Citrix XenApp 6.5 and Powershell
Cool! Citrix has powershell. First thing I did was run a request to update all the group memberships from a confusing array of what looks like an organic process whereby users and groups are used with abandon to ACL Citrix applications. So what I did was list out all the applications and then using Quest AD tools create groups called "XenApp - " + <application name> this worked great! I couldn't get the remoting to work - we don't have a PKI here?!?! SO this is a two stage process, output the applications to a csv and the import to create the groups. Next I populated each application with these groups. Nothing worked. I first thought that the error - Cannot find group - meant that replication hadn't happened. So I waited. This was not the case. It seems that Quest AD tools do not create the pre-Windows 2000 name for the group. This is what Citrix uses to ensure that the group exists before it will assign this to an application...