World of EUC

That’s Workspace App 2008, correct? We’ve had multiple weird issues with it in initial testing, and decided to stick with 2006.1 until the next release. I was unable to connect to any Citrix desktops after upgrading to 2008, with wfica crashing (multiple dlls). Ended up having to remove, clean up the registry and user profile, and reinstalling 2006.1 to get things working again.

Yeah 2008.  We suspect they have dropped basic authentication.  Our external connections run at a higher security level and are working fine.

I had have issues as well. I am holding off until it becomes a bigger issue.

image.png

Logs shows that the VDA registered correctly. Was working last week so something strange changed.

Have a look at the local security polices applied to vdas specifically the "access this computer from the network" policy seen that cause a few VDA registration issues

Thanks, found the issue, customer had added username instead of computername!

<@ULJ3D468M> you mean to say customer added the username on behalf computer name in Citrix Studio?

If that's possible then it looks like bug in Studio? isn't it?

Anyone managed to get the new ‘disable fallback mode’ registry keys working in Citrix and Teams?
Registry keys don’t seem to have any effect for me?  My version is 1.3.0.21759


<https://docs.microsoft.com/en-us/microsoftteams/teams-for-vdi|https://docs.microsoft.com/en-us/microsoftteams/teams-for-vdi>

Thanks in advance. 

That's what we used to do when we were on UPM, run a PowerShell script that would check for those folders and delete them after 7 days (we also had it in CommVault, so no need to keep them around).

I don't, no, that was another admin's stuff. It didn't do anything special, though. Literally just recursively looked through the share for those folders.

I have no idea if this will work.

<https://www.smali.net/citrix-profile-management-upm-clean-up-cli-tool/>

I don't have anything automated, but in deleting some profiles manually, I'd run into issues where the path was too long, and it would throw errors. I used this in the end:

<https://github.com/marceln/SuperDelete>

Yeah, that was definitely an issue for us, namely around IE folders. We ended up excluding certain paths to avoid it in general.

I tried the cleanpmstore but it doesn't seem to delete the upm backup files. But thank you for the suggestion. As far as the file names being too long, we've faced that for years and I found the easiest way is to use robocopy with the /mir option

you can do pretty much the same thing, it’s a bit more involved though

Sorry left that out.  They are all non-persistent desktops.

Similar except you go through a process of copying a snapshot and linking machines to that new snapshot on a shutdown and reboot. It can be scheduled and applied on reboot though, as mike said.

Thanks. Are you still running scripts to perform regular reboots, or using the power management features in Studio to set the percentage of available VMs and reboots after logouts for the updates? I was planning on splitting them VMs into two catalogs for phased image updates.

You'll need to trigger your machine reboots using the SDK so that studio issues the reboot command for the image update process to work. You can script the whole lot though.

See if this will help
I had a similar  problem on Windows 7 and the following solution worked

     - Press SHIFT+CTRL

     - Right Click on the Program showing up in the taskbar.

     - Select the "Move" Window option

     - Use the keyboard (Left Arrow/Right Arrow)  &lt;-/ -&gt; keys to move the window to the center of the screen.

     - Try holding down the left arrow key  for a while to see the Window outline. Try moving right/up/down if the window outline is still not visible.
     - Hit enter when you can see the Window outline  move  to the center of the screen.

It appears that the desktop extends beyond the Screen Display and the program window seems hidden. Moving the Window either to the Left / Right / Top/ Bottom of the screen helps.
source
<https://social.technet.microsoft.com/Forums/windows/en-US/4e5bc3e6-a5c7-4ce7-bb66-29b78a7ce020/application-stays-minimized-in-the-taskbar?forum=itprovistadesktopui>

Try this too, run cmd and then in the conmand line arguments use the /f I think for full screen.. then put the path to the app.  This happen to me.  If you can Ofer it let me know I can get a screen shot. 

Thanks guys. The shift contrl right click max worked.  Saving this thread for future use as these all are good other fixes.

