When you scan a Citrix XenApp Farm using either View Only or Custom credentials you may see the error

"The Citrix XenApp farm agent encountered an exception when 'Reading zones'. Access denied."


This error can be caused by an issue with Citrix XenApp 6.0 or 6.5.


  • To resolve the issue, ensure that the server is running the latest Citrix Hotfix Rollup pack. 
    For Citrix XenApp 6.5 this issue was resolved in CTX136248 - "Hotfix Rollup Pack 2 for Citrix XenApp 6.5 for Microsoft Windows Server 2008 R2".


  • Alternatively, ensure the service account user performing the scan is configured as a Citrix administrator with Full Admin privilege.