World of EUC

`- System` 
  `- Provider` 
   `[ Name]  Citrix Director Service` 
  `- EventID 5` 
   `[ Qualifiers]  0` 
   `Version 0` 
   `Level 2` 
   `Task 0` 
   `Opcode 0` 
   `Keywords 0x80000000000000` 
  `- TimeCreated` 
  `[ SystemTime]  2022-05-13T09:24:49.8409569Z` 
   `EventRecordID 7457` 
   `Correlation` 
  `- Execution` 
  `[ ProcessID]  0` 
   `[ ThreadID]  0` 
   `Channel Application` 
   `Computer cdc01.test.local` 
   `Security` 

`- EventData` 
   `Verbindung mit Datenquelle 'Unbekannter Fehler.' ('<http://cdc01.test.local/Citrix/Monitor/OData/v3>') fehlgeschlagen. Stellen Sie sicher, dass die Datenquelle verfügbar ist. Benutzer: 'TEST\admin.cj' Konsolenvorgang: 'Details zu Sitzungstrends werden abgerufen…' Weitere Informationen: 'Monitoring Service'` 


`----------------------------------------------------------------------` 

  `- Provider` 
   `[ Name]  Citrix Director Service` 
  `- EventID 6` 
   `[ Qualifiers]  0` 
   `Version 0` 
   `Level 3` 
   `Task 0` 
   `Opcode 0` 
   `Keywords 0x80000000000000` 
  `- TimeCreated` 
  `[ SystemTime]  2022-05-13T09:24:47.8063833Z` 
   `EventRecordID 7456` 
   `Correlation` 
  `- Execution` 
  `[ ProcessID]  0` 
   `[ ThreadID]  0` 
   `Channel Application` 
   `Computer cdc01.test.local` 
   `Security` 
 

`- EventData` 

   `Ein unerwarteter Fehler ist aufgetreten. Benutzer: 'TEST\admin.cj' Konsolenvorgang: 'Abfragenliste für benutzerdefinierten Bericht abrufen' Weitere Informationen: 'Die angeforderten Daten sind nicht mit der aktuellen Lizenzversion kompatibel.'` 

I mean I read that you only can update directly from 1912 cu4 or 5

An Upgrade is supported from any 1912 CU. <@U015G4SG5LY> the following sql cmdlet's could be worth a try: declare @did uniqueidentifier
set @did = '00000000-0000-0000-0000-000000000000'
delete from MonitorData.ResourceUtilization where DesktopGroupId = @did
delete from MonitorData.ResourceUtilizationSummary where DesktopGroupId = @did
delete from MonitorData.DesktopGroup where id = @did<https://support.citrix.com/article/CTX208206>

• Virtual Apps and Desktops 1912 with or without CUs, up to and including CU5
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/upgrade-migrate.html#versions-you-can-upgrade>

<@U015G4SG5LY> i'm having the same problem right now.  how did you solve it

Check your database names. Are there spaces in the Name ? 

Hi, after upgrading from 1912 to 2203 LTSR, MCS W2019, the restart scheduled by DG does not update the image. It remains pending update.
If I perform a manual restart from Studio the image is updated.

I can't imagine anyone here is still running 1912 without any CUs.  You should at least be at CU3...

Trust me I know, I just started the position and going over all the stuff I need to fix.

Maybe we have a similar issue. so far the problem occurs on two devices- latest Citrix Workspace installed, VDA 2203. Did you find the cause? Only the screen freezes, they don't loose the connection. VPN and internet connection are stable

Screenshot_20220518-170731.png

I know it was something that use edge for to embed content. But I really wasn't sure. I had to go read about it because I wasn't sure again. 
But I know I haven't removed it. I see the same process running as well, so I assume something is using it or it starts by default?

<https://www.reddit.com/r/MicrosoftEdge/comments/m9x0xj/microsoft_edge_webview2_runtime_is_a_huge_problem/|https://www.reddit.com/r/MicrosoftEdge/comments/m9x0xj/microsoft_edge_webview2_runtime_is_a_huge_problem/>

Just add it to the CtxHook as you suggested and it won't be as much of a problem. I also add it to the logoffchechsysmodules (just in case). This is here to stay as it's the replacement for UIs that used the IE engine, etc.

