Citrix Execution files and system Files and their uses

XenApp Architecture:

Citrix System Architecture:

.Exe Files

EncSvc.exe (Citrix Encryption Service)

Enables secure communication with RC5 128-bit encryption between XenApp Plug-ins and XenApp. This service depend on Windows Management Instrumentation Driver Extensions.

SemsService.exe Citrix EUEM (End User Experienceing Monitoring)

Collects and collates end-user experience measurements.

Citrix Licensing (Performance – mflicperf.dll)

Performance counter DLL that must be registered for Perf Mon 

CtxSFOSvc.exe (Citrix Virtual Memory Optimization)

Dynamically optimizes applications running on a XenApp server to free up server memory.

HCAService.exe (CitrixHealthMon – Health Monitoring and Recovery)

Provides health monitoring and recovery services in the event problems occur.This service depend on Citrix Independent Management Architecture service, Terminal Services

CitrixICA (Performance – icaperf.dll)

Performance counter DLL that must be registered for Perf Mon

CtxWMISvc.exe (Citrix WMI Service)

Provides the Citrix WMI classes for information and management purposes.

This service depend on  the below listed services

• Citrix Independent Management Architecture service
• Citrix Services Manager service
• IPsec Policy Agent
• Remote Procedure Call (RPC)
• TCP/IP Protocol Driver
• Windows Management Instrumentation Driver Extensions

XTE.exe (Citrix XTE Server – Session Reliability)

Services network requests for session reliability and SSL from XenApp components.

CdfSvc.exe (Diagnostic Facility COM Server)

Manages and controls diagnostic trace sessions, which are used to diagnose problems on a XenApp server.This service depends on Remote Procedure Call (RPC)

Cpsvc.exe (Citrix Print Manager Service)

Manages the creation of printers and driver usage within XenApp sessions.

This service supports the Citrix Universal Printing features. This service depends on Print Spooler, Remote Procedure Call (RPC)

ctxcpubal.exe(Citrix CPU Utilization Mgmt/Resource Mgmt)
One of the services for the CPU Utilization Management feature.
Manages resource consumption to enforce entitlement policies. This service depends on RPC

RadeSvc..exe (Citrix Streaming Server)

Manages the XenApp Plug-in for Streamed Apps when streaming applications. This service depends on RPC

Ctxxmlss.exe ( Ctxhttp, XML Service)

Services XML data requests sent by XenApp components

ImaAdvanceServer.exe (Citrix Server Manager, interface to OS)

Provides XenApp with an interface to the operating system. Other services use this services to perform elevated operations.

Imasrv.exe (ImaService, management service)

Mfcom.exe (COM access to Citrix farm)

.Sys Files 

Ctxpidmn.sys (Sandbox Main Driver)

Ctxrmpn.sys (RM Process Notification Driver)

CtxSbx.sys (Sandbox Filter Driver)

Ctxsmcdrv.sys (SMC Support Driver – Session Monitoring and Control)

Icacdd.sys (ICA TW Miniport)

Icareduc.sys (ICA Reduction Driver)

Pdcomp.sys (Compression Protocol Driver)

Pdcrypt1.sys (Encryption Protocol Driver)

Pdcrypt2.sys (Encryption 128 bit Protocol Driver)

Pdrframe.sys (Frame Protocol Drv for Reliable Transport)

Twexport.sys (Thinwire Support Driver)

Wdica.sys (ICA WinStation Driver)

Ctxaltstr.sys (SFO Alternate Stream Driver)

Processes in all Sessions in a server

Session 0

• ImaAdvanceServer.exe
• Mfcom.exe
• Radesvc.exe
• Cdfsvc.exe (Diagnostic Facility COM Server)
• Cdmsvc.exe (Client Mapping)
• Encsvc.exe (Encryption)
• Hcaservice.exe (HCA)
• Cpsvc.exe (Client Printer)
• Ctxxmlss.exe (XML)
• Imasrv.exe (IMA)
• XTE.exe

Session 1

• Radeobj.exe (App Streaming)
• Pnamain.exe (PNA)
• Ssonsrv.exe (Pass-through Authentication)
• Wfshell.exe
• Java

Session n

• Wfshell.exe