World of EUC

stage a folder in their profile and deny access to it?

App Masking worked for me by hiding this directory: C:\Users\*\AppData\Local\Microsoft\Teams

find out the download URL and create a hosts file that redirects that into the ether

Cool I will user ALL these in testing!!!!! Thanks GUYS

HOST file would be funny. I will redirect them to a site saying NO NO NO

You should do this instead - <http://www.ex-parrot.com/pete/upside-down-ternet.html>

Another good way is to get in front of them. Install the Teams VDI client. That way if they get a request to join a meeting and click on it, it will not install the normal version

Thats of course if its ok to use teams, and you just dont want the one in appdata.

Look like you answered that. Cool, thanks

There is no absolute answer to anything in IT. This needs to be communicated. Why people are always looking for one answer to all their problems, I don't know. 80-20 rule is the best you can do, IMO

That’s a battle we face on a daily basis. Like yesterday, where a physician questioned why our IT department didn’t have the knowledge to put Syngo into Citrix after he found out another hospital runs it that way.

All of this is a direct result of covid-19. We’ve been trying to put more apps into Citrix as we intake them, but for vendors who refuse to support Citrix, our own management said to not go that route. Interesting shift.

Either way, I look forward to seeing the look on their faces when we give them a quote for two new UCS chassis’, blades, and GPUs.

We find App-V Scheduler ideal for deploying to Citrix. I will do a blog post on it soon. We can actually simply run SCCM packages (that we have for our desktop estate) through the sequencer and 90% of the time it spits out a usable package which we then deploy through the Scheduler (we have no SCCM infra in our Citrix estate)

Community version is free too (although the enterprise version is very reasonably priced)

We’re an App-V shop, as well. I’d say that half of our virtualized apps are App-V delivered through Citrix.

App-V and App Layering? How is that working out?

App-V on the XenApp side of the house. I don’t have the App-V client enabled in my W10 VDA. Our XD image is relatively vanilla, and will likely remain that way since our app strategy is focused on XA, generally.

It works for us. I’m not sure which direction we’re going to go for a majority of these apps - XenApp installed app or App-V. The smaller, lighter packages make more sense for App-V to me, while the garbage like Siemens Syngo are destined for XA.

I usually use an "App Delivery Matrix" with three or four options for dealing with applications. Fit each app into one of these. If you find something troublesome, just batter it into one of the holes. I've worked with customers before where they've ended up with nine or ten different methods of deploying apps because they've searched for an absolute answer for every single app. Pick a few methods and stick to them. In *current* project, I use Native Install (Packer) ---&gt; App-V Scheduler ---&gt; Cloudhouse Compatibility Container and have found I can shoehorn every app into one of these boxes

I have never really worked with App-V, I am not seeing that many customers anymore using App-V.

I’m interested in seeing MSIX App Attach, because that looks like it could really come in handy in this realm.

<@UL5TCSW3D> : That’s effectively how we’re going to approach this project, once it gets approved. Gonna be a long haul since we have to review each individual application.

Jim did a session on App Attach for UKCUG but I haven't caught the recording yet. Think it is based on the old FSLogix App Container stuff so should be pretty slick if it works

Yeah, I've seen a few demos of it. Just waiting for it to become a general release so that we can take a look at it. I recall there being an easy way to convert MSI packages to that format, but I'm really interested in seeing if it's possible to somehow repackage an EXE installer to it. My guess is that App Attach isn't meant for that scenario, and that App-V/XA is probably the way to go there.

On Desktop OS and Server OS run the below command in command prompt with domain user

whoami /upn

Hamper as in extra session overhead? Session slowness?

It’s not the UPN, command output gave me same UPN. But logonname in Watermark policy is username@domain

With 5 watermarks in the screen and with domain FQDN, users complain about reading the app content. I want to make watermark text to be shorter, if that helps

If Citrix is reading data from AD like SAN/UPN, then it should be the same on both Desktop and Server OS. I think it is collecting the data from VDA, not sure about the logic behing Logon User Name

Opened a case with Citrix and they were able to reproduce the same in the lab. It’s forwarded to dev team for resolving this bug. No ETA

Received update from Citrix:
Watermark policy reads the registry key for domain name
SOFTWARE\\Citrix\\Ica\\Session\\&lt;session_id&gt;\\Connection --&gt; DomainName
When I checked it was short name on desktop VDA and FQDN on server VDA.
Case is being reviewed by Engineering, strange the desktop and server VDA uses different logic to get domain name.

