World of EUC

had nothing but headaches upgrading to 21h2 from 1908..  Required vda cleanup/removal, performing the upgrade, install new vda.. and still blows up.  can only imagine the pain when they say they want to upgrade this to win11

I’ve seen some customers do this but they spend a lot of time on the process - removing components, upgrading OS, deploying components all over again - you wanna have some pretty robust task sequences to manage this… rebuild is always preferred but not always realistic 

I think the plan is to go from either 1909 or 20H2 (can't recall which) to 21H2. I'm considering telling them to just run the latest VDA cleanup utility first to play it safe, even though I've never had an issue with in place upgrades myself.

most of our customers are using SCCM for managing persistent W10 VDA's and before a major upgrade the VDA is getting removed and reinstalled. this is mostly because of all the possible bloat a user can generate. on the other hand I never had an issue with an inplace upgrade on non-persistent VDA's. 

I done it but it’s messy. I like to rebuild if I can. Now that depends on if they have thing documented for applications reinstalls. I seen that a lot of them really don’t. 

Gawd this shits me to tears - customers who don’t automate their VDA / gold image builds and therefore runs into all sorts of issues when doing OS upgrades.

In-place upgrades to persistent makes sense - hopefully those VMs are being managed with something like Endpoint Manager, but non-persistent should be a re-deployment via an automated gold image build.

For us, SCCM handles persistent, and I believe all of our non-persistent stuff is in App Layering, so those should be clean every time.

I asked because it has been years since I've done anything outside of App Layering, and read so many horror stories about VDA upgrades here.

I know it's not the same as an OS upgrade, but still.

Something Citrix should fix with the VDA installer. It’s such a mess - an EXE that containers 8(?) MSIs?

That also applies to the CWA installer... at least 8 MSIs, one for each component.

Hey, anyone using Citrix Analytics and even if VDA an Workspace App is current, no Network Metrics are available? I've checked the requirements but still no data. Any ideas? <https://docs.citrix.com/en-us/performance-analytics/user-analytics/not-categorized.html#bandwidth-and-network-latency-metrics-na>

That’s how I see it done with hosting providers. Typically if it’s shared clusters it’s a no go, but if it’s dedicated hosts in a shared VC, then yep, delegated access locked to the customer hosts 

I worked a decade ago for a Cloud provider that did exactly that.
So yeah, be careful on the permissions, and you're good to go!

Use bis-f script. It's the easiest method :sweat_smile:

You can use GPO for the big 3, if you want the other ones I'd use BIS-F.

use windows event forwarding to a event collector server

Does anyone happen to run CrowdStrike Identity/Preempt in conjunction with CVAD on-prem?

From the Huge thread above it seems to be the fix. But that is based on the folks that tested it.

Seems like the docs got an update regarding the regkey:
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/whats-new/fixed-issues.html|Fixed issues | Citrix Virtual Apps and Desktops 7 2209>

• VDA for multi-session OSSession Manager terminates session launches when the Group Policy evaluation fails. This is to prevent user access to resources that are restricted through Group Policy. The following user-implemented fix provides a registry toggle for administrators to dismiss the enforcement, which helps end users to connect to sessions even if the Group Policy evaluation fails:
HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Ica\GroupPolicy
Name: EnforceUserPolicyEvaluationSuccess
Type: REG_DWORD
Value: 0 (enables the current fix)

<https://docs.citrix.com/en-us/profile-management/current-release/configure/replicate-user-stores.html>

Do you want profiles for all users to exist in both locations? The replicate profile store info Steven linked above may work, but it does add time to logoff writing to the remote location.

when using the replicate profile, does UPM automatically pick up from this list the next path if the first one is not available? Thanks!

are the datacenters close? like would one datacenter be considered an extension of the first datacenter?

they are close.  I was to configure one site and have it span the two data center.  Latency between the two site is 4 ms.   They have a 10 GB network connection.

