in the eventvwr:

The IPSec driver has entered Block mode. IPSec will discard all inbound and outbound TCP/IP network traffic that is not permitted by boot-time IPSec Policy exemptions.

The IPSEC Services service terminated with the following error:
The system cannot find the file specified.

• check if there are any entries in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local
• if so, delete that subkey
• then run regsvr32 polstore.dll
• restart the ipsec service

• Provisioning Services 6.0 release notes : http://support.citrix.com/article/CTX129992
• Provisioning Services 6.0 Installation and configuration guide : http://support.citrix.com/article/CTX129994
• Provisioning Services 6.0 Virtual Disk Image in Standard Mode Crashes on Boot with the Error 0x4e PFN_LIST_CORRUPT : http://support.citrix.com/article/CTX131112
• Upgrade PVS path : http://support.citrix.com/proddocs/topic/provisioning-60/pvs-upgrade-wrapper-nashoba.html
• Provisioning services 5.6 Best practices : http://support.citrix.com/article/CTX127549
• Best practices for configuring provisioning services on the network : http://support.citrix.com/article/CTX117374
• error : PXE-E55 Proxy DHCP Service did not reply to request on port 4011 when PXE is running on another computer and DHCP option 60 is set : http://support.microsoft.com/kb/259670
• how to image a target device : http://support.citrix.com/article/CTX125740
• provisioning services & esx interoperability : http://support.citrix.com/article/CTX119739
• !!! BSOD on provisioning services vs VMXNET3 http://support.citrix.com/article/CTX128160
• Blog on PVS vs AD : http://blogs.citrix.com/2008/08/26/citrix-provisioning-server-and-active-directory-machine-account-password-synchronization/ & http://technet.microsoft.com/en-us/library/cc785826(WS.10).aspx
• Provisioning Services for XenApp best practices : http://support.citrix.com/article/CTX120464
• Registry settings to improve failover times for provisioning Services http://support.citrix.com/article/ctx119223
• Protection from antivirus : http://virtualfeller.com/2010/06/17/protection-from-anti-virus/
• KMS Configuration using provisioning services for Windows and Office 2010 http://support.citrix.com/article/CTX128276
• Advanced Memory and storage considerations for Provisioning Services http://support.citrix.com/article/ctx125126
• Provisioning Services & CIFS stores

  http://blogs.citrix.com/2010/11/05/provisioning-services-and-cifs-stores-tuning-for-performance/

• Citrix Provisioning Services & how to enable logging :

  http://support.citrix.com/article/CTX128285

• Citrix PVS & SEP :

  http://www.symantec.com/business/support/index?page=content&id=TECH123419

• Citrix PVS : make TFTP HA

  http://support.citrix.com/article/CTX116337

Investigate which executables are keeping the session open, and add the executable to the following registry key.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
Value Name: LogoffCheckSysModules
Type: REG_SZ
String: executabletoclose.exe

this one is annoying.  While the user is logging on to the desktop, the ICA client only displays a Black Window, untill the user is logged on.
Citrix forum thread here :
best workaround until citrix delivers a server side fix : disable citrix enhanced logon feedback. Citrix KB here , regkey is HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\Logon\DisableStatus (64 bit os)

server hanging during shutdown

known, fixed issue.  Servers hang during a shutdown, which is risky with sheduled reboots at night.
more info, citrix kb & citrix forum

Progressive Compression causes flickering in a published internet explorer

from the citrix forums :

1. Obtain an experimental private fix from Citrix Technical Support that will disable Off Screen Surfaces from an ICA level. This can be obtained by contacting Citrix Technical Support (if you have a support agreement) and referencing Citrix Problem Report #236384. At this time, we have a fix for XenDesktop 4.0 available and other products would require development of the fix as required.

Or

2. Disable the Off Screen Surfaces feature from the client side by changing the EnableOSS registry entry located under:

HKEY_CURRENT_USER\Software\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Thinwire Graphics\

citrix list of recommended hotfixes :

citrix came up with a list of recommended hotfixes for XenApp 6 & Windows 2008R2 (SP1)  here : http://support.citrix.com/article/CTX129229

qfarm /load gives 20000 and no license server found

check http://support.citrix.com/article/CTX125363 & request limited release hotfix if applicable.

Client Drives Cannot be Accessed in XenApp 6.0 Running on VMWare ESX

issue between vmware tools & citrix client drive mapping.  only happens when a full vmware tools install (including vmware shared folders) has happened.
more info, here at citrix KB

hide and disable windows libraries

not exactly an issue, currently the only way i’ve found to hide & disable windows libraries is :

[-HKEY_CLASSES_ROOT\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{031E4825-7B94-4dc3-B131-E946B44C8DD5}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{2112AB0A-C86A-4ffe-A368-0DE96E47012E}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{491E922F-5643-4af4-A7EB-4E7A138D8174}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7b0db17d-9cd2-4a93-9733-46cc89022e7c}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A302545D-DEFF-464b-ABE8-61C8648D939B}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A990AE9F-A03B-4e80-94BC-9912D7504104}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
“{031E4825-7B94-4dc3-B131-E946B44C8DD5}”=-

get rid of power shell & server manager icons for all users

only found an old skool solution for this.  Remove user access to the shortcuts before the profiles get created.  Done via GPO.  More here @ technet

default printer & devices reveals too much information

create a folder called printers.{2227A280-3AEA-1069-A2DE-08002B30309D} on a desires place in the start menu.

or publish / creaste shortcut with as command : C:\Windows\explorer.exe” ::{2227A280-3AEA-1069-A2DE-08002B30309D}

or publish / create shortcut with as command : RUNDLL32 SHELL32.DLL,SHHelpShortcuts_RunDLL PrintersFolder

install telnet client & dsa.msc

Like to have these two on all my servers for troubleshooting :

PS C:\Windows\system32> Import-Module ServerManager
PS C:\Windows\system32> Add-WindowsFeature RSAT-ADDS-Tools
PS C:\Windows\system32> Add-WindowsFeature Telnet-Client

more info can be found here @ novell
or at this forum post, or this one

2) proxy settings can be set in vci-integrity.xml

both can be found in the update manager install dir

one post explains howto create a Windows 2008R2 server without a 100MB system reserved partition

and one post that explains how to get rid of that 100MB partition if it’s already there

fire up console : ctrl + Shift + t
xenclient performance data : xentop
change / check vhd : vhd-util
control VM: xec

convert existing os, server, etc : just do xenconvert of an existing machine to a vhd.  create new VM, replace .vhd in /storage/disks , fire up vm and install xentools.

Citrix created an blog post about this : how to P2V your existing OS.

mount iso to vm. => copy (scp) to /storage/iso , hit ctrl + q to refresh xenclient, and you ‘ll be able to mount the .iso in the virtual drive that normally mounts the xentools.

• update : found that filename should be lower case only

sleep portable (stable on dell E6510) : ctrl + 0 to xenclient, put power / sleep ,  ignore message, ctrl + (nr of vm) back to vm, sleep vm, and the portable sleeps.  (other ways are never stable).

• update R 1.0 => hitting sleep just works now.

You’ll need to install the W2K8 feature AD Snap ins and command line tools.

with powershell :

PS C:\Windows\system32> Import-Module ServerManager
PS C:\Windows\system32> Add-WindowsFeature RSAT-ADDS-Tools

script available at msmvps.com blogs