Can anyone explain to me what a Hybrid Joined Azure Active Directory catalog is? https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/create-[…]catalogs/create-hybrid-azure-active-directory-joined-catalogs https://github.com/MicrosoftDocs/azure-docs/issues/104949 My config steps for non-persistent devices are: 1. Prepare Entra Sync and Domain for Hybrid Join 2. Sync VDA OU 3. Implement BISF with dsregcmd /join on NP clones 4. Optionally configure BISF with dsrecmd /leave on master VM Citrix and MS mention

Write userCertificate

in their articles. Does the SYSTEM Account take over this step at startup?

Webstudio does it all now. I went though this a couple months ago. No BIS-F needed for this, if you do it this way. I still made sure I didnt sync my golden image though, and just kept the leave switch on it for a cya. Synced the VDA OU with Entra AD connect. It will go through the process and do it for you during the catalog creation. But the VDA won't register until the Entra ID object is up in Azure then it will register to the CC/DCC. It gives some details in the catalog as well

Thank you Ray!