Citrix Director 2311

Last Modified: Dec 22, 2023 @ 9:03 am


💡 = Recently Updated

Change Log

Director Licensing – Premium Edition

Here’s the list of Director features that require Premium Edition (aka Platinum Edition) licensing.

  • Up to a year’s worth of performance data
    • Other editions keep up to 30 days of performance data
  • Application Probing
  • Alerting, including SNMP integration
  • SCOM alerts
  • Single session OS (aka Desktop OS) and Multi-session OS (aka Server OS) usage reporting
  • Create customized reports
  • Reboot warnings
  • Citrix ADM integration – HDX Insight

See Citrix Docs Feature compatibility matrix for a list of which Director feature came with each version, and the licensing Edition needed for each feature.

Install/Upgrade Director 2311 on Standalone Server

Current Release vs LTSR – Director version 2311 is a Current Release, which is only supported for 6 months from its release date, and you are expected to upgrade it every 3-6 months. If you prefer a release with a longer support cycle, see Director 2203 LTSR.

Install on Delivery Controller? – The Citrix Virtual Apps and Desktops (CVAD) Delivery Controller metainstaller has an option to install Director on the Delivery Controller machine. Or you can install Director on separate, dedicated machines.

  • If Director will connect to multiple sites/farms, then install Director on its own servers.
  • For small environments, it might be OK to install Director on the Delivery Controller machines. Otherwise, Director is usually installed on separate machines.
  • Director is an IIS website. If you install Director, then IIS is also installed.

Director and Delivery Controller versions – Director 2311 supports Delivery Controllers 2203 and newer.

Installation guidance – For Director installation guidance, see the following:

Scripted install – To install and configure Director using a script, see Dennis Span Citrix Director unattended installation with PowerShell.

Manual installation – To install Director manually:

  1. Run AutoSelect.exe from the Citrix Virtual Apps and Desktops 2311 ISO.
  2. In the Extend Deployment section, on the bottom left, click Citrix Director.
  3. In the Licensing Agreement page, select I have read, understand, and accept the terms, and click Next.
  4. In the Core Components page, click Next.
  5. In the Delivery Controller page, it will ask you for the location of one Delivery Controller in each farm. Only enter one Delivery Controller per farm. If you have multiple Director servers, each Director server can point to a different Delivery Controller in each farm.
    • From Citrix Docs: Director automatically discovers all other Delivery Controllers in the same Site and falls back to those other Delivery Controllers if the Controller you specified fails. Click Test Connection, and then click Add.
  6. You can optionally force SSL/TLS for the Monitoring service by following the instructions at Data Access Security at Citrix Developer Documentation. Also see CTX224433 Error: “Cannot Retrieve Data” on Citrix Director Dashboard After Securing OData Interface Through TLS.
  7. In the Features page, click Next.
  8. In the Firewall page, click Next.
  9. In the Summary page, click Install.
  10. The machine will probably restart.
  11. After the machine reboots twice, login and installation should continue.
    1. If you see a Locate ‘Citrix Virtual Apps and Desktops 7’ installation media window, don’t click anything.
    2. Go to the Citrix_Virtual_Apps_and_Desktops_7_2311.iso file and mount it.
    3. Go back to the Locate ‘Citrix Virtual Apps and Desktops 7’ installation media window.
    4. On the left, expand This PC, and click the DVD Drive.
    5. Click Select Folder.
    6. Repeat these instructions every time you’re prompted to restart.
  12. In the Finish page, click Finish.
  13. In IIS Manager, go to Default Web Site > Director > Application Settings, find Service.AutoDiscoveryAddresses, and make sure it points to one Delivery Controller in the farm, and not to localhost. From Citrix Docs: Director automatically discovers all other Delivery Controllers in the same Site and falls back to those other Delivery Controllers if the Delivery Controller you specified fails.
  14. If you built multiple Director servers, use Citrix ADC to load balance them.
  15. If you are upgrading Director, run C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe /upgrade to complete the upgrade process.
  16. Reconfigure the default domain in LogOn.aspx since upgrading overwrote your domain name configuration.
  17. For info on the new monitoring features in Director, see Use Director below.

Director Default Web Page

From CTX223907 How to Make Director the Default Page within IIS: If Director is installed on a standalone server, do the following to set /Director as the default path. If Director and StoreFront are on the same server, then you’ll probably want StoreFront Receiver for Web as the default web page instead of Director.

