World of EUC

Might not be similar, or might be. But When I went from CU4 to CU5 in 1912 ( Different I know) I had to adjust the Time Policy in Studio. When users would login in EU image lets say from the US (why they do that, Workflow problem, IDK) Anyways, They would be in the US visiting, and want to use the EU VDI. But the policies went from us local client time, to use Server time. So I had to force it back to use Client time. Could be way different, but figured I throw that out there.

YES! I have this with multi session win10

the policy is correct too, it just doesn’t work anymore

we rolled back 2206 due to teams calls pickup delays

Dang man. Life of a citrix guy at times. 

I haven’t even tried teams yet, got people complaining about video not working and dealing with Outlook OST looking in the wrong place now

Same here Mike - update of an existing environment (from 1912), no changes to policies or anything else.  Have just tested VDA 2203 and time zone redirection is working again

so if you use the new VDA cleanup utility and then install 2206 Time Zone Redirection works…

because you shouldn’t have to use that tool anymore

So this came back for me today, I reacreated the profile and it still won’t show me the correct time. It was working for a week!

If you roll back to 2203 does it go away?

we didn’t see it when we were on 2203, but haven’t tried rolling back

anyone still seeing this? we're having the issue now on 2203.

Hi all, does anyone have clear documentation or WEM tasks to enable recycle bin on windows server 2019 shared desktop not persistent with folder redirections and fslogix? Thx

This is driving me insane, now Windows Search is the only thing writing to <http://username.AD|username.AD> but Outlook is still looking there because that’s where the profile existed last time

I don’t understand why prior to the VDA upgrade it was writing to one location and then after it’s writing to a different one

I have a ton of helpdesk tickets being generated because Outlook doesn’t find the OST

just had one user log in and it recreated their profile inside the profile folder so all their data is gone…

CS_W10_Citrix_VD_Base.html

Are you just looking for a working base for Defender settings/exclusions? My environment isn't like for like with what you describe, but may be close enough (W10 20H2 single session, FSL, WEM, Teams). If it is, here's a report of my Defender GPO settings (minus the onboarding stuff).

<@ULC9J5XPB> you are a gentleman, owe you a beer… <@U02TDPX0M5G> <@ULNE983N3> let's compare against what we have tomorrow 

I’ve already observed that too, so far I have no idea why that happens.

Hey, yes I see these issue in an environment since 2109. 2106 works as expected. RDP even takes longer to start in this environment. Sometimes about 15 minutes. As soon as I remove the VDA or install any VDA earlier than 2109, RDP is instant availabe. Opened a ticket about a two month ago and could not prove to Citrix so far, that it' an issue of  VDA. ... the problem in my case is, that with a fresh VM everithing is working as expected.

Seeing that this a Microsoft feature, is there any way to enable it in pure RDS?

I am not able to find any official MS docs about this ShellBridge feature.

Absolutely no idea whatsoever on that one 

Same fix applies to explorer not refreshing in published apps

When I first saw it there was a disclaimer telling that they change the login and merge it with the cloud login experience. However I have seen this banner only a few times and it's gone now. I am under the impression that they change it per OrgID.

Couldn't agree more, needs clarification <@ULCBD9AJD> !
That's also my impression <@U01GWFT2BDJ> 

It's my understanding that it's coming, but you'll be able to defer for a bit. Notifications are supposed to go out via email.

<https://www.citrix.com/blogs/2022/07/19/get-ready-for-mfa-across-all-citrix-properties/|https://www.citrix.com/blogs/2022/07/19/get-ready-for-mfa-across-all-citrix-properties/> 

Found the message after login: We will begin to transform your login experience to align with Citrix Cloud, providing one unified login across our websites and products. If you are already a Citrix Cloud customer, you'll login as you normally would to your Cloud account. If you do not have a Citrix Cloud account, simply login with your web credentials as you did previously.

mmm got one DDC where after upgrading the SQL express LOCAL DB version where its not creating the files :disappointed: I have ran sqllocaldb.exe i under the Network service account and dont see CitrixHA instance even tho the high availability service is started.

