Zero Trust Enclaves as an EUC Delivery Strategy: Why VDI Architecture Lost the Argument Before the Meeting Started https://www.linkedin.com/pulse/zero-trust-enclaves-euc-delivery-strategy-why-vdi-lost-jaymes-davis-xlugc?utm_source=share&utm_medium=member_android&utm_campaign=share_via

Microsoft announced a change in Conditional Access via Message Center - I'm talking about Entra's Baseline scope settings enforcement. OIDC Apps like Citrix DaaS or NetScaler might be affected. Checkout julianjakob.com/microsoft-entra-ca-baseline-changes-affecting-citrix-authentication

Renewed your Citrix SSL certificate? Check the Cloud Connectors too. In Citrix Cloud they are your STAs, and the binding lives in HTTP.sys, not IIS. Renewing your Citrix SSL certificate? Don't forget the Cloud Connectors | Robert Magasi

Install new Microsoft Teams (version 2) in Citrix The new version of Microsoft Teams (often referred to as “Teams 2.0”) has been the new standard since July 1, 2024. For VDI environments, this means: In short:There is no way back. The real game changer (that many underestimate)The new Microsoft Teams is no longer delivered as an MSI or EXE package, but exclusively as: … <a href="https://www.deyda.net/index.php/en/2026/08/10/install-new-microsoft-teams-version-2-in-citrix/" class="more-link">Continue reading "Install new Microsoft Teams...

NetScaler ADC Firmware Upgrade Regular firmware updates are one of the most important maintenance tasks in a NetScaler ADC infrastructure. In addition to new features, current firmware releases include important bug fixes and security-related patches. Especially in the case of security advisories or actively exploited vulnerabilities, firmware updates should be scheduled promptly. Because a firmware upgrade can affect production … <a href="https://www.deyda.net/index.php/en/2026/08/13/netscaler-firmware-upgrade/"...

Switching to PQC or TLS 1.3 Backend-Connections? See the impact here julianjakob.com/netscaler-performance-impact-for-post-quantum-cryptography-pqc

Architect Your Way Out: Why AI Applications Need a New Delivery Model https://www.linkedin.com/pulse/architect-your-way-out-why-ai-applications-need-new-delivery-davis-gil9c?utm_source=share&amp;utm_medium=member_android&amp;utm_campaign=share_via

NetScaler CVE Checklist: Updates, Security Assessment and Incident Response Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured response: assess exposure, select a secure target build, update the systems and then check for indicators of compromise. This checklist summarizes the key steps for new NetScaler CVEs. The current vendor security bulletin, supported firmware releases and the specifics of the environment always remain … <a...

A chat with Leostream We are back again this time with co-host Sean Massey joining Jarian Gibson to talk with ⁠Karen Gondoly⁠, CEO at ⁠Leostream⁠. Leostream is a platinum sponsor of the World of EUC. In this podcast we talked about all things going on with Leostream. In this podcast we had the pleasure of talking with Karen from […]

Quickpost about TLS 1.3 Backend-Communication usage with NetScaler. Important for everyone who's currently dealing with new SSL Backend-Profiles to enable TLS 1.3 not only on Frontend. julianjakob.com/netscaler-tls-1-3-backend-ssl-communication

HDX connection time should be just a few seconds. For sure not 18-20. Two Citrix policy settings can be the cause or fix for it. Worth checking even when nothing is broken. HDX Connection Time, the Logon Phase You Should Be Checking | Robert Magasi

World of EUC Amplify is the week after next! I hope to see you all there! ferroquesystems.com/insight/euc-as-a-product-the-next-step-after-gitops

A chat with the WEUC board about our upcoming Amplify event We are back again this time with the entire World of EUC board. In this podcast we talked about what we are looking forward to for our upcoming EUC World Amplify event. We are excited for Amplify! Registration is open ⁠⁠⁠⁠⁠EUC World 2026 in Milwaukee, Wisconsin⁠⁠⁠⁠⁠. The event will be coming up soon. We look […]

Windows 11 Black Screen After the September Update – explorer.exe Fails to Start After installing the September Windows updates, I came across an interesting issue in a Windows 11 VDI environment. User authentication completed successfully. The Citrix session was established and the Windows logon process appeared to complete normally. But instead of the desktop, the user was left with a persistent black screen. At first glance, this looked … <a...

Windows 11 Black Screen After the September Update – explorer.exe Fails to Start After installing the September Windows updates, I came across an interesting issue in a Windows 11 VDI environment. User authentication completed successfully. The Citrix session was established and the Windows logon process appeared to complete normally. But instead of the desktop, the user was left with a persistent black screen. At first glance, this looked … <a...

