World of EUC

I've had luck with moving the master machine account to a workgroup. Reset the local admin account password to something easily remembered. shut the master down and clone it. create new VM from clone, boot it up, rename the machine account. add it to AD. go into aduc and reset the machine account for the old master. power it back on, rejoin to AD and reset the local admin pw. recalling this the best i can from memory :slightly_smiling_face:

thanks - i don't think its needed - <https://techcommunity.microsoft.com/t5/windows-blog-archive/the-machine-sid-duplication-myth-and-why-sysprep-matters/ba-p/723859>

As long as the computer name is renamed and added back to the domain.

It should go back 90 days and 1 year upon request but it depends on what data you ar welooking at some is only available for shorter preiods

image.png

Asking before searching is always stupid, I think I already found it myself. Will test out.

It’s not stupid man. We ask for help but continue to search nothing stupid about that. 

Sadly this didn't work out. The users still have to connect the 3D Space Mouse manually each day.

So it's a client and not a server setting?

From where is the second screenshot? I don't recognize it.

Inside of the Desktop Veiwer
old screenshot but from an old blog I did way back.

Thank you, so it's a client setting, and not a server setting. That maybe explains my oversight. We'll test that, thank you!

I have more tricks I can send as well if needed. I have a whole blog I can send.

Well yes, luckily the devices work flawless, they just must connect them every day.

Okay, that is good to hear. I don't work with them as much. I use to work in healthcare many years ago, and they had like 4-5 usb devices on each thin client. It was hard lol

this will help for anyone that needs it. Old but still applies in most cases.
<https://citrixadvice.blogspot.com/search/label/CVAD%20USB%20guidance>

You can use either. CPM supports both for the path variables.

Also in the UPM studio policy the samaccount is an example given that most use at times I see

Usrclass.dat represents HKEY_CURRENT_USER\Software\Classes of the user. Sure. You can delete it. A new login will generate a new one.

Just curious, why do you want to delete it? I would tread cautiously before deleting it from existing user profiles on Win10/Win11, as some Windows Store apps throw data in there.

I would leave it. If you delete the usrclass.dat file from system, the Start button, search and desktop options like calendar, sound button will not work, but if you restart the computer the usrclass.dat file will be automatically restored and or created. If you want to test back it up first. The user last.dat file represents this [https://learn.microsoft.com/en-us/windows/win32/sysinfo/registry-virtualization](https://learn.microsoft.com/en-us/windows/win32/sysinfo/registry-virtualization)

<@ULLH5JGFR> @ruben - Sorry for delay in reply- Temp profiles are getting in our infra though permission looks good,, Saw in one of the article that deleting Usrclass.dat will fix the issue.. However not going with that

By all means test it and see if it will help you. I would test it on a non production account.

Sure <@ULLH5JGFR>.. just for ref - <https://support.citrix.com/article/CTX128255/user-profile-manager-error-windows-cannot-access-the-specified-device-path-or-file>

If you are roaming this, usrclass.dat and delete it, just remember it will be reset for the user. AKA Startmenu, FTA things like that. It may fix your issues indeed. Just let the user know this will happen.  "Profile Management 1909 and newer automatically include **usrclass.dat*** in the **Files to Synchronize**. UPM 2103 and newer add it for Windows 10 but not for RDSH. If added to the exclusion list, then Profile Management 1909 and newer automatically removes it from the exclusion list, usrclass.dat* contains file type associations. For roaming file type associations, you can export/import **HKCU\SOFTWARE\Classes\Applications"** <https://docs.citrix.com/en-us/profile-management/current-release/profile-management-best-practices.html#start-menu-roaming>

AppData\Local\Microsoft\Outlook is the default path, right? How does Citrix "force" that? Maybe you can give us more context on that :slightly_smiling_face:

It is the default path. We redirect to a mapped drive via Group Policy setting. (against best practices, I know, but it's better than roaming the OST file which causes login issues).

Citrix UPM overrides the GPO settings and forces the OST back to the default location.

This happened with 2203 CU2 for sure. I think it also was being done in a CR release, but I don't know which off-hand. We have a hotfix for 2203 CU2.

Per TAM/Citrix Support there is a 1912 CU7 private fix in the works, but not available yet.