Has anyone run into this?  VDA 2003/2006 + ADC settings of (HDX Insight + SR on HA Failover) = connection failure Event ID 6?

This lines up with the scenario <https://discussions.citrix.com/topic/407819-vda-2003-connection-failure/page/4/>

*Discussions*

Easy enough to spot if the image is bad with a pilot release. Personally I like the least amount of images.  Sometimes you are forced into splitting them though for compliance reasons. 

One image with a four-tiered rolling test release cadence

Trying to go with 1 monolithic image here and app masking. App Layering has always been too much effort for me and had too many things go wrong.

One image is the way to go if possible. The last project <@ULDHJB8BB> / I did last year, we had to use two due to a requirement for office 32 bit, but, we probably could have done with just one image if we made more time. FSL + App masking turned out to be a perfect replacement for App Layering  ; which was originally scoped for the project. As Mike said, APPL is a lot of work for little reward

I agree but I would avoid AppV at all cost, only use when absolutely required

I was attempting this but will probably go with two images as I can’t get AppMasking to work consistently.  Plus with two images I can use different virtual hardware specs. 

AppVEntiX is quality for us, no infra required, it just updates everything straight into the workers on-the-fly. FSLogix controls the access

<@ULLAD12P2> Friends don't let friends use Citrix App Layering :joy:

What’s with all the hate on App Layering?  Serious question.  It’s been a game changer for us.

When it goes wrong it takes forever to pin down where it went wrong and why

Takes too long to configure for me. There are much slicker ways to deploy apps quickly. And as said before troubleshooting can be difficult. YMMV

Similar results can be achieved with FSLogix App Masking with less complexity for the admins and less single point of faillure

+Management Console with SIlverlight, complexity sealing the image, shitty sealing scripts provided by default, when the DHCP range is full you get a timeout error instead of getting a DHCP one...Adding a disk for MCS/PVS Cache is PITA etc.

App masking implies the apps are in the image. Curious on how those images are being built and deployed for non persistent systems. We are leveraging FSLogix to mask some apps which helps with our gold image count, but we are still building those images with AL.

I let MCS / PVS worry about adding the Cache disk.

I should probably open another thread rather than contaminate this one further.

According to AppLayering doc you need to add it in your Platform Layer, shutdown, remove it and then finalize....good luck explaining this to the customer

I’ve only ever seen that noted in CTX225952, and then it’s an “If you need to” statement.

Thats also a CTX full of if’s and maybes..  IDK. Maybe it’s because we use Citrix Hypervisor  &amp; the “Virtual Desktop Setup Wizard” in PVS, but we just build the platform image without attaching any other disk and PVS / MCS creates and mounts the cache disk on build of the VM.

Good to know, I will test without it then, thanks for your input

We have been using App Layering since Citrix bought it and it’s been pretty solid for us.  At the beginning the platform layer used to implode after a few versions, but once that was fixed it’s given us a lot of flexibility.  We get the odd problem but it’s normally fixed by changing the layer priority.  Saying that my big project this year is to try and find one automated process for building our apps and images across all our platforms.

do you think they'll get that console switched to HTML5 before 2030?

lol. Good news is it works in Edge IE compatibility mode.

really silverlight works with Edge compatibility mode ? I'll have to try that

Ha ha!  I use IE tabs plugin in Chrome for silverlight.  Citrix lack of improvements to their numerous consoles is annoying.

2020-09-17 11_12_46-Open.png

2020-09-17 11_02_42-Event Viewer.png

never tried it with a PAC file, just direct to proxy address

BCR isn't in 1912 WSA.. you need CR for that

EDT is enabled by default with 1912, it could be related.

I had it disabled  prior. Was running 1903

OK, did check with the user, is it real timeout session?

Hmm we have been having this since we went to 1912 as well.  I have had a mix of connection timeouts and connection failures with the reason “none” or “other”.  I have a case open with Citrix support but they haven’t been able to find out what’s happening and with home users and intermittent problems it’s a devil to trouble shoot.  In Director does it indicate which server they tried to connect to?  We do see partial profiles on the servers in some instances.   Disabling EDT made no difference to us.

