World of EUC

They're having issues with their downloads site again. I was able to snag it a few minutes ago after some refreshes.

Oh it is working maybe...just slow as he...

Hey, at least we can configure this via GPO...

they changed that to JSON :stuck_out_tongue:

I am still not getting access to the download site

Should be a 2002 version out too according to the updated docs.

I've had two (test) endpoints re-request activation after enabling the App Protection in the installer.

we've previously used  v2.8 and had it elastic and worked great but its pretty lightweight so maybe worth just throwing in the image if everyone will need it to simplify

Agree, just throw it in in case you need it

Microphone, Audio, and USB redirection are enabled

figured it out. had a GPO restriction in place. :angry:

GPO for receiver to block microphones. We set that years ago and had forgotten about it.

Our IGELs were having issues too so didn't think it was GPO at first

image.png

FYI, on 1912 LTSR, 2008 R2 is only compatible with VDA 7.15 latest CU.

Also keep in mind that 2008 R2 reached end of extended support on Jan 2020, so support on this OS would be limited

Screen Shot 2020-03-25 at 12.29.21 PM.png

Come to the cloud they said... unlimited resources they said...

Microsoft is putting out the message out there too.  Still have to have proper capacity requirements and planning.  Cloud just lets you hit the ceiling faster :slightly_smiling_face:

Mind you that the shortage is with specific instances. So a workaround for now could be to resize the instances. might take some adjustment but could help

That’s a bad advice by Citrix not to shut down ressources. Sorry but that’s just the virtual equivalent of hoarding toilet paper :rage:  but if everyone is doing it, this might cause serious issues for businesses really in need of the cloud ressources (healthcare, etc)

I think you'll have to use a Windows policy for that.

Yup, that's what it looks like.  I think we'll stick with the easier option and just use that session idle interval

has anyone had isses with onedrive sync and UPM not being able to delete the folder on logout?

I can’t even pick which mic or webcam I want to redirect with Workspace for mac, how do I know which one it’s trying to use?

Try the ones listed under " |----Windows - privacy" here: <https://dybbugt.no/fieldnotes/registry-hacks/|https://dybbugt.no/fieldnotes/registry-hacks/>

These are the ones im using for this on 2019.

I have them set with GPO but it didn’t help

Did you ever find a solution <@ULLAD12P2>? Having the same problem with Mac, no usb Webcam and also builtin webcam is getting redirected. With cwa windows everything works... 

Mine was a Catalina thing where the privacy settings would not let workspace use the devices

I think I have the same problem but can‘t find the necessary privacy settings in Catalina to let workspace use the devices... do you have some Details?

I think it's under here <https://support.apple.com/en-hk/guide/mac-help/mchlf6d108da/10.15/mac/10.15>

Thanks Mike, Problem is with cwa 2002 for mac, 64 bit applications are not supported with webcam redirection, I tried teams x64... hope this get fixed in cwa 2005

once you get past 7.15 I think it supports 64bit apps

Cwa 2006 for Mac supports redirection for x64 apps, finally

StoreFront (1912) is configured for only "Domain Pass-Through", IE11 and Chrome is working fine, but Edge not, showing "No Logon methods are available". I've configured all in <https://www.citrix.com/blogs/2019/08/28/enable-domain-pass-through-to-citrix-resources-with-microsoft-edge/> but it's not working - anyone get SSO to work with MS Edge? Is there a special config for Edge?

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/1912-ltsr/upgrade-migrate/upgrade.html#replace-sql-server-express-localdb>

Thanks i have seen that already but this mentions only LocalDB feature and not site database....Correct?

Is this SQL Express used for anything else than Citrix DBs?

where is this SQL Express installed? On a dedicated server?

Then I expect the instructions in the guide James posted above are valid

Yes but they are only for LocalDB feature and not site DB etc

Well, from what I can see the "LocalDB" is when you are running your site in SQL Express

..on the same server as your Delivery Controller

localDB is used for LHC only i believe, if you have SQL express hosting your actual DB's, the guidance is to install a new instance, detach DB, restore DB, and update strings <https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/upgrade-migrate/upgrade.html> not sure if you could get away with an in place upgrade *shrugs....it's on my lab to do list at some point*

<@UKJTJD4KA> any change to see a blog post soon then i would wait :slightly_smiling_face:

Make sure you upgrade  from CU4/CU5 and there will be no problems.