<@ULHA2NPPX> u want to know for which application it's getting used ?

Wouldn't hurt, i'm just sick of it hosing my systems

do you know to see for which application it's getting used?

In TaskManager - Goto Details - Right on Name and Select Columns - Check Mark Command Lines and Click on Ok Button

An application that leverages it will have multiple instances per user. Use the Details tab and add the Command line column and you will see where it's coming from. You can also use Process Explorer to give you that information.

are you double hopped? Workspace uses webview 2 now so that might be it?

<https://docs.citrix.com/en-us/citrix-workspace-app-for-windows/system-requirements.html>

Is the consensus to add it to ctxhook? Has there been known problems?

This thing destroyed a couple of my environments...

does anyone remember the registry to disable personal pc local installed app fte to open as a published app

image.png

We have password writeback active. This means our users change their password in the Azure ad and then it works with the fas login.

Yah as above, this is one of the challenges with smart card logons 

yeah we actually pushed out our password change policy for 365 days until we could figure this out. We are pushing to remove the password expiration on-prem in favor of MFA using AzureAD

I had this same problem as well Daniel. I started to implement what <@U015G4SG5LY> stated. But it got delayed.  I believe that is the go to for now. Just what I know in my little world. It sucks because I had to make a special doc for users for the helpdesk.

Thanks gents - I will push this over to the AAD team to implement password writeback :)

check with local profile without any exclusion

Why would profile exclusions matter here? Works fine when the UDP audio policy is disabled

Profile exclusion shouldnt be needed. I wrote up a blog about 2 years on this same thing. But I noticed that UDP quality was not very good after we went to prod with it.

It's just weird that after a few minutes, I just stop hearing the notification sounds on new emails and IMs.

That is the 16500s ports correct <@ULC9J5XPB>. You are on LTSR as well, so the newest adaptive audio isn't an option for us, unless I missed that.
This is what I mean
<https://www.citrix.com/blogs/2022/03/23/next-gen-hdx-multimedia-audio-redirection-a-difference-you-can-hear/>

Yea that is wierd man. Silly question, does it do it if you log off and back on again? Like the old USB stuff that use to happne.

UDP audio isn't a big deal for me, I was just curious to see if it was decent. Granted, this is also in 1912, and it could be much better in 2203.

From what I read, they says since 2109 it is better. But I have no idea. I keep getting stuck on LTSR stuff for now.

I like CR but I don't get to pick they path.

Any other sound play like youtube? Or is it all sound stops?

Yeah, I can play YouTube, etc. and it works. It's just notifications, so I guess Windows sounds

Oh, go into the Windows sounds section and play them and see if that works.

WOW. something with Toast notifications then?

Basically the same as that screenshot, all maxed out

I found a thread on Citrix's forum where somebody mentioned idle connection timeouts and UDP, and how you may have to adjust them.

hmmm like from the Netscaler time out settings?

Nah, sounds more like internal firewall and not NS.

I know 16500 – 16509 needs to be open from the NS to the VDA as well. Which I am sure you know that.

Yep, and it is. HDX Monitor shows UDP Audio working, as does Director.

And yeah, I went the default.ica route for this.

The 1- doesn't need the - (Minus Part) part. Just FYI for someone who sees it and says it wrong. I am aware, old blog that I havent updated

Yeah, I took the text from Citrix's page, where it does not exist

Gonna have the networking guys check the firewall to see if it's blocking UDP ports after time.

ahh it use to. <@ULDHJB8BB> hit me up a while back and said it didnt need it. I submitted a review for the e docs. I guess they udpated it lol.

Submitted a ticket to networking, but I'm also wondering if anyone has actually noticed a benefit to using UDP audio.

Citrix says they recommend it, but don't really say why.

I found this: <https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/1912-ltsr/whats-new/cumulative-update-2/fixed-issues.html>

Once Networking gets back to me, I may give this a try.

Once I figure out if the value is hex or dec. I wish they'd mention that in their articles.

Honestly, I'm surprised that this is not one of the features within Session Reliability. The fact that you have to set a registry value after the fact is insane to me.