I figured out the issue, Logon domain on StoreFront was causing this. After modifying the logon domain on StoreFront from FQDN to short name and Single sign-on domain on Gateway to match, Watermark is now shorter.

This doesn’t explain how single session OS was working without the change and the issue was only with multi-session OS.

Okay Good.... What Citrix Team told you regarding multi-session

They mentioned that issue is resolved in 2003 VDA but when I tested issue was not resolved in that version either. Then they asked me upgrade SF to 2003 version (no such version), but CVAD 2003 didn’t had SF upgrade. SF 1912 was released as-is with CVAD 2003.

I havent tired that to be honest. We launch it and thats really about it.

it bombs, just like Published Excel/Word does for trying to login.  I think it's the same issue

Sound like a Shell issue I mean (Explorer deal)

image.png

Try to add a bat file then include this"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll
"C:\Windows\System32\regsvr32.exe" /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll

Then put the path to Edge Chrome and see what it does then

"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll
"C:\Windows\System32\regsvr32.exe" /s /n /i:/UserInstall C:\Windows\system32\themeui.dll
"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll

start "Edgium" /D "C:\Program Files (x86)\Microsoft\Edge\Application " " C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "

Got it, thanks man, will test.  Does that also work for office?

Explain this to me?  `start "Edgium" /D "C:\Program Files (x86)\Microsoft\Edge\Application " " C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe "`

I published a bat file in studio. That is the CLI saying launch it.

learn me, batch master.  :slightly_smiling_face:

oh so Start is the Name and  /D is the directory followed of the actual path to the .exe.

i do batch, but that just didn't make sense to me.  Is "Edgium" made up, or something you called something else?

Oh, lol yea my bad that just the made up name man. You can put anything there.

I would think so, however I never tested it. I always have browser issues because of Shell shit.

I had alot of browser issues. I use this link to help me. It say IE, but I apply it to all broswers. <https://docs.microsoft.com/en-us/archive/blogs/askie/things-to-do-when-troubleshooting-internet-explorer-terminal-server-and-profiles-issues>

Sadly, that didn't work, but i'll look over that article...

Definitely some related to active startup. If it works on plubished desktop then it's related to shell.
Try Runonce.exe  /AlternateShellStartup 

Look here 

<https://carlwebster.com/internet-explorer-10-and-11-open-to-blank-white-screen-or-become-unresponsive/|https://carlwebster.com/internet-explorer-10-and-11-open-to-blank-white-screen-or-become-unresponsive/>

I wonder if you publish it as app container. If it will work. 
I'll send those switches when I get back to my desk.

<@UKJTJD4KA> Have you run into this?  You did write the article on it. :smile:  <https://jkindon.com/2019/09/17/deploying-brave-and-microsoft-edge-dev-browsers-in-citrix-cvad-environments/>

Oh crap yea. The ctx API hook is needed. Forgot about that. But it would even open up at all if that was in place. Or so I thought.

that's also needed for desktop launching too

Yeah, it launches fine, you just can't sign in

i assume I can just add that all to the batch file and not do a login script...

