World of EUC

<https://carlwebster.com/citrix-virtual-apps-and-desktops-documentation-script-v3-40/>

K100? That is ancient. Kepler cards died off a long time ago.   That was last architecture before Nvidia started the software subscription model for anything newer.

Hi Scott, thanks for your feedback...you are right they are but client still wants to use them.

aw, i found my answer from nvidia...i have to update both the windows drivers and ESX drivers

image.png

Hi Team, Authentication is consuming more time.. I have checked and can see that respective subnet is in place for AD Site.. Any suggestion would be appreciated.

Had a play with MCS MAK activation on VAD 2303. Doesn't work for me. Using a non persistent Windows 11 catalog. The template is activated with a MAK key. Activation status shows this.

This stinks, I was looking forward to this

Yeah, not sure if I am doing something wrong. The documentation just says the same vague thing twice saying to set a registry key to 1.  Nothing about MAK activation on <@UM531NUFJ> documentation yet! Will try later with a Server 2019 catalog to see if I have more luck.

This is the total sum of doco about using MAK activation:

Testing with a server 2019 catalog it seems to work. Only added one machine so far though. Will add more &amp; do some updates. See how it goes.

Can confirm this works fine with server 2019 VDAs. The template &amp; each provisioned VM consume a MAK, but reboots and image updates don't. Still no joy with Windows 11 VMs though :confused:

The documentation is as clear as mud:
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/machine-catalogs-create.html>

I'm not sure you _have to,_ but nearly everytime I've dealt with citrix support they've made me provide both DDC and VDA CDF traces so I just capture both reflexively to try to avoid the Wally Reflector

idk we don't use cloud, but it's pretty straightforward to try it out so I'd just say give it a shot and see if the command exists/can target that

Hi guys, has anyone run into an issue where from time to time, a user Caps lock is stuck until they reboot their VDI? Workspace app version 23.2 and vda version 2012.

Run sysprep and shutdown the machine. Clone the machine and join the new machine/machines to the domain

Hi Kasper so i do not need to remove from domain and reset wsus id before?

yes sysprep rearms the windows machine with a new Sid.

This is very old-school cloning, back from when we were still doing physical terminal servers :D

When I saw this in my env there were 2 main culprits
1) a login script in power shell.  Took a few seconds to kick off and load the profile and there was unintended timeout for a command 
2 ) using a gpo that forced synchronous processing of all gpos before the desktop was available

There are many options to consider when trying to control cost and performance.  Have you see these from <@UKJTJD4KA>
<https://jkindon.com/the-evolution-of-citrix-machine-creation-services-with-microsoft-azure/>

<https://jkindon.com/citrix-mcs-and-azure-ephemeral-disks/>

<https://jkindon.com/citrix-mcs-and-azure-shared-image-gallery/>

Put some endpoint MFA on the servers? Use a PIM tool like CyberArk? Restrict the IP ranges that can connect? Use FSLogix to hide the consoles from everyone except members of a certain group? Use AppLocker to restrict execution to certain groups?

All good ideas, thank you! There will be IP restrictions in place but I'll look into all the other options as extras!

Turns out it was another admin that enabled Removable Disk controls in IWC...  :coffee: Anyone?

Got a question about Quick Access / Recent Items. I can't get them to work in a Citrix Published Applications configuration. They work for the same user via RDP or Published Desktop, but not when using Published Applicaitons.
• I have searched the web for ideas and have tried many things, but like I said above, it's working properly in RDP and Published Desktops, so I think it's configured correctly over all.
• I added Recent to the user registry as found on the web.
• I enabled Shellbridge capability just in case.
• I have looked through ProcMon traces for successful vs unsuccessful.
• I used the CAX tool to enable and disable all Citrix Flags. 
• I have reviewed all Citrix and Group Policy settings, though it seems if it were a policy it would never work.
• I attempted to ask ChatGPT, but it didn't give any response...seems broken at the moment and could still be down from the security issues. 
2019 OS
2203 CU2 VDA

I feel like I am missing some basic configuration item, but I can't find it.

