Manage Citrix SecurAccess™ client by using Active Directory
Each release of the Citrix SecurAccess client is packaged as a full product installation, instead of as a patch. When users log on and the Citrix SecurAccess client detects a new version of the plug-in, the plug-in upgrades automatically. You can also deploy the Citrix SecurAccess client to upgrade by using Active Directory.
To do so, create a distribution point for the Citrix SecurAccess client. Create a Group Policy Object and assign the new version of the plug-in to it. Then, create a link between the new package and the existing package. After you create the link, the Citrix SecurAccess client is updated.
Remove the Citrix SecurAccess client from user devices
To remove the Citrix SecurAccess client from user devices, remove the assigned package from the Group Policy Object Editor.
When the plug-in is removed from the user device, users receive a message that the plug-in is uninstalling.
Troubleshoot the Citrix SecurAccess client installation using Active Directory
If the assigned package fails to install when the user device starts, you might see the following warning in the application event log:
Failed to apply changes to software installation settings. Software installation policy application has been delayed until the next logon because an administrator has enabled logon optimization for group policy. The error was: The group policy framework must call the extension in the synchronous foreground policy refresh.
This error is caused by Fast Logon Optimization in Windows XP in which users are allowed to log on before the operating system initialized all the networking components, including Group Policy Object processing. Some policies might require more than one restart to take effect. To resolve this issue, disable Fast Logon Optimization in the Active Directory.
To troubleshoot other installation issues for managed software, Citrix® recommends using a group policy to enable Windows Installer Logging.