Udp audio is absolutely killer for us, I now work for a huge company with 500k users most of which use audio  thr difference between tcp and UDP is substantial in regards to voip that is non HDX accelerated. 

Also came across that issue recently and posted about it here. 

<https://vhorizon.co.uk/citrix-audio-over-udp-dropping-mid-session/|https://vhorizon.co.uk/citrix-audio-over-udp-dropping-mid-session/>

Ha, I actually read that blog earlier when trying to figure out the value type, since it's listed nowhere (decimal, per Citrix). That's good to know, as I'll be testing this tomorrow. We don't have a lot of unoptimized video that I know of, but I'm open to using it for the ‘in case shit happens’ case.

Yes we use it at for pbx type traffic one thing to check is that the setting you put in the keepalive timer is inside (shorter) than the values that you firewalls and networking infrastructure uses.

Firewall is set to an hour, so we'd be set there.

I had something similar and opening windows system sounds settings via start menu would re-initialize the sound. I think that link about keep alives and firewall dropping UDP after in-activity is a good place to check.

I never knew about that reg key. Time to update my blog and Reference Dales blog now lol.

This setting does, in fact, solve my issue.

Waiting for Citrix to get back to me on whether or not we have to manually set this for 2203 LTSR, as well. That would be annoying.

Nice man, that is good to know. Yea glad you are asking, I updated my CUGC blog with these material. I just reference Dales blog and and what we found that works.

Make sure to note that it's a decimal value so others don't have to scramble.

Give me an example and I update the blog with a screen shot.

I reference your names as well for the finding

Updated with all the goodness you two found.
<https://www.mycugc.org/blogs/ray-davis1/2020/03/10/how-to-get-udp-audio-in-citrix-vad-working>

Thanks for the mention, just glad to help out now and again. :)

Nope - only the initial beta versions hurt me 

Thanks.  Any problems if I still have it added in some environments?  Performance degredation?

I haven't added it in a while either. But I did have it added from the earlier versions and I did not see any issues. I had Edge as a published app and 80 plus users used it everyday concurrently with the ctrhook in still.

yeah, i don't see any issues with still having it in there either..  Just seeing what you guys see too

None that I'm aware of, always wonder what we lose when adding exe to that list 

Me too.  Can't you CTPs ask a Citrix developer or something?  :grin:

Ha! I will ask and see if we can track anyone down

I still had to add it afaik. But we are still on 1912 CU3 because of the logonui.exe Ghost Sessions. 

Zoom updated the article for the Virtual Channel allow list
<https://support.zoom.us/hc/en-us/articles/4412351225101-Configuring-the-Citrix-virtual-channel-allow-list-policy-for-Zoom>

any one know how to restrict citrix user to map printer from one printer server only

The wizard doesn't allow me to skip the password box in the hosting connection configuration, so I guess I might have answered my own question.

I haven't tried Powershell, I'll have a look at it

I'll see of I can do some testing during the next couple of days

It is not possible to add a hosting connection without specifying a password, neither via GUI or Powershell :(

You should write an article documenting what you have tried so others can know the answer to your original question.

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/install-prepare/vmware.html>

Session get's brokered to another VDA's, even if the session is disconnected on the original VDA... ---&gt; *Symptoms or Error*
This known issue affects published applications and shared desktops in Multi-Session VDA's.
• Users may fail to reconnect to a session or may be unable to start a new session. 


I had a customer with this issue last week. They informed me today that they installed the OOB hotfix for the May CU which fixes some domain controller authentication issues

This:
<https://docs.microsoft.com/en-us/windows/release-health/status-windows-11-21h2>

After they installed the OOB hotfix, they haven't seen any issues during friday last week and today.

great! just on the VDA or also DDC and Storefront?

ah, who is able to read the documentation is in advantage :smile: --&gt; Resolution: This issue was resolved in out-of-band updates released May 19, 2022 for installation on Domain Controllers in your environment. There is no action needed on the client side to resolve this authentication issue.

I concur. We rolled back to known stable VDAs about a month ago. Well prior to the Domain controller shenanigans.  

right now I have 2 tickets from 2 different customers open at Citrix.