Did you follow the steps to upgrade the local sql

yeah done it loads of times i even wrote a blog on it <https://c4rm0.wordpress.com/upgrade-sql-server-express-localdb-for-citrix-lhc/>

nah left it ages and rebooted numerous times i see weird errors in the event logs

SQLLocalDB 15.0 Windows API call FormatMessageW returned error code: 1815. Windows system error message is: The specified resource language ID cannot be found in the image

when i run sqllocaldb i    I dont see the CitrixHA instance

Yeah, I'm not sure. I rarely upgrade any usually build from new with each release

sqllocaldb.exe create CitrixHA and sqllocaldb.exe start CitrixHA dont fix it either :disappointed: it gets rids of the errors in the logs but the LHC DB's not being created

Maybe a corrupt model database. Anything in sql localdb errorlog?
…it's located under AppData\Local\Microsoft\Microsoft SQL Server Local DB\Instances\*\error.log
…profile folder of network service

yeah i do see these in the logs 2022-07-15 23:10:29.63 Logon      Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. Reason: Failed to open the explicitly specified database 'HaDatabaseName'. [CLIENT: &lt;named pipe&gt;]
2022-07-15 23:11:52.96 Logon      Error: 18456, Severity: 14, State: 38.

Ok, this is expected…Think you should go and debug the HA-Service on your DDC.

i did a procmon filtering by citrixhighavailabilityservice.exe process but didnt see anything of note (No access denied errors) i will log it with citrix see what they say

same happened for me after upgrading from 2112 to 2206. recreating CitrixHA local db did work quite smooth

<https://support.citrix.com/article/CTX228758/how-to-recreate-local-host-cache-on-xenappxendesktop-712-or-later|https://support.citrix.com/article/CTX228758/how-to-recreate-local-host-cache-on-xenappxendesktop-712-or-later>

image.png

you can alter that via PowerShell - look at the PublishedName attribute on the Delivery Group - can be a PITA on migrations!

It has been a while for me but also had this with static desktop pools etc. see <https://www.technicalfellow.com/2017/11/notes-from-the-field-xendesktop-remotepc-and-multi-licensing/|Notes from the field: XenDesktop RemotePC and Multi Licensing – The IT Stories (technicalfellow.com)>, skip the multi licensing part.

The command looks similar to:
Set-BrokerPrivateDesktop &lt;domain&gt;\&lt;computerName&gt; -PublishedName "Windows Desktop"

Sounds like a great class.  Sadly, in my opinion, the best way to get help desk to not just escalate issues to Citrix is to hire more experienced people, not the cheapest.  And that seldom happens....

Screen Shot 2022-07-18 at 11.59.12 AM.png

Screen Shot 2022-07-18 at 11.57.46 AM.png

I can confirm I have the same issue. Server 2019?

2016.  Support pushed me to move to this version in order to continue troubleshooting a UPM bug.  fml.

I downgraded to 1912 CU5 but also added these reg keys to see if it would help. I added them pre-emptively while still on CU5 to make sure there were no negative side-effects, but its been fine. I plan to attempt another 2203 upgrade now that its been stable

maybe give them a shot to see if it helps?

I found it in the EUC thread somewhere. Ill see if I can dig it up

Googling, and FastReconnect seems to be 2019 and up.
<https://support.citrix.com/article/CTX256900>

I'm going to give 2206 a try.  They won't work with me on the UPM bug until we move to a more current VDA.

CU 1 for 2203 is just around the corner. I think it will be published this week maybe. 

I’m not holding out much hope with that issue being resolved.

Well.  2206 is the exact same...  FFS Citrix.

<https://worldofeuc.slack.com/archives/CK6TCV3JN/p1654035681089039|https://worldofeuc.slack.com/archives/CK6TCV3JN/p1654035681089039>

Well CU1 didn’t make any difference for two of my test VDA’s.

I’m going to test out a complete removal of VDA components later to see if it makes any difference.

When connecting with a local admin, we're getting "RDS server not available" when connecting with a domain admin account we're getting an NLA issue. After disabling NLA, we're getting the same RDS error.

install the RDS licensing diagnoser tool via server manage and see what it says? is the GPO that sets the RDS license server/mode being applied ? can you telnet to the RDS license server on ports 135/445 ? do you have CAL's available on your RDS license server ?