  1. Open Notepad elevated (as administrator) and paste the following text:
    <script type="text/javascript">
    // -->
  2. Adjust the window.location line to match your FQDN.
  3. Select File > Save As and browse to the IIS folder, by default C:\inetpub\wwwroot is the IIS folder.
  4. Select the Save as type to All types.
  5. Type a file name with an html extension, and select Save.
  6. Open IIS Manager.
  7. Select the SERVERNAME node (top-level), and double-click Default Document, as shown in the following screen shot:
  8. On the right, click Add…,
  9. Enter the file name of the .html file provided in Step 5.
  10. Ensure the .html file is located at the top of the list, as shown in the following screen shot:

Director Spinning Circle

If after login to Director the spinning circle doesn’t go away…

…then do the following to fix it:

  1. Edit the file C:\inetpub\wwwroot\Director\web.config using an elevated text editor.
  2. Search for <serviceHostingEnvironment (line 279).
  3. Add the following attribute:

Also see CTX202564 Citrix Director Becomes Unresponsive after Submitting the Credentials when IIS X-Frame-Options is enabled

Director Domain Field

On the Director servers, locate and edit the ‘LogOn.aspx’ file. By default you can find it at C:\inetpub\wwwroot\Director\Logon.aspx

In line 472 you will have the following. To find the line, search for ID=”Domain”.

<asp:TextBox ID="Domain" runat="server" CssClass="text-box" onfocus="showIndicator(this);" onblur="hideIndicator(this);"></asp:TextBox>

In the ID=”Domain” element, insert a Text attribute and set it to your domain name. Don’t change or add any other attributes. Save the file.

<asp:TextBox ID="Domain" runat="server" Text="Corp.local" CssClass="text-box" onfocus="showIndicator(this);" onblur="hideIndicator(this);"></asp:TextBox>

This configuration prepopulates the domain field text box with your domain name and still allow the user to change it, if that should be required. Note: this only seems to work if Single Sign-on is disabled.

Citrix CTX227936 How to hide the domain from Director Logon Page:

  1. Edit the file C:\inetpub\wwwroot\Director\LogOn.aspx using an elevated text editor.
  2. Locate the tag which starts with: <asp:Label ID="DomainLabel"
  3. Immediately prior to that label, locate the tag: <div class='label eight'>
  4. Add the following before <div class=’label eight’>: <div style='display:none'>
  5. In between “</asp:Textbox> <br />” add the following: </div>

Director Tweaks

Session timeout

By default the idle time session limit of the Director is 245 min. If you wish to change the timeout, here is how to do it:

  1. Log on to the Director Server as an administrator
  2. Open the ‘IIS Manager’
  3. Browse to ‘Sites > Default Web Site > Director’ in the left hand pane.
  4. Open ‘Session State’ in the right hand pane.
  5. Change the ‘Time-out (in minutes)’ value under ‘Cookie Settings’
  6. Click ‘Apply’ in the Actions list

SSL Check

If you are not securing Director with an SSL certificate you will get this error at the logon screen.

To stop this:

  1. Log on to the Director Server as an administrator
  2. Open the ‘IIS Manager’
  3. Browse to ‘Sites > Default Web Site > Director’ in the left hand pane.
  4. Open ‘Application Settings’ in the right hand pane.
  5. Set UI.EnableSslCheck to false.

Disable Activity Manager

From Disable the visibility of running applications in the Activity Manager in Advanced Configuration at Citrix Docs: By default, the Activity Manager in Director displays a list of all the running applications and the Windows description in the title bars of any open applications for the user’s session. This information can be viewed by all administrators that have access to the Activity Manager feature in Director. For Delegated Administrator roles, this includes Full administrator, Delivery Group administrator, and Help Desk Administrator.

To protect the privacy of users and the applications they are running, you can disable the Applications tab from listing running applications.

  • On the VDA, modify the registry key located at HKLM\Software\Citrix\Director\TaskManagerDataDisplayed. By default, the key is set to 1. Change the value to 0, which means the information will not be displayed in the Activity Manager.
  • On the server with Director installed, modify the setting that controls the visibility of running applications. By default, the value is true, which allows visibility of running applications in the Applications tab. Change the value to false, which disables visibility. This option affects only the Activity Manager in Director, not the VDA. Modify the value of the following setting:
    UI.TaskManager.EnableApplications = false

Large Active Directory / Multiple Forests

From CTX133013 Desktop Director User Account Search Process is Slow or Fails: By default, all the Global Catalogs for the Active Directory Forest are searched using Lightweight Directory Access Protocol (LDAP). In a large Active Directory environment, this query can take some time or even time out.

If multiple forests, see Citrix Blog Post Using Citrix Director in a MultiForest Environment.