Ok, the toast notification is an issue, but a red herring to the actual issue I am having. I was told the test server was built like production, but the version wasn't updated on the test server. Now with the same version of the RDP client the symptoms are the same.

In an RDP session as admin or user, the client works. In a published Citrix desktop, the client works. In a seamless session attempting to subscript to a server give an error shown in the attached image.

I have tried all of the seamless flags with no effect. I have tried UVIProcessExcludes, as mentioned above. Probably will have someone open a ticket with Citrix and see if we can get it to work.

I think your issue may be that is needs Explorer.exe running. To test this, do something like this..
• Publish Notepad
• Launch Notepad
• Hit CTRL+F3 to bring up Task Manager in that Session
• File &gt; Run new task: Type explorer.exe
• Start the app once Explorer.exe is running
Does that now work?

I actually thought the very same thing when I first tested. We don't allow users to run task manager in session, but do publish Explorer for file management for them. I did try that first thing yesterday with the same results. I did try to see if I could get it go using your instructions just in case what we are doing is somehow different. We have another product that has the same issue and I created a login script that launches Explorer for that product. It may launch somehow differently than the published versions, so figured I'd give that a go as well, but same results. Can see explorer running in the user session.

Ok, another issue could be the Working Directory in the published app not set. Set it to the same folder location as the exe. Some times the exe can't find the resources is needs.

Thanks for the idea. It was not set. Set to match now, but same behavior.

What about if you start Notepad, then Shift+F2 to break out of seamless mode and then start the published app. Does that work?

No it doesn't work. I did have a bit of an "ah-ha" moment before work this morning. I read somewhere yesterday that the new RDP client is written as a UWP application. Thus, I'm pretty sure it won't work in a seamless session. Still going to see if Citrix can come up with something, but I don't have high hopes.

The one that installs to "C:\Program Files\Remote Desktop\msrdcw.exe" ? I'll try it myself and let you know if I have any luck.

profile manager not enough memory resources are available to complete this operation.  Anyone ran into this issue?

Maybe now we have found the cause. A old printer installed on the client PC has caused the random freezes.
After uninstalling the printer, the connection now seems to be stable again

TL:DR - Teams sucks, user density drops, spend more money

Good luck convincing E3/E5 customers to not use Teams...

We refused to support and install Teams on our DaaS infrastructure. They deal with it. And now we have official numbers, they won’t say anything more about it.

Old CPU, 2x12 cores, 40 vCPU.. :man-shrugging::skin-tone-2:

I have experienced this increase in resources with teams fat client. We're trying to force people to use the web client for everything O365 related.  Teams is such a pile of dogshit

Not sure about modern vpns but it used to be the case that the traffic was TCP only, so maybe the vpn is converting the udp to tcp for the tunnel, or maybe if its a purchased vpn maybe it's got alot of hops introduced. Maybe try a traceroute to the gateway with and without vpn see if that shows anything obvious.

Is the ICA latency still that high when you disable EDT?

Nope, latency is always super low - even with EDT enabled. It's just when I activate my VPN that things go haywire. This isn't an issue I would expect a user to be in, I just happened to notice is because I activate/deactivate my VPN while in the middle of my session somewhat frequently to do a few things.

VPN will probably change your MTU size, this might lead to paket fragmentations. Afaik MTU discovery only kicks in during session launch.

In the middle of a tracert right now, which has no end in sight

My question was, what’s the latency with VPN activated and EDT (UDP) disabled. I assume it depends on the smaller MTU size because of the additional VPN header. MTU discovery won’t work in that case.

My latency is always under 30ms with the VPN activated and EDT disabled.

MTU for the adapter was around 1420, I believe.

Thanks, then it seems to be the smaller MTU size like <@UL5TD2QM9> mentioned before. Can’t test it by myself but anyone else here able to verify this behaviour?

Changing the MTU size doesn't appear to change the behavior. One thing I found interesting is that I could still see my Citrix desktop in real-time - Teams messages would pop up, I'd see Outlook notifications - but I couldn't interact with the desktop for a good 30-40 seconds.

I reckon you're losing a lot of UDP packets, which will increase the latency, interactions, etc. Where did you change the MTU?

Directly in the Wireguard config. Tried a few settings, based on some posts I found online. Like I said, though, not a huge deal as this is only something I've noticed and nobody else.