totally get the consolidation effort, makes sense.  how are the other apps configured? Only out of 1 datacenter?  or AppA is in datacenter1 and AppB is in datacenter2?  Do the other teams use 1 datacenter as more of a passive/DR datacenter?  If so, i'd follow suit.

i've seen a very similar case where 2 datacenters were so close.  Everyone called it Datacenter 2, however, it really just became an extension of Datacenter 1.  Single points of failure everywhere, on both sides.  Just trying to have you avoid that or at least set the expectations for the manager/execs.  If datacenter # goes down, what doesn't work?

thanks steve.  So both data centers will be mirrors of each other.   The same apps will be installed in datacenter 1 and 2.   so if datacenter 1 goes down users can use the apps in datacenter 2.

there use to be documentation for on creating one site spanning multiple datacenter that would list the requirements, but i can't find that now...do any of you have a link?  i need it for my RA doc and plus i want to review.

anyone know if citrix has what is stated in this link documented anywhere

<https://www.citrix.com/blogs/2015/04/08/xenappxendesktop-site-design-v2015/|XenApp/XenDesktop Site Design (v2015) | Citrix Blogs>

my client is asking me for updated version of this

storefront groups: <https://docs.citrix.com/en-us/storefront/current-release/plan.html>

Sites: <https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/manage-deployment/zones.html>

not sure if anyone else has hard 'citrix site' latency and bandwidth requirements, let me know if you find something there.

most of the recommendation around best practice would be sep citrix sites per datacenter.  Again, just guidance.

it's a very complicated answer with tons of customer variables

maybe a good time to entertain citrix cloud too.

i reached out to citrix, and awaiting feedback

i just need like clear documentation as to why a seperate site should be created.

<https://docs.citrix.com/en-us/tech-zone/design/design-decisions/cvad-disaster-recovery.html|Design Decision: Disaster Recovery Planning | Citrix Tech Zone>

Basically if you span to a citrix site to a secondary site you can't claim it as being as a DR site

you would need to create a seperate site as DR, technically

when you use zones you can make it resilient. I did many DR testing in lab and it works.

citrix came back with saying that the site can be stretched even though the two data centers are 150 miles a part.

they said they don't have any updated documentation on those recommendations but will update what they have

it's not miles, it's latency and bandwidth.

and when they say stretched are they talking about zones?

there use to be guidelines for distance as well.

<https://www.citrix.com/blogs/2015/04/08/xenappxendesktop-site-design-v2015/>

hopefully you can get them to publish a new article...

i hope so...its worked before.  i had them update guidelines on a few things.

like the sql scripts to re-point the DDC to a new sql cluster

Had this a while back, it was related to the functional level set on the machine catalog, was that changed ?

no, turns out the client wasn’t doing dns scavenging and every IP had about 5 host entries so the DDCs were picking the wrong hostname to send return traffic to

image.png

Looks like it might be Netscaler related, direct connect to Storefront works

If it's NetScaler related, do you have session policies / profiles configured? Is this something that was working and now isn't?

I split my HTML5 users into a separate store because this was unreliable for me as well and users that had Workspace installed would get HTML5 when they shouldn't.

What version of Storefront? I noticed the behavior change on 2203 CU 1 but it could have been changed earlier.

I had some others test and it's not working directly to StoreFront either

we're on StoreFront 1912 CU 3still, haven't changed any configs

Rebooting both DDCs fixed it :man-shrugging::skin-tone-2:

Do you talk about remote pc? We had a similar problem with grey / black published desktops. In our case, we had to change the adapter merit reg key as described in this article: <https://support.citrix.com/article/CTX237608/display-adapter-priority-and-monitor-creation-in-citrix-sessions>

It seems the latest VDA cleanup utility targets the WEM agent as well, does anybody know if there is a way to exclude that?