<@U0125S0736V> I think with some of our users they are launching sessions through the browser and are not opening the ICA file quick enough, or not noticing it has downloaded.  Try launching a session through the browser, wait for the ICA file to time out then start it and see if you see the same error in Director.

Some of the issues we saw are Macs not having the correct cert installed. But yes other are users trying to launch and application never launches

As far as errors on director some or none or other, many are timeout

That’s sounds exactly like the issues we are seeing.  Do you use a NetScaler ADC?  I’m convinced it’s something to do with it.  I have had the issue happen to me some times.  I launch a session, it starts to connect then immediately says the session has been interrupted and starts the reconnection timer.  After 2 minutes it drops the session completely.  Which AntiVirus do you use?

Do you have socket pooling in SF <@UQY354B9B>

I would need to confirm when I’m back at work , but I think we do.

<@U0125S0736V> Socket pooling is not enabled for my external connections.

If you want to check with Thin Clients - IGEL is first thin client coming up with MS Team Optimization.
<https://www.prnewswire.com/news-releases/igel-first-to-deliver-microsoft-teams-optimization-with-citrix-workspace-app-linux-client-301089423.html#:~:text=IGEL%20First%20to%20Deliver%20Microsoft%20Teams%20Optimization%20with%20Citrix%20Workspace%20App%20Linux%20Client,-IGEL%20OS%20Offers&amp;text=SAN%20FRANCISCO%2C%20July%207%2C%202020,Citrix%20Workspace%20App%20Linux%20Client>.

OS updates and OS Configuration does't matter for Citrix Desktop Lock, I have deployed for one customer with 150users

oh ok but does Desktop lock disable everything on the client ? What happens when the client OS receive windows updates or local pop-ups

Check out this video -<https://youtu.be/WqhThn9KIvw>

Desktop Lock will block everything, users will not be able to access any local apps. I am not aware pop-ups, windows updates you can manage from any update manager tools

<https://virtualbrat.com/2020/09/18/microsoft-teams-optimization-in-igel-os-new-release/amp/?__twitter_impression=true|https://virtualbrat.com/2020/09/18/microsoft-teams-optimization-in-igel-os-new-release/amp/?__twitter_impression=true>

I tried it latest version and I didn't find it reliable, hard to troubleshoot. We use eLux that support Teams optimization pack and it's brilliant. I would not recommend it.

Good thank you for the advice. I don't know elux.

Sounds like there’s still a cert in the chain that’s not linked. Windows clients will pull these down automatically, Mac and Linux won’t.

interesting. after I re-linked and ran ssl labs test it no longer says something needs to be downloaded. yet we had some more calls about this. do you know another site I can run the test against similar to ssl labs?

does the mac have the cert on there and just doesn’t trust it? It might need an update?

that I do not know. help desk folks use their workaround to install the cert so I havent actually seen this myself. By I did notice that NS unlinked certs when working on something else yesterday. Thought that would also fix this issue.

I don’t think so, the workspace client never sees them if going through the gateway

macs have a different list of trusted root and intermediate certs than windows, if the mac never gets updated your cert might be so new that it’s not trusted by the OS yet

in which case having the correct chain won’t matter

ok. I am going to have to see if I can duplicate this. I do see alot less failures in director since fixing the chain, but also there are less users today too.

I think provider cert is something like 3 months old

that’s probably it, check in keychain to see if it’s trusted

and see if there are any pending OS updates

<https://support.apple.com/en-us/HT202858>

This is a university environment - BYO. So the user devices are outside of IT management. Hence all sorts of interesting things

yeah, I used to run into that all the time when I managed a University citrix site, good luck!

Do you have a GPO for network drives, if so, make sure that it is SET to update and not to replace 

Or disable background processing at either individual drive level in GPP or with the GPO for the GPP Drives CSE.