Any ideas?   We do have a ticket open with Citrix for several weeks that has made very little progress.

hey everyone, what happens when the azure resource group exceeds 240 VDAs?  does it automatically create a new resource group?  Do you get a warning somewhere?

I don’t think so because they don’t do standalone PVS anymore.

Interesting... is that for on-prem customers too, Jarian? cheers

I think standalone PVS was abandoned many many moons ago...

interesting, I am getting the same error when trying this.  I have previously been able to create a machine catalog in Azure using this image.  Maybe something is broken....

it was rights issue with the AD account adding the machines to the domain.  I wish citrix would put more details in their error messages...

<@UM2G5G8E5> Was there a specific permission that you were missing?  We have not figured out my issue yet.  MCS works if existing machine records are used but MCS fails if creating new records.  I am using the same account in the mcs process that I am manually creating the machine records in ADUC

My problem ended up being something on the Citrix backend.  Engineers fixed something while i was on vacation.  Fun times.

With Teams VDI?   We saw issues with the Intel Graphics driver v 31.0.101.3358 - loading the newer one from Intel's site seemed to help althouhg only 1 or 2 users with g9s here

<https://support.citrix.com/article/CTX474990/hdx-microsoft-teams-optimization-crash-or-video-freeze-on-newer-intelbased-clients>

<https://www.intel.com/content/www/us/en/download/726609/intel-arc-iris-xe-graphics-whql-windows.html>

thanks, problems with the webex app too so I think it might be drivers

Only if they were in the same resource location and that is where you have the vda. 

Thanks Rob, but after opening ports up it seems to be working for me

Ideally you’d have two resource locations and each would have two cloud connectors in that scenario 

<@UM04QUUSJ>  - GM Rob, it doesn't say here that you need to be in the same resource location - <https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/manage-deployment/vda-registration.html#load-balancing|VDA registration | Citrix Virtual Apps and Desktops 7 2303>.  thanks

we tried but we were getting several blue screens a day.  we've had a ticket spinning its wheels w/ support since November so we're back on 1912

son of a bitch you're right. disregard and i'm going to go get a beer and call it a week :slightly_smiling_face:

yes, on Server 2022 with MCS (OnPrem) and Win 10 22h2 persistent (DaaS) :crossed_fingers: 

Look at this guy over here reading agreements... :smile:

I cannot wait for Web Studio to be GA and not preview. It needs some work, especially around the web proxy, and needs multi-site support, but I am so glad Citrix is putting the investment into it.

Image from iOS.jpg

Not sure what you mean workspace using a <http://cloud.com|cloud.com> url so Citrix manages the certificates. Are you testing the custom (vanity) url feature?

It doesn’t matter as long as you have proper permissions.

Curious how it works when using a thinclient (article mentions the file has to be present on the endpoint as well)

We're using IGEL thin clients with a newer OS and VDA 2203 and it works. make sure your Teams is HDX optimized

I haven't got to experience this yet. 
But here is a better doc. That blog post is good for it's time but lacks now. 
<https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/opt-ms-teams.html#background-blurring-and-background-effects|https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/multimedia/opt-ms-teams.html#background-blurring-and-background-effects>

Thanks Ray, i have a different issue now where the custom backgrounds are present but i cant select them.......and the regkeys in that doc dont work when i try to hardset the file......thinking while i type what i havent factored is the pixel requirements for the background files

Hi,
 I don't know from which Os version you start and go.
For storefront, I think remove the iis role and reinstall it and same for Citrix storefront is not bad. 
Maybe it is useless but talking about Microsoft.. effort is limited to be confortable.
For provisioning I don't think there is anything to plan . But update immediately Citrix provisioning has to be done I think. Taking in consideration all recommendation for new version installation

• you may want to take this into consideration: Upgrading the operating system version on a server running StoreFront is not supported. Citrix recommends that you install StoreFront on a new installation of the operating system.


