Using WEM Applications/Start Menu configuration, can WEM Service be used to manage the Start Menu in its entirety? If we wanted only 3 folders with apps, can WEM do that? Or does WEM simply add the 3 folders to the existing start menu? Thanks

how are people getting rid of the system apps in win11/2025? Things like Terminal/Settings/Windows Security from the start menu? Been racking my skull trying to find those out

WEM - File Type Associations - HTTP/HTTPS for ServerFTA. Has anyone been able to get this to work since MSEDGE became a thing? Currently we use Default Association files and that works correctly. But have had MSEdge still taking over occassionaly. When we use WEM to attempt to set the default association, Windows throws an error and resets it back to MSEdge.

is it possible to do a file copy action only if the source is newer than the target with a condition? or is that better with something like running robocopy as an external command?

Can someone tell me what Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\WEM\Agent\VDAIntegrated is for? It seems by just reading this it should be set to 1 for enabled but WEM seems to work on VDAs when that is set to 0

Is there a methodology to manage assignments to multiple groups/users without filters/conditions? For example, i want to publish Notepad ++ to a Global Group and 3 named users and publish Putty to 4 Global Groups and 7 named users. Customer is coming from RES/Ivanti and they had this capability with them (Access Control/Identity). I can only see building an AD GG for each app.

Hello @Anthony Shi @Jian Song Why is it if we go to the WEM console from the URL https://xenapp.cloud.com/manage/webwem we do not see the download link for the utilities. But if we go via https://wem-production-ui.wem.cloud.com/ we do??

WEM - Web Console Timeout Hello ! Is there anyone in the community who knows if it's possible to configure a session timeout in the WEM Web admin console ? I cannot find how to configure this. Thank you all !

I updated my WEM starter templates so that they will work properly with WEM Service. I had some adml files without matching admx files that would cause the zip import to fail. Let me know what you think. https://docs.jeffriechers.com/#Citrix/WEM/best-practices-start-environments-strong-with-wem-or-gpo/

Two questions. 1. Is it possible to set the domain name in the WEM Web Console? I've tried the same approach as Studio Web and Director Web but not luck so far. 2. I want to change the Windows Svc account used for the infrastructure services. I assume i would run the "upgrade database" utility to set "Use Windows Auth" under database security and then run the Infrastructure Service console to set the same Windows Svc account under "Infrastructure service account". I don't see much online on changing this account.

having a hard time with getting app security rules to apply. I know its kind bad to do powershell blocking but im trying it anyways. Problem is I can see in the applocker event log that there was a policy applied, but its not being effective on the user I assigned the app security rule too. I have it set to enforce and merge, blocking the hash for powershell. Where eelse can i look for why this isnt working? Or is there something else I need to enable?

Hello everyone, I'm experiencing an issue with a "VIP" (Big-IP F5) for load balancing the WEM infrastructure service (WEM 2503), and I wanted to know if any of you have encountered this behavior with an F5 VIP. > • When I configure the Citrix WEM agents directly to this VIP, arrow right the agents do not appear in the WEM administration console. > • However, if I configure the WEM agents to point to one of the two WEM brokers (FQDN), the agents correctly ✅ show up in the WEM administration console. > • All port are open (as the second test shows) I've opened a case with Citrix support, but the network traces and logs only show "*Timeout*" errors. Unfortunately, our network teams are quite busy, and I'm having difficulty obtaining more precise network logs or traces directly from the BigIP F5 VIP. The F5 VIP configuration for WEM brokers is fairly standard and seems to comply with Citrix WEM documentation specifications; I don't understand where the problem might be coming from. Are any of you using BigIP F5 devices for load balancing WEM brokers service ? Thank you in advance for your help.

Any tips and tricks on how to troubleshoot icons missing on the WEM My Applications menu, but appear in the regular Start Menu?

this is a silly one... trying to run vuemappcmd with an exe that takes additional command line parameters.. so application is ...vuemappcmd.exe command line is: %programfiles(x86)%\someapp.exe --additionalcommand parameter I cant get it to run, just logs me off. Do I need quotes or some combination? FWIW I am trying to run Edge with the --disablefeatures=RenderDocument

Is there a log that shows when WEM optimization kicks in? I cant find one and need to test and see it happen

Does this mean only optimize if the VDA has 4gb of virtual memory assigned to the machine? Or does this mean only optimize if there is 4gbs of memory left on the machine after usage?

Anyone using Group Policy Settings Actions in WEM? Is it worth a try or a no go?

