Citrix XP Presentation server FR3 disjoined domain, renamed server

[fi8224]

I should have thought about what I was doing more, but I disjoined a Citrix XP Presentation server with Feature Release 3 from a domain, renamed the server and joined a new domain. My main issue is I no longer have 100%administrative rights to the server. I can add and remove programs, but I don't have access to the shutdown command. I was able to start the console and add administrator to the list of citrix administrators, but I don't see the list of policies in there to adjust. It seems like a policy issue. I can access this server with the rdp client. I can't do a thing with ica. Not sure of where to start without killing the box.

 

[enigma99]

fi8224,
Sounds more like an A/D issue than a Citrix issue.
Do you have an account on the new domain that has domain admin rights?

If so, I would log into your Citrix server with that user account and add your old domain user account to the local admin group (unless you have full trust with your old domain and your new domain). That should give you full rights to the Citrix box and you should be able to shut it down.

it sounds like you only have user priviledges on the local box and thats why you can't shut it down.

Citrix should be ok because you didn't change anything on the "Citrix Administrators" side....or did you?

Hope that helps.

 

[fi8224]

I had to change one thing on the administrator's side. When I first logged into the citrix box at the console after the domain change I was pretty limited to what i could do. When I was able to get into the citrix console I saw that there was no entry for citrix administrator so i put in the domain administrator. I will go to the server and check if the domain administrator is already a local admin. I think it is.

 

[enigma99]

fi8224,
Is that server in an OU with GPO settings being applied to lock down the server?

I would check to see where the computer account is within AD and then check any GPO's that are being applied at that level.

If the there are no GPO's being applied....do a gpupdate /target:computer /force and a gpo /target:user /force to refresh the policies for that domain.