Citrix Virtual Apps & Desktops¶

Get-ItemProperty "HKLM:\SOFTWARE\Citrix\VirtualDesktopAgent"

Set-ItemProperty -Path "HKLM:\SOFTWARE\Citrix\VirtualDesktopAgent" `
    -Name "ListOfDDCs" -Value "ddc01.corp.local ddc02.corp.local"

Restart-Service BrokerAgent

$dazzlePath = "HKLM:\SOFTWARE\WOW6432Node\Citrix\Dazzle"
Set-ItemProperty -Path $dazzlePath -Name "CustomURL" `
    -Value "https://storefront.corp.local/Citrix/Store/discovery"
Set-ItemProperty -Path $dazzlePath -Name "PutShortcutsOnDesktop" -Value "true"

$authPath = "HKLM:\SOFTWARE\WOW6432Node\Citrix\AuthManager"
if (-not (Test-Path $authPath)) { New-Item -Path $authPath -Force }
Set-ItemProperty -Path $authPath -Name "ConnectionSecurityMode" -Value "Any"
Set-ItemProperty -Path $authPath -Name "LogonMethod" -Value "sson"

$sslPath = "HKLM:\SOFTWARE\WOW6432Node\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Network\SSL"
if (-not (Test-Path $sslPath)) { New-Item -Path $sslPath -Force }
Set-ItemProperty -Path $sslPath -Name "EnableCertificateRevocationCheckPolicy" `
    -Value "CheckNone" -Type String

# Verifier le mode graphique actuel
Get-ItemProperty "HKLM:\SOFTWARE\Citrix\Graphics" -ErrorAction SilentlyContinue

$graphicsPath = "HKLM:\SOFTWARE\Citrix\Graphics"
Set-ItemProperty -Path $graphicsPath -Name "EnableH264" -Value 1 -Type DWord
Set-ItemProperty -Path $graphicsPath -Name "H264DefaultProfile" -Value 0 -Type DWord
Set-ItemProperty -Path $graphicsPath -Name "MaximumFramesPerSecond" -Value 30 -Type DWord

$audioPath = "HKLM:\SOFTWARE\Policies\Citrix\MultimediaConf"
if (-not (Test-Path $audioPath)) { New-Item -Path $audioPath -Force }
Set-ItemProperty -Path $audioPath -Name "AudioQuality" -Value 0 -Type DWord
Set-ItemProperty -Path $audioPath -Name "EnableUDPAudio" -Value 1 -Type DWord
Set-ItemProperty -Path $audioPath -Name "UDPAudioPortRange" -Value "16500,16509" -Type String

$usbPath = "HKLM:\SOFTWARE\Citrix\USB"
if (-not (Test-Path $usbPath)) { New-Item -Path $usbPath -Force }
Set-ItemProperty -Path $usbPath -Name "EnableUSBSupport" -Value 1 -Type DWord

$rulesPath = "HKLM:\SOFTWARE\Citrix\USB"
# Autoriser les scanners (classe 0x06) et bloquer le stockage de masse (classe 0x08)
Set-ItemProperty -Path $rulesPath -Name "DeviceRules" -Type MultiString -Value @(
    "Allow, Class=06",
    "Deny, Class=08"
)

Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\UserProfileManager" -ErrorAction SilentlyContinue

$upmPath = "HKLM:\SOFTWARE\Policies\Citrix\UserProfileManager"
if (-not (Test-Path $upmPath)) { New-Item -Path $upmPath -Force }

# Activer UPM
Set-ItemProperty -Path $upmPath -Name "ServiceActive" -Value 1 -Type DWord

# Definir le chemin du store
Set-ItemProperty -Path $upmPath -Name "PathToUserStore" `
    -Value "\\fileserver\profiles$\%USERNAME%.%USERDOMAIN%\!CTX_OSNAME!!CTX_OSBITNESS!" -Type String

# Supprimer le cache local a la deconnexion
Set-ItemProperty -Path $upmPath -Name "DeleteCachedCopiesOfProfiles" -Value 1 -Type DWord

# Activer le write-back en session
Set-ItemProperty -Path $upmPath -Name "PSMidSessionWriteBack" -Value 1 -Type DWord
Set-ItemProperty -Path $upmPath -Name "PSMidSessionWriteBackReg" -Value 1 -Type DWord

