I forget why our guys put it in the Platform layer, I think it had to do with Defender for some reason. Pretty sure they're using the VDI=1 switch, as this worked fine for years. Wasn't until recent upgrades of everything where it seems to have broken. We're trying to get the Citrix exclusions added to CS to see if that resolves the issue.