<@U015G4SG5LY>  was my first thought and already changed! <@UV3TVUW0K> that is the next step, thanks!

Same thing though - background processing of drive mapping with Replace option causes unmap/remap which means Explorer windows close on the unmap.

<@UV3TVUW0K> yes, thanks. Replace was the issue!

You can keep replace mode if you change the GPO for GPP Drive.

<@U015G4SG5LY> do you mean GPO Loopback Processing replace? Or Group policy preferences drive mapping replace? :slightly_smiling_face:

No replace at gpp for drive mapping. Was an old policy of a colleague

Thats what i mean <@ULL6F7DRA> :slightly_smiling_face:

Nice.  I have ours turned on (forced on) because we use the option to remove item when GPO no longer applied.  And we use that because we use the Reconnect option.

What exactly are you trying to do? Our images all sit in AWS

Any AD secure channel issues?? any NETLOGON errors on the VDA's? what's the kerberos token size of the users ? take a look at the local security policy and check access this computer from the network and allow logon through remote desktop services. What happens if a user rdp's to the affected vda ?

Nice pointers <@ULM6WD9LY> I didn't look for NETLOGON errors, and I didn't consider the kerberos token. This only happens to a few servers, and not consistently.

<@U0125S0736V> no FAS involved

Does it happen only on certain machines? Could be VDA broken

New Script: Documenting Citrix Cloud with Microsoft PowerShell V1.00 - <https://carlwebster.com/new-script-documenting-citrix-cloud-with-microsoft-powershell-v1-00/>

Thanks to all the testers who helped bring this script to life.

I have a similar issue with the 2008 version of Workspace with my internal storefront servers.  This is with StoreFront 1912 CU1.  The web url works without a problem.

I opened a Citrix Case but it looks like we won't get any support on this. Here's a quick summary of what the support engineer said:

• We confirm that this is not an issue with the StoreFront configurations as only users trying to access the URL using IE browser are affected
• Citrix Receiver versions have already crossed End of Maintenance and there would not be any more fixes to this version. The only supported versions are Citrix Workspace App - <https://www.citrix.com/en-in/support/product-lifecycle/milestones/receiver.html>
• The scope of support for IE is limited from a Citrix Support perspective and for detailed debugging of the IE browser, you may need to engage Microsoft Support team. 


We have several customers with the same scenario (SF 1912 CU1 + Citrix Receiver 4.9 or IE) and it's working fine.
I'll try to escalate this case, maybe I'm lucky...

Here are all the Director permissions. I don't know which one enables what you need.