I 100% don't get this.... why are we doing this twice?  or am i missing something?

```"C:\Windows\System32\regsvr32.exe" /s /n /i:/UserInstall C:\Windows\system32\themeui.dll 
"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll 
"C:\Windows\System32\regsvr32.exe" /s /n /i:/UserInstall C:\Windows\system32\themeui.dll 
"C:\Windows\System32\regsvr32.exe" /s /n /i:U shell32.dll ```

stuck on runonce /AlternateShellStartup... in the batch file...

Maybe it doesn't like that part in a batch

I never tried the runone in a batch. I would think its the same though

Try this, Publish CMD. Open CMD paste runonce /AlternateShellStartup, then open Chrome Edge so the session will launch from the same server

I don't think I care enough to open a Citrix case atm... :slightly_smiling_face:

I never signed it, Its that sign in tied to google or MS?

Just curios, I will try it on my side as well.

i'm curious now too if it's only my enviornment...

also... and i'm going to post this in the main channel... I wonder if there's a real difference between ExcludedImageNames and UviProcessExcludes

nope i was wrong UviProcessExcludes  was 7.9 and new

<https://twitter.com/guyrleech/status/1136213952139079681>

<@ULHA2NPPX> haven’t gone and dug too deep but can check later today... also the uviprocess key failed miserably for me on 2019 last week, had to use the old excludedimagename to make it work 

Hey, I am new here, pointed here by <@UKJTJD4KA> from the Citrix forums where I posted the same issue.  From my testing, it appears that MS changed the Sign-in process for Edge to be a UWP app process in 2019 at least. I haven't been able to test in 2016 yet, but 2012R2 still works with the old process. The Sign-in/Sync process works on 2019 in a published desktop for me.

I know James said he had issues with the UVI process, but it had been working fine and testing with the ExcludedImageNames got rid of the error message popup, but does not allow any sign-in still.

I have been Googling around, unsuccessfully, to see if there is anyway to force use the old sign-in process that 2012R2 uses.

UviProcessExcludes is the replacement for ExcludedImageNames. I believe both still work in current versions, but I don't see Citrix keeping that forever.

yeah, I wondered if there was an actual technical difference.  I'm thinking not either, and it's just going away...  not sure if we could find out 100% unless a Citrite responded or anything..

As far as I know no reboot is required for ExcludedImageNames unlike UviProcessExcludes 

1. Might help <https://twitter.com/guyrleech/status/1136213952139079681>    "To avoid giving the wrong impression, the Windows AppInit_DLLs *mechanism* is no longer being used by Citrix to inject DLLs into processes (now done by the CtxUvi driver), but the ...\CtxHook\AppInit_Dlls *keys* (now somewhat of a misnomer) still apply as they always have." 

oh man. 3.4  was my latest but on 7.9. I know its not 19xx

We see users on 4.6 connecting to our 1912 VDAs

I've seen a 4.3.... i posted this before.. not sure where it went?

Oldest currently connected in our environment is Mac 11.7.2 (2013)

Belive it or not, i have seen onlineplugin „trying” to connect to XD 7.15...   of course it faild :smiley:

Side note, if users are connecting via a Netscaler/ADC keep in mind that depending on the SSL PROFILE's ciphers you have setup for your Gateway's vserver, the Receiver version you use might be limited to newish versions (i.e. using TLS1.3 and disabling TLS1.1 for example... 
you will be stuck with Receiver 4.12 onwards if I recall correctly).

Following, I would like to automate my desktop pools too

Hi <@ULLH5JGFR>,  why not schedule on Hypervisor? 
I had something simular in the past, i end up to put those machine in folder on vcenter and scheduled there. (I hope i did understand your question right)

Vmware 6.5. I just need to reboot Dedicated MCS machines.

<@UPF2NEW13> I honestly forgot about that :disappointed:

<@ULHA2PS2H> gave me a wonderful script as well. Its really nice. I have to tweak it around my enviroment, but it send message to users, give them time to save work, logs them out, Put machiens in maintenace mode. Reboots, turns off Maint mode. Send emails

Great... :+1::+1::+1: i did everthing you just mention on the broker as well (with PS) except the boot part.
But if you can handle it within one script,  much more efficient:ok_hand::ok_hand:

yea I am still working through the script. Its a bit higher than my posher shell level to be honest.

2020-04-16 11_47_31-Window.jpg

Does the endpoint have a dual GPU? So Intel iGPU &amp; NVIDIA GPU?

Same problem here Holger! Also thinking about performance issues... PCs with NVIDIA GPUs and solidworks. I don‘t know the regkey which fix the blackscreen issue at second login. My workaround was downgrade to 7.15 cu5 vda agent, atm. 

