During a new installation of Citrix XenApp 6.5 I found that the logons to the server were being disabled automatically. Even when manually enabled through the Citrix AppCenter, they would later show up as disabled again. Running “QFARM /LOAD” showed the following:
Eventually after stumbling on this Citrix Forum posting, it lead to the same solution. When the XenApp 6.5 registry key is set to the following:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlTerminal Server]
“fDenyTSConnections”=dword:00000001
Every time you run a GPUPDATE /FORCE the XenApp server will switch to ProhibitLogon and block new user logons.
The solution is to either manually set the key to the following either manually or through a Group Policy Preference:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlTerminal Server]
“fDenyTSConnections”=dword:00000000
With the registry key configured in this manner, running GPUPDATE /FORCE no longer sets the server into ProhibitLogon Logon Mode.