Hi All, any hints as to why a session printer will still print jobs in BW despite colour being selected as the option for the print output - not using Citrix UPS - plain session printer

My new place has been installing VDAs using this command line:

```VDAWorkstationSetup_1912.exe /quiet /enable_remote_assistance /disableexperiencemetrics /components VDA /masterpvsimage /virtualmachine /enable_hdx_ports /enable_hdx_udp_ports /includeadditional "Citrix Supportability Tools","Citrix User Profile Manager" /exclude "Citrix WEM Agent","User personalization layer","AppDisks VDA Plug-in","Citrix Files for Outlook","Citrix Files for Windows","Citrix Telemetry Service","Citrix Personalization for App-V - VDA","Machine Identity Service","Citrix Universal Print Client","Personal vDisk" /logpath "C:\Program Files\Software Distribution\Logs\VdaWorkstationSetup1912_CU5.log"```
For 2203, my command line would be:

```VDAWorkstationSetup_2203_1100.exe /quiet /enable_remote_assistance /disableexperiencemetrics /components VDA /masterpvsimage /virtualmachine /enable_real_time_transport /enable_hdx_ports /enable_hdx_udp_ports /exclude "Citrix Telemetry Service","Citrix Personalization for App-V - VDA" /logpath "C:\Program Files\Software Distribution\Logs\VdaSetup2203"```

Some of the items in their string are no longer valid, while others should already be selected by default per Citrix's own documentation (<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/2203-ltsr/install-configure/install-vdas.html#step-6-install-additional-components|link>).

Citrix makes some of the options less clear, like _Citrix WEM Agent_. They say if you want it included, add it to _includeadditional_. Then they say if you don't want it, exclude it. I know for a fact that it's not selected by default in the GUI, and it did not install in my own install string, so perhaps it's just poor wording on Citrix's part.

At the end of the day, I just want to make sure that I shouldn't be adding those items to those switches, even if only to reinforce them. It never made sense to me to specify a component to be installed/excluded when that was the default behavior.

Do you need the switches for 2203? I can provide my switches. Some have definitely changed since 1912. 

I wouldn't mind seeing your switches, thank you! My issue really stems around the fact that I don't think most of them are actually required, yet it seem to be common practice everywhere to include them. If I run my command line install using the string listed above, the same exact components are installed as when I run it via the GUI.

These parameters are not valid anymore:
`"Citrix Files for Windows`
`"Citrix Files for Outlook"`
`"User personalization layer"`
`"Personal vDisk"`

This is what I use for PVS:
`/exclude "Citrix Personalization for App-V - VDA","Machine Identity Service","Citrix Telemetry Service","Citrix WEM Agent","Citrix Rendezvous V2","Citrix VDA Upgrade Agent" /COMPONENTS VDA /CONTROLLERS "DDC01.testlab.lan" /disableexperiencemetrics /enable_remote_assistance /enable_hdx_ports /enable_hdx_udp_ports /enable_real_time_transport /enable_ss_ports /masterpvsimage`

So this is my issue right now - I don't see why some of those components need to be excluded. For instance, "Citrix Personalization for App-V - VDA" - that's not even installed by default, correct? It doesn't appear to be included when I run through the install via GUI.

In fact, if I go in and modify the installation after the fact, to add a component, I see that component available for installation.

Yes , you are right. I don’t know if I have to exclude it, I just do it and it works.

My real issue is with Citrix documentation. I think this needs to be called out better to avoid confusion.

They could also develop a VDA installer command line utility.....................

Yeah, I saw his post in Citrix's forums about something similar, too.

So after much testing, I can confirm that there's no real need to include stuff like "Citrix WEM Agent", etc. in /exclude, as they are not installed by default. Same goes for not needing to add CPM WMI to /includeadditional, as it's installed by default. Which is what I expected.

Our Citrix rep did give me one reason why we'd want to keep them listed. In the event that Citrix changes one of those components from being installed default to not, or vice versa, by listing them out you ensure that you don't have to change your install string.

