When attempting to launch an application or desktop ica session you get the error "You do not have the proper encryption level to access this session".  This can happen for a variety of reasons.  The first thing to check is if there are any policies in place within group policy forcing a specific encryption level.  If not, then the issue could reside with the client application.

To check the client application settings search your local disk for Module.INI which is typically located in your profile by navigating to %AppData%RoamingICA Client and C:Program Files (x86)CitrixICA Client.  Edit this file and you should see something similar to below...

The key to editing the file is to force the encryption from the client by adding the line

<strong>EncryptionLevelSession=EncRC5-128</strong>

under the WFCclient entry.  Save the file and relaunch the client, you should be able to connect successfully.

;

; ICA Override File

;

; Add ICA file settings that you want to be sent to client devices

; to this file.  Settings contained in this file override any

; settings generated by Web Interface.  This file is only used when

; no bandwidth profile is selected.  When a bandwidth profile is

; selected bandwidth_xxx.ica is used.

;

[WFClient]

Version=2

RemoveICAFile=yes

ProxyTimeout=30000

ProxyFavorIEConnectionSetting=Yes

ProxyUseFQDN=Off

EncryptionLevelSession=EncRC5-128

[ApplicationServers]

Application=

[Application]

Launcher=WI

TransportDriver=TCP/IP

DoNotUseDefaultCSL=On

BrowserProtocol=HTTPonTCP

LocHttpBrowserAddress=!

WinStationDriver=ICA 3.0

ProxyTimeout=30000

AutologonAllowed=ON

[EncRC5-0]

DriverNameWin16=pdc0w.dll

DriverNameWin32=pdc0n.dll

[EncRC5-40]

DriverNameWin16=pdc40w.dll

DriverNameWin32=pdc40n.dll

[EncRC5-56]

DriverNameWin16=pdc56w.dll

DriverNameWin32=pdc56n.dll

[EncRC5-128]

DriverNameWin16=pdc128w.dll

DriverNameWin32=pdc128n.dll

[Compress]

DriverNameWin16=pdcompw.dll

DriverNameWin32=pdcompn.dll