 2003
and NT4.0

FileMon for Windows

v7.04

Example case studies: CTX109109,

CTX108980

Findapp

Finds application running on

Presentation Servers by
application executable or
published application name.

Finduser

Finds application running on you

presentation servers by user
name or client ID.

ICAPORT

Use icaport to query or change

CTX101594
the TCP/IP port number used by
the ICA protocol on the server.
The default port number is 1494.
The port number must be in the
range of 065535 and must not

-Installed with
Presentation Server

conflict with other well-known

port numbers.

MessageHistory 2.0 for Simple GUI tool that traces

Used to troubleshoot issues with
32-bit and 64-bit
window messages, like spy++ or GUI, Seamless, Clipboard, client,
platforms
Winspector, but easier to use.
and so on.
Consists of two executable files
(32- and 64-bit). Simply start the
exe, select via tick boxes which
messages should be traced and
click start.

MFHotfixutil

MSGHOOK.EXE
V4.0.1.0

The MFHotfixutil tool can be

used for listing and storing all
hotfixes on MetaFrame servers
in the form of an XML file. It
can also compare the hotfixes
present on two servers and list
the hotfixes that are not on both
servers. This tool is written in
C#.net and uses Mfcom.dll to
query the IMA.

MsgHook.exe (Message Hook)

is an executable from Citrix
Independent Management
Architecture. MsgHook is a
- Presentation Server
4.x Server CD - Support command line utility that
displays all IMA traffic on a
- Debug: Windows
member server - Note: Execute
2003
msghook only if information is
requested by a Citrix Technical
Support representative or a
Citrix engineer. When invoked,
this command significantly
reduces Presentation Server
performance.

PDBFinder for 32-bit

and 64-bit Platforms

The PDBFinder Deluxe utility

simplifies finding rare program
database (PDB) or debug (DBG)
files (symbols) or determine a
hotfix corresponding to a given
module name and date.

Process Explorer v11.04 Process Explorer shows

information about which handles
and DLLs processes have
opened or loaded. Can be used
for tracking down DLL-version
problems or handle leaks, and
provide insight into the way
Windows and applications work.

For Application Isolation

Environment you can see if DLLs
and Named Objects are virtualized.
For Virtual Memory Optimization
issues, you can use Process
explorer to highlight relocated
DLLs.

PsExec v1.92

PsExec is a light-weight telnet- Can be used in combination with

replacement that lets you execute SystemDump.exe to execute a
processes on other systems,
system dump remotely.
complete with full interactivity
for console applications, without
having to manually install client
software.

Qfarm (query farm)

Use it to display information

about servers within an IMA
based server farm For Example:
display the current load on each
server with qfarm /load, list all
currently active servers in the
farm with qfarm /online.

- Installed with
Presentation Server

QRYClientIP

Command line tool to query a

session's client IP. Used to allow
one login script to process
specific commands for specific
IP addresses or IP segments.

Presentation Server Administrator's

Guide - Appendix A

QUERY PROCESS

Displays information about

processes running on a terminal
server. You can use this
command to find out which
programs a specific user is
running, and also which users
are running a specific program.

QUERY SESSION

Displays information about

sessions on a terminal server.
The list includes information not
only about active sessions but
about other sessions that the
server runs.

QUERY
TERMSERVER

Displays a list of all terminal

servers on the network.

QUERY USER

Displays information about user

sessions on a terminal server.

QueryDC

The QueryDC utility is used to

determine the data collector for a
given zone. Without any
parameters, Querydc defaults to
the host servers zone and
returns the zone name and name
of the current zone data
collector.

- Presentation Server
installation CD Support - Debug

QueryHR
- Presentation Server
installation CD Support - Debug

Use this utility to display

information about member
servers in the farm. Executing
queryhr with no parameters lists
all servers in the farm. Queryhr
obtains information from the

local host cache.

RegMon for Windows

v7.04

Regmon traces activity on the

registry, like Processes
writing/reading different registry
keys.

Usually used to track down

permission issues or problems
where certain settings cannot be
changed.

In case of a failed access it gives CTX109109

the appropriate reason such as
"access denied" or "not found".
It also uses filters to limit the
output to what is the activity of
certain processes or on certain
keys.

Regshot

This tool compares two registry

snapshots.

Runin

Runs an application in another

session, that is from the console
start an app in another users
session.

SHADOW

Enables you to remotely control

an active session of another user.

wbemtest.exe

Troubleshooting Issues that

Involve WMI Data. This would
mainly include issues with
licensing, the Access Suite
Console, Suite Monitoring and
Alerting or the Presentation
Server Management pack for

- Native to Windows
2000 and Windows
2003

This tool can be used to

troubleshoot issues with server
configuration/custom registry
settings

CTX108365

MOM.
The tool can be used to test basic
functionality of WMI providers.

BareTail(Pro),
BareGrep(Pro)

log file monitoring tool

file finding and text searching
tool

Windows 2000
Resource Kit Tool:
Soon.exe

Schedules commands to run

within the next 24 hours.

Fiddler

Fiddler is a HTTP Debugging

Proxy which logs all HTTP
traffic between your computer
and the Internet. Fiddler allows
you to inspect all HTTP Traffic,
set breakpoints, and "fiddle"
with incoming or outgoing data.
Fiddler is designed to be much
simpler than using NetMon or
Achilles, and includes a simple
but powerful JScript.NET eventbased scripting subsystem.