I have a hotfix in hand for this issue now, but have not tested internally yet.

As far as i can remember %localappdata%\microsoft\outlook has always been the OST default path since MS split up the appdata paths.  I believe you can force it by GPO to a different spot if you need to.

Ok - we were missing the upm detail.. as a short fix you might try poutying a wrapper script around outlook to change the registry right before launching outlook, and long term I’d ask Citrix for a back ported fix.

This is interesting. I have a client that uses 2022 now with MCS. I will find out what they use and get back to you

very interesting. most of ours are still 2019 so haven't had to focus on 2022 Servers for VDA yet. Strange to me that it wouldn't be.

David please start replying in threads. Each comment someone post, open it up and reply Inside the thread. 

Not sure what consequences there could be. It either activates or it doesn't. Testing it now.

Test Server 2022 MCS machine is ADBA activated with no obvious issues.

That's already set :slightly_smiling_face:
Oh, and btw. It's Server 2019

Do you get the same behaviour if you turn UPM off?

maybe this?
<https://support.citrix.com/article/CTX212905>

or maybe this reg key:
<https://community.spiceworks.com/topic/2285411-server2019-rds-hundreds-of-firewall-rules-per-user-per-session>
<https://support.microsoft.com/en-gb/topic/march-26-2019-kb4490481-os-build-17763-402-c323e5c1-d524-dbdb-04a0-c3b5c8c8f2fd>

There was a hotfix that addressed that I believe

and this happens for new profiles aswell :disappointed:

yes it is the second link, but you need the key to enable this hotfix

hmm then these fixes wont help, maybe start procmon and check the output if there is something helpful

<@US423Q1PU> that might be the go-to. I've just removed the values, stated in your first article, and rdp'ed to the vda - no change :disappointed: procmon it is.

Had a corrupt ImmersiveControlPanel on WS2016 once.
the following commands fixed it:
1. DISM /online/cleanup-image/RestoreHealth
2. sfc /scannow
seems like a random answer, but was the solution :rolling_on_the_floor_laughing:

<@U015MJK0XBM> pretty random :slightly_smiling_face: it's a MDT created image, from the other day. Can't say it isn't going to solve it, but I highly doubt it :smile:

<@U015MJK0XBM>
"Have you run sfc /scannow?"

The MS forum equivalent of "have you tried turning it off and on again?"

Registry Bloat.pdf

This is a KB I wrote for myself on everywhere I have found registry bloat causing issues like high CPU usage &amp; black screen on logon.

<@U01NDQN63GX> as I said, seems like random answer :rolling_on_the_floor_laughing: actually it made a difference in that specific case

You could reach out to your SE or TAM to get it enabled specifically for your Dev tenant if you have any? We just did that for our dev tenant and got it enabled yesterday. You would also need to submit a request via Podio to get that enabled… I am not certain yet on the GA date, but probably your SE or TAM  might have more insight on that.

it’s been on for every new client I’ve been working with, haven’t had to request it. There’s still issues with it that are being worked on before it will go GA, like Direct Workload Connection

Perhaps the AD group is actually a Distribution List group? I've had my AD team do that to me over the years a few times.

Yea looks to be some AD Issue.. Can you let me know what may be cause from AD end

Is synchronization completing to all DCs? When you change an AD group membership, that change needs to be replicated to all DCs. Check the synchronization status

Ok James, will check the replication Part

Outlook Search greyed out since Server2019

Hi, anyone have a solution for detailed searchbar is greyed out in outlook? Problem starts with server2019 and persist at 2022. user or machine based do not make a difference. Searchbar is useable when search service is restarted after user logs in
Slack Conversation

You can add, it will get used for new machines only 

Thank you James! I will have to recreate the catalog then.

If you need to distribute machines you could add more and then delete old? But same end result really :grimacing: 

I would use this.
<https://support.citrix.com/article/CTX235347/citrix-profile-management-vhdxbased-outlook-cache-and-outlook-search-index-on-a-user-basis>

Here is the Current release and LTSR docs
<https://docs.citrix.com/en-us/profile-management/current-release/configure/enable-native-outlook-search-experience.html>

<https://docs.citrix.com/en-us/profile-management/2203-ltsr/configure/enable-native-outlook-search-experience.html>

Also if using Multi-Session  Server 2019
Which the docs I sent above list this

<https://support.citrix.com/article/CTX270433/outlook-search-indexing-fails-on-windows-server-2019-vda>

Outlook container is what you are looking for. Puts OST and search index in their own containers.

