Citrix XenApp / Terminal Server

Terminal servers are designed for an average workload and rely on the applications to release their resources as quickly as possible when the RDP session is disconnected. Since the client also serves as a server for the add-ins, it would remain in memory with normal configuration and prevent the session from being completely terminated.

Option: ShutdownOnDisconnect

By setting ShutdownOnDisconnect in the "primedocs.exe.config"-file the client will be shutdown automatically as soon as it receives the Session Disconnect from the terminal server. This setting can be adjusted via a parameter in the Setup.

<configuration>
  [...]
  <appSettings>
    [...]
    <!-- Allows to configure primedocs to shutdown 
          when a disconnect happens (such as disconnecting from an RDP Session) -->
    <add key="ShutdownOnDisconnect" value="true" />
    [...]
  </appSettings>
  [...]
</configuration>

Option: TrySyncOnLogOff

By setting TrySyncOnLogOff in the "primedocs.exe.config" file the client tries to synchronize the last state to the server before the Session Logoff. This can be useful if the cache is not stored permanently, for example, and if data loss is to be avoided.

This setting can be adjusted via a parameter in the Setup.

<configuration>
  [...]
  <appSettings>
    [...]
    <!-- Before a Windows Session logoff the client can try to sync its latest changes to the server. A user might "kill" the application, so this is "Best Effort" and might not work depending on the user action. -->
    <add key="TrySyncOnLogOff" value="true" />
    [...]
  </appSettings>
  [...]
</configuration>

primedocs Cache

In a Load Balanced terminal server environment, it must be ensured that each primedocs client has exclusive access to the cache. This can be ensured by properly deploying the cache folder. Optionally, the primedocs client can be excluded from Active State monitoring in the terminal server.

Settings for Outlook

Outlook's security model assumes by default that up-to-date antivirus software is installed. However, in Terminal Server or Citrix environments, Outlook cannot retrieve this status. This results in the user having to constantly confirm primedocs access to the Outlook address book.

To suppress these messages, the following settings must be made either via Registry/GPP or via GPO:

Via Registry/GPP

[HKEY_CURRENT_USER\software\policies\microsoft\office\16.0\outlook\security]

"PromptOOMAddressBookAccess"=dword:00000002
"PromptOOMAddressInformationAccess"=dword:00000002
"AdminSecurityMode"=dword:00000003

Via GPO

Administrative Vorlagen (Benutzer)\Microsoft Outlook 2016\Sicherheit\Sicherheitsformulareinstellungen
Outlook-Sicherheitsmodus - Wert 3 (Outlook-Sicherheitsgruppenrichtlinie verwenden)

Administrative Vorlagen (Benutzer)\Microsoft Outlook 2016\Sicherheit\Sicherheitsformulareinstellungen\Programmatische Sicherheit
Eingabeaufforderung für Outlook-Objektmodell beim Zugriff auf ein Adressbuch konfigurieren - Wert 2 (Automatisch genehmigen)

Administrative Vorlagen (Benutzer)\Microsoft Outlook 2016\Sicherheit\Sicherheitsformulareinstellungen\Programmatische Sicherheit
Eingabeaufforderung für Outlook-Objektmodell beim Lesen von Adressinformationen konfigurieren - Wert 2 (Automatisch genehmigen)

Further Outlook configuration options are described here.

Citrix XenApp and Terminal Server

For more information, see the following articles:

• https://support.citrix.com/article/CTX891671

• https://support.citrix.com/article/CTX137340

• http://www.browsium.com/faqs/configuring-xenapp-close-ion-catalyst-processes/

Registry example: Citrix

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
Value Name:LogoffCheckSysModules
Type:REG_SZ
String:primedocs.exe

Microsoft Terminal Server

For more information, see the following articles:

• https://support.microsoft.com/en-us/help/2513330

Registry example: Terminal Server

HKEY_LOCAL_MACHINE \SYSTEM\CurrentControlSet\Control\Terminal Server\Sysprocs
Value name: primedocs.exe
Data type: REG_DWORD 
Base: Hex