Hello, I have a project that involes creating unique user enviromental variables for many Citrix (Remote Desktop) users. I suppose I can log into each server as each user and create this variable, but that is painfully time consuming. Is there a way to create a unique user variable for each user on each server? Maybe a setting in AD or GPO or script? The value of the enviro variable is a generic number. Please help me find a way to do this! Thanks!

start reading it from here http://technet.microsoft.com/en-us/library/cc772047.aspxhttp://www.virmansec.com/blogs/skhairuddin

Hello, In addition to Syed. You can also check this http://forums.citrix.com/thread.jspa?messageID=1510210 Thanks.

This is helpful, but will it require me to create a GPO for every user since they all need a unique value? This part may explain how to do it, but I need some clarification. Additional considerations If you want to restrict the scope of multiple preference items with a complex set of targeting items, you can simplify configuration by using an environment variable. For example, create an Environment Variable preference item that generates a new environment variable with a value of 1, and apply the targeting items to it. To apply the same targeting to other preference items, add an Environment Variable targeting item to those preference items, and configure it to require a value of 1 for the variable that you created using an Environment Variable preference item. You can use item-level targeting to change the scope of preference items. Preference items are available only in domain-based GPOs. Thanks!

Hi, Thank you for your post here. A simple way to target the applying of GPOs is to: 1. Create a security group which add all Citrix users as the member. 2. Target the Group Policy Preference to this specific group.

Miles, I'm still not sure if I understand this. Every user needs a unique variable value. For example, User A needs this: User Variable - Value EXPORT - 01 User B needs this: EXPORT - 02 User A and B are in the same security group. Can I create a single GPO that sets a different value for User A, B, C, etc...? If so, I need a step by step on how to do this. Otherwise, I'm worried I will have to create a GPO for each user and change the GPO filtering so it only applies to individuals. Thank you!

Download SETENV.EXE and implement it in a logon script with an appropriate value assignment logic.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor