Anyone come across this "There is a partial mismat...
# citrix-provisioningr
Robert Berggren
10/08/2025, 3:17 PMAnyone come across this "There is a partial mismatch in the machine id event id 6167"? Server 2025, Citrix PVS. Was about to install some new software and booted the image in maint mode. Was not able to login with domain credentials, once in as a local admin I found this in the event log. Have tried to reset and rejoin through PVS console and manually as well, nothing is working....
s
Steve Noel
10/08/2025, 4:38 PMi'm seeing this as well, and is a result of the September cumulative update, where microsoft added a security feature that prevented some services from working when there are two machines that have the same SID. I've reached out to our Citrix TAM to get the scoop on how Citrix wants us to handle it
Steve Noel
10/08/2025, 4:39 PMseems like RDP, SMB, and Print services are the biggest thigns having issues, where the source/destination VM have the same SID
💯 3
👀 2
r
Robert Berggren
10/09/2025, 5:24 AMIs this only related to Windows 11 and server 2025? If also older versions are affected we will be in for HUGE problems...
r
Rob Zylowski
10/09/2025, 12:36 PMI thought it was an rdp issue meaning you have to rdp from a machine wiht a different sid. This sounds like more than that though.
👍 1
j
Jon Bucud
10/09/2025, 2:49 PMLinking here since this is mentioned in 2 threads -
https://worldofeuc.slack.com/archives/CK6RVLZ8S/p1760021337823109?thread_ts=1759361577.514009&channel=CK6RVLZ8S&message_ts=1760021337.823109
r
Robert Berggren
10/14/2025, 9:20 AMCross posting here but as posted in the other thread.
I can report that we have duplicates on this image, two different machines booted from the same PVS image have the same SID. Edit: checked two other setups and all machines have identical SIDs there as well. (edited)
Then again this is by design I just found out MCS Provisioned VMs Share an Identical Machine SID . I guess the same applies to PVS. 🙄
s
Steve Noel
10/14/2025, 7:10 PMDoesn't look like October updates mention any fix for this. Although, sometimes they sneak stuff in. Anyone building any images with October updates that can chime in if the issue is still happening?
j
Jon Bucud
10/14/2025, 7:14 PMThis Reddit thread a month ago was what brought it to my attention.
It is true that this issue was introduced by the recent update, but unfortunately this was the intended behavior of the update, auth hashes are mapped using SID now instead of hostname because it’s more secure. Duplicate SIDs have always been bad practice in theory, it just tended not to matter in almost all cases. Citrix will almost definitely be ensuring that in the future, all VMs get their own unique SID.Windows 11 VDI's created with Citrix MCS + KB5064081/KB5065426 : r/Citrix
👍 1
s
Steve Noel
10/17/2025, 8:57 PMnew update, TLDR they've officially acknowledged it, but no fix yet: https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695388&artic[…]g_And_Printer_Connectivity_Issues_With_PVS_And_MCS_Machines
Steve Noel
10/17/2025, 9:34 PMand i know this article says win11, but they confirmed internally they know it's happening to server 2025 as well.
💯 1
Steve Noel
10/28/2025, 7:44 PMjust got off with Microsoft support to try and get the fix that the article says they have....they don't have one, lol #fail
j
Jon Bucud
10/28/2025, 8:34 PM...
Jon Bucud
10/29/2025, 10:01 PMIs this the fix you're talking about @Steve Noel?
Kerberos and NTLM authentication failures due to duplicate SIDs - Microsoft Support
Copy code
Resolution
For a permanent resolution, devices containing duplicate SIDs will need to be rebuilt using supported methods for cloning or duplicating a Windows installation so that they have unique SIDs.
IT administrators can temporarily address this issue by installing and configuring a special Group Policy. To obtain this special Group Policy, please contact Microsoft's Support for business.s
Steve Noel
10/29/2025, 10:51 PMcorrect, opened a ticket, got support on the line, and they confirmed, they don't have a 'special group policy' fix. Only thing they are saying right now is to sysprep the machine, or roll back the update.
j
Jon Bucud
10/29/2025, 10:56 PM...
j
Julian Jakob
12/08/2025, 3:06 PMSo, is anyone aware if Citrix is working on a fix? I mean, they now have to fix the image-mechanism from MCS / PVS, to match that new MS-defaults, correct?
j
Jon Bucud
12/08/2025, 8:28 PM@Jeff Riechers you mentioned MCS 2511 should create new SIDs now?
j
Jeff Riechers
12/08/2025, 8:38 PMI am seeing it working in 2507.
r
Rob Zylowski
12/12/2025, 5:53 PMI checked with PM. We are working on the issue but have no eta yet for completion.
👍 1
j
Jon Bucud
12/12/2025, 5:54 PMThanks Rob
19 Views