For that reason alone, I'll probably just relent and include all components in each like we have been, but at least I know it's not actually _required._

I've asked our Citrix rep to see if he can get more info on this, but have not heard back yet. I'll ask him again today when he joins our call.

It's a tool used for getting VDA registered with DaaS in connector-less environment. At the moment it only works for HDX Plus for Windows 365.

Is what I’m allowed to share atm

Yea <@UN1U1R69M>  is right. Here is what Citrix responded with.

Dear Ray,

 

Thanks very much for taking the time to provide your feedback about our Product Documentation site. We value Citrix customers, friends, and partners very much and always strive to provide the best we can.

 

Your comments:

 

Topic URL: <https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/install-command.html|https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/install-command.html>
Description (your comment): "What does this do? / Citrix Web Socket VDA Registration Tool"
 

This /includeadditional component is a bootstrapping tool for use with Microsoft Azure AD-joined VDAs, non domain-joined VDAs, and (particularly) Windows 365 Cloud personal computers (PCs) during VDA installation.

 

If you should have further questions or need more information, feel free to let me know.

Tbh, I don’t know. I will check it tomorrow. 

I just checked the script, seems to work. Nothing has changed. What reg value do you mean? I check the optimization with
`(Get-WmiObject -Namespace root\citrix\hdx -Class Citrix_VirtualChannel_Webrtc_Enum | Where-Object {$_.SessionID -eq $CitrixSessionID}) | Select-Object -ExpandProperty Component_VersionTypescript`

depends on what trading app, but might need a vgpu.

Trade Book loads multiple trades on screen in Citrix VDI there is delay for 3-5mins

Slow it increases the time from 1-5 so on

There’s a blog from <@UNBRPVD4G>’s team on virtualizing trader desktops, that’s a decent start 

This one is a good start:
<https://www.citrix.com/blogs/2022/09/22/how-to-give-financial-traders-the-citrix-hdx-performance-they-need/>

Thanks <@ULJH9ED53> for the start and also Thanks <@UNBRPVD4G> for sharing the blog post...

Well, as you can read in the blog, for this use case a GPU is definitely a must. And that's not "a Citrix" thing but also from an Application perspective

Did you check the system requirements of the app before installing/configuring it in an (assuming) VM?

Xenserver latest version and VDA 2203 without CU

<@ULJH9ED53> Yes I checked with customer but they said it's an in-house application

Some system requirements are mentioned here

<https://www.adigitalblogger.com/trading-platforms/nest-trader/|https://www.adigitalblogger.com/trading-platforms/nest-trader/>

How many screens are you driving? 
What are the specs of a workstation that would run this app now?

I think Moonshot is also used in trading apps - not really "virtualization" anymore though.

moonshot is being discontinued, though.  i think its within the next 2 years

Don't do traders without GPU. Seriously, you might as well just quit if you don't (assuming you're talking investment banks, and not, for example, energy traders)

Ok James... you did any project with these same concept?

In the middle of one, Rody is helping me :slightly_smiling_face: We have very high spec RPC machines with two GPUs and stacks of RAM and CPU, and they still run like shit

Also using 2-4 49" monitors and custom keyboards, etc., which always makes things more challenging

• Key: HKLM\Software\Citrix\Graphics\AdapterMerits
• Value: [DWORD] CitrixIDD = 3


I tried to enable this via registry key but it didnt enable CitrixIDD

Did you reconnect to the session when you applied the regvalue?

Can you share a screenshot of the registry?

Now when i login through citrix session that registry key is not showing

Just add the key, disconnect and reconnect

User did the testing today, after changing to IDD it tooks like Trading application is working fine.

UPGRADED VDA to 2209 and applied registry key CitrixIDD and EnableTimerPeriod

<@UNBRPVD4G> <@UL5TCSW3D> <@ULJH9ED53> Thanks for help :slightly_smiling_face:

Timer period is not needed for 2209 ( as stated in the article).