We jumped from CU2 to CU5 and then to 1912 in QA and had no issues, but Citrix amended their documentation stating that you can go directly from any 7.15 built to 1912. That's what we're going to do in Prod.

what CU is your 7.15 on now that you are going to do in prod?  we're on 7.15 cu2 and looking to go to 1912 soon too so curious what luck you have

Tentatively scheduled for 4/11-4/13... somewhere in there.

awesome thats same as us ..... figured since we always have the db backup / server snapshots cant hurt to try the jump

Oddly, I changed it to "2" and it worked.. Not sure why 6 isn't working here.  I checked 2 other environments and it's working fine there.   "nothing's easy"

I had issues at one customer trying to set background wallpaper on a Server 2019 desktop, no matter what I did it refused to honor the GPO settings for the wallpaper jpg or WallPaper Style.... then started working out of the blue and I haven't had a problem since.

I have a few VMs running in my laab with VDA 2003, with no issues

I have tested WS2016 and WS2019 and W10 v1909. I have not yet tested connections via NS GW

Are you experiencing issues on fresh VDA 2003 installs, or are you upgrading fra an earlier VDA version?

The app layers were upgraded, but the Remote PC tests were fresh installs

try turning on Optimal HDX Routing in the storefront, that's what seems to prevent sessions from launching.

It's turned on in my lab.

It's using direct connection, when my laptop is on LAN, and NS GW when I am not connected to my network

Ours route everything through the gateway for the HDX/Gateway Insight features

Everything works fine on VDA 1912, so it was definitely something added in the latest version 2003

VDA 2003 works for me on Win 10 and Server 2016, no issues. I have to mention I didn’t install the UPL components.

Do you use the optimal HDX routing features?

<@ULW9PENH2> did you tried disabling th EDT?

not yet, need to find the best way to test that

Create separate DG and clone the policy apply that new DG

Just tried it out, still not launching...

I've tried clean install and upgrade, broken either way

AOut the Release Notes of Citrix ADC Release (Feature Phase) 13.0 Build 52.24 „What´s New?"

Support for Citrix Virtual Apps and Desktops 7 1912 LTSR
Citrix Gateway now supports Citrix Virtual Apps and Desktops 7 1912 LTSR.
[# CGOP-11796] 

Maybe it‘s the ADC? Possible to test ADC 12.1?

We do have a val environment where we test upgrades to new versions of Citrix stuff, I will need to update to the latest ADC there to see if it helps.

I checked out the related Citrix thread and posted. This sounds eerily familar to what I saw with the un-install bug in CVAD 1912 , which Citrix didn't fix in 2003!

<https://www.getvpro.com/2020/03/cvad-1912-upl-removal-issues-and-fix.html>

Unfortunately, it's broken for us on a clean install and Remote PC which doesn't have the UPL features enabled.

You mean to say last tab in ADC next to configuration?

Reporting Tab i am unable to find te user names

In Director or studio, there is ConnectedViaHostName and ConnectedViaIP property on connection. It should be contains ADC gateways used.

For me it's showing SubNet IP <@U010VLLF494>

for the name, it's a question of dns resolving i suppose. But you have your filtering information with IP

I’m getting the opposite, where the latency is 30ms and the ICA RTT is 5 seconds

and they are complaining it’s “slow”

No They say its normal. But I have alot of it. EDT hmmm.

I can flip off EDT and see if it goes away. Its annoying and throws me off.

For me it was EDT via Netscaler specifically 

So you turned off the DTLS setting on the NS?

Nope just ignoring it for now and looking at latency via ADM :grinning:

ahhh lol. Yea need to finish setting up ADM and enable appflow

yeah i've seen where EDT sometimes seems to jack up the insight measurements

Dang, well thanks for the input. I will setup appflow on the NSG from ADM. That will help me

ICA RTT only updates it’s value when there is activity. There is a Group Policy setting you can enable to have it always refresh

Ack! nevermind!  Latency at 64seconds… ok then

ICA RTT GP is cool, didnt know that though

@*<https://app.slack.com/team/UL5TCJ57D|Benjamin Crill>  ADM is showing the correct latency. Thanks man*

These are the visual effect settings we have set:

Enabling "Show shadows under Windows" kind of helps for visibility, but does not fix the border issue.

Wasn't there some weird Registry key that dealt with odd border issues - seem to remember I used it for windows with fat borders on Citrix as opposed to none though

It's only on file explorer though, the other windows don't seem to have it

<https://discussions.citrix.com/topic/404610-windows-server-2019-seamless-apps-and-1px-white-border/>

Setting ColorPrevalence to 1 fixes the issue by making the title bar coloured, and also the border

It's kind of a workaround, but that's fine

Yup it’s shite - Tis the the only way I know how to work around it 

GUI fix works for me: Settings, Colours, Show Accent…on Title Bars and Windows Borders.

