Citrix XenApp / Terminal server

Terminal servers are designed for an average workload and rely on the applications to release their resources as quickly as possible when the RDP session is disconnected. Since the client also serves as a server for the add-ins, it would remain in memory with normal configuration and prevent the session from being completely terminated.

Note

The following options also work on a "desktop" PC, but the option is more useful for Citrix or terminal server deployments.

Option: ShutdownOnDisconnect

By setting ShutdownOnDisconnect in the "OneOffixx.exe.config"-file the client will be shutdown automatically as soon as it receives the Session Disconnect from the terminal server. This setting can be adjusted via a parameter in the Setup.

<configuration>
  [...]
  <appSettings>
    [...]
    <!-- Allows to configure OneOffixx to shutdown 
          when a disconnect happens (such as disconnecting from an RDP Session) -->
    <add key="ShutdownOnDisconnect" value="true" />
    [...]
  </appSettings>
  [...]
</configuration>

Option: TrySyncOnLogOff

By setting TrySyncOnLogOff in the "OneOffixx.exe.config" file the client tries to synchronize the last state to the server before the Session Logoff. This can be useful if the cache is not stored permanently, for example, and if data loss is to be avoided.

Important

If the user does not log out correctly or exits OneOffixx early, data loss may occur despite the setting.

This setting can be adjusted via a parameter in the Setup.

<configuration>
  [...]
  <appSettings>
    [...]
    <!-- Before a Windows Session logoff the client can try to sync its latest changes to the server. A user might "kill" the application, so this is "Best Effort" and might not work depending on the user action. -->
    <add key="TrySyncOnLogOff" value="true" />
    [...]
  </appSettings>
  [...]
</configuration>

OneOffixx Cache

In a Load Balanced terminal server environment, it must be ensured that each OneOffixx Client has exclusive access to the cache. This can be ensured by properly deploying the cache folder. Optionally, the OneOffixx Client can be excluded from Active State monitoring in the terminal server.

Settings for Outlook

Outlook's security model assumes by default that up-to-date antivirus software is installed. However, in Terminal Server or Citrix environments, Outlook cannot retrieve this status. This results in the user having to constantly confirm OneOffixx access to the Outlook address book.

To suppress these messages, the following settings must be made either via Registry/GPP or via GPO:

Via Registry/GPP:

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\outlook\security]

"PromptOOMAddressBookAccess"=dword:00000002
"PromptOOMAddressInformationAccess"=dword:00000002
"AdminSecurityMode"=dword:00000003
Tip

The version 16.0 works for Outlook 2016, Outlook 2019 and Outlook 365. For Outlook 2013 it is the version 15.0.

Via GPO:

Administrative templates (User)\Microsoft Outlook 2016\Security\Security form settings
Outlook Security Mode - Value 3 (Use Outlook Security Group Policy)

Administrative templates (User)\Microsoft Outlook 2016\Security\Security form settings\Programmatic security
Configure prompt for Outlook object model when accessing an address book - value 2 (Automatically approve)

Administrative templates (User)\Microsoft Outlook 2016\Security\Security form settings\Programmatic security
Configure prompt for Outlook object model when reading address information - value 2 (Automatically approve)

Further Outlook configuration options are described here.

Citrix XenApp und Terminal Server

For more information, see the following articles:

Registry example: Citrix

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
Value Name:LogoffCheckSysModules
Type:REG_SZ
String:OneOffixx.exe

Microsoft Terminal Server

Weitere Informationen finden Sie unter folgendem Artikel:

Registry example: Terminal Server

HKEY_LOCAL_MACHINE \SYSTEM\CurrentControlSet\Control\Terminal Server\Sysprocs
Value name: OneOffixx.exe
Data type: REG_DWORD 
Base: Hex

Caution

The terminal server must be restarted after the setting.