I still recommend to look at our recommendations regarding sizing and GPUs

<@UNBRPVD4G> till yesterday it was around 5-6min difference, now its 2mins

what i have observed from XenCenter Console Application is working fine without any delay

<@UNBRPVD4G> curious after reading this <https://www.citrix.com/blogs/2022/09/22/how-to-give-financial-traders-the-citrix-hdx-performance-they-need/>
Is the CitrixIDD recommendation a blanket recommendation even in cases with a support Nvidia GPU?  I see an older article that says it's just to be used for workarounds.  In really small scale testing I'm seeing pretty similar performance.  Curious is it's worth making a change as we're always looking for ways to improve performance/reliability

If you don't have any issues now I would not change it. One reason could be you want to be able to view protected content, for example an protected email.

Other than that, if you have no issues I would not change it now

No performance issues to note, just more reliability issues (single session vdas disconnecting and not reconnect able without a hard reboot).  At wits end so wondering if similarly performant if it would reduce interoperability issues 

Which VDA version are you running? With which nvidia version?

2203 CU1.1 VGPU 13.3
We've seen the issue since 1912 cu3 or so.  At that point rdping to the affected vm was enough to fix it, but at this point we have to restart to clear it.   I "should" open a case with support on this but it's uncommon enough that we can't make it occur on demand and users aren't willing to let us troubleshoot when it does occur

Hmm, can't say that the issue sounds familiar. Hope you can open a support case and upload a cdf trace. 

But to get it correctly, user is working and suddenly they get disconnected and can't reconnect? Any traces in event viewer?
What is your Hypervisor?

Vmware
Yea, working normally, normal load on host and guest, and randomly workspace goes black on all the screens, then disconnects a few seconds later.  They try to reconnect unsuccessfully.  In director I can see the session still shows as active on the VDA.  If I PSremote to the machine I can see an active console session but can't disconnect it.  If I or they try to rdp it just hangs.  Killing LogonUI does nothing for it.  Only fix thus far has been to reboot.  Citrix related Event logs are clean as are application / system event logs.
CDF Trace is a good idea, but didn't think too much about how to kick it off from commandline at the time of the issue, always too frantic to get it fixed (most of our users traders and don't have time to troubleshoot or move to a dr machine during market hours)

Hey, currently we implement Azure AD Kerberos for a native AVD environment. user only authenticate to Azure AD and there is no second authentication prompt when starting the desktop. in Citrix environment we used SAML and FAS in the past to accomplish that. Does someone know if Citrix is adopting the Azure AD Kerberos solution for Citrix Cloud?

Not sure it helps, but Ive had a similar issue with wmipriSE using high CPU on 2016 and 2019 hosts. 

Spend hours and hours trying to figure it out but in the end used WEM to control the process (cpu priority and clamping are available).  All fine. 

Yes I was thinking about WEM too, but we don't have that at the moment. Maybe we can do something similar using ControlUp automation.
But still, I'd like to find out what's causing this issue.

Do you have Xenapp Remote Command service started?

I think you will need Citrix Cloud license to be able to run VDA in the cloud.

Do you know if that would allow me to keep those VDAs registered to an on prem DDC?

Yes, you can run it from the cloud or from on prem. Talk to your Citrix rep to make sure.

Got it, thanks so much! Will reach out to my rep tomorrow to try to get more info/quotes tomorrow

<https://www.citrix.com/products/citrix-daas/feature-matrix.html>

this is the full error screenshot if it helps

if you have the machines set up to use the MCS personality ini file to get the list of DDCs for registration then that error might be saying the account you’re using doesn’t have rights to alter that file when doing a new deploy.

if you push the list via GPP reg key then it should be able to pick it up from there and register

There are a number of Citrix functions that handle this sort of stuff. There is content redirection, host-to-client redirection, and local app access, just to name a few. Not sure if any combo will fit your use case but worth looking at them. You can also use things like vPrefer to launch local instances from Workspace and the like.