Image from iOS.jpg

Check this location as well to see if it's set. 
Also make sure you are apply the GPO when admins log in. I have seen it at times in some places they only apply to users and ignore admins. Under the GPO delegation area

if telnet isnt installed, open Powershell from the RDSH/VDA
tnc RDSLicServer -port 135
tnc RDSLicServer -port 445
tnc RDSLicServer -port 3389

## RDSLicServer is your DNS name of your Lic Server

F*ck it...Webex App is not current. Going to test this first.

Are you using the new unified Webex app? It seems to be less tolerant of VDI plugin versions, IMO.

As per documentation only 2203 is supported.
<https://help.webex.com/en-us/article/ntp1us7/Webex-App-%7C-VDI-release-notes#Cisco_Generic_Topic.dita_9390a7f5-07a2-4ed6-a759-41313ef4042a>

Found this one, waiting for a Fasttrack CTX KB :smile: <https://discussions.citrix.com/topic/416746-virtual-apps-and-desktop-vda-2206-cisco-webex-virtual-channel-doesnt-connect>

I know I’m a little late to the party here, but I’ve just stumbled across a similar problem whilst we’re testing WebEx for a customer. It works in fallback mode if the client and server versions are mismatched audio sounds good. However if the versions match and the health checker comes back good it doesn’t work. In the VirtualChannel log there are no errors, when a call comes in or a call is made there is no audio at all. Tried VDA 2106 and 2203 CU1 LTSR, the policy for the Virtual Channel allow list is disabled too.

Any chance anyone is seeing this in 2203 with Webex? Got my VC policy sorted, and Health Checker confirms VDI optimization - except when I go into a meeting, where it shows disconnected.

Nevermind, figured it out. Even with the unified Webex client, you need both the VDI plugin _and_ the Webex Meetings VDI plugin. So fucking stupid.

it defintely does, but I don't remember what log.  We don't use this anymore so I can easily check.  I think it was in one of the TerminalServices logs though

Might have some luck poking through the event log for terminal services

While our controllers are running S16, I don't think we'd change the specs when we move to S22 - 4 vCPU/8GB.

awesome thanks !  we also currently are using the 2 server names of our current controllers in the registry for each VDA so i'm thinking for this we'll need to change that to a DNS name to make the switch easier,  then setup the 2 new servers w/ 2203 and then figure out how to connect our existing DB to that and cut over (not sure how that process works yet)

Youre fine with that Andrew just make sure to configure your cpu with 1 socket 4 cores so the sql db lhc mode uses can use all the cores. 

I can't even recall the last time I saw a VM configured as 4/1 and not 1/4.

this is our current setup so i think we're good

Thats cause you are you.  Most orgs dont. 

thats how we have our VDA's as well (i cpu/multiple cores)

<@UM04QUUSJ> is there any documentation on how we would approach a cutover from 2 existing controllers on 1912 (server 2012 r2) to 2 new controllers on server 2022?  wasn't sure if it was better to setup the 2 new controllers on 2203 LTSR and do a cutover from the old 1912 to 2203 or if it was smartest to install 1912 on the 2 new controller servers, add them to the existing site, then remove the 2 old and then upgrade (the kicker is doesnt look like you can install 2203 on server 2012 so have to go to newer otherwise i'd just upgrade

Its actually a full migration to a new site.  If you need to upgrade the infrastructure sevrers oses there is no other way as we dont support inplace os upgrades.

so what you're saying is best option is to leave the current 1912 (server 2012) site alone.....and seperately setup 2203 (server 2022) as a new site and do a full cutover/migration when ready?

That what most customers do becasue they are looking to reset every once in a while.  For the ddcs what you could do is create a new ddc with an updated os, then remove the old ones, then upgrade that in place. then add another new one.  since you use persistent machines that may be a better option.  For Stiorefornt you woudl just create a new server group.

We did that with 7.15 (jumping from 7.6ish), created new sites entirely. We're on 1912 right now, but will be upgrading to 2203 eventually on the same sites.

I did that as well many times. The biggest issues is when a company has high security and you have to open all the ports ect/cross reference everything.

so you're saying in our situation the smart route might be setup the 2 new controllers on server 2022 with 1912 (to match current environment), add to the current site (so we'd temp have 4 ddc's instead of 2), then remove the 2 old DDCs (on 2012 r2) and then do the inplace 1912 to 2203 upgrade?