  1. In Information Server (IIS) Management, under the Desktop Director site, select Application Settings and add a new value called Connector.ActiveDirectory.ForestSearch. Set it to False. This disables searching any domain except the user’s domain and the server’s domain.
  2. To search more domains, add the searchable domain or domains in the Connector.ActiveDirectory.Domains field.

Site Groups

From Citrix Blog Post Citrix Director 7.6 Deep-Dive Part 4: Troubleshooting Machines:

If there are a large number of machines, the Director administrator can now configure site groups to perform machine search so that they can narrow down searching for the machine inside a site group. The site groups can be created on the Director server by running the configuration tool via command line by running the command:

C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe /createsitegroups

Then provide a site group name and IP address of the delivery controller of the site to create the site group.

Director Configuration Script

Johan Greefkes at Script for configuring Director at Citrix Discussions was kind enough to provide a script that does the following:

  • Sets the Delivery Controllers that Director communicates with
  • Disables SSL Check
  • Sets Logon.aspx file to default to a domain name
  • Adds a footer that displays the name of the Director server

The same DirectorReconfigureWithLogonMod.ps1 script seems to be available at Citrix’s Github\Powershell-Scripts repository.

Director – Saved Filters

In Director, you can create a filter and save it.

The saved filter is then accessible from the Filters menu structure.

The saved filters are stored on each Director server at C:\Inetpub\wwwroot\Director\UserData. Each user has their own saved filters. The saved filters are not replicated across Director servers.

You can instead configure multiple Director servers to store the filters on a shared UNC path:

  1. Create and share a folder (e.g. DirectorData).
  2. The Director server computer accounts need Modify permission to the share.
  3. On each Director server, run IIS Manager.
  4. Go to Sites > Default Web Site > Director. In the middle, double-click Application Settings.
  5. Change the Service.UserSettingsPath setting to the UNC path of the new share.
  6. Repeat this on other load balanced Director servers.

Director and HDX Insight

You can connect Director to Citrix Application Delivery Management (ADM) to add Network tabs to Director’s Trends and Machine Details views. Citrix Blog Post Configure Director with NetScaler Management & Analytics System (MAS).

Director Grooming

If Citrix Virtual Apps and Desktops (CVAD) is not Premium Edition, then all historical Director data is groomed at 30 days.

For Citrix Virtual Apps and Desktops (CVAD) Premium Edition, by default, most of the historical Director data is groomed at 90 days. This can be adjusted up to 367 days by running a PowerShell cmdlet.

  1. On a Delivery Controller, run PowerShell and run asnp Citrix.*

  2. Run Get-MonitorConfiguration to see the current grooming settings.
  3. Run Set-MonitorConfiguration to change the grooming settings.

More details on Monitor Service data aggregation and retention can be found at Data granularity and retention at Citrix Docs.

Director Single Sign-on

You can configure Director to support Integrated Windows Authentication (Single Sign-on). Note: there seem to be issues when not connecting from the local machine or when connecting through a load balancer.

  1. Run IIS Manager. You can launch it from Server Manager (Tools menu), or from the Start Menu, or by running inetmgr.
  2. On the left, expand Sites, expand Default Web Site, and click Director.
  3. In the middle, double-click Authentication in the IIS section.
  4. Right-click Windows Authentication, and Enable it.
  5. Right-click Anonymous Authentication, and Disable it.
  6. Pass-through auth won’t work from another computer until you set the http SPN for the Director server. See Director 7.7 Windows Authentication not working with NS LB at Citrix Discussions.
  7. If Director is not installed on a Controller, then you’ll need to configure Kerberos delegation.
  8. If you are load balancing Director then additional config is required. See Director 7.7 Windows Authentication not working with NS LB at Citrix Discussions for more info.
    1. The FQDN for Director load balancing should be different than the FQDN for StoreFront load balancing.
    2. Create an AD service account that will be used as the Director’s ApplicationPoolIdentity.
    3. Create SPN and link it to the service account.
      setspn -S http/loadbalanced_URL domain\user
    4. Trust the user account for delegation to any service (Kerberos only) (trust the Director servers for delegation is not necessary in this case). You have to create the SPN before you can do this step.
    5. In IIS manager, on the Application Pools (Director), specify the Identity as user we have created earlier.
    6. In IIS manager, expand Default Web Site, select Director, and open the Configuration Editor (bottom of the middle pane).
    7. Use the drop-down to navigate to the following section: system.webServer/security/authentication/windowsAuthentication
    8. Set useAppPoolCredentials = True, and useKernelMode = False. Click Apply on the top right.

  9. When you connect to Director you will be automatically logged in. You can change the login account by first logging off.
  10. Then change the drop-down to User credentials.