For EDT I set these to 1338 in Storefront default.ica as per <https://support.citrix.com/article/CTX231821>. After managing many incidents and problem records, this is how low I needed to go to get EDT reliable using Cisco AnyConnect VPN for users that connect using 4G and 5G from regional areas around Australia. No issue at all if I disable EDT.
I would just troubleshoot live with users getting them to ping a reachable host using the -f and -l parameters. Start the -l at 1472, and keep lowering until you get a reply. Then set the default.ica to that and they can test it on the fly. Not exactly great change management, but sometimes this is the best way to sort out issues like this.
Anyway, this may or may not be helpful.

While we are on the topic, In the newer builds and more importantly the new LTSR 2203. The term adaptive audio is something that seems to better. But in this blogs, it's saying "HDX Adaptive Transport= Off (This setting will avoid EDT to use UDP transport and reserve UDP DTLS transport to be used by UDP Audio.)"  Trying to understand what they mean.

<https://www.citrix.com/blogs/2022/03/23/next-gen-hdx-multimedia-audio-redirection-a-difference-you-can-hear/|https://www.citrix.com/blogs/2022/03/23/next-gen-hdx-multimedia-audio-redirection-a-difference-you-can-hear/>

Good question, because that line is confusing.

Yea for sure, Then I went and read the Docs here.
"If Audio over UDP Real-time Transport is not required for adaptive audio, Citrix recommends configuring the policy setting to Disabled. This helps avoid Citrix Workspace app clients requesting open UDP connections or triggering unwanted Citrix Workspace app client firewall configuration dialog windows to appear."

So, being the EDT is UDP based. Then all the parts are setup ofver 16500-16509. Do we still need the Adaptive audio?  Or is EDT doing this? Or are they used together? I have no idea yet.

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/audio.html#audio-over-udp-real-time-transport-and-audio-udp-port-range>

One more things to add. I just seen this "By default, Audio over User Datagram Protocol (UDP) Real-time Transport is allowed (when selected at the time of installation). It opens up a UDP port on the server for connections that use Audio over UDP Real-time Transport. If there is network congestion or packet loss, we recommend configuring UDP/RTP for audio to ensure the best possible user experience. For any real time audio such as softphone applications, UDP audio is preferred to EDT. UDP allows for packet loss without retransmission, ensuring that no latency is added on connections with high packet loss"

This seems perhaps the Adaptive Audio is used over the EDT side? confusing for sure.

Didn't meant to hijack the thread either.

Nope, that's right up my alley with this. I just e-mailed my account rep to see if he can clarify.

It definitely sounds like it's either EDT or UDP adaptive audio, not both.

Will do. Same if you get a reply on that blog.

"I see somebody named Ray already asked that question, so let's see what the PM says"

lol, no. Just ask somebody. You work for Citrix.

Geez man, If I worked for Citrix I would find out ASAP lol

What I found out is that you have to set a specific reg-key to activate UDP MTU discovery with 1912CU3(+?) Should find in in edocs, dont remember at the moment.
Did you also enable UDP MTU discovery in ADC?

We are moving users into a HSD environment, and we have been getting some complaints of excel spreadsheets (on a departmental drive), being locked by the user themselves when they go to save. So if I am Josh, and I try to save my sheet I have open all day, it says "Locked for editing by Josh". This is new to our server 2019 HSD environment, and its a longshot, but curious if anyone else has seen this behavior in a multi-user desktop scenario

Pretty close to cu1.  Not sure whats in it. 

Not sure I can survive that long...unless it comes out today. :slightly_smiling_face:  Looks like the rollback process might not be as simple as I was hoping either.

I'll ask the tech about CU1 when he comes back on the line. Can't hurt, right?  (I know the answer is we don't publish release dates...)

We have a few 2203 for CUPM which seem okay. FSLogix and 2203 sucks so we rolled back to 2106 as all the other releases were bodged! 

I have a few clients on 2203 CUPM that are running ok as well. Trying to find the commonality on the ones that are having issues, and it seems like its the more active/larger clients, but still could be something else entirely. Still digging.