1912 to 2203 for us was an easy peasy upgrade, not sure I'd make it a site migration for only 500 VDAs.

cool ya hoping to make this as painless as possible.  those old 2012 r2 servers are the kicker here so wondering if what i mentioned a little above is the best approach (if i'm understanding Rob correctly)

We went Office365 with Server 2019. Hoping that by the time we need to move off of 2019 MS will have re-thought their decision to not support O365 on Server OS beyond 2019.... We will also be evaluating Win-10 Multi-User in Azure.

From my initial reading, it seems MS is giving Citrix admins the finger and saying use Windows 365 past 2025...

But i may be misreading the situation.

I don't understand why Microsoft is okay with this type of restriction. It makes no sense to me.

Agreed. Hoping one of those customers that has enough spend to sway them to do something otherwise can use their pull to change their mind.

Never mind.  I really should have read all the way to the bottom of CTX107825....

shame..

`There is a 14 character limit on the process names - this means to exclude an application named "badlongname.exe" you would add "badlongname.ex".` 

<https://support.citrix.com/article/CTX107825/how-to-disable-citrix-api-hooks-on-a-perapplication-basis>

I saw someone on reddit mention that they had issues with the latest release of office 365 and saving on dfs. Don't know if that's what you're experiencing<https://www.reddit.com/r/sysadmin/comments/w37wf1/dfs_problems_caused_by_office_update/>

Didn't find a lot out on an end to end process guide there when looking myself, but there are a lot of articles about parts of the process. The Citrix Design Guidance has links to a lot of what you need to know <https://docs.citrix.com/en-us/tech-zone/toc/by-solution/daas-for-azure/design-guidance.html>
CUGC also as some good info and session recordings in there that can help as well.

Screen Shot 2022-07-21 at 12.10.34 PM.png

Screen Shot 2022-07-21 at 11.52.17 AM.png

Screen Shot 2022-07-21 at 12.16.45 PM.png

Disable the policy setting and sanity returns.. Except the obvious inability to use the GFX adjustment.

Can you share the crash message from event viewer?

Log Name:      Application
Source:        .NET Runtime
Date:          7/21/2022 12:37:05 PM
Event ID:      1026
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:
Description:
Application: GfxStatusIndicator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileNotFoundException
   at Citrix.GroupPolicy.Accessors.Tracer.get_Accessors()
   at Citrix.GroupPolicy.Accessors.PolicySettingsBase.FindSettingWithResultTemp[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String, Citrix.GroupPolicy.Accessors.PolicyResult ByRef)
   at Citrix.GroupPolicy.Accessors.PolicySettingsBase.FindSettingWithResult[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String, Citrix.GroupPolicy.Accessors.PolicyResult ByRef)
   at Citrix.Ica.SessionParametersAccessors.get_UserSid()
   at GfxStatusIndicator.Program.GetUserPreferredLanguage()
   at GfxStatusIndicator.Program.Main(System.String[])


Event Xml:
&lt;Event xmlns="<http://schemas.microsoft.com/win/2004/08/events/event>"&gt;
  &lt;System&gt;
    &lt;Provider Name=".NET Runtime" /&gt;
    &lt;EventID Qualifiers="0"&gt;1026&lt;/EventID&gt;
    &lt;Level&gt;2&lt;/Level&gt;
    &lt;Task&gt;0&lt;/Task&gt;
    &lt;Keywords&gt;0x80000000000000&lt;/Keywords&gt;
    &lt;TimeCreated SystemTime="2022-07-21T17:37:05.581568100Z" /&gt;
    &lt;EventRecordID&gt;3813&lt;/EventRecordID&gt;
    &lt;Channel&gt;Application&lt;/Channel&gt;
    &lt;Computer&gt;&lt;/Computer&gt;
    &lt;Security /&gt;
  &lt;/System&gt;
  &lt;EventData&gt;
    &lt;Data&gt;Application: GfxStatusIndicator.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.IO.FileNotFoundException
   at Citrix.GroupPolicy.Accessors.Tracer.get_Accessors()
   at Citrix.GroupPolicy.Accessors.PolicySettingsBase.FindSettingWithResultTemp[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String, Citrix.GroupPolicy.Accessors.PolicyResult ByRef)
   at Citrix.GroupPolicy.Accessors.PolicySettingsBase.FindSettingWithResult[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.String, Citrix.GroupPolicy.Accessors.PolicyResult ByRef)
   at Citrix.Ica.SessionParametersAccessors.get_UserSid()
   at GfxStatusIndicator.Program.GetUserPreferredLanguage()
   at GfxStatusIndicator.Program.Main(System.String[])