Yes local app access is for desktop sessions only.
It also depends how the app launches Excel - if it's hard coded to open C:\Progr....\excel.exe there's not much you can do.  If it's calling an Excel file/link/url then the approaches James mentions above could work, you'll have to test it.

I've looked at the different solutions, but sadly i don't think any of them matches my scenario

Host to client redirection - seems to only support URL's for web browsers and not FTA's for applications?

Local app access - only available for desktop sessions

I haven't looked at vprefer though, i will see if it's usable in this scenario.

Look some more into Host to Client redirection options. There is a "less secure" registry setting that can be made at the Workstation level to allow it do FTAs for applications as I recall. Don't have the time to dig it up, and I could be totally off my rocker, but I remember testing it a while back for Teams or something.

This doesn't help you, more of brainstorming. I wonder if they perhaps didn't include the hotfix from the previous versions, or another undiscovered issues? This maybe extremely silly, what about trying the hotfix( not for 2203 though) just to rule that out? Not sure how much work that would be on you or if it's even an valuable option/that makes sense.

So the hotfix ...the .exe is numbered xx.2000.xx whereas the CU1 .exe is numbered xx.1000.xx, but they swear its included.

And I have raised this thought to our team. We may try both hotfix on one image and 2209 on another to see if its better on either.

We use ControlUp to keep restarting the service when it crashes 

Well 1.) How do you know the service crashes. We don't see any events 2.) Isn't that impactful for folks there in and working on the same host?

No one has complained.

The process kept stopping randomly or when some users log off, I opened a ticket with Citrix and got nowhere. We use a script action to detect if the WebSockets exe is running or not and just quickly restart if it’s not.

So we tried rolling back to 2203 base. No luck. We tried 2203 with the hotfix for the websocketservice.exe (We think thats a different issue), no luck. We still consistently have users unable to join meetings and it appears websocketagent.exe is missing for them. We are trying to see if we can connect a particular version of workspace paired with 2203 maybe. Our Win 10 20h2, single user desktop environment with 1912 CU5 is rock solid.

Another odd thing is we have rolled back to the VDA and Teams version before we started having issues and it doesn't seem to help. That makes me think either something else in our environment, or a recently enabled or changed feature flag in Azure.

We got a private hotfix for websocketservice.exe and websocketagent.exe that another customer had, with the EXACT same issues detailed, but it seems to have not helped. I really feel like this is a feature flag enabled on MSFTs side.

I wonder if that is going to be another known issue

I think so. Annoying as crap. The support level has been really bad too.

Can't get a response. We bumped it to Sev 2 weeks ago

Our TAM seems to indicate it's a larger lag in support turn around times

I have hit and miss with Support. But it's like that for most companies now. Expect for Nutanix and ControlUp. They are on point in my experiences.

So now we got a 3rd hotfix from Citrix, for WebsocketAgent and WebSocketService.exe lets hope this helps.

We opened a case for 2203 CU1 as well. OS is WServer 2016, upgrade to WServer 2022 is planned.

Do you see it actually crashing in the system app log?

Nope. We also did procdump to monitor it and no crash generated.

We might be see something similar, have to restart Teams several times a day on our RDS 2203
CU1 server 

We do see HDXRTCEngine log  a broken pipe error on the client side but that seems expected.

What about the server with the WebSocket, is there an crash log generated?

No not at all. So we know a user is busted if WebSocketAgent.exe is missing. We CAN restart WebSocketService.exe and it will respawn the WebSocketAgent for everyone, IF we can't get support we may roll back to 2112 since it still supports multi-window and blurring stuffs. But from what I see on reddit and this thread it isn't just us--which makes me feel better. We got a 2nd hotfix (assistant to the hotfix I guess), on the box now doing calls okay, but its so random.