Having a tough time with WEM since VDA 2507, specifically with user profiles. UPM does not launch. I created group policy to enable WEM in cloud mode since "for reasons" the VDA now includes a gimped and out of date version you can't not install, and WEM will launch, but no profiles. Updated WEM to latest release 2508.1 and still nothing. Maybe one time out of 10 the VDI will open and the user profile will be there, but i'm looking for every time. Roll back to VDA 2402 and ALL my issues go away. I want to move forward, but the other super annoying thing is WEM does not create any logs for UPM. The Log parser has nothing, the Actions Viewer has nothing, as it does not list UPM actions. Not a single thing to point me in the right direction. UPM does not even log anything.

Maybe similar to @Paul Brown I'm setting up a brand new environment for a customer: • Windows Server 2025 • Golden Image through MDT for MCS • Citrix VDA 2507 • WEM Agent 2507 I install WEM with

'/quiet Cloud=0 InfrastructureServer=citrix-wem.customer.loc'

AND have set the regkey via GPO _(I set both for troubleshooting. The current 2016 env with WEM 2305 has only the GPO value set)_:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Norskale\Agent Host]
"AllowWEMUseCvadConnectors"=dword:00000000
"BrokerSvcName"="citrix-wem.customer.loc"

And regardless of what I do, the WEM agent always launches in basic/stand-alone mode and never connects to the broker/db and therefore doesn't do it's job. This is one of my last blockers and I'm clueless. This feels like a bug to me at the moment.

Wondering if anyone has the same issue when trying to import a custom Citrix Optimizer template for execution by WEM. The WEM web console throws an error when importing, "Failed to add template "customname.xml"", whereas the WEM Administration Console on pressing Save says "Schema Validation Failed". I've tried this with a custom template with a single modification to one of the pre-built WEM templates, using the WEM Optimizer GUI to ensure the formatting is ok. On-premises WEM versions 2402 and 2503.

I have a requirement to deliver printer mappings for users according to their Client IP address. This will start with about 80 different subnets, but may grow in the future. I am accomplishing the requirement by creating print actions and assigning them to "Assignment groups". My assignment groups contain the printer actions and are assigned to 'Domain Users" with a Filter based upon client IP. What scares me about this setup is the assignment and filter. What it means is WEM will evaluate hundreds of print actions for a given user because all users are in Domain Users and eventually map a couple printers based upon client IP. Is there the potential I will cause WEM to choke evaluating actions when a user is logging on or refreshing actions? Is there a better way you go about a scenario like this?

Has anyone got an effective way to export WEM config to csv that shows what actions / apps / settings etc....as well as were they are assigned to

Does anyone have an issue with WEM agents taking several days to 'check in'. We're DaaS and seems this issue has persisted for a long time

I'm having issues getting to Citrix Legacy Console from WEM service? Two different customers, from two different machines. One time I got this: The page cannot be displayed because an internal server error has occurred. Is anyone else seeing this? Web Console is fine it appears

I have the first customer with Windows Server 2025 and WEM 2507. I was expecting to pre-configure the pinned start menu icons, but the tool for the JSON generation is only applicable for Windows 11? So WEM can't manage the pinned menu icons for Windows Server 2025?

We have an issue where users are not getting a rds license on servers with wem active. 2019 and 2022 os. Using the same image, but uninstalling the wem agent and the users get rds license again. Have anyone had similar issue and been able to resolve it?

What is the logic if any for drive mapping when there is conflict on drive letter? For example, customers has 20 drive mappings. 5 of them use the R drive but are filtered by Global Group and are tied to different file shares (as they want all users to have an "R" drive for example). Normal world, user is in one Global Group but there are times when they need to be in multiple groups for reasons and then we have WEM trying to map this drive letter/share. It feels random (I think AD GPO has same limitation but not sure) which drive mapping does occur and wanted to know if we can, in WEM, address it. My first thought was was to add the Global Groups as AD Objects and then assign the drives based on different priorities tied to these Global Groups. Any other options?

What are people doing these days by way of Powershell task directly into WEM - for example to do mass changes or updates via SDK I know Arjan/Kindo had some powershell modules for older versions of WEM but might not work on later versions?

I'm deploying a brand new WEM 2507 deployment and for whatever reason I can't get the agents to register: Failed to determine site for agent machine What I've done: • Install two broker • Make use of a service user for ADC load balancing • Register SPN for the Service user • Create the database • Configure the broker service with the service account user and the vuem sql password • Configure the Load Balancer • Install the agent to the master image • Configure the GPO with FQDN, port, deployment port • Added the OU to the configuration set in the WEM admin console. And I ever get from the logs is:

Wem Legacy console is going to be depreciated. Items like Microsoft USV, folder redirection, environmental settinsg (hide apps, lockdown , etc) are these going to be migrated to WEm web? or does citrix want us to find alternative methods to apply these type of settings (GPO,, WEM GPO, folder redirection via Citrix policy, etc)