&lt;/Data&gt;
  &lt;/EventData&gt;
&lt;/Event&gt;

Screen Shot 2022-07-21 at 12.42.51 PM.png

Was murdering the CPU at the same time.  Tailed off after disabling the policy and disconnecting / reconnecting the session.

Thanks. Can you share a few things so I can find the root cause:
• Configured policies
• Export (in text) of HKLM\Software\Policies\Citrix\####SESSIONID###
You can also DM it to me.

P.S: I work for Citrix Engineering

"P.S: I work for Citrix Engineering". I noticed.  I may also share multisession 2206 shenanigans with you also... :grin:

Sure, I'm here to hear what issues people are running into in customer environments

Not yet, but looking at the change log that only fixed a version number.

Tested with 2.9.500 and no change. Only affecting multi-user calls.

Downgrading the client version to 2.8.0.2235 fixes the issue. but then they get a warning about version mismatch.

the first thing I'd check is that the vms are licensed properly and checking in with your license server CLS or legacy

Everything looks good from the licensing standpoint!

I should also mention these are MCS random machines and single session.

I know the host to client setting is really for server based multi-sessions, but I was giving it a shot to see if any difference.  I can’t say it has had any impact…

Was the grid driver installed prior to the VDA?

I don’t believe so.  I think I had the VDA installed and then completed the GRID install.

A few questions remarks:
• Which vGPU driver version are you using?
• What vGPU license are you using?
• How many monitors / which resolution are you using
• I would recommend to always install the vGPU driver before the VDA
• Please remove the Desktop Composition Redirection and Queuing and Tossing policy. You don't need those
• I would really recommend moving to VDA 2203, there are many GPU optimizations between those 2 releases especially since VDA 2112.
Furthermore, what's the workload? When do you see the issue?

I am using the latest driver, maybe one behind since I think they just released a new version.  I am using the 2B licensing for vPC.  Two monitors primarily but would like to run up to 4.  I will reinstall the VDA after the driver.  Policies have been removed.  I am currently on the LTSR track with 1912, and I am awaiting the release of the first CU on the latest LTSR before deploying.

Alright, I would recommend then at least to test with 2203 VDA. We (I work for Citrix Engineering) really changed the game with 2112 VDA: <https://www.citrix.com/blogs/2021/12/16/hitting-new-highs-with-hdx-3d-pro/> and it's not only HDX 3D Pro that benefits from these improvements.
On another note, if you are doing more than 2 monitors with a 2B profile I would recommend to look at your GPU memory usage. If that is constantly above 70% of the 2 GB you can run into performance issues as well.

Thanks!  I will give this a look!  Do you have any suggestions for web video, i.e. youtube or vimeo types sites when trying to get them to play and not be so choppy and distorted when playing inside of a VDI session for a user logged in from remote?

Well, the T4 should be able to decode that (YouTube uses VP9) and in Selective mode this is encoded with H.264 which is hardware encoded on the T4 as well. So if your endpoint can properly handle H.264 it should give a good user experience.
You can see this on the VDA by looking at the Performance tab of the Task Manager and selecting the GPU. You would see Decoding &amp; Encoding utilization.

What endpoints are you using? Again, if it's Windows I would recommend CWA 22.06 which contains many performance optimizations as well.

I set the codec to full screen and optimized for 3d load to enabled and I am seeing amazing results.  However, the gateway is also reporting a higher amount of bandwidth being transferred at the same time.  I only have a VPX10, so I can see this getting saturated quickly.  Are there any other suggested settings to alter to save on bandwidth and compress the video more?  I am testing now by removing the optimized for 3d workloads to see if any better.