Does make title bars ugly, appropriate colour choice becomes important.

yep, that's what the ColorPrevalence reg key does essentially :slightly_smiling_face:

it defaults to the same blue in the screenshot, so it's not that bad :slightly_smiling_face:

Ah, did wonder.  It’s odd, because in Dark Mode, the active window body is slightly lighter than the inactive windows, so you can mostly tell where your windows start and end, e.g. for Windows Explorer / File Manager / winfile.exe / whatever it is now.  In Light Mode, they’re all the same.

FYI <@UUYUEK1C4> have you seen the post (not here I don’t think) discussing how Show Windows Contents is faster than not showing?

I posted about this very same thing not too long ago. Give me  a second to find my thread, because I did resolve it...

Well <@UV3TVUW0K>, the weird thing is, is that the non-active windows do have a border.. And no, I haven't seen that post, would be interested though.

<@ULC9J5XPB>: history is limited here on the free Slack, it might have vanished already.

Yeah, it might be older. I found what I was looking for, just give me a minute to test one other method of applying the one key.

Well, this is making me a liar. It doesn't appear to be working in my image again.

I wasn't doing the colors thing, because that's just plain ugly.

Hehe. It seems like something changed in Windows Server 2019

I'm OK with the default blue title bar, that'll have to do

I'm going to keep searching for options. Nobody has complained about it, but I hate it.

Just another thing that I want to slap somebody at Microsoft for.

I changed it to fairly light grey, works OK for me.

<@UUYUEK1C4>: Any chance you use WEM in your environment?

Okay, well let me write this out and you can see if you can implement it.

Actually, give me a little more time to make sure the method works as I see it (sorry).

<@UV3TVUW0K>: how did you change it to light grey? Is that the "AccentColor" registry key?

Okay, so here's the fix for my W10 VDAs.

*Step 1:* Create the following registry entry in HKLM (I do it via GPO):
```Key: HKLM\SYSTEM\CurrentControlSet\Control\Citrix
Value Name: EnableVisualEffect
Value Type: REG_DWORD
Value Data: 00000001```
*Step 2:* Create the following registry entry in HKCU (I'm using WEM):
```Reg.exe Add "HKCU\Control Panel\Desktop" /v "UserPreferencesMask" /t REG_BINARY /d 1E078012000000 /f```
The value above is the wrong entry, but in order for Windows to acknowledge this, I had to use a different value than what was set in my master image.