Found one more thing common with the troubled clients...They have Zoom and the Zoom Outlook plugin installed. The clients that are not having issues do not have those installed.

<@U01FHEAMDML> haven’t seen issues with 2203 and fslogix. 

<@U012AAZRJ20> we have the Zoom VDI client installed on all the problematic servers too.

I could have a go at removing it on a couple of servers to test.

<@U01FHEAMDML> That's very interesting to note. I rolled back to 1912 CU3 for my troubled clients but I may see if I can find a way to go about testing that doesn't affect clients now that I have something possibly to go on. I appreciate the feedback. Looking forward to your results.

<@U012AAZRJ20> hi Dennis, are you using 2203 with the UPM solution from Citrix, and if yes, with profile containers or originally roaming profile, or to you have FSLogix in place.
thx and remain with best regards
Thorsten

<@ULK2FDTAQ> Sorry for the late response...was away on vacation for a bit. We are using UPM from Citrix with Citrix Profile Containers.

Hello All,
Have you any news on this BSOD problem ?
In my case, it's about 10 out of 800 VDAs per day.
We are using CPM (not FSLogix) and OS is Win2016

For the 2016 BSODs, we have memory dumps submitted to Citrix which are "under review by the next level of support" for what that's worth. I was expecting 2203 CU1 to release and have a fix actually, but no word on that. It feel like it may not have been ready for public release after the early access users got a hold of it for testing maybe. That's pure conjecture on my part though.

I haven't done more testing with Zoom, and have been wondering about <@U01FHEAMDML>'s experience with removing Zoom as a test.

In my case, Zoom plugin is not used. I will check if I see some users doing Zoom before the BSOD

To be clear, 2016 servers and BSOD is not related to Zoom here either.

Zoom is on the 2019 servers with profile issues.

<@U012AAZRJ20> unfortunately when I removed Zoom it made no difference, :disappointed: is anyone rushing out to check 2206? Based on 2206 not announcing any fixes I can’t imagine its going to make any difference.

Thanks for the follow-up <@U01FHEAMDML>. I'll have to go back and see what/if I can find....I'm not hopeful, there must be something because I have several 2019 client servers that aren't having the profile issues. And the few that were rolled back. Can't move forward 2203 until something is resolved. Need 2203 to get support for issues we are having. I am frustrated with the support situation we are in at the moment.

<@U012AAZRJ20> any news about the BSOD issue with 2016 Server and VDA 2203. We do open an incident, we think it could be something with users connecting with HTML 5 receiver --&gt; testing the next two days.
And next would be, go for CU1.
thx
Thorsten

<@ULK2FDTAQ> We have a VDA with some additional logging enabled per Citrix support request. We had that VDA experience the BSOD on Friday and have provided Citrix with the logs. It is possible that it is the HTML5 receiver. I was suspecting the Mac clients as well, as there are many of them. Support says there is not a fix in CU1 as they don't know what the issue is yet.

We got a private unsigned hotfix from Citrix for this issue finally. Have it in place, with logging still enabled just in case, and running for about 1 week with no more BSODs. Look for this fix to be in CU2 most likely before the end of the year.

<@U012AAZRJ20> do you happen to know what the private fix was listed as from Citrix? We’ve had quite a lot of success with 2203 CU1 with the registry fix for “EnforceUserPolicyEvaluationSuccess”. This morning I just noticed one of our VDA’s BSOD for the first time, it was updated to 2203 CU1 last night.

To be clear, the BSOD is only on the 2016 servers in our environment. I don't know what they have done to fix it by any stretch. I don't have a fix number to provide you, but our case number is: 81228955 if you can get support to look at the case and see what fix and history they can provide.

Much appreciated, I’ve only observed it on 2019 servers. There's been two so far. Appreciated for the case details, I'll put a ticket in.

we have also BSOD with Server 2016, Case is open, but takes weeks to give us the files to get it fixed. we hope 2209 version comes out this week.

