Citrix PVS: domain/user does not have access to farm

Background:  I saw a bunch a folks having issues accessing the Citrix Provisioning Services (PVS) console after installing it and then uninstalling, reinstalling, changing service accounts etc to get access.  See this forum.  I think the problem is simply setting up the security groups in PVS.

Problem/Errors: When trying to access the PVS console get the following error(s):

"The domain/user does not have access to the farm:


"An error occured communicating with the server."


Solution: You need to add the security groups in the PVS console

1. On PVS server, launch PVS console
-  Enter "localhost"
- Select "Use these credentials to login" and enter the account used to install PVS
- Click Connect

2. Right click on the Farm
- Select Properties > Groups tab.
- Type the AD group name and select Search (tends to hang so be patience; if it throws a Snap-in error select "Cancel")
 - Check off the white box to left of the group
- Click Ok
- Go to Security Tab
- Click Add
- Check off the white box to left of the group
- Click Ok
- Click Ok
3. Close PVS Console
4. Relaunch PVS Console
- Specify Name (ie localhost, ip, DNS, or FQDN as all should work)
- Select "Use my Windows credentials to login
 Also, once into the console you can manage your connections by right clicking on "Provisioning Services Console" and selecting "Manage Connections".

XenDesktop 5 and Database Mirroring

Background:
We setup our two XenDekstop 5 Desktop Delivery Controllers (DDC) and then configured our new DDC SQL database to be mirrored.  As result, you must update the DDC's database connection.

A side note, you don't need to do this for Provisioning Services (PVS) since you can specific the failover mirror in the install wizard.  As result, just follow the PVS db setup best practices and the mirror ahead of time and your are all set. 

Additional Info:


Change XD5 Database Connection
http://support.citrix.com/article/CTX127538


DB Mirroring Best Practices
http://support.citrix.com/servlet/KbServlet/download/25938-102-649422/XD_Database_Mirroring_Best_Practices.pdf
 


PowerShell SDK Download
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=50633a1f-a665-425d-923c-1a269f8ac084
 
Our solution:
  1. Run Windows Powershell Module
  2. Run set executionpolicy unrestricted
  3. Run get-BrokerDBConnection (to see current connection)
  4. Run the following powershell cmdlet (Just replace the server names and database name in bold).
$MirroredConnectionString =
'Server=SQLServerA.test.com;Initial Catalog = CTX_XDDDC_5x; Integrated Security = True;
Failover Partner=SQLServerB.com'


$brokers = Get-BrokerController
foreach ($broker in $brokers)
{
$brokerDNSName = $broker.DNSName
Set-ConfigDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-ConfigDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
Set-AcctDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-AcctDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
Set-BrokerDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-BrokerDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
Set-HypDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-HypDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
Set-PvsVmDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-PvsVmDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
Set-ProvDBConnection –DBConnection $null –adminaddress $brokerDNSName
Set-ProvDBConnection –DBConnection $MirroredConnectionString –adminaddress $brokerDNSName
}


You only need to run this on one DDC.  To confirm that that the change took place.  Run get-BrokerDBConnection to see the update connection.

Slow Citrix XenDesktop 5 and XenDesktop 5 SP1 MMC

Slow Citrix XenDesktop 5 and XenDesktop 5 SP1 MMC when launching Desktop Studio

Problem: XenDesktop 5 Desktop Studio launches slowly and snap-in fails to load and/or get the following error(s):

"Adding snap-in to console"


"This snap-in not responding"

 



Note: Also, I have seen this in Provisioning Services (PVS) as well


Resolution:  Go to IE > Tools > Internet Options > Advanced and uncheck "Check for publisher’s certificate revocation" in security section.