*Step 3:* Create the following registry entry in HKCU (I'm using WEM), and either run it once or every logon:
```Reg.exe Add "HKCU\Control Panel\Desktop" /v "UserPreferencesMask" /t REG_BINARY /d 9E1E078012000000 /f```
In my environment, the changes will be applied on the 2nd logon because explorer.exe needs to be shut down after the setting is changed to take effect. I'm using WEM to assign external tasks that run those reg.ex commands. I run the "bad" command first, and then the "good" command last on the initial logon. The next time the user logs on, window shadows will be enabled.

Worth noting that these are the resulting Visual Effects settings for that particular registry key:

If you wanted a different config, make the changes on a device and then capture the value of that registry key and adjust as needed.

Ah yes, that's the "Show shadows under windows" setting, that also works, but there is still no border though.

Yeah, that's the workaround - shadows are the new border.

someone was saying this is due to 64bit apps not being supported until later versions of cvad. What version are you on, because I’m seeing the same thing on 7.15

I have this issue with webex but webex is already a 32bit app

yep that was for sure the issue. 32bit chrome fixed it

it was a bit slow for me but I was able to get in

Almost every time I need to sign in to do something, I am unable to....either it goes down all the time or I'm just really unlucky lol

there were issues.. engineers were working on it. hope it is resolved now

Depends on the workload (CAD? 3D?), codec (settings), quality setting, resolution. Any info on those?

I can run some tests on our DaaS platform if you want, depending on your answers.

just basic win10 for now, no CAD or 3D. Maybe some training videos.

Shouldn't be much different then I would think. If you're offloading video to the client now, and would be looking to render them on the server, that will make a difference though.

Is it possible to register vda to controller with ssl tcp 443 port ?  Certificate is installed and configured on controller (xml 443 is ok) .

If the VDA is on it and it registers would work I think.

never tried that….may I ask why you would want that?

We are out of capacity in our on prem environment (CPU, RAM , etc), so we need to standup additional capacity elsewhere.  Ideally using the same front end (Citrix) that our users use today

clear, but you understand that this would be a manual pool, right? (if it works).

Deploying two cloud connectors might give you more control.. but depends on your situation of course.. as long as it works for you.

Why not just AWS instead of Amazon Workspaces?

Hrmm - to be honest, I had not thought about "raw" AWS.  We liked the idea of using our own image in Workspaces - but I guess we can do that in straight EC2 also.

and why AWS? any specific reason? is it cheaper than GCP or Azure?

We already use AWS, so it is something we know...

make sense.. yeah, EC2 images would make more sense than going for AWS WorkSpaces in my opinion.. manual should work  and a connector for more control.. but simple may be the best for now

GCP will be your cheapest option as long as you power manage your machines. VPN gateways are dead easy to configure. That being said AWS is also fine. You can deploy machines directly, just upload your image, spin up and single vm and use mcs to spin out copies. Remember to power manage these. If you don't have Citrix cloud you can use my power scale script on your controllers.

Yes if you don’t have GPU turn off hardware acceleration. 

<@ULJMUV893> <@UL5TCSW3D> didn't one of you write something up on this feature?

Thanks Steve. I did, I have to admit the <@ULKDZHKFY> one seems much better. Mine is pretty basic that does schedule based power management. Still using it today in prod for a 1k user environment in AWS tho. <https://github.com/StevenNoel/Citrix-IntelliScale|https://github.com/StevenNoel/Citrix-IntelliScale>

Here is a link to the PowerScale blog by <@ULKDZHKFY> . <https://www.leeejeffries.com/powerscale-2-1-released/|https://www.leeejeffries.com/powerscale-2-1-released/>

I prob should have mentioned, my VAD env is Cloud, not sure if that changes how these would/could work

<@ULQH7EGPK> this just got released recently (<https://docs.citrix.com/en-us/tech-zone/learn/tech-briefs/autoscale.html>)

If you're Citrix Cloud you want AutoScale. If not, PowerScale will help you out, download the release and not the latest branch, I still need to test some contributions and update the documentation.

Autoscale really only seems to be useful for hosted apps.  I don't see any zone features when dealing with desktop delivery groups (ie Win10)

What a great customer - buy her a beer from us (On you <@UL8ACTGSF> :stuck_out_tongue_winking_eye:) 

Script released. Thanks to all who help test it.

<https://carlwebster.com/new-script-update-active-directory-dns-reverse-lookup-zones-from-sites-and-services-subnets-update-reversezonesfromsubnets-ps1/>

The script is still needed. I believe CVAD was changed to ignore the invalid or orphaned SIDs, but those can still happen. They no longer prevent the creation of the Local Host Cache database, but they still need cleanup.

I couldnt even get sound to redirect to my headset in a session.

Yes, wrote a blog about it:

<https://rodykossen.com/2019/01/10/citrix-browser-content-redirection-part-2/|https://rodykossen.com/2019/01/10/citrix-browser-content-redirection-part-2/>

Hi. What is your Receiver / Workspace App version ? Do you use 32 ou 64 bits for Teams ?

Webcam redirection is only working with x86 applications. You need to be on 7.17 or higher to make it work with x64 apps.

Is this 7.15 LTSR, and Teams 64-bit? 7.15 won't redirect on 64-bit.

Hello!  this is 1912 LTSR, and 32bit teams.

Make sure you're not blocking webcam redirection via GPO then. The client needs to allow it in CWA, too.

Yup, that is allowed... I'm thinking if it works in Skype, its something teams specific?

Is anyone using teams (not optimized aka hdxteams.exe) and the camera is working?

Nothing is specific for teams in my mind. The only things I met few weeks ago with teams is a problem with 64 bits version on Mac OSx Workspace App. Do you use the last teams build with a machine installation ?

Well it is the 64 bit actually... but it looks like needing 32bit was only a 7.15 limitation.

If not try the 32 bits. I had the same problem with Mac and Chromebooks clients (with last Workspace App)

Ill give 32bit a try... going to run CDFTrace and see if it captures any errors...

Same error and an RDP Initial App...  not a Citrix issue.

I had this issue before. For me it was one of 2 things. I removed it and then reinstalled it. Which I am sure you did. Then I blew away my test profile. Might not help you though

Thanks <@ULLH5JGFR>, it's more than that.  The error goes away when I elevate the user account to an Admin, comes back when I remove the Admin access...  but only happens in a seamless session or RDP initial app.  No issues as an underprivileged user inside a desktop.

I figured it out, it's a timing issue not a rights issue.  I ran a procmon trace which slowed things down and the app launched.  I don't know what it's waiting on, but I added a 5 second sleep and the app launched.

FWIW, I also figured out how to call more than one app w/o using a script with the following syntax
CommandLineExecutable : powershell.exe
CommandLineArguments  : -WindowStyle Minimized -Command Start-Sleep -Seconds 5; Start-Process Ssms.exe
WorkingDirectory      : C:\Program Files (x86)\Microsoft SQL Server Management Studio 18\Common7\IDE\