MemProfiler

.NET Memory Profiler is a

powerful tool for finding
memory leaks and optimizing
the memory usage in programs
written in C#, VB.NET or any
other .NET Language.
It allows you to retrieve
information about all instance
allocations performed on the
garbage collected heap (GC

Could be used in conjunction with

PrintMigrator to schedule Driver
replication.

heap) and all instances that

reside on the GC heap. The
retrieved information is
presented in real-time, both
numerically and graphically.
Using the new unmanaged
resources tracker, information
about unmanaged resources such
as HBITMAP, HWND and
unmanaged memory is also
presented.

Back to top
Advanced Access Control

What

What it does

More
information

MSAM /
NFuse Elite
CDA Packager
Utility

The MSAM / NFuse Elite CDA Packager Utility is a wizarddriven tool designed to automate the process of packaging a
CDA into a MetaFrame Secure Access Manager installable
format. It is used by MetaFrame Secure Access Manager
developers to transition CDAs from development to production.

RSATest

RSATest Webpage is used when you have a Secure Gateway

implementation where an RSA backend server does the second
method authentication. This page is used to assert proper
communication between Secure Gateway/Logon Agent objects
and RSA backend server.

Back to top
Application Isolation Environments

What

What it does

More information

AIERUN
- Available with
the Citrix
Presentation
Server
installation

This is the command to launch an

isolated application. Primarily for
use in scripting environments.
Aierun is an internal launcher used
by Presentation Server during
application launching.

For troubleshooting purposes this could

be used to test running the application in
Application Isolation Environment
without publishing it (remove a layer of
complexity)Syntax Aierun AieName
c:\path\app.exe

Can be used to modify shortcuts in Presentation Server Administration Guide

a desktop to launch an application - Appendix A + Errata
in Isolation.

Dependency
Walker

Dependency Walker (Depends) is

a useful GUI tool for pointing to
an executable on a system and
listing all the DLLS required by
that DLL, it will highlight any
missing DLLs or conflicts.

Dependency Walker (Depends) is a

useful tool for trouble-shooting
application errors, file registration errors,
memory access violations, and invalid
page faults.
Also useful for troubleshooting
Application Isolation Environment
issues.

Back to top
Fatal Errors and Application Crashes
- any fatal errors on servers, Dr Watson userdump

What

What it does

More information

How to Use the

Citrix Symbol
Server to Obtain
Debug Symbols

The Citrix Symbol Server can be You must use a debugging tool to connect
used to obtain the symbol files
to the Citrix Symbol Server
necessary to debug Citrix
products. The symbol server
currently contains symbols for
the CPS3.0 to XenApp5.0
products.

Citrix

The Citrix DumpCheck tool

Before sending dump files to another

DumpCheck
Explorer
Extension
version 1.4

helps to diagnose corrupt dumps. party, check that the file is not corrupt
This tool is easier and quicker to
use than launching WinDbg.exe
and then loading the dump, and
so on.

Citrix
DumpCheck
Utility
(Command
Line) version
1.4

The Citrix DumpCheck Utility

CTX108890
helps diagnose corrupt dumps.
This tool is easier and quicker to
use than launching WinDbg.exe
and then loading the dump, and
so on. Unlike the Explorer
extension described in
CTX108825 Citrix
DumpCheck Explorer Extension
version 1.4, it doesnt require
changing the environment.

Dependency
Walker

Dependency Walker (Depends) is

a useful GUI tool for pointing to
an executable on a system and
listing all the DLLS required by
that DLL, it will highlight any
missing DLLs or conflicts

Dr. Watson

Collect the dump file when

applications crash or suddenly
- Available with exit.
the Windows
installation

Dependency Walker (Depends) is a useful

tool for trouble-shooting application
errors, file registration errors, memory
access violations, and invalid page faults.
Also useful for troubleshooting
Application Isolation Environment issues.

Enable Dr Watson by issuing the

DrWtsn32.exe I command at the
command prompt. Further configuration
options are available by issuing the
command DrWtsn32.exe.
When enabled, Dr Watson generates a
dump file and a log file in the \Documents
and Settings\All
Users\Documents\DrWatson directory (by
default). The log file can be used to
determine basic information about the
error, and the dump file can be analyzed

with WinDbg.
Example case studies: CTX108312

LiveKD

LiveKD allows you to run the

Citrix Technical Support may request you
KD and Windbg Microsoft
to use LiveKD in certain circumstances
kernel debuggers, which are part
of the Debugging Tools for
Windows package, locally on a
live system. Execute all the
debugger commands that work
on crash dump files to look deep
inside the system. See the
Debugging Tools for Windows
documentation and our book for
information on how to explore a
system with the kernel
debuggers.

LoadOrder

If you need to see the order in

which the system loads device
driver, this tool is for you! Can
be useful in resolving device
driver conflicts, exp when
multiple drivers for the same
device exist on the system.

PDBFinder for The PDBFinder Deluxe utility

32-bit and 64-bit simplifies finding rare program
Platforms
database (PDB) or debug (DBG)
files (symbols) or determine a
hotfix corresponding to a given
module name and date.

Windows 2000
Resource Kit
Tool : CPU
Usage by

QSlice is used in conjunction

with UserDump.exe to show the
thread within a process causing
the spike or hang. Open Qslice,

Processes
(qslice.exe)

click into hanging process to get

thread detail and take a
screenshot before taking
userdump.

