Internet Explorer 8 doesn’t store passwords in Citrix XenApp 6.5

I have been looking into an issue for quite sometime where users were unable to populate the saved passwords in Internet Explorer 8 running on XenApp 6.5. The below steps outlines the procedure that I followed to fix the issue.

Our Environment:-

XenApp 6.5 with Citrix UPM 4.1.1 and Internet Explorer 8

  • The first thing that I checked was the exclusion list where IE stores its cookies and saved passwords. That wasn’t the issue in our case.
  • Ensure that the Citrix UPM setting “Process internet cookies on logoff” is Enabled as below


  • Also ensure that the below settings are in place


The above settings fixed the issue in my case. I hope it helps someone … Cheers

How to enable Group Policy Preferences support for Internet Explorer 9

The below is a step by step guide on how to enable Group Policy Preferences for Internet Explorer 9. The article is based on the great work Mark Heitbrink has done here

Step 1. Setup a IE8 Internet Explorer Extension setting that has the setting you want to apply to IE9. (e.g. Home Page)



Step 2. In the same Group Policy Object navigate to User Configuration > Policies > Windows Settings > Scripts (Logon/Logoff) and double click on the Logon (or logoff) option. Then click on the “Show Files” button.


Step 3. Click on “Users” in the Address bar.


Step 4. Then click on the “Preferences” and then “InternetSettings” folder and then right click on the “InternetSettings” file and click on “Edit”.


Now we are looking at the XML that is used to apply the Group Policy Preferences settings. This is where we need to change the version number to support IE9.

Note: Enable “Word Wrap” in notepad to see the text on multiple lines.

Step 5. Change “max=” to “” (see below)




Step 6. Save the file and you are done.

Now you can have the goodness of Group Policy Preferences with IE9, however as the article also said this is NOT supported so please test carefully.

What is also nice about this change is that it will be persistence, so if you make subsequent changes to the same setting you do not need to edit the XML again however you will need to make this change each time you make a new GPP IE Policy setting.