Question about the Citrix WEM User Logon Service. ...
# citrix-wem
m
Question about the Citrix WEM User Logon Service. This service adds 20-30 seconds to the logon time of the first user to sign in to a XenApp server. If the service is stopped and set to manual, the logon delay is removed, but no Group Policy actions apply to the session. Is there a happy medium between not having the initial logon delay but still have the WEM Group Policy actions apply?
n
Which WEM agent? This was a thing years ago, but I swear it was resolved.
m
WEM Cloud "service agent" 2403.1. I don't think it's version specific though because the behavior has been consistent for as long as I've been trying to move to WEM Cloud and using the service agent.
j
There is something not right there. @Anthony Shi @Sharp Guo @Jian Song this isn’t normal behaviour?
👍 1
@Matt Sliva what do you mean by “no group policy actions”??
s
The WEM needs to get the GPO definition and apply it. So not sure whether there is issue during that time.
could you check the debug log to see what happens during that time?
m
@James Kindon WEM actions that are Group Policy Settings do not apply if the service is not running.
With the help of Citrix Support, we figured out the cause was WEM agents not being able to contact Digicert certificate revoke lists. My company’s outbound firewall is extremely locked down. User Internet traffic exits the network via web proxy, but everything else that needs to talk to the internet needs a hole poked in the firewall.