Anyone experiencing startmenuexperiencehost.exe crashing (and startmenu doenst open or massive delayed) on Windows Server 2025 with October Updates (AV Defender)?

Is there any way to reset the Citrix Licensing grace period? After the LAS patch issue after rollout I have a client that exhausted the grace period, now any interruption to their onprem license server and they can't connect at all.

Can somebody help me with a copy of ControlUp Disk Monitor? I'm having some weird issues today that PVS cache disks are filling up.

I'm curious if anyone has been updating to Win11 26H2 yet and any results thereof?

Anyone seeing the file access popups for "Windows Feature Experience Pack" after October patches? It pops up like 10 messages asking for access.

Excel 365 - Hang / Not Responding Hello everyone, Has anyone experienced issues with Excel 365 in a CVAD environment? I have some users reporting that Excel freezes during simple operations such as copy/paste or changing the cell font. I have increased the number of Excel threads to match the number of vCPUs. I have also just tried disabling Auto Fill, but it's too early to tell whether this makes any difference. I suspect network printers might be involved. I have uberAgent data available for analysis, but I haven't been able to identify the root cause yet. I noticed some failed connections to the Print Spooler service (

spoolsv.exe

), but I'm not sure whether they correlate with the Excel freezes. Has anyone encountered similar issues or found a way to identify the root cause? Thank you!

Citrix Remote PC Access registration failures after Windows October 2026 CU – Administrator Protection identified as trigger Hi everyone, I wanted to share an issue we've been troubleshooting with Citrix Remote PC Access and ask whether anyone else has encountered it. We're running Windows 11 25H2 with Citrix VDA 2603/2607, managed through Intune and Open Intune Baseline (OIB). Since the September Windows updates, several workstations have become unregistered. Following the October CU (KB5127648), the issue is consistently reproducible. The VDAs report

AgentNotContactable

, with the DDC logging Event ID 1039:

SecurityNegotiationException: The caller was not authenticated by the service.

We've ruled out basic connectivity, AD secure channel issues, missing network logon rights, and Kerberos ticket acquisition failures. Upgrading to VDA 2607 doesn't help either. After extensive troubleshooting, we've identified Windows Administrator Protection as the trigger. Our reproducible findings: • October CU + Administrator Protection enabled (

TypeOfAdminApprovalMode = 2

) → Registration fails • Same configuration + DDC computer accounts added to local Administrators → Works • October CU + Administrator Protection disabled (

TypeOfAdminApprovalMode = 1

) → Works • October CU uninstalled, without DDC local admin rights → Works Interestingly, our Administrator Protection policy has been assigned through OIB for months, but the problem only appeared with the recent Windows updates. Citrix KB CTX340030 documents the same error and suggests granting the DDCs local administrator privileges. That works, but isn't a security compromise we're willing to make permanently. Microsoft also acknowledges a potentially related Administrator Protection regression affecting RDP in KB5127648, although Citrix VDA registration isn't specifically mentioned. Our current workaround: Disable Administrator Protection via Intune while keeping the October CU installed. We're raising a Citrix support case. Has anyone else experienced this, received feedback from Citrix/Microsoft, or found a better workaround that allows Administrator Protection to remain enabled? I'd really appreciate any feedback or experiences from other Citrix admins. References: • Citrix CTX340030: support.citrix.com/external/article?articleUrl=CTX340030-vda-failin…&language=en_US • Microsoft KB5127648: support.microsoft.com/en-us/…/kb5127648-windows-11-24h2-25h2-26h2-security-update

After applying the October updates to our Windows Server 2022 UAT environment, I've noticed what appears to be an issue with copy and paste between the workstation and the VDA. What's particularly strange is that clipboard redirection suddenly stops working from the VDA to the workstation, while it continues to work perfectly in the opposite direction. Has anyone else observed similar behavior?