SystemDump
3.1 for 32-bit
and 64-bit
platforms

The SystemDump GUI utility

can force a server to generate a
memory dump from the session
or when a keyboard is not
available or non-standard (fatal
error).

UMDH

UMDH dumps information about CTX104201

the heap allocation of a process
and can be used to determine
UMDH Demonstration
memory leaks.

User Mode
You can use the Userdump.exe
Microsoft Knowledge Base article 241215
Process Dumper tool to generate a user dump of a
Version 8.0
process that shuts down with an
exception or that stops
responding (hangs). Before
dumping a hanging process, it is
helpful to take a screenshot of
the Qslice.exe window. This
output will assist in dump
analysis.

WinDBG

Use WinDbg to open crash

Search support.citrix.com for "WinDBG"
dumps obtained from Dr.
to get a list of How To guides.
Watson, manually generated
userdumps, or Windows crashes.
Once the crash dump has
finished loading, many
commands can be used to
provide helpful information
about the error.

The command !analyze v

performs basic exception
analysis, reporting the error that
occurred and the module in
which it occurred.
The command lmv can be used
to show all of the modules
loaded, including their full path
and version information.

WinDBG 64-bit This is the Windows debugger

for 64-bit platforms.

Back to top
Citrix Access Gateway

What

What it does

More information

Access Gateway The Access Gateway Enterprise Event Log

Enterprise Event Consolidator (ELC) is a tool that facilitates
Log Consolidator collecting and viewing event log information
generated by the Access Gateway Enterprise
server components. *This tool is a standalone
tool and is intended to work with Advanced
Access Control version 4.0*

RSATest

RSATest Web page is used when you have a

Secure Gateway implementation where an RSA
backend server does the second method
authentication. This page is used to assert proper
communication between Secure Gateway/Logon
Agent objects and RSA backend server.

Secure Access

Secure Access Client Remover is used to detect If the installation of the

Client Installation if any Secure Access Client modules or registry Secure Access client is
Detection and
entries are left after uninstalling it.
suspected to cause a
Removal Tool
conflict with another
application and has to be
removed for testing.
CTX108092

Back to top
Citrix Licensing

What

What it does

More
information

LMNEWLOG

The lmnewlog utility switches the report log file by

moving the existing report log information to a new file,
then starting a new report log with the original report log
file name.

Advanced
Concepts Guide

- Installed on
Citrix License
Server

LMSWITCH
- Installed on
Citrix License
Server

The lmswitch utility switches the debug log file written by Advanced
the Citrix vendor daemon by closing the existing debug log Concepts Guide
for that vendor daemon and starting a new debug log for
that vendor daemon with a new file name.

Back to top
Citrix Presentation Server Console
Citrix Password Manager

What

What it does

More
information

CTXDOMAINPREP.EXE
- Password Manager CD - Tools
folder: Password Manager 4.0

CTXFILESYNCCLEAN.EXE
- Password Manager CD - Tools
folder: Password Manager 4.0

CTXFILESYNCPREP.EXE
- Password Manager CD - Tools
folder: Password Manager 4.0

CTXNWFILESYNCPREP.EXE
- Password Manager CD - Tools
folder: Password Manager 4.0

CTXSCHEMAPREP.EXE
- Password Manager CD - Tools
folder: Password Manager 4.0

Hot Desktop Shared Account

(HDSA) Update Tool

A domain administrator can use the Active

Directory Setup for the MetaFrame
Password Manager utility to set the correct
permissions for these objects. This tool is a
utility, run from a command line, that sets
the correct permissions for these objects on

Admin Guide:
CTX107846

CtxFileSyncClean.exe removes any folders Admin Guide:

in your central store that point to objects that CTX107846
were deleted. This ensures that your
environment contains the most up-to-date
information.

Delegating administration of a Citrix

Admin Guide:
Password Manager central store to a group CTX107846
or user account that is not a domain
administrator. By default, no permissions are
allowed to propagate from root share to the
child folders CentralStoreRoot and People.

If you plan to use a Novell NetWare folder Admin Guide:

as your central store, you must create (while CTX107846
logged on with supervisor rights) the shared
folder and a folder named People inside the
shared folder.

Delegating administration of a Citrix

Password Manager central store to a group
or user account that is not a domain
administrator. The schema preparation tool
must be run by a member of the Schema
Administrators group for the target forest.

Admin Guide:
CTX107846

The HDSA Update tool can be used to

correct or update the Hot Desktop Shared
Account (HDSA) information on a Hot
Desktop machine.

CTX108771

Back to top
Clients

What

What it does

More information

CHANGE CLIENT

"Change client" changes the current disk

drive, COM port and LPT port mapping
settings for a client device.

Can be used to query or

refresh client setting or
printer settings. May
correct settings for a timing
issue at connect time or
clients reconnecting from a
new device.

- Available with the

Citrix Presentation
Server installation.

"Change Client" or "CHGCDM" command

Presentation Server
Administration Guide
- Appendix A

FTACLN

The FTACLN utility can be used to clean up CTX101594

the file type associations in the Windows
Registry on the device running the Program Can also be found on:
Neighborhood Agent.
Presentation Server 4.x
After uninstalling the Program
Server CD - Support Neighborhood Agent Version 6.3x from a
Debug
client device and restarting, some of the file
types associated with the PNAgent can
remain on the client device. This is evident,
for example, when you double-click a .txt
file in Explorer and the Executable Cannot
be Found Windows message appears.