Director – Multiple Citrix Virtual Apps and Desktops (CVAD) Sites/Farms

  1. Run IIS Manager. You can launch it from Server Manager (Tools menu) or from the Start Menu, or by running inetmgr.
  2. On the left, expand Sites, expand Default Web Site, and click Director.
  3. In the middle pane, double-click Application Settings.
  4. Find the entry for Service.AutoDiscoveryAddresses, and double-click it.
  5. If Director is installed on a Controller, localhost should already be entered.
  6. Add a comma, and the NetBIOS name of one of the controllers in the 2nd Citrix Virtual Apps and Desktops Site (farm). Only enter one Delivery Controller name. If you have multiple Director servers, you can point each Director server to a different Delivery in the 2nd Citrix Virtual Apps and Desktops Site (farm).
    1. From Citrix Docs: Director automatically discovers all other Delivery Controllers in the same Site and falls back to those other Delivery Controllers if the Delivery Controller you specified fails.
    2. You can optionally force SSL/TLS for the Monitoring service by following the instructions at Data Access Security at Citrix Developer Documentation. Also see CTX224433 Error: “Cannot Retrieve Data” on Citrix Director Dashboard After Securing OData Interface Through TLS.

Director Process Monitoring

Director has Process Monitoring, which is detailed in Citrix Blog Post Citrix Director: CPU, Memory Usage and Process Information.

Process Monitoring is disabled by default. To enable it, configure the Enable process monitoring setting in a Citrix Policy. For Citrix Policies in a GPO, find this setting in the computer half of the GPO. Note: this setting could significantly increase the size of the Monitoring database.

Director Alerts and Notifications

Director supports alert conditions and email notifications. This feature requires Citrix Virtual Apps and Desktops (CVAD) to be licensed with Premium Edition. See Citrix Blog Post Configuring & Managing Alerts and Notifications Using Director for more information.

For CPU, Memory, and ICT RTT alerts, see Citrix Blog Post 7 New Categories in Director for Proactive Notifications & Alerts

Director supports Hypervisor Alerts from vSphere and Citrix Hypervisor. The alerts are configured in the hypervisor (e.g. vCenter). When triggered, the hypervisor alerts can be viewed in Director. Director can send email notifications when hypervisor alerts are triggered.

  • Hypervisor can generate many alerts nut Director does not have a bulk method of clearing those alerts. Citrix wrote a PowerShell script named DismissAlerts.ps1 that runs a SQL query to clear the Hypervisor alerts. 💡

To configure alerts in Director:

  1. While logged into Director, at the top of the page, click the Alerts button.
  2. Switch to the Email Server Configuration tab.
  3. Enter your SMTP information, and click Send Test Message. Then click Save.

  4. Switch to the Citrix Alerts Policy tab.
  5. There are four high-level categories of alerts: Site Policy, Delivery Group Policy, Multi-session OS Policy (aka Server OS Policy), and User Policy. Click whichever one you want to configure.

  6. Director has built-in alert policies. All you need to do is add notification email addresses to the built-in policies.
  7. In Director 1811 and newer, in the Site Policy tab, click Edit for the built-in Hypervisor Health policy.

    1. On the bottom right in the Notification preferences section, click Add.
    2. Enter an email address and then click Add.
    3. Click Done when done.
    4. On the bottom, click the Save button.
  8. On the Delivery Group Policy tab, find the built-in Smart Alert, and then click Edit. Note: this Smart Alert might not appear until you create a Delivery Group in Citrix Studio.

    1. Notice the Conditions that are already enabled. You can change them or add more.
    2. On the bottom right, in the Notification preferences section, click Add.
    3. Enter an email address, and click Done.
    4. On the bottom, click Save.
  9. You can create custom Alert Policies by clicking the Create button on any of these tabs.
  10. For Multi-session OS Policy (aka Server OS Policy) and User Policy, there are ICA RTT alerts.
  11. You can configure alerts to generate an SNMP trap. This is configured in PowerShell as described at Configure alerts policies with SNMP traps at Citrix Docs.
    Set-MonitorNotificationSnmpServerConfiguration        #see Docs for parameter details
    Set-MonitorNotificationPolicy -IsSnmpEnabled $true -Uid <Policy ID>
  12. Citrix has an experimental Desktop Notification Tool. See Citrix Blog Post Desktop Notification Tool For Citrix XenDesktop.

Director – StoreFront Probes

If you are licensed for Premium Edition, then you can install probe agents on remote machines, and the probe agents can periodically check if an application can be launched through StoreFront.

Custom Studio Role for Probe Administrator

  1. Create a new user account just for probe administration (e.g CORP\ProbeAdmin).
  2. In Citrix Studio, at Configuration > Administrators, on the Roles tab, create a new Role with the permissions shown below.