NetScaler CVE Checklist: Updates, Security Assessment and Incident Response Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured approach: assess exposure, select a secure target version, update affected systems, and then determine whether there are any indications of compromise. This checklist summarizes the key steps for dealing with new NetScaler CVEs. The current vendor security bulletin, supported firmware builds, and the specifics … <a...

NetScaler CVE Checklist: Updates, Security Assessment and Incident Response Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured response: assess exposure, select an applicable fixed build, update the appliance, and then investigate whether there are signs of earlier exploitation. This checklist brings together vendor information and additional publicly reported investigation guidance. The current Citrix Security Bulletin CTX697096, the relevant firmware variant, and … <a...

If you don't want to run T-POP's eleven Versions of his IoC Script on all of your Instances by manual, here's a bit of help, import two Jobs on your NSC / NSC-Service and pull the results globally. Hope this helps and save you guys some time. julianjakob.com/netscaler-run-get-ioc-scripts-with-console

New release: the 2026-2027 State of EUC Survey 'DaaS Like a Pro' now available! daaslikeapro.com/2026/10/07/the-2026-2027-state-of-euc-survey-now-available

NetScaler CVE Checklist: Updates, Security Assessment and Incident Response Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured response: assess exposure, select an applicable fixed build, update the appliance, and then investigate whether there are signs of earlier exploitation. This checklist brings together vendor information and additional publicly reported investigation guidance. The current Citrix Security Bulletin CTX697096, the relevant firmware variant, and … <a...

NetScaler CVE Checklist: Updates, Security Assessment and Incident Response Critical vulnerabilities in NetScaler ADC and NetScaler Gateway require a structured response: assess exposure, select an applicable fixed build, update the appliance, and then investigate whether there are signs of earlier exploitation. This checklist brings together vendor information and additional publicly reported investigation guidance. The current Citrix Security Bulletins, including CTX697191, CTX697174, and CTX697096, the … <a...

You want to switch to Entra ID SSO for Citrix DaaS Cloud or Citrix DaaS Local, but there are some VDA's which are older than Windows Server 2025 or some Windows 10 VDI's? Use Entra ID SSO in Co-Existence with Citrix FAS. See some of my findings during configuration and migration here: julianjakob.com/citrix-daas-entra-id-sso-in-co-existence-with-fas

After writing about the CPU lottery in public cloud previously, I was asked about an AMD specific version… here we go: https://blog.myvirtualvision.com/2026/10/23/the-cloud-desktop-cpu-lottery-amd-edition/

I've Been playing with NixOS lately, mostly to understand what DAWO.community the Dutch government's open-source workplace, is actually built on. Figured I'd write it down as I go, so this is the start of a little series on my blog. Not going to lie, the first evening I was ready to cry and give up. 20+ years of images, Workspace ONE and Intune and I thought I recognized everything. Turns out I didn't, and that's where it got fun. Part 1 is about the two assumptions I got wrong, how one config can work for a whole organization with room for exceptions, and the bar I'm setting for myself. No idea yet if a Linux workplace can get there, that's the journey. LinkedIn: lnkd.in/p/eJCtaXDx Direct: debruinonline.net/post/beyond-the-golden-image-an-euc-veteran-meets-nixos

Finding in the Wild | Citrix Entra SSO – wenn die Microsoft Security Baseline die Anmeldung blockiert Eine Citrix-Umgebung mit Microsoft Entra ID, korrekt konfiguriertem SSO und registrierten VDAs. Die Benutzer authentifizieren sich erfolgreich an Citrix Workspace. Beim Start des Desktops erscheint jedoch erneut eine Windows-Anmeldeaufforderung oder die SSO-Anmeldung schlägt fehl. Das Fehlerbild: ✅ Entra-ID-Authentifizierung erfolgreich✅ VDA registriert und erreichbar✅ Citrix-Ressourcen werden angezeigt❌ Single Sign-on innerhalb der Sitzung funktioniert nicht Der erste … <a...

One repo to rule them all, one repo to find them, one repo to bring them all, and in the lock file bind them. Part 2 of my NixOS series is live: Lord of the repo. This time, going from one laptop to an organization. A fourth layer for partners, each with their own Entra tenant. Think Workspace ONE Organization Groups. A forgotten test line that silently beat my org default. The "which GPO won?" problem in a different jacket. A Test branch, because one does not simply push to main when every commit reaches every laptop within half an hour. And the lock file: flake.nix is the purchase order, flake.lock is the packing slip. Still learning out loud, so Nix veterans, tell me where I'm doing it the hard way. Full post: LinkedIn: lnkd.in/eJqtMGer Direct: debruinonline.net/post/beyond-the-golden-image-part-2-lord-of-the-repo