No, there is no dual GPU in it. These clients have only Quadro P4000 cards installed.
Julian, your workaround also works for me at the moment. Have you opened a ticket or are you still working on that problem?

Well, It's not a solution, but my customer is able to evaluate RemotePC. We'll see how we move on.

Not investigated further as there was no time and 7.15 VDA works without problems. I think I have to open a case and send Citrix some logs for the future. 

Teams installed as per-machine (machine-wide)?

I have done some testing on WS2019 with FSLogix, I haven't seen any issues, I'll test with WS2016 later

Isn’t there a regkey to auto enable outlook addins?

It is, but its turn back after restart outlook.

However I can load the plugin via the LoadBehavior registry value

I have configured WEM to make the necessary changes upon logon

VUEMRegValues.zip

Hi <@ULL6F7DRA> thank you so much.
Much appreciate you check:right-facing_fist::left-facing_fist:
I do not have WEM, i test it with GPO Prefences but it faild. Will cross check it again. Thank you for the Export as well...:ok_hand: will keep you posted, if you are intrested.

it’s so infuriating not being able to click on it and copy it out

Check <@UPN8JTWN6> Blog Post on Custom MMC

why not just do get-brokermachine | select machinename

because the idea is not to have to type things, if I was happy typing I’d just type the machine name

also, the people who need to copy this out won’t want to use powershell, this is mainly so the helpdesk stop sending me screenshots

I suppose I could use that powershell in combination with a custom mmc though and set that in a taskpad view

<https://docs.citrix.com/en-us/xenapp-and-xendesktop/7-15-ltsr/manage-deployment/local-host-cache.html>

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/1912-ltsr/manage-deployment/local-host-cache.html>

Oh and Enable and disable Local Host Cache
To enable Local Host Cache, enter:

Set-BrokerSite -LocalHostCacheEnabled $true

To determine whether Local Host Cache is enabled, enter:

Get-BrokerSite

Check that the LocalHostCacheEnabled property is True.

To disable Local Host Cache, enter:

Set-BrokerSite -LocalHostCacheEnabled $false

hmm good question!  do you know how i can verify if we have that on or not ? hunting through that doc.  i am not sure to be honest

But if you dont have  LHC enabled. yes only new sessions will be impacted. Current session will remain intact(unless they diconnect)

sorry you said that already :slightly_smiling_face:

its cool man, you help me out all the time.

Who hasn't received help from someone in this channel?

So true, I would be stuck if I DIDN'T have this place

Keep in mind that local host cache will NOT kick in immediately. There are delays regarding database connections for your controllers. I would recommend to use „OutageModeForced“ for planned database maintenance.

This:To force an outage, edit the registry of each server containing a Delivery Controller. In HKLM\Software\Citrix\DesktopServer\LHC, set OutageModeForced as REG_DWORD to 1. This instructs the broker to enter outage mode, regardless of the state of the database. Setting the value to 0 takes the server out of outage mode.

ok ours is off it looks like. so what is it actually doing if i turn it on?  we are looking to do this in a few days so we'd have some time

Here is a good doc by George <https://www.jgspiers.com/citrix-local-host-cache/>

I cant remember 100% but I know there was some MCS pool issues with LHC. <@ULD72Q44R> might have more details. But let me find my notes

"Pooled VDI desktops are not supported, but if you are using published apps and desktops provided by XenApp (Virtual Apps) you are covered by LHC."

ahh we do use mcs pooled random setup so probably wouldnt work then hey?

ok so if we keep it disabled......i have an active session and the sql server reboots what happens? does my session drop then probably?

Let me check my notes to get you 100% accurate info before I put my foot in my mouth LOL

for some reason i thought citrix told me it would only affect people trying to start a new session for some reason

If you have session that are established (NO LHC) the sessions will remain intact. Only new connections will be impacted. However, if the users get interrupted then they will drop off like flies in my experiences.

makes sense......so as long as we dont disconnect/have a network blip at home we should be ok for that couple min it takes to reboot probably ?  really this is just for a handful of us that need to work the night we're gonna do this

i get way more useful info here than i ever did calling into support or their forums!

I havent tested this yet but look like on 1912 "Local Host Cache is supported for server-hosted applications and desktops, and static (assigned) desktops."

