Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a XenApp 5 farm, running under Win2k8 server. Sometimes a user's session will "hang", and when they attempt to connect to CITRIX after that, they'll see the standard authentication error "your smart card is blocked".

If the user sees this on their Win7 desktop login, it means they have to go to an administrator to get their card un-blocked. However, in the scenario described above, they can still use their smart card fine, and after clearing their "hung" session, can log into CITRIX again fine as well.

Any reason the remote connection to Windows would be telling the user their smart card is blocked, when it really isn't?

share|improve this question
You may want to enable CAPI logging to the Windows event log as described here:… – Greg Askew Aug 7 '12 at 0:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.