World of EUC

I would start by looking at the logs after running "dsregcmd /status /debug". SSO is a lot easier if the machine is Entra ID Hybrid Joined.

first step would be to do a dsregcmd /leave on your master image, and force an AD Connect sync "Start-ADSyncSyncCycle -PolicyType Delta"

<https://support.citrix.com/article/CTX566696/vda-machines-stuck-at-initializing-for-hybrid-azure-ad-join>

has this issue on customer level too, configure BIS-F to leave AAD on preparation helps. after that, we delete the duplicate computer entries from EntraID and start a new sync, this fixes the issue.