TS Event ID: 3217

I'm running Citrix Secure Gateway on a Server 2003 box which clears external
citrix web users into our network to access our metaframe 3.0 farm. It works
well for everyone except 1 user I've been notified of is constantly getting
kicked off any time he minimizes the window. I found out his IP address and
looked for him in the logs, here's what I got:

Event ID: 3217
Source: CtxSecGwy
User: N/A
Category: Warning
Description:
CSG3217 Cannot connect to server [LogonAgent: wi.servername.com:443], client
IP [#.#.#.#:52625] connection dropped.

Typically people are dropped because of invalid-ticket problems or they time
out. The only behaviour that precedes this user losing connection is
minimizing the window, which is, needless to say, unusual. I've attempted to
duplicate the problem elsewhere but can't. Because this gentlemen is outside
of my company I have not checked out his computer personally, but I talked
him through resetting up the web client needed to connect through the
gateway. Plus, he works fine as long as he doesn't change which application
he's working in.

I've been looking all over for information but the only thing I could find
is an old NT TS document listing what the various errors meant. 3217 returns
this:
"Error 3217
Cannot log on. User is currently logged on and argument TRYUSER is set to NO.
Explanation: This message should occur only on a down-level computer. Any
action to correct the problem should be performed on that computer. The
computer cannot locate its copies of the replicated files while a user is
logged on and the TRYUSER option is set to NO.

Action: No action is needed. The computer will update the files when no user
is logged on. To have the local computer update files while users are logged
on, change the value of the TRYUSER entry in the [replicator] section of the
configuration file to YES."

Anyone have any idea if this is still relevant? If it is, what
configuration file is it talking about? I'd happily change a flag for this
guy if I knew which one to set.

Thanks in advance for any help.
--
NDadabo
Network Support Specialist
Federal Signal Environment Products


NDadabo

No one willing to try their luck at this? There's gotta be someone out there
who knows more about Terminal Services than I ... however you are, please
help!

NDadabo
Network Support Specialist
Federal Signal Environment Products