If you happen to “just” start seeing this logon warning > “You do not have the proper encryption level to access this session” chances are you have recently been smacked with a group policy update that has recently been pushed down to your servers. This error can yield an array of issues from shadowing to icons not launching that do not have the proper encryption level.
First have a quick look at the following registry key – HKLM\Software\policies\Windows NT\Terminal Services\MinEncryptionLevel. If the key is present and set to 3 you will either have to correct the group policy (not good) or update the encryption level of the icons linked to the server with issues (best option)
To change the icons encryption level – simply launch the Citrix Access Management Console and navigate to the icon in question, then right-click and select properties. Next, click on Advanced, then click on Client Options and click the dropdown arrow under “Encryption”. Change the value from “Basic” which is the default to 128-Bit(RC-5). Then test the icon with a non administrative account. At that point you should be good to go.
You may want to consider changing the rest of the icons in your farm to 128-Bit(RC-5) as soon as you can. It honestly is not a good idea to have basic encryption, even if your server is behind firewalls and on a lan with no internet facing exposure. Think about it. Do it do it! Pies up!