$exclusionsPath = "HKLM:\SOFTWARE\Policies\Citrix\UserProfileManager"
Set-ItemProperty -Path $exclusionsPath -Name "SyncExclusionListDir" -Type MultiString -Value @(
    "AppData\Local\Microsoft\Windows\INetCache",
    "AppData\Local\Microsoft\Windows\Temporary Internet Files",
    "AppData\Local\Temp",
    "AppData\Local\Google\Chrome\User Data\Default\Cache",
    "AppData\Local\Microsoft\Edge\User Data\Default\Cache"
)

Set-ItemProperty -Path $exclusionsPath -Name "MirrorFoldersList" -Type MultiString -Value @(
    "AppData\Local\Microsoft\Windows\Cookies",
    "AppData\Roaming\Microsoft\Windows\Cookies"
)

$reliabilityPath = "HKLM:\SOFTWARE\Policies\Citrix\ICA\Reliability"
if (-not (Test-Path $reliabilityPath)) { New-Item -Path $reliabilityPath -Force }
Set-ItemProperty -Path $reliabilityPath -Name "Enabled" -Value 1 -Type DWord
Set-ItemProperty -Path $reliabilityPath -Name "Timeout" -Value 300 -Type DWord

$reconnectPath = "HKLM:\SOFTWARE\Policies\Citrix\ICA\AutoReconnect"
if (-not (Test-Path $reconnectPath)) { New-Item -Path $reconnectPath -Force }
Set-ItemProperty -Path $reconnectPath -Name "Enabled" -Value 1 -Type DWord
Set-ItemProperty -Path $reconnectPath -Name "Timeout" -Value 300 -Type DWord
Set-ItemProperty -Path $reconnectPath -Name "RequireAuthentication" -Value 0 -Type DWord

$limitsPath = "HKLM:\SOFTWARE\Policies\Citrix\ICA\SessionLimits"
if (-not (Test-Path $limitsPath)) { New-Item -Path $limitsPath -Force }
# Deconnecter apres 8h d'inactivite et supprimer les sessions deconnectees apres 2h
Set-ItemProperty -Path $limitsPath -Name "MaxIdleTime" -Value 480 -Type DWord
Set-ItemProperty -Path $limitsPath -Name "MaxDisconnectionTime" -Value 120 -Type DWord

$printPath = "HKLM:\SOFTWARE\Policies\Citrix\UniversalPrintDrivers"
if (-not (Test-Path $printPath)) { New-Item -Path $printPath -Force }
Set-ItemProperty -Path $printPath -Name "UPDEnable" -Value 1 -Type DWord
Set-ItemProperty -Path $printPath -Name "UPDPreference" -Value 2 -Type DWord

$mappingPath = "HKLM:\SOFTWARE\Policies\Citrix\PrinterMapping"
if (-not (Test-Path $mappingPath)) { New-Item -Path $mappingPath -Force }
# Creer uniquement l'imprimante par defaut du client
Set-ItemProperty -Path $mappingPath -Name "AutoCreation" -Value 1 -Type DWord
# Activer la retention de l'imprimante par defaut
Set-ItemProperty -Path $mappingPath -Name "PrinterRetentionEnabled" -Value 1 -Type DWord

$routingPath = "HKLM:\SOFTWARE\Policies\Citrix\PrinterRouting"
if (-not (Test-Path $routingPath)) { New-Item -Path $routingPath -Force }
# Routage via le serveur d'impression (recommande en LAN)
Set-ItemProperty -Path $routingPath -Name "ClientPrinterRouting" -Value 0 -Type DWord

# Parametres graphiques
Get-ItemProperty "HKLM:\SOFTWARE\Citrix\Graphics" -ErrorAction SilentlyContinue |
    Select-Object EnableH264, H264DefaultProfile, MaximumFramesPerSecond, EnableLossless

# Parametres audio
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\MultimediaConf" -ErrorAction SilentlyContinue |
    Select-Object AudioQuality, EnableUDPAudio

# Fiabilite de session
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\ICA\Reliability" -ErrorAction SilentlyContinue |
    Select-Object Enabled, Timeout

