Scenario: A Citrix Architect identifies a fault in the Active Directory design for CGE's existing XenApp environments. Group Policy Objects (GPOs) from OUs across the Active Directory apply when end…

Creating one GPO per region might still lead to undesirable inheritance or lack the granularity needed to control specific Citrix policy applications to users or Delivery Groups within those regions.

Integrating Citrix policies directly into a GPO allows administrators to manage them alongside other AD settings, and filtering these Citrix policies by end users and Delivery Groups provides granular control over their application. This ensures that specific policies are delivered only to the intended users or virtual desktops, overriding potentially undesirable GPO inheritance.

While Client Name is a valid Citrix policy filter, it is often less robust or scalable for managing broad user populations compared to user groups or Delivery Groups.

Filtering Citrix policies based on IP address can be effective but may not provide the desired level of control for user-centric policies or policies that need to follow users across different IP segments.