Yes, it was two things.
1. The service account did not have enough permissions in VMware
2. Removed the encryption of the hard disk and just encrypted the VM configuration files

Hi everyone, I just wanted to know if anyone was able to get toast notifications working for Outlook as published application?
Found this one: <https://support.citrix.com/article/CTX214638>
And the workaround mentioned in the article is not working for us: <https://docs.microsoft.com/en-US/outlook/troubleshoot/user-interface/no-desktop-alerts-(toast-notifications)-if-missing-start-menu-shortcut>

Hi everyone.. Anyone here using Linux VDA with FAS. We have strange thing where users can use FAS if they are logged in already. But if they haven´t logged in, they get invalid login.

I just have to ask. You seeing this on new setups and upgrades?

Have you tried testing using the 1912 CU5 VDA?

Not with 2203 so far but had it with 2112 until the fix  they released

I’m still seeing this issue on 1912CU5 but only on our 2019 servers

all of them upgrades, CR and LTSR. no issues on 1912 CU5 and 2112 + Hotfix.

2203 is not having the issue with logonui.exe

rollback to 2112 + HF fixed it right now. 1912 CU5 is no option, customer is using teams heavily.

keep you informed about the ongoing cases, we got even a private fix --&gt; unfortunately the same behavior

guess I spoke too soon. Saw this happen today to two accounts. cant sign them out and I tried to stop the search service and now it cannot start

search for the logonui.exe as in my screenshot above

I feel like I see loginui.exe often though

for your reference we are running citrix 2112 director/studio

Server 2019 VDA 2203

Just got the 2203 CU1 EAR documentation, and this issue isn't mentioned at all. The KB doesn't mention 2203, either.

I've just build new environment with 2203 and it's starting this if user leaves session and it goes into disconnected state they cant get back in, server 2019. latest FSlogix

had same issue with 2112. this is what i did and it seemingly resolved it 99% of the time:  Try to add the following two keys(idk which one works, maybe both required)  HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\  Create new folder called Reconnect  add these two Dword entries  DisableGPCalculation with a 1  FastReconnect with a 0

thanks will try as its happening way to often for new build

Can confirm, this issue is hitting real hard since 2109 and still not entirely fixed. It's a nightmare. 2203 CU1 doesn't seem to help either, according to the release notes. 

This is very Disappointing issues are still floating around :disappointed:

We got a private Fix and are evaluating the results. Fingers crossed

Oh, interesting. What is it? A custom DLL?

yes. RPM.dll is replaced and a reg key has to be created.

I have opened a case this morning, do you have Private fix details I can maybe speed up the call thanks

Sure, just refer to SR 81207877.
The Steps are:

1) Create a blank ‘System32’ folder under  ‘C:\Program Files (x86)\Citrix’ and paste the RPM.dll file
2) Create a blank ‘GroupPolicy’ hive in registry under ‘HKLM\SOFTWARE\Citrix\Ica\’ and create the ‘EnforceUserPolicyEvaluationSuccess’ DWORD key
3) Replace RPM.dll in ‘C:\Program Files\Citrix\HDX\bin’

Issue still persists, but less often. A possible workaround would be a continuous check of the existing sessions on the DDC and all Worker. If a session is present on a worker but not visible in CTX Studio, the brokerservice has to be restarted on the VDA.

Does restarting effect other users on the server ?

OK cool, I just see 2206 has been released and one of the fixed issues is active accounts showen in director may not match, going to test it and see will let you know how it goes next week when I get some users on it

No not fixed I had one user today  for us seems to be related to a session getting disconnected by some network glitch they can't get back to session  

Screen Shot 2022-07-21 at 1.32.12 PM.png

This is after manually killing logonui.exe processes for 35+ disconnected sessions with procexplorer this morning.  and leaving the machine in maint mode for the remaining users to drain. I was on 2203 - had these issues, rebuilt with 2206, have these issues.

Edit.  Always get my procmon/explorer names mixed up..

Screen Shot 2022-07-21 at 1.37.00 PM.png

Weirdly, director still thinks there are 35 users on this box.  There are actually only 6 "sessions".  4 with the above 5 processes, myself, and one active user.

Screen Shot 2022-07-21 at 2.02.37 PM.png

Opened my own case on it. I should probably also open a case on why "open tickets" is permanently 0... :face_with_raised_eyebrow:

I have a case open and this is the behaviour they were expecting to issue a hot fix, I'm not seeing this though my users have a full session still connected as a disconnected session when they log on it creates a new local profile 