XenApp 6.5 by default install the desktop experience. Users now can enable an Windows 7 theme. There are 5 powershell scripts installed which can be used to make life easier Knipogende emoticon

The scripts are located here: “C:\Program Files (x86)\Citrix\App Delivery Setup Tools″


  • Adds Desktop Experience & XPS Viewer
  • Moves Citrix Administration tools folder
  • Creates a new Windows Theme and default wallpaper
  • Starts Windows Themes service and configures it to start automatically
  • Then runs CommonDesktopExperience.ps1


  • Sets Themes service to automatic & starts
  • Backs up existing user tile and copies a new user tile to user.jpg


  • This powershell script not important to delivering Windows 7 look and feel
  • Creates GPO’s that allow lockdown and personalization of shared desktop


  • Customizes the task bar
  • Has error checking not to double create links
  • Removes server manager & powershell links
  • Adds IE & media player links
  • Applied at login via a GPO
  • Create a news Windows Theme file by copying Basic.theme to the file specified in the ThemeFile parameter
  • Configure the new theme to use the wallpaper specified in the WallpaperFile parameter

The following GPO’s are created by the New-CtxManagedDesktopGPO.ps1 script

CtxStartMenuTaskbarUser: Enables the Windows 7 look and feel for published desktops. It also changes the pinned shortcuts on the Taskbar and configures the user’s Start menu to match the Windows 7 environment. This GPO includes a script that executes when a user logs on to the server for the first time. To ensure the script executes correctly, the PowerShell execution policy on the server must be set to AllSigned.

CtxPersonalizableUser: Configures the user account that is accessing the XenApp server. It configures Windows policies to limit the available Control Panel applets and restricts users from installing programs, viewing properties, scheduling tasks, or shutting down the server.

CtxRestrictedUser: Includes most of the policies from the CtxPersonalizableUser GPO. Additionally, this GPO configures the Desktop wallpaper policy to prevent users from personalizing their desktops and prevents users from modifying settings for the Start menu and Taskbar.

CtxRestrictedComputer: Configures certain restrictions on the XenApp servers allocated to the tenant. This GPO restricts users from accessing Windows Update or removable server drives.

Jeroen Tielen

Experienced Consultant/Architect with a demonstrated history of working in the information technology and services industry. Skilled in Citrix, Microsoft, VMware, Ivanti, etc.


Ctxuser · December 10, 2011 at 20:17

You’re guide is like Citrix proddocs, almost clear, but not clear enough 😉

Jeroen · December 13, 2011 at 11:49

Thanks, Ill do my best hahaha. 🙂

credit reports · July 30, 2012 at 12:57

I think this is among the such a lot important info for me.
And i am satisfied studying your article. However wanna observation on few normal things,
The site taste is perfect, the articles is actually great :
D. Good job, cheers

Frank · January 17, 2013 at 10:27


Dit is een top website, bedankt dat je hier je kennis deelt met anderen. Ik wacht nog op Self Service Plugin / StoreFront / Merchandising Server / Citrix Access Gateway (Part5)

Maelito · July 30, 2013 at 01:17

Great post, made me get the concept much better.

Is there a way to control the apps that a user sees whe using a publish desktop?


    Jeroen Tielen · July 30, 2013 at 08:16

    What do you mean Maelito?

      Maelito · July 30, 2013 at 11:04

      Well I have a few W2K8 servers with XA6.5 installed.
      So I have my Netbackup software, Office 2010 apps and apps for HR, Marketing and Accounts depts.

      Now I would like the folks in Accounts just to see the accounting apps and Office 2010 apps and nothing else.

      The same for the other users, make them see only the apps they should see and not the full server installs.

      Is there a way to do this?

        Jeroen Tielen · July 30, 2013 at 13:35

        Ahh oke.

        There are lost of tricks/tools to do that. You could install a user environment manager like RES workspace manager or AppSense.

        But you could also delete al shotcuts from the startmenu and then create a login script wich will fill your startmenu with only the shortcuts you like (robocop script, .lnk with ntfs rights).

        Etc etc etc 😉


          Maelito · July 30, 2013 at 13:44

          Yeah, Appsense and all are paid for… I need a free option… Plus I have VMware VDI which is already redirecting the user docs, desktop and startmenus…

          Jeroen Tielen · July 30, 2013 at 14:08

          RES Workspace Manager Express is free. Only limited to 100 users (http://www2.ressoftware.com/WM-Express-download).

          What you could do is create a loging script that:

          a: Clears the startmenu and all common links.
          b: Copy the startmenu from a repository to the user his stratmenu location. (use robocopy and skip items where the user hasn’t got rights on).

Adarsh · October 31, 2014 at 16:39

How do we achieve Win7 look and feel on Win 2012 R2 environment?

    Jeroen Tielen · December 23, 2014 at 09:48

    No possible. Windows 2012R2 is a complete different OS.

Leave a Reply

Avatar placeholder

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: