Profile Management 2109

Enable credential-based access to user stores

December 9, 2021

Contributed by:

By default, Citrix Profile Management impersonates the current user to access user stores. Therefore, it requires the current user to have permission to directly access the user stores. Enable this feature if you do not want Profile Management to impersonate the current user when accessing user stores. You can put user stores in storage repositories (for example, Azure Files) that the current user has no permission to access.

To ensure that Profile Management can access user stores, save the profile storage server’s credentials in Workspace Environment Management (WEM) or Windows Credential Manager. We recommend that you use Workspace Environment Management to eliminate the need of configuring the same credentials for each machine where Profile Management runs. If you use Windows Credential Manager, use the Local System account to securely save the credentials.

Note:

To ensure that NTFS permissions are retained, you must put the entire profile in a profile container.

To save your profile storage server’s credentials in WEM, complete the following steps:
1. In the administration console, navigate to Policies and Profiles > Citrix Profile Management Settings > User Store Credentials.
2. On the User Store Credentials tab, select the Enable credential-based access to user store check box.
3. Click Add. The New Credential dialog box appears.
4. Type the FQDN or IP address of your profile storage server and its credentials.
5. Click OK to save your settings.
To save your profile storage server’s credentials in Windows Credential Manager, complete the following steps on each machine where Profile Management runs:
1. Download PsExec from the Sysinternals website and unzip files to C:\PSTools.
2. Locate Command Prompt from the Start menu. Right-click the Command Prompt option and choose Run as administrator. A command shell starts.
3. Run the C:\PSTools\PsExec -s -i cmd command. Another command shell starts.
  
  $New command shell after you run the C:\PSTools\PsExec -s -i cmd command$
4. In the new command shell, run the rundll32.exe keymgr.dll, KRShowKeyMgr command. The Stored User Names and Passwords dialog box appears.
5. In the Stored User Names and Passwords dialog box, click Add.
6. Type the FQDN or IP address of your profile storage server and its credentials. Use the default credential type. Click OK.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Enable credential-based access to user stores

December 9, 2021

Contributed by:

December 9, 2021

Contributed by:

Enable credential-based access to user stores

In this article