Mixed bag of endpoints.  iPads/Chromebooks/Macbooks/Windows PCs

What is your workload? It really depends on that which policies work best. 

VPX10 can definitely be a limiting factor here. How many sessions do you want to run through it?

What is the worst thing that will happen if the VPX hits its limits?  Dropped frames or reduced quality until more network is available?

general task working but with web conferencing and other online training as well.

one other thing I would mention is enabling h.265 on the local windows endpoints. Its not available for non-windows

Then our default policies are the best. So:
Use video codec: use when preferred 
Quality: medium
Use hw encoding: true

<@UTT4BTR1S> Yes H.265 can help, but in this case only for videos. Also as you state, the endpoint needs to support it

most users are on apple devices, but I will keep this in mind for my few windows users!  Thanks!

It depends on the endpoint if we use H.265 or not so there is no VDA policy you need to set for it. Only requirement at VDA side is a gpu with H.265 encoding, which is fine with the T4

well, I turned off the optimized for 3d loads and put back to preferred and the troublesome performance is back.  I tried to turn it back and it certainly makes a difference, but would the overall machine performance be degraded or just the video and images?  I am getting ready to reinstall the VDA and republish now.

Hey <@UNBRPVD4G> - it's awesome having you here - just saying :the_horns:

<@U01GMMCN3FE> that behavior is definitely unusual. Let me know if it works better after reinstall

I was able to reinstall, but performance issues remain.  I will see about grabbing a video once more network activity is present.  Turning everything up to high worked better, but it also was using 6-7mb of my VPX10.  It is acting as though it is struggling to identify the preferred video areas from static data.  Repeating actions is a little better, I.e. launching file explorer.  If you attempt other actions in between, lag is back.

Can you download RDanalyzer and share a screenshot of the test? 
Do you also see it when you connect directly and not via VPX?
What is your endpoint / workspace app version? 
Would you be able to test with VDA 2203?

This was taken while connected via VPX.  I will grab another for comparison when connected locally on the LAN.  I am currently on a MacBook Pro using 22.06.1.51 (2206) to make my connection.  I was able to finally get the analyzer to pick up on a few hardware encoding sessions, not very consistent in Chrome.  The activity seemed to pick up more with Edge.  When trying to do multiple things at once, i.e. Edge, MS Word, and then trying to launch file explorer, the lag is definitely there.

I did notice larger than normal memory usage on one of my delivery controllers.  I was able to apply some updates and reboot.  This may have made things slightly better?

This seems normal, from this view I don't see why there is any slowness. Also, the Delivery Controller is not in the ICA traffic path so it does not make any difference if you reboot it or not

I am going to try to build a new image with nothing installed in it and see if any better.  I have also opened a case last week with Citrix for further troubleshooting, but I am still awaiting my initial contact from them.

Ok, you are using EDT here, did you configure EDT MTU Discovery? This is still needed on 1912 LTSR, with 2203 LTSR this is enabled by default:
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/1912-ltsr/technical-overview/hdx/adaptive-transport.html#edt-mtu-discovery>

You could also try to force it to TCP

If your EDT MTU Size is off, you get also these performance issues

<@UNBRPVD4G>  Thanks!  I am looking into GPO settings now, as my new image I created seems much better in another OU.  When I move to directory of production desktops, similar issues return.  My old image is BIOS boot and new image issue UEFI.  Otherwise all installs are the same.

<@U01GMMCN3FE> Ah, yeah I would definitely investigate your GPO settings if you notice such a big difference.

<@UNBRPVD4G> While I am looking into these settings, just curious on the VPX10.  When I am only testing one session through the VPX10 and start up something like Youtube or a local video file and play full screen, I notice my bandwidth consumption is 5-6mbps.  When adding additional sessions that might be doing similar workloads, would I need to plan on similar metrics or would there be some additional compression and consolidating of traffic through the VPX10 or larger for sizing purposes?  I am trying to guage what my next size option would be for bandwidth planning while not going too large.