# Impression
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\UniversalPrintDrivers" -ErrorAction SilentlyContinue |
    Select-Object UPDEnable, UPDPreference

# --- Graphisme : reduire la consommation de bande passante ---
$graphicsPath = "HKLM:\SOFTWARE\Citrix\Graphics"
# Desactiver le mode sans perte
Set-ItemProperty -Path $graphicsPath -Name "EnableLossless" -Value 0 -Type DWord
# Reduire le FPS maximum a 15 (suffisant pour la bureautique)
Set-ItemProperty -Path $graphicsPath -Name "MaximumFramesPerSecond" -Value 15 -Type DWord
# Utiliser le profil Baseline (plus leger)
Set-ItemProperty -Path $graphicsPath -Name "H264DefaultProfile" -Value 2 -Type DWord
# Activer la compression progressive
Set-ItemProperty -Path $graphicsPath -Name "ProgressiveDisplay" -Value 1 -Type DWord

# --- Audio : reduire la qualite et activer UDP ---
$audioPath = "HKLM:\SOFTWARE\Policies\Citrix\MultimediaConf"
if (-not (Test-Path $audioPath)) { New-Item -Path $audioPath -Force }
Set-ItemProperty -Path $audioPath -Name "AudioQuality" -Value 0 -Type DWord
Set-ItemProperty -Path $audioPath -Name "EnableUDPAudio" -Value 1 -Type DWord
Set-ItemProperty -Path $audioPath -Name "UDPAudioPortRange" -Value "16500,16509" -Type String

# --- Impression : forcer le pilote universel et router via le client ---
$printPath = "HKLM:\SOFTWARE\Policies\Citrix\UniversalPrintDrivers"
if (-not (Test-Path $printPath)) { New-Item -Path $printPath -Force }
Set-ItemProperty -Path $printPath -Name "UPDPreference" -Value 2 -Type DWord

$routingPath = "HKLM:\SOFTWARE\Policies\Citrix\PrinterRouting"
if (-not (Test-Path $routingPath)) { New-Item -Path $routingPath -Force }
# Router via le client pour les sites distants (pas de serveur d'impression local)
Set-ItemProperty -Path $routingPath -Name "ClientPrinterRouting" -Value 1 -Type DWord

# --- Fiabilite de session : augmenter le timeout pour les connexions instables ---
$reliabilityPath = "HKLM:\SOFTWARE\Policies\Citrix\ICA\Reliability"
if (-not (Test-Path $reliabilityPath)) { New-Item -Path $reliabilityPath -Force }
Set-ItemProperty -Path $reliabilityPath -Name "Timeout" -Value 300 -Type DWord

Write-Host "=== Parametres graphiques ===" -ForegroundColor Cyan
Get-ItemProperty "HKLM:\SOFTWARE\Citrix\Graphics" |
    Select-Object EnableH264, H264DefaultProfile, MaximumFramesPerSecond, EnableLossless, ProgressiveDisplay |
    Format-List

Write-Host "=== Parametres audio ===" -ForegroundColor Cyan
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\MultimediaConf" |
    Select-Object AudioQuality, EnableUDPAudio, UDPAudioPortRange |
    Format-List

Write-Host "=== Impression ===" -ForegroundColor Cyan
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\UniversalPrintDrivers" |
    Select-Object UPDEnable, UPDPreference |
    Format-List

Write-Host "=== Fiabilite de session ===" -ForegroundColor Cyan
Get-ItemProperty "HKLM:\SOFTWARE\Policies\Citrix\ICA\Reliability" |
    Select-Object Enabled, Timeout |
    Format-List

# Exporter les parametres optimises dans un fichier .reg
$exportPaths = @(
    "HKLM\SOFTWARE\Citrix\Graphics",
    "HKLM\SOFTWARE\Policies\Citrix\MultimediaConf",
    "HKLM\SOFTWARE\Policies\Citrix\UniversalPrintDrivers",
    "HKLM\SOFTWARE\Policies\Citrix\PrinterRouting",
    "HKLM\SOFTWARE\Policies\Citrix\ICA\Reliability"
)

foreach ($path in $exportPaths) {
    $fileName = ($path -split '\\')[-1]
    reg export $path "C:\Temp\Citrix_Optimized_$fileName.reg" /y
}