Citrix XenApp

How to handle Citrix configuration changes for Citrix teams with many Citrix Admins


When was this app published and who did it? We’ve all been in this situation before. We don’t know where the app came from or who published it and have to go through change tickets and emails to track down where it came from. In very large dynamic Citrix environments with many Citrix Admins working on things, this can become a challenge. Citrix change tracking is vital.

One sometimes overlooked feature of XenApp is that it has built in configuration logging. Any time a Citrix Admin makes a change it gets written to the database where it can be reported on. On XenApp 6.5 and older you have to create a separate database for this. With XenApp 7.5 you don’t, it will all get written to the same database that your delivery controller configuration is in.

Here’s a quick run down on how to get it working for XenApp 6.5 (with XenApp 7.5 it’s automatically turned on):

1. Go to AppCenter and right click your farm. Then hit Farm properties:


2. Click Configuration Logging in the properties bar and click “Configure Database”


3. Type in your SQL Server name and service account user credentials. And yup, you can use an Oracle database if you choose to.


4. Type in a database name. I am assuming you have had your DBA create an empty database for you already.


5. Leave all the advanced options default except for “Use encryption”. Set this to No. In most environments you are not going to be using SSL to connect to your SQL environment. If you leave it set to Yes you will get an error saying something like this later when you attempt to test the connection:

Failed to connect to the logging database.

The database returned the following error:

A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 – The certificate chain was issued by an authority that is not trusted.)


6. Verify all your settings are correct and hit “Test Database Connection”


7. You should get a confirmation like this. Hit Finish.


8. Now you’ll be returned to the configuration logging setup box. Check “Log administrative tasks to Configuration Logging datbase” and “Require administrators to enter database credentials before clearing the log”. Hit Ok.


9. Now right click History (which is called Logging in XenApp 7.5 Citrix Studio) and click Get log.


10. It’s going to give you a warning saying you don’t have a filter applied, don’t worry just hit Yes to continue.


11. You’ll get a popup asking to enter your logging credentials again, the same credentials you used to setup the database. Type them in and hit OK.

12. Voila, there’s your first entry of you turning on configuration logging. From here on out any change a Citrix Admin makes will be logged.


13. You can set filters to return just the data you’re looking for.


14. This is great but what if you want to have a daily report emailed to you and other Citrix Admins at the end of the day with all the changes that happened on the Citrix farm? This is where Powershell comes in. You can get all this data pulled in via Powershell and emailed out very easily. I’m working on a script and will post it right here on my blog once it’s done.

About Jason Samuel

Jason Samuel lives in Houston, TX with a primary focus on strategic advisory and architecture of end-user computing, security, enterprise mobility, virtualization, and cloud technologies from Citrix, Microsoft, & VMware. He also has an extensive background in web architecture and networking over his 20+ year career in IT. He is an Author, Speaker, and Local User Group Community Leader. He is certified in several technologies and is 1 of 63 people globally that is a recipient of the prestigious Citrix Technology Professional (CTP) award. He is 1 of 42 people in the world that has been awarded as a VMware EUC Champion and VMware vExpert. He is a featured author on DABCC which provides the latest IT Community News on Cloud, Data Center, Desktop, Mobility, Security, Storage, & Virtualization. In his spare time Jason enjoys writing how-to articles and evangelizing the technologies he works with. Disclaimer: The content and opinions expressed in articles and posts are his own and are by no means associated with his employer.

Recommended for you


  1. Phil

    June 2, 2014 at 6:53 AM

    Hi Jason

    Any news on the reporting script 😉

  2. Mark Liechty

    June 24, 2014 at 11:58 PM

    Thanks for the great walk-thru. You said at the end of the post you were going to be putting up a change script to e-mail changes. Any luck with getting it tuned. I appreciate the help.

  3. Jason Samuel

    July 1, 2014 at 11:51 PM

    Sorry guys, I was about half way through it and haven’t had a chance to finish it. Several new projects on my plate recently. I will definitely update you both as soon as it’s ready.

  4. Nil

    August 14, 2014 at 7:33 PM

    I’m also looking forward to the script. Thanks Jason!

  5. Todd

    May 13, 2015 at 8:31 AM

    Thanks for the tip in #5, fixed my issue!

Leave a Reply

Your email address will not be published. Required fields are marked *