MessageHistory 2.0 Simple GUI tool that traces window

for 32-bit and 64-bit messages, like spy++ or Winspector, but
platforms
easier to use.
Consists of two executable files (32- and 64bit). Simply start the exe, select via tick
boxes which messages should be traced and
click start.

Used to troubleshoot issues

with GUI, Seamless,
Clipboard, client, and so
on.

MSI Installation Log The Microsoft Windows Installer Tool can Microsoft Knowledge Base
generate a log of an MSI-based installation. article 227091
- Available with the
Windows installation To enable this the MSI file must be installed
using the MSEXEC command from the
command prompt.

Repair Clipboard
Chain 2.0.1

The RepairCBDChain utility temporarily

restores clipboard functionality.
Run the RepairCBDChain utility on your
workstation and/or inside the session desktop

Repair Clipboard
The RepairCBDChain64 utility for x64
Chain 2.0.1 for 64-bit platforms.
platforms

TWCONFIG
- Installed with
Presentation Server

Use twconfig to configure ICA display

Presentation Server
settings that affect graphics performance for Administration Guide clients.
Appendix A

WindowHistory 4.0
for 32-bit platforms

The WindowHistory utility complements

Spy++ and other tools. It constantly monitors
windows in the system (session) and records
all changes made to it. Information about
windows can then be saved for further
analysis.

WindowHistory
Mobile Version 2.2

This is the version of the WindowHistory

tool that works on ARM processors.

WindowHistory64
This is the version of the WindowHistory
4.0 for x64 platforms tool that works on 64-bit platforms.

Winspector

Winspector is a freeware that can be used

instead of Spy++ with mostly the same
functionality.

Useful for troubleshooting

some Seamless Windows
issues and allows
distinguishing of the
Window Class Name,
It captures all messages (keyboard input,
which is then used to set an
mouse movements/click, changes in the
window size and location, and so on) sent to exception flag.
a particular application for identifying issues
with ICA clients, compare results inside a
CTX103137
session and outside a session, keyboard
mapping issues, and so on.
CTX101644

Back to top
Content Redirection

What

What it does

FTACLN The FTACLN utility can be used to clean up the file type
associations in the Windows Registry on the device running the
Program Neighborhood Agent.

More information

CTX101594
Can also be found
on:

After uninstalling the Program Neighborhood Agent Version 6.3x

from a client device and restarting, some of the file types
Presentation Server
associated with the Program Neighborhood Agent can remain on 4.x Server CD the client device. This is evident, for example, when you double- Support - Debug
click a .txt file in Explorer and the Executable Cannot be
Found Windows message appears.

Back to top
CPU Utilization and Memory Optimization

What

What it does

ADSCleaner 2.0

Citrix Memory Optimization works by creating Alternate Data

More
information

Streams on each of the optimized files. Disabling the feature

or adding a file to the exclusion list does not remove the
Alternate Data Stream. The ADSCleaner.exe utility lists and
optionally deletes alternative data streams created by Citrix
memory optimization code.

ADSCleaner64
2.0 (for x64
platforms)

Citrix Memory Optimization works by creating Alternate Data

Streams on each of the optimized files. Disabling the feature
or adding a file to the exclusion list does not remove the
Alternate Data Stream. The ADSCleaner64.exe utility lists
and optionally deletes alternative data streams created by
Citrix memory optimization code on x64 platforms.

Back to top
Data Store Issues
- database corrupted, database migration issue, database connection issues

What

What it does

DSCHECK Version 5.15 DSCheck provides a way to perform

- For Presentation Server validation checks on a server farm's data
4.0 - Discontinued
store. Results are displayed on the
console and written to the event log. The
/clean option deletes inconsistent
records. Citrix recommends that you
back up the data store before using the
/clean option.

More information

Further information on
using this tool can be
found in Citrix Knowledge
Base article CTX107800
Example case studies:
CTX106958
Can be used if
irregularities are seen in
the Presentation Server
Console.

DSMaint

DSMAINT is used to configure the IMA

data store database for a server farm.
When using this command, user names
and passwords may be case-sensitive,

- Available with the

Citrix Presentation
Server installation

depending on the database product being

used and the operating system it runs on.

DSView

DSView can be used when you need to CTX106232

look at the value or find a specific record
in the data store or the local host cache. Example case studies:
DSView works by capturing the data
CTX109189, CTX108318
from the Binary Large Object (BLOB)
and placing it in an order so it can be
interpreted.

- Available on the
Support folder of the
Server CD

FarmAppUtil Tool

The FarmAppUtil tool saves all the

application properties with users and
servers assigned to those applications in
an XML file. The tool also creates a text
file with a folder structure. The XML file
created from the application can be
modified and used for republishing all
the applications and also recreate the
folder structure in the new farm.

FarmAppUtil S and
FarmAppUtil
<folderstructure.txt>
<FarmName.xml>

fc.exe

Can be used to compare ntuser.dat files

fc /?

IMA Kill SQL Script

This script will terminate all IMA

connections to an SQL 2000 database.

CTX106684

MIGRATETOMSDE

Use migratetomsde to migrate a server

Presentation Server
farms data store from Microsoft Access Administration Guide to Microsoft SQL Server 2000 Database Appendix A
Engine (MSDE). Migratetomsde offers
fail-safe operation and automatically
rolls back any changes that it makes to

- Native to Windows
2000, Windows 2003
and NT4.0

- Installed with
Presentation Server

the system in the event o

QueryHR

Use this utility to display information

about member servers in the farm.
Executing queryhr with no parameters
- Presentation Server
installation CD - Support lists all servers in the farm. Queryhr
obtains information from the local host
- Debug
cache.