I would like to know if anybody else knows that?

yeah, what version are talking here, because 7.15 has serious issues

True good point. I was shooting for 1912, but Andrew might be on another version

you need to watch out for machines that shut down after use

<@ULLAD12P2> Yeah VDI churn is a good point.

Yea true the article did say  To override the default behavior, you must enable it site-wide and for each affected Delivery Group. Run the following PowerShell cmdlets.
`Set-BrokerSite -ReuseMachinesWithoutShutdownInOutageAllowed $true`
`Set-BrokerDesktopGroup -Name "name" -ReuseMachinesWithoutShutdownInOutage $true`

you can override it but if you rely on a reset to wipe out user data you might run into issues with seeing another users data

so we're on 1912 vda but still 7.15.2000 back end (scheduling the full upgrade still)

Yes, you can run a single license server for multiple sites. We’ve got three separate sites in our environment all hitting the same license server.

Yes as long as you update the CTX lic server your ok!

Hopefully there are not putting tickets in saying My beach background isnt working in citrix. LMAO

Are you getting custom Teams background in Citrix? Our teams in Citrix is limited when using both the VDI version as well as the normal Satan version in Citrix. The limitations are actually upsetting allot of customers.  (Limitations not just backgrounds)

I did not start yet upgrading teams in Citrix.
Oh man, did the background not work in Citrix VDA? Do you have a offical statment about this limitation? 

I saw the custom background option once in one version, and then it disappeared when I installed the latest version (both were the per machine versions).

yes, limitations are located in two places.

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/opt-ms-teams.html>

<https://docs.microsoft.com/en-us/microsoftteams/teams-for-vdi>

Backgrounds and blur limitations are in the MS one

I wonder if you install the non VDI one in citrix you only get the limitations from the Citrix optimized  article, and not the MS VDI article. (but eat all your storage)

Unless I missed it, I didn’t see anything about backgrounds in either article.

At the bottom of the MS article.   “These calling and meeting features are not supported:
Enhanced emergency services
HID buttons and LED controls between the Teams app and devices
Background blur and effects
Broadcast/live events
Location-Based Routing (LBR)
Call park
Call queue”

Lol, leave it to them to not put that in their “limitations” section. Never change, Microsoft.

This is kind of unbelievable…. :angry:
But thank you guys for you comments and hinds.
<@ULC9J5XPB> same here, i didnt find the remark as well. It's like a contract, the truth is never well seeable :-)

we use it and yeah they removed the BCR/Secure Browser components from the LTSR Workspace App. So we skipped 1912 Workspace and pushed out 2002 instead

WOW, So its still in 1912 LTSR as a whole, Just not on the Workspace Client?

We're in the same boat as Keith. Tested 1912 LTSR, found out BCR wasn't included, moved to 2002.

It was already a feature before 1912, why take it out.

On our last status call with Citrix a few weeks ago, I believe they said it was because it was too difficult to keep up with Chrome builds? I may be wrong on that.

Or maybe it was vice versa... Chrome was moving too fast for an LTSR client.

Well, I guess CR on workspace it is.  Thanks guys for listening to me. Appreicate the feed back

They said it wasn't an issue at all for an LTSR shop, FWIW.

ltsr for receiver/workspace just causes more issues than it’s worth unless you need it because you’re embedding it in you image and doing double hop

BCR and Secure browser make use of a built in browser engine - to maintain security this needs frequent updating which doesn’t cope well with the idea of LTSR.

I use BCR for our computer training, stream, YouTube.  Helps out a ton! Users could not watch the internal videos until we turned it on. 

Can we add the proxy setting for internet explorer with Published App

You mean to  say script with published app

Can you please share  the command line argument if you have

I don't have it now... You can use registry update commands to update proxy settings and create script.. and scripts are available online....

I remember a customer used something called PAC files (with proxy setting in them), and then made sure that file was on all XA servers that host the browser (publishing the browser).

I created VB Script which includes Proxy Settings and URL of the internal application. All together converted VBS to exe executable.

Same issue here, have not yet started a support ticket with Citrix.

Thanks for confirming.
I found this thread which seems to be similar