    • Delivery Groups > Read-only
    • Director > Create\Edit\Remove Alert Email Server Configuration
    • Director > Create\Edit\Remove Probe Configurations
    • Director > View Applications page
    • Director > View Configurations page
    • Director > View Trends page
  3. On the Administrators tab, add an administrator, select your ProbeAdmin account, and assign it the custom Probe Administrator role that you just created.

StoreFront HTTP Basic Authentication

  1. In StoreFront Console, right-click your Store, and click Manage Authentication Methods.
  2. Check the box next to HTTP Basic, and click OK.

Install Probe Agent

To automate the installation and configuration of the Probe Agent, see CTX493268 Automating Citrix Probe Agent Installation and Configuration, or see CTA Dennis Span Citrix Application Probe Agent unattended installation.

On one or more remote machines, download and install the Probe Agent.

  1. Download the Citrix Application Probe Agent 2311.
  2. On a physical machine in a remote office, install Workspace app 1903 or newer if it isn’t installed already.
  3. Run the downloaded CitrixAppProbeAgent_2311.msi.
  4. In the Welcome to the Citrix Probe Agent Setup Wizard page, click Next.
  5. In the End-User License Agreement page, check the box next to I accept the terms, and click Next.
  6. In the Destination Folder page, click Next.
  7. In the Ready to install Citrix Probe Agent page, click Install.
  8. In the Completed the Citrix Probe Agent Setup Wizard page, click Finish.

Configure Probe Agent

  1. Every Probe Agent machine should have unique StoreFront test user credentials. Create unique accounts for each machine.
  2. From the Start Menu of the remote machine, launch Citrix Probe Agent.
  3. Click Start.
  4. In the Configure Workspace Credentials page, enter the StoreFront Receiver for Web URL, or enter a Citrix Gateway URL.
    • For Gateway, the Gateway Virtual Server must be configured with RfWebUI theme. Other themes, like X1 theme, does not work.
  5. Enter the username and password for the probe user for this machine.
  6. Click Next.

    • Probe Agent 2308 and newer support Gateway authentication with Native OTP.
  7. In the Configure to Display Probe Result page, enter the URL to Director. Make sure you include /Director at the end of the URL.
  8. Enter the Probe Admin credentials and click Validate.
  9. Select a Site (farm) if there’s more than one.
  10. Click Next.
  11. In the View Summary page, you may close the window.
  12. Login to Director as the Probe Admin account.
  13. On the top middle, click the Configuration button.
  14. At the top of the page, select either Application Probe, or Desktop Probe.
  15. Click Create Probe.
  16. In the Create Probe page:
    1. Give the probe configuration a name.
    2. Select one or more Applications or Desktops to test.
    3. Select the registered Probe Agent machine(s) to run the probe from.
    4. Enter an email address for probe result notifications.
    5. Select one time per day to run the probe. You can create multiple probe configurations to run the probe multiple times per day.
  17. Click Save.
  18. If you go back to the Configuration page, to edit a probe configuration, select one, and then click the Edit link.
  19. The probe configurations are stored in the Monitoring database so there shouldn’t be any concerns with load balancing of Director.
  20. To view the probe results, on the top, click Trends. Then switch to the Probe Results tab. This page seems to not tell you anything more than if the probe was successful or not.

Director – SCOM Integration

Director can display alerts from System Center Operations Manager (SCOM) 2012 or newer. This feature requires Citrix Virtual Apps and Desktops (CVAD) Premium Edition.

  1. See Configure SCOM integration at Citrix Docs for detailed configuration instructions. Also see Marius Sandbu Integrating Citrix XenDesktop 7.7 and System Center Operations Manager.
  2. On Director server, run C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe /configscom
  3. FYI, the DirectorConfig.exe /configscom command enables the following features on the Director server: /FeatureName:IIS-NetFxExtensibility45 /FeatureName:IIS-ASPNET45 /FeatureName:WCF-HTTP-Activation45
  4. FYI, the System Center Operations Manager server is listed in IIS Manager at Default Web Site > Director > Application Settings (middle pane) > Connector.SCOM.ManagementServer.
  5. On the System Center Operations Manager server, edit Remote Management Users local group, and add Citrix Admins, and other Director users.
  6. In System Center Operations Manager Console, go to Administration > User Roles, and edit Operations Manager Operators. Add the Citrix Admins, and other Director users.
  7. See Citrix Blog Post SCOM Alerts in Citrix Director for information on how to view System Center Operations Manager alerts in Director.