Back to top
Independent Management Architecture (IMA)

What

What it does

More information

Citrix Enterprise
Tracer 5.8

Citrix Enterprise Tracer 5.8 enables IMA

debugging trace information under the
instruction of Citrix Technical Support.

No installation is
required. Execute from a
Citrix MetaFrame server
Feature Release 1
Feature Release 3 /
Service Pack 4.

IMA Kill SQL Script

This script will terminate all IMA

connections to an SQL 2000 database.

CTX106684

IMAPORT

Use imaport to query, set or reset the IMA - Administrators Guide TCP/IP port. Important: If you change port Appendix A
number 2513 on the first server in the farm
on which you install MetaFrame Presentation
Server, you cannot join additional servers to
the server farm.

- Installed with
Presentation Server

MSGHOOK.EXE
V4.0.1.0

MsgHook.exe (Message Hook) is an

executable from Citrix Independent
Management Architecture. MsgHook is a

Presentation Server 4.x command line utility that displays all IMA
Server CD - Support - traffic on a member server - Note: Execute
Debug: Windows 2003 msghook only if information is requested by
a Citrix Technical Support representative or a
Citrix engineer. When invoked, this
command significantly reduces Presentation
Server performance.

Back to top
Installation Manager

What

What it does

More information

PackageUtil A tool to update Installation In case the share has moved or packages removed
Manager package fileshares. from the share. Run packageutil /? To get a full list
of switches.

Back to top
Installation/Migration
- any issue related to installation or migration of Presentation Server, unable to install/uninstall

What

What it does

More information

MIGRATETOMSDE
- Installed with
Presentation Server

Use migratetomsde to migrate a server farms

data store from Microsoft Access to Microsoft
SQL Server 2000 Database Engine (MSDE).
Migratetomsde offers fail-safe operation and
automatically rolls back any changes that it
makes to the system in the event o.

Presentation Server
Administration
Guide - Appendix A

MSI Installation Log

The Microsoft Windows Installer Tool can

Microsoft
Knowledge Base

- Available with the

Windows installation

generate a log of an MSI-based installation.

article 227091

To enable this the MSI file must be installed

using the MSEXEC command from the
command prompt.

Wilogutl.exe

Wilogutl.exe assists the analysis of log files

from a Windows Installer installation, and it
displays suggested solutions to errors that are
found in a log file.

- Available with
Microsoft Platform
SDK

Back to top
Load Balancing

What

What it does

More
information

QueryDS

Because all of the dynamic information is stored in tables in

the data collectors physical RAM, this command-line utility
is provided to query the current information on the local zone
- Presentation
Server installation data collector. You can use QueryDS to determine which
servers are currently available in a farm. It retrieves all
CD - Support information from the tables stored on the local zone data
Debug
collector. For example, the PN_Table contains information
about all available servers that are accepting Program
Neighborhood connections.

Back to top
Login/Authentication
- any authentication issue such as Single Sign On, smart card authentication, Novell
authentication

What

What it does

More information

ACRCFG

Use ACRCFG to configure or enable

automatic client reconnection settings for a
server or a server farm.

Troubleshoot client
disconnects or not getting
automatically reconnected.

- Available with
the Citrix
Presentation
acrcfg [/server:servername | /farm][/query
Server installation | /q]
acrcfg /?

AUDITLOG

Auditlog generates reports of logon/logoff

activity for a server based on the Windows
NT Server security event log. To use
- Available with
auditlog, you must first enable logon/logoff
the Citrix
accounting. You can direct the auditlog
Presentation
Server installation output to a file.

Presentation Server
Administration Guide Appendix A

CAE Internet
When configuring CAE Remote access, if
Connectivity Test you run into connectivity problems this tool
Service
helps narrow down the problem by running a
series of tests.

On failure or error, a
suggested resolution is
provided. See Citrix Access
Essentials Connectivity
Testing

Is DNS registration OK?

Is IIS running?
Is ASP.NET working?
Is the correct website present?
Is Secure Gateway running?
Are any inappropriate ports open?

User Profile
Deletion Utility

Delprof is a command-line utility that you

can use to delete user profiles on local or
remote computers running Windows 2000,

Can be used in scenarios

where there is only one user
experiencing the problem or

Windows XP, and Windows Server 2003.

User profiles can grow large and may take
up considerable disk space, especially if
there are several users using one computer.

to clean local profiles off a

Presentation Server.

Resource Kit Web Checks whether the current user is a member Verifying Program
Package:
of a specified group.
Neighborhood Agent
IfMember.exe
application sets, or desktop
icons, can reference the group
the application is published
to.

Limit Login

The application adds the ability to limit

concurrent user logins and to keep track of
all login information in an Active Directory
domain. LimitLogin capabilities include
limiting the number of logins per user from
any machine in the domain (including
Terminal Server sessions), displaying the
login information of any user in the domain
according to specific criteria.
While the main purpose of LimitLogin is to
enforce concurrent login quotas, it can also
be used purely as a login data capture
solution that lets you manage your Active
Directory environment more effectively.

LogonSessions
v1.1

When you want to see who is authenticated

and is running a session on a server.