The strange thing is, we've a lot of customers on WServer 2019, VDA 2203 CU1 and almost none of them reported this issue. This is the first one

So we have Trend Deep Security, and that's about it for security. We use McAfee proxy and we do have some random DNS issue with it right now, but don't think its related.

This customer is using Sophos AV. No Proxy.

I personally think that Microsoft has rolled some feature flag to a ring or something. But we've been having issues for about a month

OR maybe we have a very varied workspace version set out there. So we wonder if maybe a particular combo of workspace version and whatnot happens. Do you have a case open with Citrix <@U015MJK0XBM>? If you don't mind DM me the number and we'll ask our TAM to maybe compare? Up to you no pressure

I personally appreciate <@U01S9KKC9NX> and <@U015MJK0XBM> updates on this.

No problem Ray!

Also, we have a non persistent 1:1 desktop environment with 1912 CU5 without the issue happening. We have tried 2203 with and older version of teams with no luck either.

<@ULLH5JGFR> I feel like a beta tester in the last months... <@U01S9KKC9NX>, sure DM is out

No change in behavior with our 2nd private hotfix

So 2112 VDA not working either. So maybe just all multi-session VDAs affected by whatever this is

So update, we think this is an issue with BCR in Chrome.exe. So if a user opens Chrome.exe with BCR plugin enabled, it kills websocketagent.exe for ALL Users on that box. Edge doesn't do it, with same extension. We removed the extension via GPO for Chrome and seems to have resolved it, more testing needed.

<@U04131F7NN7> Can you share with me a guide or some quick steps to utilize controlup to restart that service? Our Organization has it but its barely used...i know tragic. One of my goals is to make it critical

It’s a script based action, <https://support.controlup.com/docs/script-based-actions-sba|https://support.controlup.com/docs/script-based-actions-sba>

Their support is good so they can probably point you in the right direction as well

<@U01S9KKC9NX> are you still stable after disabling Chrome BCR? We’re having all sorts of Teams issues too with crashing and calls not connecting. 

Ok, will test your findings in our environment and see if the behavior is the same.

So both BCR extensions (Edge and Chrome) use websocketagent.exe to handle it, but Some Chrome update 105.x and higher added a new SSL flag, and BCR extension does some .js injection and doesn't like the handshake or the flag..reproducable every time. Key is user has to have hit a BCR enabled site at some point I THINK. But after that EVERY time we open chrome.exe it kills websocketagent.exe for EVERYONE on the box.

So yeah we push that BCR extension via GPO so we just disabled it (Chrome only) no need to disable BCR policy

and it fixed it. We haven't had any complaints since.

They are supposedly adding it to the teams redirection page with all the current notes of issues / gotchas

<https://support.citrix.com/article/CTX253754/troubleshooting-hdx-optimization-for-microsoft-teams>

I’ll let you know if we have the same issue

Yeah it was incredibly frustrating we tried 2112, 2203 base, 2 hotfixes, and finally it wound up being BCR.

Wouldn’t be the first time BCR blew up something 

You remember that crash they had a few months ago 

No I don't. I do know that our team mostly uses Edge, so we never had the issue at least unless we were on a box and someone else happened to open Chrome

Is WebSocketAgent supposed to be running under each user account? On our server I only see it running under 1 user, wonder if it’s because it was killed for everyone on the box 

Well that means those other users are busted

yeah if they close and re-open teams itll work

But as soon as someone on the box opens chrome its game over again

it breaks BCR too, but we only have BCR on a small handful of non work related sites. YouTube, FoxNews, CNN, Amazon, Reddit, etc

Hmm I just tried YouTube on Chrome and it didn’t crash it 

We’re going to disable it anyway and see if it’s more stable 

If you have Chrome 105.x or higher then I can bet it will be

close chrome, and then when you reopen it it will break you

like if you are in a call, it will kill it immediately

or if you go to make a call afterwards you will get "connecting..."

Do you have to be on the call for it to trigger?

Nope, but its a good way to see it happen live