Just remember if you want Microsoft support you should be using FSLogix. 

But if you need to call Microsoft support...:grimacing:

&lt;iframe src="<https://giphy.com/embed/H7qBffHEvECeH8Jgbc>" width="480" height="343" frameBorder="0" class="giphy-embed" allowFullScreen&gt;&lt;/iframe&gt;&lt;p&gt;&lt;a href="<https://giphy.com/gifs/80s-retro-destruction-H7qBffHEvECeH8Jgbc>"&gt;via GIPHY&lt;/a&gt;&lt;/p&gt;

I respectfully disagree with Ray about using Citrix Roaming Search on Windows Server 2019. I have much better luck with Microsoft per user search indexing on Server 2019 and roaming in the Microsoft Search Index in the Profile container (AppData\Roaming\Microsoft\Search) Which doesn't get redirected even when AppData\Roaming is redirected.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Search] "EnablePerUserCatalog"=dword

Should either not be set at all and uses the default of 1, or explicitly set to 1 to enable per user search on 2019 servers.

No problem man, I totally understand if you had had good luck with what you have. It's good to know though that you have better experience with this. I keep this in mind though for troubleshooting. Thanks for the feedback Dennis.

You can drag and drop applications in Studio to the new application group.

right, but that would move it...i need to copy it...Rob's right.  i need to create a script. thx

You should get this sort of Pop-Up message.

Same thing appears to work in the Cloud web studio:

Apparently the gif's don't relay properly between Slack &amp; Discord :confused:

Hi Team,

We are using Citrix Cloud with OKTA as MFA and FAS in place. .Issue is FAS is not working as expected. Users are required to enter second time password. Any suggestion would be appreciated
Error: Incorrect user name or password

Have tried with below troubleshooting but no luck
- Certificate Chaain looks good
- FAS Console looks green
- Port 80 is open
- GPO in place for Controller, VDA, and FAS Server
- Able to see registry key pointing to correct FAS server
-Tried with creating few registry entries
-

<@ULLH5JGFR>, any insight would be helpful

Hi Ray, Thank you for the your response. It is from DC

Google James Kindo GitHub repo. He has what you need for this

<https://github.com/JamesKindon/Citrix|https://github.com/JamesKindon/Citrix>

<@ULLH5JGFR> Thanks for pointing this out. I have my own scripts for this, but these look more complete and more generic than what I have. I'll have to keep this location in mind if I need more scripts.

The automate config tool is only for the latest I thought 2303?

Yes you need to be running the last 2 release on the destination Site. Which WebStudio has the orchestration APIs.
<https://docs.citrix.com/en-us/tech-zone/learn/poc-guides/citrix-automated-configuration-on-premises.html>

Yeah. I guess what I'm trying to say is you can go from previous version to versions that have the web studio for the on-premise stuff. Unless you know something I dont

Ahh now I get you. I was thinking source you were talking destination 

so the environment is 1912 CU2 so i don't think it will work. hopefully those scripts are easy to use.  I will test out now in my lab.

scripts are great.  i just wish it would let select the apps the application groups and apps  i want to export.  it exports everything and i had to modify the app group xml file.  i can't modify the applicationlist xml file b/c there is a lot embeded stuff in there.    thats the only downside. otherwise, its really useful.

Did you recently apply a windows cumulative update? RDP session do same? I think I saw something this was a bug. 

<https://worldofeuc.slack.com/archives/CK6TCV3JN/p1675687303836599|https://worldofeuc.slack.com/archives/CK6TCV3JN/p1675687303836599>

nvm, i think its related to the stas....will keep everyone posted.

[thread]: Is the app actually enabled in Studio?

In the Certificate Server (Enterprise PK), can see this error .. Any suggestions ?

was it the old iteration of Scout -&gt; CIS/TAAS?

I vaguely remember that being part of the Project Accellerator toolkit that sadly no longer exists.

I wish project accelerator would come back. 