I have a subset of Windows 2019 Server OS systems that when patched with the October MS patches will consistently display black boxes where the application window are. I am still attempting to determine what the exact configuration needed for this is though. Removing the October MS CU does not resolve the issue. Servers are running 2507 CU2. What makes it diabolical is that it does not happen to all servers equally. I have a large dataset of 2019 servers that are patched with October patches that work perfectly normal, but a few that are broken when the patch is installed. If anybody else runs across this and figures it out, I'd appreciate your findings. I have a ticket open with Citrix as well and they weren't able to find anything in the logs that led them to a quick fix. The AOT logs show the error in the image, but aren't super helpful either.

After october patches on persistant VDI’s the Windows login appears and after some time Citrix session just terminates. Need to try several times, then maybe the session logs in and starts. VDA 2607 LTSR Windows 11 25H2 Anyone else? Users has started to complain.

The new look docs.citrix.com isn't that bad.

citrix.com/downloads/citrix-virtual-apps-and-desktops/components/citrix-daas-mcp-local.html, doesn't look like product documentation works, but if you download it, it has a readme

Citrix session stuck at “logging off” in FSLogix since enabling Entra SSO / October updates Environment • Citrix VDA 2507 LTSR CU2, published desktop, multi-session, non-persistent • Windows Server 2025 Datacenter Azure Edition (26100) • FSLogix 3.26.826.17182, profile container (VHDX on SMB), RedirectType 2, Redirections.xml • Recently introduced, at roughly the same time: Citrix Entra SSO (hosts are Entra hybrid joined) and the latest Windows cumulative updates Problem After signing out, the session stays in “logging off” indefinitely. Only

csrss

,

dwm

,

fontdrvhost

,

LogonUI

and

winlogon

remain in the session. After that, new logons on the same machine also hang at “Please wait for the FSLogix Apps Services”. FSLogix profile log findings • Logoff: all redirections removed, registry exported, “Removed redirection from C:\Users<user>”, then not a single further line. There is no error and no timeout. The VHD detach is never reached and the VHD stays attached. • Next logon of another user: the VHD attaches, then it hangs right after “VHD(x) FindFirstVolume”, again without an error. The next step would be looping through all volumes. • Both operations are stuck in the same

frxsvc

process. Checked and ruled out • Server-wide RDS deadlock (known issue with the September 2026 updates):

quser

and

query session

respond instantly, other sessions (RDP) work normally. • Leftover user processes in the session: none. • Open file handles on the profile volume (handle.exe, including

\Device\HarddiskVolumeX\Profile\...

): none. • Open file handles in

AAD.BrokerPlugin

,

TokenBroker

or

CloudExperienceHost

: none. • User hive still loaded: no,

HKU\<SID>

no longer exists. • Registry handles on the user hive: none. The handles held by

SearchIndexer

and

LogonUI

are under HKLM. Noticeable, but probably not causal • Remaining token handles on the user’s logon session, held by

winlogon

,

lsass

,

frxsvc

,

SearchIndexer

and by

svchost

instances hosting CertPropSvc, TokenBroker and PcaSvc. Interim conclusion Windows has unloaded the profile, but FSLogix hangs internally before or while detaching the VHD, which also blocks subsequent logons. A full dump of

frxsvc

in the hung state has been captured. Still open • Whether restarting TokenBroker, WSearch or frxsvc releases the hang. A regular service restart was initially refused with “cannot open service”. • Comparison test: image without the October updates, with Entra SSO enabled. -> is ongoing Question to the community Has anyone seen this behavior with FSLogix on Server 2025 combined with Citrix Entra SSO or the current cumulative updates? Is there a known issue or a Known Issue Rollback? #CKBVDG48H

Anyone doing anything special for optimization on Server 2025 for multi-session? We're basically utilizing the default Citrix Optimizer template for S25 with a few minor tweaks, but that's it. I don't see anything in other utilities, either. This OS is a pig and it's very noticeable.