Director – Custom Reports

In Director, in the Trends view, there’s a Custom Reports tab that guides you through creating a custom OData Query. This tab only appears if you have Citrix Virtual Apps and Desktops (CVAD) Premium Edition.

The Monitoring database contains more data than is exposed in Director. To view this data, the Monitoring service has an OData Data Feed that can be queried.

Use Director

The newer Director features usually require Delivery Controllers and VDAs to be at the same version or newer than Director. Director depends on the Monitoring Service that is built into the Delivery Controller. The Monitoring Service gathers data from the VDAs.

See Site Analytics at Citrix Docs.

See the various Troubleshoot topics at Citrix Docs.

Director 2311 new features:

Director 2311 has a new theme. Tabs are now shown on the left.

When you Search for a user and select a session you see the Activity Manager page. It has a new theme.

The User Details page also has a new theme.

The Session Performance tab shows you trends of some network metrics. Director 2311 ads a Session Topology view. See Diagnose Session Performance issues.

Session Details shows if Teams is optimized or not.

Session Details has an option to enable Session Recording for the session. Dynamic Session Recording requires the Session Recording cloud service. Policy based Session Recording requires running C:\inetpub\wwwroot\Director\tools\DirectorConfig.exe /configsessionrecording on the Director server.

The Session Selector button lets you play recordings.

Session Logon tab in the User Details page has an enhanced visualization of the logon duration phases. The new representation shows the overlapping of the individual logon phases.

New features in Director since 7.15:

Server OS is renamed to Multi-session OS. Desktop OS is renamed to Single session OS.

Analytics button lets you upload Director data to Citrix Cloud Performance Analytics. See Configuring on-premises Sites with Citrix Analytics for Performance at Citrix Docs.

The Trends views got a face lift.

Session Auto Reconnects

  • At Trends > Sessions, on the bottom is Session Details. Director also shows you the number of Session Auto Reconnects.
  • If you click the number, you’ll see more info on the reconnect. Note: it might take a few minutes for the reconnect status to appear in Director.

Workspace App Session Startup breakdown

  • After searching for a user and selecting a session, click Details on the top right.
  • Scroll down and you’ll see the Session Startup section with a new Workspace App Session Startup sub-section.

Profile Load Drilldown

  • In a Session Details screen, scroll down to the Logon Duration panel. Hover your mouse over the Profile Load bar and then click Detailed Drilldown. You see the size of profile, and the size of the Folders inside the profile.

  • By default, all folder names are visible. To hide the folder names, add a registry value on the VDA machines:
    • Key = HKEY_LOCAL_MACHINE\Software\Citrix\Director\
      • DWORD Value ProfileFoldersNameHidden  = 1

RDS Licensing status

  • The Machine Details panel shows the status of RDS Licensing for Multi-session OS (aka Server OS, aka RDSH) VDAs.

GPO Duration Drilldown

Interactive Session drilldown

  • In the Logon Duration panel, hover your mouse over the Interactive Session bars to see this phase broken down. More info at Diagnose user logon issues at Citrix Docs.

Export of Filter Views to CSV file

  • Open one of the Filter Views. Then click the Export button in the top right.

Health Assistant link

  • In Director, you can view the details of a VDA machine (instead of a user session). If the machine is unregistered, then there’s a link to Health Assistant, which opens Troubleshoot machines  at Citrix Docs.

Application Analytics

Citrix Blog Post – Citrix Director 7.16 Can Now Shadow Linux App & Desktop

Citrix Blog Post Citrix Director Supports Domain local groups in XenApp & XenDesktop 7.16!

Citrix Monitor Service API 7.16

  • The Monitor Service API uses the Open Data (OData) protocol, which is a Web protocol for querying and updating data, built upon Web technologies such as HTTP. You can use the API to:
    • Analyze historical trends for future planning
    • Perform detailed troubleshooting of connection and machine failures
    • Extract information for feeding into other tools and processes; for example, using Microsoft Excel’s PowerPivot tables to display the data in different ways
    • Build a custom user interface on top of the data that the API provides
    • Run aggregation queries with the OData Version 4 endpoints to get basic grouping and aggregation functionality.

Citrix Hypervisor Console access:

  • Troubleshoot machines at Citrix Docs details the new Console access to VDAs running on XenServer (Citrix Hypervisor) 7.3 and newer.

Director Features available in 7.15 and older:

CTX223927 How to use Director to troubleshoot application launch errors. This feature is configured in Citrix Policy Settings located in the Computer half at Virtual Delivery Agent Settings > Monitoring. Also see Citrix Blog Post Application Related Session Failure Reporting in Citrix Director 7.15.

CTX223928 How to use Director to monitor storage performance.