It lists the currently active

logon sessions and the
processes running in each
session. It lists the session ID,
name of the user, the
authentication type, SID,
Logon Server and Domain of
the user.

Netdiag

Netdiag.exe is a command-line tool that you Can be used for

can use to test the network connectivity of

troubleshooting multihomed
the computer. Netdiag.exe performs a series servers or client latency.
of tests to determine the state and
functionality of your network client
computer. You can use the results of these
tests, and the network status information that
is provided by Netdiag.exe, to isolate
network and connectivity problems on your
Windows based workstation or server.

Nltest.exe

Nltest.exe is a very powerful command-line

utility that can be used to test trust
relationships and the state of domain
controller replication in a Windows NT
domain.

Can be used for multi domain

farms where you suspect
trusts to be an issue, when
publishing applications to
users or using Advanced
Access Control.

MedEvac 2.5

The MedEvac tool is utilized to run checks

against a Presentation Server farm to verify
environment health.

CTX108311

QueryDC

The QueryDC utility is used to determine

the data collector for a given zone. Without
any parameters, Querydc defaults to the host
- Presentation
Server installation servers zone and returns the zone name and
name of the current zone data collector.
CD - Support Debug

QueryDS

Because all of the dynamic information is

stored in tables in the data collectors
physical RAM, this command-line utility is
- Presentation
Server installation provided to query the current information on
the local zone data collector. You can use
CD - Support QueryDS to determine which servers are
Debug
currently available in a farm. It retrieves all
information from the tables stored on the
local zone data collector. For example, the
PN_Table contains information about all

available servers that are accepting Program

Neighborhood connections.

RDT.EXE

RDT.EXE (Read Date Time) can be used to

read the date and time stamps from all of the
various keys in a the server's shadow area.
SDT.EXE (Set Date Time) can be used to
manually set the datestamps of those keys to
any date that you choose.

User Profile Hive UPH Clean fixes issues with stuck user
Cleanup Service profiles. It kills any processes that have
hooks open to the users profile after the
user initiates the logoff process.

Microsoft Knowledge Base

article 837115

Issues with this are commonly encountered

with roaming user profiles.

Userenv.log
- Available with
the Windows
installation

The Userenv.log file is used for capturing

Microsoft Knowledge Base
logging and debugging information
article 221833
regarding the user profile and the Windows
system policy processes, including registry
accesses, during the logon process. This can
be helpful for troubleshooting issues that
occur during the logon to a Citrix server.
Because of the large amount of data logged,
it should be enabled on an isolated server
when possible.

Back to top
NetScaler

What

What it does

More information

IE HTTP
HEADERS

Internet Explorer: Used to see all the HTTP

communication between a Web browser and a
Web server. This includes GET requests,
cookies, Referer URLs, HTTP Codes (404,
200, 500, and so on) Etags, Compression
Encoding, and so on. This tool is invaluable
when a Web site or Web application is not
behaving as it should, and you need to see
what is going on behind the scenes. An
understanding of the HTTP protocol is
required to get the most out of this tool.

NSCONMSG

Executed from SHELL in a NetScaler SSH

nsconmsg -K
session. Examples of the command are: (Note /var/nslog/newnslog -d ?
the capital K as a command switch!!)
lists other arguments which
can be used to gather more
nsconmsg -K /var/nslog/newnslog -d consmsg information.
gives you all messages sent to the console
during the timeline covered by the newnslog

- Located in
/netscaler/ on all
NetScaler systems

SHOW

Run this command to view current

configuration information. It extracts a
snapshot of information from the NetScaler
- Part of the
NetScaler CLI, all Kernel. Use this command if you are not
familiar with the configuration or
versions of the
NetScaler operating environment in which the NetScaler sits.
system

Tcpdump
- This is part of the
CLI when you SSH
into a TEROS box.
Located in /usr/sbin
on NetScaler

Back to top
Performance

This command can be used to gather

CTX109345
information on all TCP traffic passing through
a particular NIC.

- ICA session slow, server slow down, ICA session hangs, application hangs, server hangs

What

What it does

Automatic
Farm Tuner

The Automatic Farm Tuner utility is

CTX108456
designed to tweak the advanced registry
setting on the data collectors in a large farm
and tune the data collectors to adapt to a
large farm environment. With this utility in
place, all manual performance tweaking on
the data collectors can be automatically set.

BAT
Display network usage for any client
(Bandwidth
connected to any server on the LAN over
Analysis Tool) RDP or ICA.
Information displayed includes bytes
transferred per second, timeout errors, %
CPU used by the connection, memory used.

More information

Enables you to quickly see if a

client (and which) is causing high
CPU/RAM load or consumes
network bandwidth. Can be used
to troubleshoot bandwidth
policies and performance issues.

Individual connections can be combined to

display a summary of network usage, useful
if you need to check traffic over a 64k or
128k line.

Citrix
Connection
Test Tool

Citrix Connection Test Tool provides

various connection methods for scalability
test and other tests which require a number
of sessions to be established. The tool
enables testers to establish as many
numbers of ICA sessions as they want by
creating or duplicating session settings on
Citrix Presentation Server Client.

Useful for loading the server for

trying to identify performance
issues.

Citrix Server
Test Kit

The Citrix Server Test Kit (CSTK) version Can be used for loading servers
2.1 is an automated tool that can be used by for performance testing.
administrators to configure and run various

user load combinations.