<https://discussions.citrix.com/topic/407819-vda-2003-connection-failure/>
But Citrix did not change their known issues in CVAD documentation

Tried everything to troubleshoot, upgraded ADC's, clean install vs upgrade. Disabled Session reliability, Adaptive Transport. Nothing seems to help. 1912 works fine with no issues.

My tests so far
If i run VDACleanup Utility and run VDA2003 setup by clicking (not scripted) it works
If i run it scripted (have more exclusions) it is not working
Sometimes i also see a bluescreen with CTXDVCS.SYS when i am upgrading from 1912 to 2003

My silent switches /noreboot /quiet /enable_remote_assistance /disableexperiencemetrics /virtualmachine /optimize /enable_real_time_transport /enable_hdx_ports /enable_hdx_udp_ports /exclude ""User Personalization layer"",""AppDisks VDA Plug-in"",""Citrix Files for Outlook"",""Citrix Files for Windows"",""Citrix Telemetry Service"",""Citrix Personalization for App-V - VDA"",""Machine Identity Service"",""Personal vDisk""  /components vda,plugins

I've replied to that thread a few times with my findings, my username is perrikwp on Citrix Discussions. We've decided to hold off on upgrading, 1912 is stable enough for our use and we'll engage Citrix Support at some point in the future.

I think someone opened a case for that and hope that citrix will update known issues

Seen this before when there are problems with ctxhooks. Uninstall the VDA using the removal tool and reinstall from scratch.

Ran VDA Cleanup Utility and installed 2003 was the same... Dropped VM and installed new one from scratch and this is working however i am seing this in event viewer

Someone opened already a ticket case : 79645816

if they are entitled to use PVS they can stream targets - as long as the targets are CVAD/CVA workloads. the CCU - U/D device license is for the user side not for the target one.

Thank you so much for your Feedback <@ULMMMRQA2> .
Yes, but can i use PVS without having CVAD/CVA farm behinde?
Let's assume, i only want to stream OS, can i bought only PVS licence? according to my current information, it is not possible.

it is but that would be a single license per target you want to stream

wow... ok... i wasn't aware of this!!!
So, it seems i got a wrong information.

<https://www.citrix.com/buy/licensing/product.html?_ga=2.241328522.942979401.1587392866-196176421.1584123999> - there is a separate license for workloads that are not CVAD related.. so if you want to stream a web server or a physical machine that have no CVAD workloads, you need this license.

send me the exact use case if you still wonder..

Thank you so much <@ULMMMRQA2> appreciate it. Asking the right people will always help you, the challenge is identifying the right.. Thanks again.

&gt; So this is the fix *DisableAcrylicBackgroundOnLogon* DWORD
&gt; 
&gt;  (delete) = Enable
&gt; *1* = Disable


both do the same thing.....if you go the GPO method the name of the policy is "Show Clear Logon Background" (enabled) . and ends up adding in the reg key "DisableAcrylicBackgroundOnLogon" (1).   For my tests i just manually added the reg key and worked like a charm

yup! myself and many others in the forums have been stumped by this for  several months so i was pretty giddy about waking up to that

Wonder if Citrix knows about it "now" :slightly_smiling_face:

well i have an escalated ticket that engineering has been reviewing our logs so i'm gonna let them know. hopefully they do something about it.  this seemed to only affect ICA sessions in our cases....testing the same desktops w/ RDP worked just fine

Funny, I've had that enabled since day 1 because who the hell wants to look at a blurry logon image?

it just never even registered with me that it could be an issue.  makes a lot of sense when you say it outloud!   i wonder why ICA sessions are affected where other types arent.  doesnt matter i guess if we can turn it off!

funny thing is i bet when i tell the tech about it they'll say "oh ya you definitely dont want that on" lol

This is something I also would like to know.

we currently have all linux clients and myself personally use my macbook.   in both cases sessions start to launch very quick and go right to the Welcome screen.   We are probably moving to windows iOt clients and running into this connecting ... screen and no idea why. i'm sure it will get at least a few complaining calls

We have the same thing here (Jax Fl). MACs are faster in connecting.

i'd imagine its somewhat to do w/ the Windows client being more feature packed but at that stage i dont understand why the delay

Might be a shot in the dark, but do you have HDX Adaptive transport enabled?
I've found that sometimes that takes a few extra seconds to decide whether its going to enable itself, perhaps your Mac &amp; Linux clients are pre-1808 (that's when they got HDX adaptive support)?