Citrix Blog Post Citrix Director Now Provides Disk Usage Information!:

  • IOPS and disk latency data is enabled by default.
  • IOPS and disk latency is pushed to the database from each VDA at 1 hour interval.
  • Approximately 276 KB of disk space is required to store the CPU, memory, IOPS and disk latency data for one VDA over a period of one year.

CTX223925 How to use Director to monitor NVIDIA GPU usage.

Citrix Director has an Application Instances tab on the Filters page that lets you filter published application sessions based on Session Idle Time (RDS sessions only), Application Name, and all other existing fields, like machine name, and so on. Requires Premium Edition licensing. See Citrix Blog Post Monitoring Idle Applications and Sessions in Citrix Director. See Troubleshoot applications at Citrix Docs.

If idle time column shows n/a, then you need to wait 10-15 minutes.

In Director, the Session Details panel can show if Enlightened Data Transport (EDT, aka HDX on UDP) is enabled in the user’s session. See Citrix Blog Post HDX Adaptive Transport Protocol Monitoring via Director.

CTP George Spiers has a comprehensive guide of all Director 7.16 features at

Connection Failure Details, which is detailed in Citrix Blog Post Director 7.12: Easier Troubleshooting of Machine & Connection Failures. Also see CTX223812 Citrix Director Failure Codes.

Process Monitoring, which is detailed in Citrix Blog Post Citrix Director: CPU, Memory Usage and Process Information.

Logon Duration improvements.

Citrix Blog Post Interactive Session of Logon Duration in Citrix Director – Explained: Interactive Session Duration = Desktop Ready Event Timestamp (EventId 1000 on VDA) – User Profile Loaded Event Timestamp (EventId 2 on VDA). More details in the Blog Post.

Citrix Blog Post Director 7.6 Failure Reasons Demystified lists possible failure reasons behind an Unregistered alert, and the true meaning of failure reasons such as Connection Refused and Communication Error. It details each failure reason, defines the meanings of these failures, and lists action items that serve as a starting point for troubleshooting the specific scenario.

33 thoughts on “Citrix Director 2311”

  1. Hi,
    I have 2022 CU4 Director and I have problem with SSO. I have don’t the steps, but SSO work from local machine that director installed and don’t from re mote machine, does someone encounter with this problem?

  2. Hi, should it be possible to also add a cloud site to an on-prem director? I just added the cloud connector to the Service.AutoDiscoveryAddresses but this doesn’t work. With multiple on-prem site it works without problems.


    1. Horizon Cloud has a monitoring service but I don’t think it does probes. Horizon offers ControlUp as a monitoring tool and ControlUp has a probe feature.

  3. Hi Carl,
    How to use Director to monitor NVIDIA GPU usage ,and select View Historical Utilization to view the historical usage of resources on the selected machine.

  4. It is possible to automate Director reports send via email (I don’t mean Alerts) .. like in Trends > Sessions | Load Eva. Index (any predefined Trend by Citrix) ?

  5. I am trying to get the agent probing working, but whenever I click the drop down for “Select endpoint machines” it never shows anything. I am pretty sure I had this working at some point. Trying to show it to people at my work and I cant seem get get the probes to see any endpoints to run on. I am running 2212 for everything but the agent probe software is the 2209 release that came with 2212. Everything is on prem. Any help woud be great!

  6. Thanks for all of the great content and detailed instructions.
    Sorry if this is a repeat, but on the section Director Single Sign On, 8e you reference creating a user in Step 1, but that step does not exist. Thought you may want to correct.

  7. Hi. I was trying to add a dropdown-field in the logon.aspx of Director but can’t get around the required adjustments to the base class so it doesn’t drop an error ( … type (System.Web.UI.WebControls.TextBox) is not compatible with the type of control (System.Web.UI.WebControls.DropDownList) ).
    ) although there is an authentication-type dropdown in the logon.aspx as well (which I used as a reference). I also coudn’t find something on the web. Maybe someone here has an idea ?

  8. Hi Carl, I hope you’re doing great ? When you do a search by user in Director, even the disabled accounts are displayed in the drop-down list. Do you know if there’s a way to prevent disabled users from being displayed in this list ? Kind regards. Yvan

  9. Has anyone run into slow login times to Director? We are on 1912 LTSR CU1, and suddenly the login process has gone up exponentially (40+ seconds). It is only this piece that has changed, once you’re in Director everything else functions with no delays. We do not have SSO enabled, wondering if doing that would make a difference. It is a standalone Director server in a single site environment. Citrix is having me go through their standard troubleshooting and at this time are asking me to reinstall Director, I’d rather not. 😀
    Thank you,

  10. Hello Carl,
    I have to configure Director alerts emails with TLS v1.2. If I understand well, Director sends notifications to Delivery Controller and Delivery Controller sends the email. That’s it ?
    I didn’t find where to enforce tls v1.2 email in Citrix configuration (Director, IIS, Citrix Studio…).
    Do I have to use these keys : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\…..
    Can you help me please ?
    Thanks in advance

  11. Is it possible to force Citrix Director to communicate over LDAPS port 636 for login? By default it goes over unauthenticated 389.