CTX091649

Latency
Checker

Run this tool within an ICA session and

monitor the real time the latency of your
ICA session as well as CPU and memory
usage on the server.

This tool can be used for

troubleshooting performance
issues.

Netdiag

Netdiag.exe is a command-line tool that you Can be used for troubleshooting

can use to test the network connectivity of multihomed servers or client
the computer. Netdiag.exe performs a series latency.
of tests to determine the state and
functionality of your network client
computer. You can use the results of these
tests, and the network status information
that is provided by Netdiag.exe, to isolate
network and connectivity problems on your
Windows based workstation or server.

QSlice

QSlice is used in conjunction with

UserDump.exe to show the thread within a
process causing the spike or hang. Open
Qslice, click into hanging process to get
thread detail and take a screenshot before
taking userdump.

RDT.EXE

RDT.EXE (Read Date Time) can be used to

read the date and time stamps from all of
the various keys in a the server's shadow
area. SDT.EXE (Set Date Time) can be used
to manually set the datestamps of those
keys to any date that you choose.

SMU (Session Displays memory usage of each individual

Memory
session on your Presentation Server
Usage)

TWCONFIG
- Installed
with
Presentation
Server

Use twconfig to configure ICA display

Presentation Server
settings that affect graphics performance for Administration Guide - Appendix
clients.
A

Userdump

You can use the Userdump.exe tool to

Microsoft Knowledge Base
generate a user dump of a process that shuts article 241215
down with an exception or that stops
responding (hangs). Before dumping a
hanging process, it is helpful to take a
screenshot of the Qslice.exe window. This
output will assist in dump analysis.

WinDBG

Use WinDbg to open crash dumps obtained Search support.citrix.com for

from Dr. Watson, manually generated
"WinDBG" to get a list of How
userdumps, or Windows crashes. Once the To guides.
crash dump has finished loading, many
commands can be used to provide helpful
information about the error.
The command !analyze v performs basic
exception analysis, reporting the error that
occurred and the module in which it
occurred.
The command lmv can be used to show all
of the modules loaded, including their full
path and version information.

WinDBG 64bit

This is the Windows debugger for 64-bit

platforms.

Back to top
Ports and Printing

- any cases related to port mapping and printing, printer autocreation, printer drivers,
replications, and spooler issues/crashes

What

What it does

StressPrinters
1.3.2 for 32-bit
and 64-bit
Platforms

Use to test if a driver is suitable for multiuser environments. It should be

configured with multiple instances
simultaneously, simulating multiple
sessions autocreating printers using the
same print driver. This allows an admin to
ensure a driver does not cause a fatal error
on their server and autocreates
successfully.

Print Detective

Enumerates print drivers on local and

remote machines. Displays driver details,
provider, supporting files, and so on.

Great for determining nonnative print drivers and quickly

removing them.

PRINTUI

Built-in utility to perform many printing

related tasks including pushing print
drivers, adding and deleting printers, and
more.

PRINTUI Reference

CHANGE
CLIENT

Change client changes the current disk

drive, COM port, and LPT port mapping
settings for a client device.

Can be used to query or refresh

client setting or printer settings.
May correct settings for a
timing issue at connect time or
clients reconnecting from a new
device.

- Available with
the Citrix
Presentation
Server
installation.
Presentation
Server
Administration
Guide - Appendix

"Change Client" or "CHGCDM"

command

More information

CLTPRINT

Use cltprint to set the number of printer

pipes for the client print spooler. Printer
pipes are used to send data from
- Available with
applications to client print spoolers. The
the Citrix
number of pipes specifies the number of
Presentation
Server installation print jobs that can be sent to the spooler
simultaneously.

Driver Deleter

Presentation Server
Administration Guide Appendix A
Use this tool to query if the
maximum number of pipes has
been set too low.

A utility for cleaning the registry after

removing printer drivers.
The Driver Deleter utility is used to
remove old driver files and registry entries
before installing new drivers. After
running this utility you must reboot your
server for the effects to take place.

Enumerate All
The ListPrinterDrivers tool allows you to
Printer Drivers In list all printer drivers in a farm.
A Citrix Farm

MFPrinterUtil
Tool

The MFPrinterUtil.exe tool can be used

for listing and storing all printer drivers on
MetaFrame servers in the form of an XML
file. It can also compare the printer drivers
present on two servers and list the printer
drivers that are not on both servers. This
tool is written in C#.net and uses
Mfcom.dll to query the IMA.

Portmon for
Windows v3.02

Displays serial and parallel port activity

Useful to troubleshoot port
on a system with the capability to filter the problems, for example, using a
output for better overview.
device on the client's serial port
from a published application.
Run the tool in the session and

on the client and see which

actual commands are being sent
to the port.

Microsoft
Windows Server
2003 Print
Migrator 3.1

Print Migrator provides complete backup,

restore and migration operations for
Windows NT-based operating systems
from Windows NT 4 to Windows 2003.

Qprinter

The Qprinter utility is used to monitor the

progress of the printer driver replication
queue and to import printer name mapping
parameters into the data store.

- Presentation
Server CD Support Debug
folder

Back to top
Resource Manager

What

What it does

More
information

TSSHUTDN Enables an administrator to remotely shut down or reboot a

terminal server. You can also choose to power off the server if the
computer supports software control of AC power.

Back to top
Seamless
- any issue related to applications in Seamless only

What

What it does

More information

MessageHistory 2.0 Simple GUI tool that traces window

for 32-bit and 64-bit messages, like Spy++ or Winspector, but
platforms
easier to use.

