8/08/2006 - Understanding and Troubleshooting Citrix's Seamless Windows Engine: "This article will explain how these technical components work and how you can fix seamless windows problems "

ICA Client Printer Creation

Citrix White Paper
CTX681954 - Troubleshooting Citrix ICA Printer Auto-creation: "Troubleshooting Citrix ICA Printer Auto-creation "
Wfshell.exe crashes - Brian Madden's Community Forum: "Grimace Not-So-Newbie

Posts: 25
Score: 0
Joined: 3/17/2005
Status: offline This issue has been addressed in a Citrix Hotfix Rollo-up:


La Grimace

(in reply to Joe McGaugh)
Post #: 8

RE: Wfshell.exe crashes - 1/24/2006 7:59:23 AM

Joe McGaugh
Master Yoda

Posts: 676
Score: 13
Joined: 4/15/2005
From: Florida
Status: offline Yes, this roll-up addresses the issue, but I have not seen it Resolve the issue in all instances. If you don't do the necessary maintenance as Jeff and I both have talked about, your putting a bandaid on the issue. Clean the servers and remove all the native drivers first, set printing policies for UDP and do not allow native drivers to install automatically, and if your still having an issue, then try the patch.


Joe "
wfshell.exe error

From one kind soul:

Duplicate Problem by terminating application by clicking on "X". Log back in and you should see the wfshell error.

Resolution -

In the "CCC" under advanced setting, change the configuration from "reset" on a broken connection to disconnect. After this configuration is made, log off and log back on and terminate application by clicking on the "X" again. After you log back on, the wfshell error should not be there nor in the eventlog anymore. You can modify the idle timeout settings for users to control the number of active idle session on your Citrix Servers. Hope this helps and it is a relief to finally find the cause of this error.
CDM Redirector Timeout Event ID 70 in MetaFrame 1.8 :: :: Citrix Support :: Thin Client Support :: Terminal Server Help

In the Events Viewer, one might find a varied number of Event ID 70 in Source: CDM Redirector. This occurs when the CDM Redirector timed out on a request to access a client device.

This can happen when an application is attempting to access a client device during a disconnect. Check Citrix Server Administration when you see this event appear. The best way to determine what client device is causing this issue is to turn off client device mapping (client drive, client COM ports, client printers). Enable them one at a time and monitor the client's logon process.

If you find that you are receiving these timeouts due to network latency, you can modify the timeout values in the registry key shown below:

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Make sure you back up the registry before you edit it. If you are running Windows NT, be sure to update your Emergency Repair Disk (ERD).

The registry key is:


Increase the settings for the following:
RequestTimeout: Default is 60 (in seconds)
DirCacheTimeout Default is 30 seconds
CacheTimeout is 60 seconds


Event ID 9646 is logged when you try to send many messages in Exchange Server 2003

Can't get to

I had this problem recently and a search of the internet found several interesting instances of this happening to others.
One example:

Title: Access denied due to security policy violation

When I link to some web pages, I am getting this error message:

Access denied due to security policy violation

Reject ID: 438f612b-1000c-42852404-7b6

Does this look familiar to anyone? I can't tell if it is coming from something on our end (like Checkpoint NG) or on the other end. It does not happen all the time on even the same website, just on certain pages for unknown reason.

I see several reports of this exact message on Google, but no one has an answer to the question.

Comment from HarkinsIT
Date: 01/26/2006 01:15PM PST

I have received a few complaints from my users about not being able to access particular sites, particularly I too am running a Checkpoint firewall (NGXR60) and have found the following in the SmartDefense log: WSE0020008 found both content-length and transfer-encoding headers in response.

It's not the same exact error you are getting, RobWalling, but I was wondering if you had found a solution. I have been pouring through the SmartDefense settings and so far I haven’t been able to find anything about this.

Just wondering.....Thanks.

Comment from RobWalling
Date: 01/27/2006 11:40AM PST

After playing around with it for awhile and talking to Check Point, I finally discovered that the "ASCII Only Response Headers" criteria in the Web Intelligence piece of NGX was what was causing the problem. Turned it off, and all is well. Putting it in "Monitor Only" mode will still block it though! That really made it hard to figure out. Of course what opened myself up to, I'm not sure yet.

BTW, user ID "mobot" is someone else. I latched onto this thread because it described the same problem.


Comment from m298908
Date: 01/27/2006 11:42AM PST

We recently upgraded our check point software also and started having this for It is only happening to one user though. I can get to it fine. Very strange. I will try this setting and see if it works. thx

Citrix::Performance Metrics

Percent Interrupt Time
The processor is spending a large amount of time responding to I/O rather than user processing. A large value for interrupt time indicates a hardware problem or a very busy server.

Context Switches per Second
A large # of threads and/or processes are competing for processor time.