Director           Director_AlertPolicy_Edit                 Create\Edit\Enable\Delete Alert Policies
Director           Director_AlertPolicy_Read                 View Alert Policies
Director           Director_Alerts_Read                      View Alerts
Director           Director_ApplicationDashboard             View Applications page
Director           Director_ClientDetails_Read               View Client Details page
Director           Director_ClientHelpDesk_Read              View Client Activity Manager page
Director           Director_CloudAnalyticsConfiguration      Create\Edit\Remove Cloud Analytics Configurations
Director           Director_Configuration                    View Configurations page
Director           Director_Dashboard_Read                   View Dashboard page
Director           Director_DesktopHardwareInformation_Edit  Edit Machine Hardware related Broker machine command properties
Director           Director_DiskMetrics_Edit                 Edit Disk metrics related Broker machine command properties
Director           Director_DismissAlerts                    Dismiss Alerts
Director           Director_EmailserverConfiguration_Edit    Create\Edit\Remove Alert Email Server Configuration
Director           Director_GPOData_Edit                     Edit GPO Data related Broker machine command properties
Director           Director_GpuMetrics_Edit                  Edit Gpu metrics related Broker machine command properties
Director           Director_HDXInformation_Edit              Edit HDX related Broker machine command properties
Director           Director_HDXProtocol_Edit                 Edit HDX Protocol related Broker machine command properties
Director           Director_HelpDesk_Read                    View Activity Manager page
Director           Director_KillApplication                  Perform Kill Application running on a machine
Director           Director_KillApplication_Edit             Edit Kill Application related Broker machine command properties
Director           Director_KillProcess                      Perform Kill Process running on a machine
Director           Director_KillProcess_Edit                 Edit Kill Process related Broker machine command properties
Director           Director_LatencyInformation_Edit          Edit Latency related Broker machine command properties
Director           Director_MachineDetails_Read              View Machine Details page
Director           Director_MachineMetricValues_Edit         Edit Machine metric related Broker machine command properties
Director           Director_PersonalizationInformation_Edit  Edit Personalization related Broker machine command properties
Director           Director_PoliciesInformation_Edit         Edit Policies related Broker machine command properties
Director           Director_ProbeConfigurationActions        Create\Edit\Remove Probe Configurations
Director           Director_ProfileLoadData_Edit             Edit Profile Load Data related Broker machine command properties
Director           Director_ResetVDisk                       Perform Reset VDisk operation
Director           Director_ResetVDisk_Edit                  Edit Reset VDisk related Broker machine command properties
Director           Director_RoundTripInformation_Edit        Edit Roundtrip Time related Broker machine command properties
Director           Director_SCOM_Read                        View SCOM Notifications
Director           Director_ShadowSession                    Perform Remote Assistance on a machine
Director           Director_ShadowSession_Edit               Edit Remote Assistance related Broker machine command properties
Director           Director_SliceAndDice_Read                View Filters page
Director           Director_StartupMetrics_Edit              Edit Startup related Broker machine command properties
Director           Director_TaskManagerInformation_Edit      Edit TaskManager related Broker machine command properties
Director           Director_Trends_Read                      View Trends page
Director           Director_UserDetails_Read                 View User Details page
Director           Director_WindowsSessionId_Edit            Edit Windows SessionId related Broker machine command properties
Director           UPM_Reset_Profiles                        Reset user profiles
Director           UPM_Reset_Profiles_Edit                   Edit Reset User Profiles related Broker machine command properties

Thanks Carl, i have seen them in the GUI, but do also not know which one is the correct one

It may be faster to create a test account and keep adding one permission at a time until you find the one you need

My guess, it's related to Remote Assistance

<@ULL6F7DRA> IGEL can do it, works pretty well. See <https://virtualbrat.com/2020/09/18/microsoft-teams-optimization-in-igel-os-new-release/|https://virtualbrat.com/2020/09/18/microsoft-teams-optimization-in-igel-os-new-release/>
<@UNBRPVD4G> might have teated it with Stratodesk

I am using wyse and works well.  But have not scaled yet still testing. 

Make sure you get the thin os9 it have the latest workspace

OK. A customer with 5070 experience issue with Teams Meetings lock up, when you hang up, session is then stuck for a couple of minutes

<https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=g58rg|https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=g58rg>

I am on prem.  I can test Citrix cloud when I get back. 

Other people are having sort of the same issue:
<https://discussions.citrix.com/topic/410339-teams-optimization-on-wyse-terminals/>

I had that, as soon as I shared my screen the audio quality dipped, but it came back

our wyse won’t do optimizations, too old

Actually now that I think about it happens to me too. 

So, it's safe to assume some kind of bug in the OS?

I think it’s teams handling the sudden change in bandwidth required

it takes it from the audio stream temporarily

although in your case it doesn’t sound like it gives it back

My customer was monitoring the CPU usage of the TC, and noticed that when the audio was getting choppy, the CPU usage was above 60%

Considering how the optimization works, that doesn't sound like an issue with Teams

but then again, it's linux you never know

Is it safe to conclude that, right now it's only with IGEL that the Teams optimization works reliably?

haha you Said "Teams Optimization" and reliability in the same sentence.

The customer in question here and I just had a meeting. They are not happy, which is understandable as they are mainly on thin clients, not many laptops around

I have pinged Fernando Klurfan, the PM on Teams HDX Optimization :slightly_smiling_face:

Yeah, but SEs usually have better time for these kinds of things

i was told others have this issue to open a ticket

<@ULL6F7DRA> support said people report same issue. 