<@UNBRPVD4G> I have made significant strides in getting the graphics polished and working on all platforms!  I went back to the drawing board and started adding policies one by one and testing.  Took some time but I think I have a winner!  :slightly_smiling_face:. One thing that I have noticed and found to be a common issues on several discussion boards is cursor black boxes/ghosting in Adobe suites when I enable “optimize for 3d workload” in my policies.  This one policy alone is responsible for a much improved experience, but when I turn it on I get the black box.  When I turn it off the box goes away.  I have read about this dealing with 32bit cursors, etc.  Is there a simple fix to apply that anyone knows about?  I tried to add other adhoc policies to get the same performance from the citrix policies like full screen hardware codec, etc., but none get me to the same level of performance.  I have noticed that if I logoff each time and get a new session, I don’t experience this issue.  This seems to only occur when launching session on one platform, i.e.  iPad, and then joining the session again from another platform like IGEL/Windows/MacBook.  Not a major issue, just wondering if there is a known work around for such an experience?

I've had a similar error from a persistent desktop after changing the network card. Docker didn't like it and I had to run a netcfg -d as an admin and reboot the VDI. Might be worth doing that in the master image and trying again.

I did notice some event log entries indicating that a NIC was plugged and unplugged.....will give it a shot

Well I did this but also installed Git into the master image at the same time, and it now appears to be working (although the first-run time for Docker Desktop is hideous, it takes about 8 minutes to launch). So problem could well be solved....not sure which bit solved it though!

Yeah Docker is horrible. Glad it's sorted.

I've never seen that, though I'm not on the same environment. Have you tried posting this to IGEL's Slack? <https://www.igelcommunity.com/>

Don't know igels but do they get their config based on subnets, wonder if they are being given some funky parameters based on the thin clients ip?

I hope legacy graphic policy in Citrix is disabled

Can you check anything in Shell Registry or at Logon regarding MS Teams?

would be good to know :slightly_smiling_face:

I got no exact date but CU1 should be released still in Q3

I have installed CU1, will update if any noticeable issues are noticed..

Good shout... will have a look at that :slightly_smiling_face:

I would RDP into the VDA and try it as well. If it does it again, Then Remove the VDA and do RDP into it once more. Not much help, but it will help you rule out "Citrix"

it only seems to happen in a published app... that would take some doing...  but thank you for the idea

This happen for most users or a couple? Just thinking through it

I have 5 users reporting the problem, and I can also recreate it with out restuser

Tried disabling all excel add-ons, excel in safe mode... it's so odd

have you tried a different workspace version by chance? As a test go back to 2205 just to rule out any DPI glitches. Grasping here...

Try hitting Shift key + Windows key + M key to see if it will maximize all windows. Then close the session, and try once more. guessing

2205 *may* have solved it.  lol... At least looking good in initial testing from my guys...

<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/opt-ms-teams.html#firewall-considerations>

a bit to easy :wink:
It´s AVD, not using hdxteams.exe
I use these rules, however they dont work:
```New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain,Public,Private -Direction Inbound -Action Allow -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain,Public,Private -Direction Inbound -Action Allow -Protocol UDP -EdgeTraversalPolicy DeferToUser```

From memory (weirdly) you need to add a Block rule for the same teams.exe for Public &amp; Private. Only Allow on Domain profile.

also tried that.
Created the rules:

```New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain -Direction Inbound -Action Allow -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain -Direction Inbound -Action Allow -Protocol UDP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Public,Private -Direction Inbound -Action Block -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Public,Private -Direction Inbound -Action Block -Protocol UDP -EdgeTraversalPolicy DeferToUser```
However the prompt appears, and if the user clicks Cancel two deny rules are created:

Pretty sure you can't use user variables in this fashion with firewall rules (unless something changed)…I had a problem with this a while back and had to script it <https://jkindon.com/conquering-per-user-firewall-rules-with-citrix-wem-privilege-elevation/|https://jkindon.com/conquering-per-user-firewall-rules-with-citrix-wem-privilege-elevation/>

Correct, that stupid firewall prompt is madness as either way it creates a rule (cancel = block)

<https://github.com/shsheikh/PowerShell/blob/master/Add_Teams_Firewall_Exceptions.ps1|https://github.com/shsheikh/PowerShell/blob/master/Add_Teams_Firewall_Exceptions.ps1> - not tried this myself