Used to troubleshoot issues

with GUI, Seamless,
Clipboard, client, and so on.

Consists of two executable files (32- and

64-bit). Simply start the exe, select via tick
boxes which messages should be traced
and click start.

WindowHistory 4.0
for 32-bit platforms

The WindowHistory utility complements

Spy++ and other tools. It constantly
monitors windows in the system (session)
and records all changes made to it.
Information about windows can then be
saved for further analysis.

WindowHistory
Mobile Version 2.2

This is the version of the WindowHistory

tool that works on ARM processors.

WindowHistory64
This is the version of the WindowHistory
4.0 for x64 platforms tool that works on 64-bit platforms.

Winspector

Back to top
Shadowing

Winspector is a freeware that can be used

instead of Spy++ with pretty much the
same functionality.

Useful for troubleshooting

some Seamless Windows
issues and allows
distinguishing of the
It captures all messages (keyboard input, Window Class Name, which
is then used to set an
mouse movements/click, changes in the
window size and location, and so on) sent exception flag.
to a particular application for identifying
issues with ICA clients, compare results
CTX103137
inside a session and outside a session,
keyboard mapping issues, and so on.
CTX101644

What

What it does

More information

SHADOW Enables you to remotely control an active session of another

user.

Back to top
Teros

What

What it does

IE HTTP HEADERS

Internet Explorer: Used to see all

the HTTP communication between
a Web browser and a Web server.
This includes GET requests,
cookies, Referer URLs, HTTP
Codes (404, 200, 500, and so on)
Etags, Compression Encoding, and
so on. This tool is invaluable when
a Web site or Web application is
not behaving as it should, and you
need to see what is going on
behind the scenes. An
understanding of the HTTP
protocol is required to get the most
out of this tool.

LIST_NETWORK_CONFIG

This command is used to view the

network IP configuration of a
TEROS device. This gives a very
basic overview of what IPs are
configured on the box.

- This is part of the CLI when

you SSH into a TEROS box

LIVE HTTP HEADERS

FireFox: Used to see all the HTTP

communication between a Web
browser and a Web server. This
includes GET requests, cookies,

More information

Other variants of the

list_ command are:
list_open_ports ;
list_routing_tables ;
list_arp_table

Referer URLs, HTTP Codes (404,

200, 500, and so on) Etags,
Compression Encoding, and so on.
This tool is invaluable when a Web
site or Web application is not
behaving as it should, and you
need to see what is going on
behind the scenes. An
understanding of the HTTP
protocol is required to get the most
out of this tool.

PAROS

Java HTTP Proxy Cross-platform

suitable for Java 1.4.2 or later.
Used to display HTTP Header and
HTTP Body content. This can be
used to simulate a Web users
session when interacting with a
Web application. It is possible for
the proxy to trap a request or a
response, whereby you can edit
this, before sending it on to the
browser or the server. In this you
can insert your own malformed
HTTP requests or HTTP Web
server responses. This is especially
useful in troubleshooting an
application which does not behave
as expected when being protected
by a TEROS appliance.

PING IP_ADDRESS [CTRL|

LAN|WAN]

This command is used to send

ICMP packets out through a
specific interface. This can help
resolve routing issues.

- This is part of the CLI when

you SSH into a TEROS box

Tcpdump
- This is part of the CLI when
you SSH into a TEROS box.

Can be used instead of

HTTP Headers. It may
not be necessary to
process the HTML Body
content, just the HTTP
Header information.

This command can be used to

CTX109345
gather information on all TCP
traffic passing through a particular

Located in /usr/sbin on NetScaler NIC.

Back to top
Virtual IP (VIP)

What

What it does

More
information

QRYClientIP Command line tool to query a session's client IP. Used to allow
one login script to process specific commands for specific IP
addresses or IP segments.

Back to top
Web Interface

What

What it does

Citrix Web Server This tool is an Active Server Page (ASP) script
Debugging &
for use by Citrix Web server administrators.
Analysis Tool
This tool inspects a Web server running
Microsoft Internet Information Services (IIS)
and reports on its status as an NFuse Classic
Web server, a Citrix Secure Gateway Secure
Ticket Authority (STA), or a MetaFrame server
providing the Citrix XML Service through IIS.

CTXXMLSS
- Available with
the Citrix
Presentation
Server
installation

More information

CTX052061
See CTX103673 for Web
Interface 3.0 and 4.0 error
messaging.

By default, the Citrix XML Service shares a port CTX104063

with IIS. The CTXXMLSS command can be
used to change to a different port, or revert back Can be used to ensure that
to sharing with IIS
port conflicts are not seen
on Presentation Servers
with IIS. Try changing the
XML port to a different
port to see if problem

persists.

IE HTTP
HEADERS

Internet Explorer: Used to see all the HTTP

communication between a Web browser and a
Web server. This includes GET requests,
cookies, Referer URLs, HTTP Codes (404, 200,
500, and so on) Etags, Compression Encoding,
etc. This tool is invaluable when a Web site or
Web application is not behaving as it should,
and you need to see what is going on behind
the scenes. An understanding of the HTTP
protocol is required to get the most out of this
tool.

RSATest

RSATest Web page is used when you have a

Secure Gateway implementation where an RSA
backend server does the second method
authentication. This page is used to assert proper
communication between Secure Gateway/Logon
Agent objects and RSA backend server.