My customer has an open support ticket with Dell and Citrix is also involved, so let's see what happens

OK. Dell/WYSE has confirmed there is a known issue with Teams HDX Optimization with their Dell/WYSE 5070 (with the J5005 CPU) which results in a high CPU load and poor/choppy audio and degraded video performance. My customer just received confirmation today. I have notified Citrix of the issue.

Customer is about to replace 200+ thin clients with the 5070, he is not a happy camper at the moment

Ouch.. that's one of the "issues" of offloading, your device needs to be able to handle it. The J5005 doesn't seem to be that old, strange that it can't handle it.

It should be able to handle it according to Citrix

Can't you test with a IGEL or Stratodesk USB stick? To see if it is the hardware?

Hmm..good point. I actually have a IGEL USB stick available

Try to pick the latest IGEL build with the CWA 2009 for Linux, otherwise EDT performance is poor

Will look into it, Thanks :slightly_smiling_face:

<@ULL6F7DRA>  disable EDT, I have bad performance with EDT.  The latency was 40-70ms with edt and disabled edt it went to 1ms.  

Image from iOS.jpg

This didn’t have an impact on the teams issue, but does help with overall performance 

<@ULLH59VQF> Which Workspace App version do you use? Linux based I assume?

There is a known issue with EDT an CWA for Linux which is fixed in CWA for Linux 2009: <https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/whats-new.html#fixed-issues>
In a session running on UDP connections, the performance might be slow. [RFLNX-5135]

If possible, update to CWA 2009

Haha this is a Dell wyse device I am at there mercy. 

We selected them because of the hardware and the cloud manager.  I don’t need anymore stuff Onprem to manage.  

I’m not a fan of them at all, the cloud manager is completely unintuitive and the hardware doesn’t seem any better than anyone else. Wyse support is amazingly bad too, not sure why anyone would pick them other than for technical debt reasons.

I really wanted igel but could never really get it to work right.  We didn’t like the hardware and the thought of reimagining thin clients was not appealing. Dell is not the best but works for us.  We only use them for Citrix.  Version 9 is a lot better and they have 9.1 coming. 

Dell has told the customer that there is a know bug with CWA 2006 in ThinOS, which affect Teams HDX Optimization. It's fixes in CWA 2009, but that version has some other issue with ThinOS, so they are currently not recommending going to CWA 2009 in ThinOS

<@ULL6F7DRA> what’s your ticket number if you don’t mind? I will ref your on mine.  Also you make any progress!

It might be closed though, however  I hope they have some kind of history

According to the customer it's not fixed yet

They told me Nov 9th is the release for the share 

<@ULL6F7DRA> the firmware is out for the fix for dell 

Thanks for the info I'll notify my customer

<@ULLH59VQF> are you testing with Teams Offloading? What models are you testing?

My customer has concluded that the 3040 model is not fast enough to do offloading

5070, I dot have a 3040, I think in the release notes it says that the 3040 is not supported 

3040 are not supported for Teams by neither Citrix or Wyse btw

• Minimum 1.8 GHz dual-core CPU that can support 720p HD resolution during a peer-to-peer video conference call.
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/opt-ms-teams.html#system-requirements>
• *Microsoft Teams video call and share screen*Video call and share screen features are not supported on Wyse 3040 Thin Clients.
<https://www.dell.com/support/manuals/en-ca/wyse-3040-thin-client/thinos9.0_rn/new-and-enhanced-features?guid=guid-63587b8c-42f5-448e-9489-dcaecebde4cd&amp;lang=en-us>

<@ULDHJB8BB> I know, but you can't blame my customer for trying. They have at least 250+ 3040 units running

you got below set catches a few people out ? Also the citrix policy to use clients local time zone rather than servers ?  that normally does the trick for me in multiple environments. Have you ran any group policy rsop to see if there is any regional settings being set with GPP ect ? you also have time zone settings on the DG

turns out they keep connecting from a thin client set to the wrong time zone, so it’s pulling it from there :stuck_out_tongue:

I've seen issue when connecting from the light client/html5. It seems Chrome switch to US sometimes, weird.