Never tried SES, but I would take a look at this article:
<https://knowledge.broadcom.com/external/article/155835/deploy-endpoint-protection-clients-in-no.html>

noticed this article 1min after posting, just testing it ;)

ok first try without success:
Install SEP with parameter /IMAGE, set registry keys from link above: New device at every boot.
Now i´ll try normal installation without /IMAGE. <@USCA04SN9> do you purge Hardware ID or sth similar in base image?

correcting myself:
If I follow exactly this articles and the links in this articles the summary is:
Install agent via setup.exe /IMAGE
Change NPVDI Regkey to 1

Thats exactly what i´ve done and it does not work..

I've never installed SES - I just found the article :slightly_smiling_face:

but I may have found how to make the image ready for cloning:

rem ### Check If Computer Is Running A 32 Bit or 64 Bit Operating System:
rem ### <http://support.microsoft.com/kb/556009>
rem ###
rem ### registry commands must use "/reg:64" switch on 64-bit OS
rem ### this switch is supported in Server 2008 &amp; Win7,
rem ### but a hotfix is necessary for older 64-bit systems:
rem ### <http://support.microsoft.com/kb/948698>
set reg64switch=
reg query "HKLM\Hardware\Description\System\CentralProcessor\0" | find "x86"
if errorlevel 1 set reg64switch=/reg:64
rem ### registry location for SEP HardwareID--this is the same on 32- or 64-bit systems
set hwidkey="HKLM\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC\SYLINK\SyLink"
rem ### delete any current SEP hardware identifiers, various possible locations
rem ### ref: How to prepare SEP 12.1 client for cloning: <http://www.symantec.com/docs/HOWTO54706|www.symantec.com/docs/HOWTO54706>
for /d %%d in (
"C:\Program Files\Common Files\Symantec Shared\HWID"
"C:\Documents and Settings\All Users\Application Data\Symantec\Symantec Endpoint Protection\PersistedData"
"C:\ProgramData\Symantec\Symantec Endpoint Protection\PersistedData"
"C:\Windows\Temp"
) do del /f "%%~d\sephwid.xml"
for /d %%d in (
"C:\Documents and Settings\*"
"C:\Users\*"
) do (
del /f "%%~d\Local Settings\Temp\sephwid.xml"
del /f "%%~d\Local Settings\Temp\communicator.dat"
)

reg delete %hwidkey% /v ForceHardwareKey /f %reg64switch%
reg delete %hwidkey% /v HardwareID /f %reg64switch%
reg delete %hwidkey% /v HostGUID /f %reg64switch%
rem ### set HardwareID prefix
rem ### this can be any 20-digit hexadecimal string (using digits 0-9,A-F) in all CAPS
set myprefix=00000000000000000000
rem ### get first MAC address from "getmac" command
for /f "tokens=1" %%a in ('"getmac /nh"') do (
set addr=%%a
goto :endfor
)
:endfor
rem ### if "getmac" fails, try exchanging the line below into the for loop above
rem ### for /f "tokens=12" %%a in ('"ipconfig /all | find "Physical""') do (
rem ### remove hyphens from MAC addr
set addr=%addr:-=%
rem ### for HardwareID, concatenate MAC addr to end of custom prefix
rem ### hwid must be a 32-digit hexadecimal string (using digits 0-9,A-F)
set hwid=%myprefix%%addr%
rem ### Set SEP HardwareID in registry
reg add %hwidkey% /v HardwareID /d %hwid% /f %reg64switch%
rem ### start SEP services
sc start SepMasterService
sc start SmcService

yeah, thanks. However the part of removing the hardware ID should be done by the /IMAGE parameter, according to:
<https://knowledge.broadcom.com/external/article/180552/prepare-endpoint-protection-clients-for.html>
and
<https://knowledge.broadcom.com/external/article/210834>

Will open a case.. lets see whats coming out

Alright. Worth a shot :slightly_smiling_face:

Hi, have a look at: <https://knowledge.broadcom.com/external/article/155238/about-the-symantec-virtual-image-excepti.html>

There should be a tool called vietool.exe (or vietool64.exe)