Testing out 2503 in my lab. Windows 11 was giving me issues from the previous image, so I deployed a new Windows 11 Insider build. Everything seems to be working great, except the WEM vuemuiagent doesn't seem to launch for any admins other than the one that installed it. I checked and it is set to run for administrator in the settings. I even put a shortcut in the run key, and it still doesn't seem to kick off. I can manually launch it in the session and all seems to be fine. On my Server 2025 image it seems to work fine.

This is driving me nuts... I've tried several ways but still getting the same error Unable to import GPO into Workspace Environment Management service - Invalid Zip file

So I have been rolling AppLocker out to more people with WEM. However parsing the WEM logs to get false positives to add to my config is a PITA. So with the help of CoPilot AI (not sponsored) I created a powershell script that can read WEM reports for much easier review. Test it out, and let me know what you think. https://www.jeffriechers.com/wiki/wem-applocker-report-parsing/

Anyone ever seen an issue where WEM Agents don't detect new Configuration Sets? Working on migrating some machines to new configuration sets and some pick up the new set no problem. Others require a full uninstall and reinstall of the WEM agent to get it to detect the new set. We are using OU assignments.

Hello, I have a strange issue where WEM takes some time on applying filters when users are launching their desktops. I found in WEM log in my user test session these lines where we see a 4 minutes delay. 112907 Event -> MainController.WaitForDesktopIfRequired() : Waiting for Desktop... 113319 Event -> MainController.ProcessInitialEnvironmentCleanup() : Initial Environment CleanUp -> Disabled We are on Citrix Daas with WEM Service and WEM Agent 2504.1.0.1. Some of you had these issue ? Thanks

Hello, I wrote a question on citrix community forum but nobody approved the topic. Is this new ?

How do you move WEM Cache to the persistent MCS Cache Disk? With a simple GPO? BISF ADMX Templates seem to work only for PVS. Sure, I could also create a custom personalization script.

I can’t recall - is there a way to backup/restore Assignments? I think this may only be backed up in the configuration set, and you can’t restore a subsection in the configuration set, as I recall. ?

Am i tripping, or are we still pending these two sections being added to the Modern UI?

If we manage Configuration Set assignments via DaaS Machine Catalogs, do we still need to add the Machines to the directory object via AD any longer?

Aside from checking that the WEM services are running on the Agent side, how do you do basic checks to ensure it's configured. Just writing a health check script and cannot locate anything in the registry like UPM and FSLogix that will help me determine its configuration state.

Our transition from Server 2019 to Server 2022 published apps brought an odd artifact. VUEMUIAgent.exe puts this little black box on the corner of the screen with the published app sessions. Killing the process obviously kills the box, but any ideas why it is appearing?

Using WEM Applications/Start Menu configuration, can WEM Service be used to manage the Start Menu in its entirety? If we wanted only 3 folders with apps, can WEM do that? Or does WEM simply add the 3 folders to the existing start menu? Thanks

how are people getting rid of the system apps in win11/2025? Things like Terminal/Settings/Windows Security from the start menu? Been racking my skull trying to find those out

WEM - File Type Associations - HTTP/HTTPS for ServerFTA. Has anyone been able to get this to work since MSEDGE became a thing? Currently we use Default Association files and that works correctly. But have had MSEdge still taking over occassionaly. When we use WEM to attempt to set the default association, Windows throws an error and resets it back to MSEdge.

is it possible to do a file copy action only if the source is newer than the target with a condition? or is that better with something like running robocopy as an external command?

Can someone tell me what Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\WEM\Agent\VDAIntegrated is for? It seems by just reading this it should be set to 1 for enabled but WEM seems to work on VDAs when that is set to 0

Is there a methodology to manage assignments to multiple groups/users without filters/conditions? For example, i want to publish Notepad ++ to a Global Group and 3 named users and publish Putty to 4 Global Groups and 7 named users. Customer is coming from RES/Ivanti and they had this capability with them (Access Control/Identity). I can only see building an AD GG for each app.

Hello @Anthony Shi @Jian Song Why is it if we go to the WEM console from the URL https://xenapp.cloud.com/manage/webwem we do not see the download link for the utilities. But if we go via https://wem-production-ui.wem.cloud.com/ we do??

WEM - Web Console Timeout Hello ! Is there anyone in the community who knows if it's possible to configure a session timeout in the WEM Web admin console ? I cannot find how to configure this. Thank you all !

I updated my WEM starter templates so that they will work properly with WEM Service. I had some adml files without matching admx files that would cause the zip import to fail. Let me know what you think. https://docs.jeffriechers.com/#Citrix/WEM/best-practices-start-environments-strong-with-wem-or-gpo/

Two questions. 1. Is it possible to set the domain name in the WEM Web Console? I've tried the same approach as Studio Web and Director Web but not luck so far. 2. I want to change the Windows Svc account used for the infrastructure services. I assume i would run the "upgrade database" utility to set "Use Windows Auth" under database security and then run the Infrastructure Service console to set the same Windows Svc account under "Infrastructure service account". I don't see much online on changing this account.

having a hard time with getting app security rules to apply. I know its kind bad to do powershell blocking but im trying it anyways. Problem is I can see in the applocker event log that there was a policy applied, but its not being effective on the user I assigned the app security rule too. I have it set to enforce and merge, blocking the hash for powershell. Where eelse can i look for why this isnt working? Or is there something else I need to enable?

Hello everyone, I'm experiencing an issue with a "VIP" (Big-IP F5) for load balancing the WEM infrastructure service (WEM 2503), and I wanted to know if any of you have encountered this behavior with an F5 VIP. > • When I configure the Citrix WEM agents directly to this VIP, arrow right the agents do not appear in the WEM administration console. > • However, if I configure the WEM agents to point to one of the two WEM brokers (FQDN), the agents correctly ✅ show up in the WEM administration console. > • All port are open (as the second test shows) I've opened a case with Citrix support, but the network traces and logs only show "*Timeout*" errors. Unfortunately, our network teams are quite busy, and I'm having difficulty obtaining more precise network logs or traces directly from the BigIP F5 VIP. The F5 VIP configuration for WEM brokers is fairly standard and seems to comply with Citrix WEM documentation specifications; I don't understand where the problem might be coming from. Are any of you using BigIP F5 devices for load balancing WEM brokers service ? Thank you in advance for your help.

Any tips and tricks on how to troubleshoot icons missing on the WEM My Applications menu, but appear in the regular Start Menu?

this is a silly one... trying to run vuemappcmd with an exe that takes additional command line parameters.. so application is ...vuemappcmd.exe command line is: %programfiles(x86)%\someapp.exe --additionalcommand parameter I cant get it to run, just logs me off. Do I need quotes or some combination? FWIW I am trying to run Edge with the --disablefeatures=RenderDocument

Is there a log that shows when WEM optimization kicks in? I cant find one and need to test and see it happen

Does this mean only optimize if the VDA has 4gb of virtual memory assigned to the machine? Or does this mean only optimize if there is 4gbs of memory left on the machine after usage?

Anyone using Group Policy Settings Actions in WEM? Is it worth a try or a no go?