Citrix / Terminal Server initial user program error on user logon

System Requirements:

  • Citrix
  • Windows Server 2003 / Windows Server 2003 R2

The Problem:

When logging onto the Citrix server, the student/staff user receives the following error dialogue.

You are connected to the remote computer. However, an error occurred while an initial user
program was starting, so you are being logged off. Contact the system administrator for
assistance.

Logon Error

The logon attempt then exists and returns to the thin client shell.

The Fix:

The problem is due to a permissions error in the Citrix server.

In the instance observed the permissions error was due to a restricted (through being missing rather than denied) permission flag on explorer.exe as a file, the error is not inherited from the %SYSTEMROOT% folder (c:\windows\). It is possible that any other user experiencing this error could be experiencing it based upon a bad permission set on another file.

If this proves to be the case, I suggest that you perform a permissions reset on the Windows folder at first, and if that doesn’t fix it, System32 and finally the entire Windows folder and all sub-folders.

Permissions Fix


To correct the fault:

Set the file security permissions on explorer.exe as “Read & Execute” and “Read” for both of the following accounts.

  • %LocalServer%\Users
  • %LocalServer%\Power Users

Please note: These accounts are Local Server accounts and NOT domain accounts and must be sourced from %servername%\%account% instead of %domain%\%account%.

No restart is required to complete the reconfiguration.