Citrix session stuck at “logging off” in FSLogix since enabling Entra SSO / October updates Environment • Citrix VDA 2507 LTSR CU2, published desktop, multi-session, non-persistent • Windows Server 2025 Datacenter Azure Edition (26100) • FSLogix 3.26.826.17182, profile container (VHDX on SMB), RedirectType 2, Redirections.xml • Recently introduced, at roughly the same time: Citrix Entra SSO (hosts are Entra hybrid joined) and the latest Windows cumulative updates Problem After signing out, the session stays in “logging off” indefinitely. Only

csrss

,

dwm

,

fontdrvhost

,

LogonUI

and

winlogon

remain in the session. After that, new logons on the same machine also hang at “Please wait for the FSLogix Apps Services”. FSLogix profile log findings • Logoff: all redirections removed, registry exported, “Removed redirection from C:\Users<user>”, then not a single further line. There is no error and no timeout. The VHD detach is never reached and the VHD stays attached. • Next logon of another user: the VHD attaches, then it hangs right after “VHD(x) FindFirstVolume”, again without an error. The next step would be looping through all volumes. • Both operations are stuck in the same

frxsvc

process. Checked and ruled out • Server-wide RDS deadlock (known issue with the September 2026 updates):

quser

and

query session

respond instantly, other sessions (RDP) work normally. • Leftover user processes in the session: none. • Open file handles on the profile volume (handle.exe, including

\Device\HarddiskVolumeX\Profile\...

): none. • Open file handles in

AAD.BrokerPlugin

,

TokenBroker

or

CloudExperienceHost

: none. • User hive still loaded: no,

HKU\<SID>

no longer exists. • Registry handles on the user hive: none. The handles held by

SearchIndexer

and

LogonUI

are under HKLM. Noticeable, but probably not causal • Remaining token handles on the user’s logon session, held by

winlogon

,

lsass

,

frxsvc

,

SearchIndexer

and by

svchost

instances hosting CertPropSvc, TokenBroker and PcaSvc. Interim conclusion Windows has unloaded the profile, but FSLogix hangs internally before or while detaching the VHD, which also blocks subsequent logons. A full dump of

frxsvc

in the hung state has been captured. Still open • Whether restarting TokenBroker, WSearch or frxsvc releases the hang. A regular service restart was initially refused with “cannot open service”. • Comparison test: image without the October updates, with Entra SSO enabled. -> is ongoing Question to the community Has anyone seen this behavior with FSLogix on Server 2025 combined with Citrix Entra SSO or the current cumulative updates? Is there a known issue or a Known Issue Rollback? #CKBVDG48H

No fix, sorry. Just appreciating the level of thorough testing before writing 😮❤️

A great colleague of mine came across the following link. It seems this isn't just happening to me. Logout stuck on Windows Server 2025 - Microsoft Q&amp;A