CIB Engineering

Here is a quick way to use vbscript to quickly enable SSO pass-through on the Citrix client side. Very useful if you happen to be maturing in your Citrix environment or have recently received a requirement to enable pass-through for a published application. Point and case, people get fed up with having to key in two or three passwords in order to access an application in your Citrix farm. this is especially frustrated when you have a multi domain environment, and have different password complexity requirements for each domain.

This script has been tested  in the following versions:

• Citrix Presentation Server 4.0
• Citrix Presentation Server 4.5

Script is attached to this page as a text file, simply rename from .txt to .vbs.

'========================================================================= ' COMMENT: vbscritp to enable sso on citrix client ' NOTES: uncomment 'option explicit or comment out on error resume next ' to allow for any errors/or to debug script. ' COMMAND: from command line run the following ' cscript ./citrix-xenapp-enable-sso-script.vbs ' DATE: 12/8/2009 edt. .0.01 '========================================================================= Option Explicit dim WSHShell dim strRegKey dim Result dim strNetProv dim strInsert dim strPnSs dim strCitrix dim strClientName dim strPnSsonDll 'On Error Resume Next Set WSHShell = CreateObject("WScript.Shell") strRegKey = "HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order\" strNetProv = WSHShell.RegRead (strRegkey & "ProviderOrder") strInsert = "PnSson" strPnSs = "HKLM\SYSTEM\CurrentControlSet\Services\PnSson\" strCitrix = "HKLM\Software\Citrix\ICA Client\" strPnSsonDll = "C:\Program Files\Citrix\ICA Client\pnsson.dll" WshShell.LogEvent 4, "vbscript to enable SSO for citrix client has started..." If FileExists(strPnSsonDll) = False Then ' pnsson.dll does not exist so quit WshShell.LogEvent 1, "Error unable to proceed, File not found: " & strPnSsonDll WScript.Quit End If ' This is equivalent to setting the "Pass-Through Authentication" option in the ICA Client. WshShell.LogEvent 4, "Setting Citrix SSPIEnabled registry entry" WSHShell.RegWrite strCitrix & "SSPIEnabled", 1, "REG_DWORD" Err.Clear 'WSHShell.RegRead strPnSs & "IsEnabled" 'If ((WSHShell.RegRead (strPnSs & "IsEnabled" 1) Or (Err0)) Then If ((WSHShell.RegRead (strPnSs & "IsEnabled") <> 1) Or (Err<>0)) Then ' The Citrix Single Sign-on service registry key does not exist or IsEnabled is not ' set to 1, so create the registry entries. WshShell.LogEvent 4, "Creating PnSson service registry entries" Err.Clear WSHShell.RegWrite strPnSs & "IsEnabled", 1, "REG_DWORD" WSHShell.RegWrite strPnSs & "Type", 4, "REG_DWORD" WSHShell.RegWrite strPnSs & "NetworkProvider\Class", 2, "REG_DWORD" WSHShell.RegWrite strPnSs & "NetworkProvider\Name", "Citrix Single Sign on", "REG_SZ" WSHShell.RegWrite strPnSs & "NetworkProvider\ProviderPath", strPnSsonDll , "REG_SZ" WSHShell.RegWrite strPnSs & "Enum\0", "Root\LEGACY_PNSSON\0000", "REG_SZ" WSHShell.RegWrite strPnSs & "Enum\Count", 1, "REG_DWORD" WSHShell.RegWrite strPnSs & "Enum\NextInstance", 1, "REG_DWORD" End If If (InStr(strNetProv, strInsert) = 0) And (Err=0) Then ' The Citrix PNSson network provider is not listed and the Single Sign-on service ' registry entries have been sucessfully created, so we add the PNSson network provider. WshShell.LogEvent 4, "Adding PnSson network provider" Err.Clear WSHShell.RegWrite strRegkey & "ProviderOrder", strNetProv + "," + strInsert End If If Err<>0 Then ' An error occurred while enabling SSon. 'WScript.Echo "An error occurred while enabling SSon: " & Err.Description WshShell.LogEvent 1, "An error occurred while enabling Citrix SSon: " & Err.Description End If WshShell.LogEvent 4, "Enable Citrix SSon script complete" '**************************************************************************** ' Function FileExists() ' ' Purpose: Checks for the existance of a file. ' Input: strSource - The file to check for. ' Output: Returns true or false (exists or does not exist). ' Usage: FileExists("C:\windows\system32\calc.exe") '**************************************************************************** Function FileExists (strSource) Dim objFso, objWshShell Dim blnSuccess : blnSuccess = True Set objFso = CreateObject("Scripting.FileSystemObject") 'On Error Resume Next If objFso.FileExists(strSource) Then blnSuccess = True Else blnSuccess = False End If If Err <>0 Then Err.Clear blnSuccess = False End If Set objFso = Nothing FileExists = blnSuccess End Function