Okay, anyone ever see this while attempting to delete a delivery group? This is a new one for me:

Windows Defender exclusions.. there are 1000s of articles and official outdated documentation from both Citrix & Microsoft. Furthermore, I feel like these documentations are missing a vital point, what are we applying the exclusions TO? Here is an example, VDAs, DDCs, PVS and more is mentioned but what administrators did in the environment that I am helping them with is that they configured these exclusions and applied them to the VDAs. This is what is confusing.. why do administrators apply exclusions which are ment for DDCs and PVS to the VDA OU? The way I understand it is that each and every component has its own defender exclusions and they should be applied to the OUs where these servers reside. For example, if DDCs reside under CITRIX/Citrix infrastructure then the defender exclusions for DDCs should apply to that OU. If the PVS reside under CITRIX/Citrix infrastructure/PVS then the defender exclusions for PVS should be applied to the PVS OU, not the VDA. Can someone confirm that this is the case? community.citrix.com/tech-zone/build/tech-papers/antivirus-best-practices

Hello, anybody else having problems with their searchbar on non-persistent machines running on Windows Server 2025 with FSlogix and BIS-F sealing? Sometimes it just doesnt load at all and sometimes it is loading indefinitely, sometimes it is working... When it is not working, in some cases it helps closing and opening the search bar again. It is sporadically working, happening for different users on same and different machines. Tried lots of stuff like disabling intelligent searches etc... In search of a permanent fix 👀

Anyone ran into azure capacity with AMD GPUs lately? its third day here in north central US...

Citrix Licensing. Migration from 2019 to 2025 and we have 2025 License Server installed and registered to Citrix Cloud. Yet after three days, it is not displaying the proper licenses. Any pointers on where to look?

2507 CU2 - uAInSessionHelper for each user will suddenly spike CPU usage. About to open a ticket with Citrix. Anybody else seeing this? Published apps on multi-session hosts, 2019, 2022 or 2025 all seem to have it "randomly" start happening.

2507 CU2 - Started having users unable to login with "The Group Policy Client service failed the sign-in. Access is denied." after I updated Delivery Controllers and FAS (same day) to 2507 CU2. I hadn't seen any of these other than corrupted profiles before. Now I am getting several per day across the environment. I saw there was a fix for this very message in 2507 CU2, is it possible Citrix didn't get all of the situations that cause it? Requires a restart to clear the session on that server. Users are able to log in to other servers. Until Citrix figures it out, anybody have a better way to allow the user to login to the same server with out a restart?

godaddy.com/help/fix-microsoft-365-sign-in-issues-with-outlook-for-windows-43076 Anyone else running into sign in issues for GoDaddy hosted M365 on Server 2022 and 2019?

Hi guys, hope you are having a great day. Someone can share their hybrid UPM profile configuration with me? I'm curious to see what people configure under "Folders to include in profile container" specifically. Will be interesting to see the login times aswell. If you configure * (everything to be included) then it is not the configuration that I am looking for =)

Opinions on using 2507 vs 2607 for LTSR on server 2025? 2607 sounded like it would be better for the new teams optimization.

So I am looking at creating some visualizations in Grafana along with my uberagent to On-premise Monitor RestAPI. Unfortunately on-prem only supports NTLM and Negotiate. Both items that aren't supported in grafana via json tools. Has anyone been able to setup some form of proxy through NetScaler, or some other tool to visualize that data?

Is it possible that the Citrix Director integration for uberAgent data (Session Scoring and Application Usage Monitoring) is not available for anonymous sessions (CVAD 2507 CU2 OnPrem)?

Hello, I have a customer in 2203 CU7 where after LAS Migration, he has this in Studio : Some of you see this ? License server is 11.7.2 build 53100. Thank you.

Hi, Anyone know if Citrix is planning on using unsupported .NET framework? .NET requirements Prerequisites .NET Framework 4.8 and x86 version of.NET Desktop Runtime 8.0.15 or later (up to 8.x) is required for Citrix Workspace app 2409 or later. The End-of-Support is 10 november 2026. dotnet.microsoft.com/en-us/…/dotnet-core Or am i missing something?

Hi there, I wrote an inventory script and a couple of modules for an ansible collection to manage on-premise Citrix Virtual Apps and Desktops which I'm hoping is useful to other people https://galaxy.ansible.com/ui/repo/published/nbeernink/cvad/docs/

I’d love to hear any feedback on it. 🙂