Apply Citrix Password Manager per application or per AD group only

Most people like me don’t see the benefits of running Citrix password manager on the whole farm. I want only have it run based on a published application, or based on a AD group. Citrix password manager it’s a love hate relationship for me. I hate it most of the time, except for like one application in our whole Citrix farm. I have like 50 out of 3000 users that could only benefit from Citrix password manager, the rest don’t need it. So how do I apply Citrix password manager to a subset of users, or application.  Below is the step by step. Bascially what you are doing is removing it from startup, and only applying it to startup based on an application, or AD group (via VB logon script). I’ve given you two ways to launch Citrix password manager, based on a published application or via a AD group on logon.

Run Citrix password manager based on a published application

1. Regedit, and go to HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AppSetup

2. Modify it, and remove only just this (nothing else). C:\Program Files\Citrix\MetaFrame Password Manager\wts\ssolauncher.exe /nossoshutdown

3. Close regedit

4. Now you can apply it to a published app like notepad with the following command. “C:\Program Files\Citrix\MetaFrame Password Manager\wts\ssolauncher.exe” /application “C:\Windows\notepad.exe”. The working doesn’t change either, in this case it would be C:\Windows\notepad.exe.

Run Citrix password manager based on a AD group at logon using a VBScript.

Here’s the logon vbscript I used, use at your discretion. If a user was in the Citrix Password Manager AD Group (I created this security group in AD, it’s not a standard group that comes with Citrix or anything) then the Citrix password manager would run.

For Each strGroup in objUser.MemberOf
strGroupPath = “LDAP://” & strGroup
Set objGroup = GetObject(strGroupPath)
strGroupName = objGroup.CN

Select Case strGroupName

Case “Citrix Password Manager”

Dim aWshShell
Set aWshShell = WScript.CreateObject(“WScript.Shell”)
Return = aWshShell.Run(“c:\progra~1\citrix\metafr~1\wts\ssoLauncher.exe /nossoshutdown”, 1, true)
Set aWshShell = Nothing

End Select

Next