Guys, any articles or blogs for optimising Surface 3 laptop (Win10 Build 1809) for CVAD? Specifically, running in tablet mode, cheers

wsappx is using loads of CPU and we get a black screen for new users logging in, looks like this: <https://discussions.citrix.com/topic/406884-windows-10-modern-apps-breaking-wsappx/> but we’re already on CU1

<https://support.citrix.com/article/CTX235140>

not sure why this is on by default, getting a ton of questions about what this is

I suppose someone needed to see the battery status of the laptop/Tablet? My users asked me as well, I just told them that.

who is using a laptop not plugged in on their desk right now?

I quite like the battery indicator the thing that annoy's me however is that it goes red as soon as you unplug the power. I would really expect it to only go that colour under a certain percentage of power remaining.

I can see the usefulness, but how do you turn it off?

Google return nothing other than people asking for it like 10 years ago

Hey all,

is there a way to prevent Published apps from grouping with local apps in Taskbar? 

This doesnt work for me

<https://discussions.citrix.com/topic/392801-xenapp-7x-prevent-published-apps-from-grouping-with-local-apps-in-taskbar/|https://discussions.citrix.com/topic/392801-xenapp-7x-prevent-published-apps-from-grouping-with-local-apps-in-taskbar/>

To be honest, In my experience I have seen where it is not necessary.

I use WebInterface with 7.12 DDC before and it was fine.

we're on 1912 CU1 and still running storefront 7.15 cu3 just fine

That was my hope. Cutting DDCs over tonight to 2006, and can't upgrade SF because of IE10 :rage:

You will be fine, That is a working solution

Thanks Ray! Was using your CUGC article to prove that point anyways =D

ouch!  ya for us its something w/ thin client support i think maybe thats holding us back

Yup. We're working to upgrade to IGEL on those, or to replace (with IGEL). Getting rid of all Windows Thins, if I can :smiling_imp:

<https://www.mycugc.org/blogs/ray-davis1/2020/09/08/how-i-upgraded-my-site-from-715-flat-all-the-way-t>

Yea, I wanted IGEL, but we hand to many USB devices. So we went with 10Zig

Oh? Any major problems? What's the problem with USB devices and IGEL?

We had a program call Digital Persona, and it would not work with HDX optimzized channel. Only generic and it was slloooow

we used to have igel (still do but super old ones...actually the reason why we cant upgrade SF right now because they stopped publishing updates for us).  we have a small batch of 10zig windows embedded clients . those work pretty well

Many years ago I had the same issue, and McAfee was holding it. I remember find articles on line about this.

<https://support.citrix.com/article/CTX230531>
<https://community.mcafee.com/t5/Endpoint-Security-ENS/mctray-exe-and-updaterui-exe-not-terminating/td-p/602051>

I usually see the reverse scenario. Some customers find i less risky upgrading the infrastructure before upgrading the VDA

I have done this alot when I first came to my company. I do all my VDA first to take advantage of new features if I can.

VDA are 100% backwards compatible. I dont care what anybody says, I run it that way, I can know 100% it works :slightly_smiling_face:

Never had a problem updating the VDA first! Normally I update PVS servers first, DDC, PVS target and finally VDA.

If Storefront runs on DDC server, always update SF first, so it’s not part of the whole update process. But this is obsolete now anyway…

I agree <@ULLH5JGFR> upgrade the VDAs first to leverage any new features, but I usually see the reverse because customers are always a bit reserved about upgrading any user facing components

StoreFront should NEVER EVER run on the DDC

Some small customers want it like that, I don’t recommend it :face_with_rolling_eyes:

So many upgrades have failed because of StoreFront. You don't want it as a show stopper when upgrading your delivery controller

Yea same here, I take the time and seperate DDC and SF.