  12. HI Carl,
    I trust you are well.

    Is it possible for Citrix Cloud Director to display the region or country the session is logged in from?

    I don’t think its possible because the Machine IP Address displayed in Director Filter – All Connected Sessions is the VDA server IP and the endpoint IP in most cases is NAT’d behind a home router but it would be good to get this confirmed

    1. Hey Jason,

      the parameter ReceiverIPAddress is what you are searching for.
      Just open powershell on ddc load citrix snapins and get the session f.e. Get-BrokerSession -BrokeringUserName Domain\John.Doe

  13. HI Carl, I’m going to upgrade from 7.15 CU 1 to 1912 LTSR CU2. For Director, I do not see Probe Agent part of 1912, so do I need to bother. Also where does the Probe agent get installed to. the Director Server (in our case we have multi role servers), or the VDA Desktop?

    1. Probe Agent is optional. It is installed on a Workspace app (client) machine that you want to probe from. The idea is to ask a client to connect to StoreFront to ensure that the connection works.

      1. Thanks, part of Upgrade Sequence – would you still install Storefront first before Delivery Controller. Also should I install FAS the same day I install Storefront or the day I install after the Delivery Controller?

  14. Hi Carl, I was setting up SSO for load balanced Citrix Director. I followed the instructions in your post but found in our case we had to set UserKernerlMode True. Otherwise Director prompts me to enter user name and password and don’t allow me to get in.

  15. Hi Carl –

    Today we had a VDA Server hit 10000 LE for about an hour. We never received the alert from Director. We have other working policies. THE LE policy is set for 950 – 10000; and the interval for 10min – 5min. Any thought why the LE policy is not working? I have it set at the Server OS Policy.

  16. Hi Carl – we have installed version 2003 of Director and monitoring 3 sites with controllers at version 1909 – when viewing a users’ session details the Policy Tab lists all Citrix Policies available to the site instead of just the policies applying to the user session – previous versions listed the policies correctly – once we upgrade the controllers to version 2003 do you think this will correct itself?

  17. Hi Carl, could you help me with one more question?
    I have Director with Advanced license and want to make report of user activity for period (how long they spent logged on). I found only PS Get-BrokerConnectionLog, export to Excel and then analyze. Is there more convenient way to do this? Also all usernames in Director displaing only in sAMAccountNane format which in my case just code, is it possible to switch it to any other human readable attribute like UserName?
    Thanks in advance!

  18. topic:GDPR – tracking in Director (google-analytics/ and HTML5 Receiver (googletagmanager) without user permission

    Hello Carl and Citrix Community,
    do you have the same problem as described here? So that your data is transferred to and Google Analytics although the setting is actually off?

    The same applies to the HTML5 receiver. This also transmits data although it is turned off.

    This is definitely a problem within the EU. I wrote to a few weeks ago, but so far there has been no reaction.
    I am interested in whether you have the same phenomenon.

  19. Hi Carl,

    I have got some issues showing the session-information of our users. I can find the users, but Director states the user does not have any assigned desktops.
    Do you know what the correct convention is for using director in a multiple domain forest?
    The admin-accounts are in the root-domain, the user-accounts and Director server in the child domain.
    What would be the correct value for the Connector.ActiveDirectory.Domains setting:


    or just:

    or even something else? Citrix doesn’t state this very well in the documentation

    Do you know if the Domain Local group support in Director 7.16 is also incorporated in Director 7.15.4000 ?

      1. I’ve contacted Citrix. The Domain Local Group support is not implemented in the LTSR as they state it is not a bug, it’s a feature

  20. Hi Carl,

    You mention, “There’s no point in upgrading to Director 1903 if your Delivery Controllers are not also 1903. Director will inform you if your Delivery Controllers are not the same version as Director.”, but Citrix documentation ( states to upgrade Director before the Controllers. Is Citrix’s referring to scenarios where Director is installed on a separate machine?


    1. It’s referring to an ongoing upgrade process, especially if Director is on a different machine. In other words, if you want to upgrade your infrastructure, it’s saying to upgrade Director before you upgrade your Controllers.

Leave a Reply

Your email address will not be published. Required fields are marked *