This message was deleted.

I'd probably start with network trace.

Solid suggestions! I don't believe appflow is enabled on their SDX ADCs, will verify tomorrow. Thanks, @Jarian Gibson

I usually run through this to check FW Get-NetTCPConnection https://support.citrix.com/article/CTX214599 netstat -a -n netstat -ab program's name that has a specific port open netstat -aon other tools TCPView, Nirsoft CurrPorts, and PortQry

what we encountered and have an active CTX incident is the following. logon to virtuall Windows10 with VDA version 2112 and 2203, user logon stops with (error sessionstart, policies could not be loaded. Disconnect) and session gets unloaded. Same Windows Version, only VDA is different, VM's are totally fresh staged. As soon as, we uninstall VDA and install version earlier then 2112, logon runs through. internal access. RDP connection works good, with admin and "normal" user rights. best regards Thorsten

Yep ! That's our exact issue, @Thorsten

i have a answer from Citrix, why our session gets unloaded after error pops up --> Error at session start, policie could not be loaded. Answer from Support: • In latest releases we break the session launch when group policy fails to process. The error is found on 1912 traces as well but back then we did not break the session, which explain why it works. hope this helps for further troubleshooting. regards Thorsten

Interesting, however, define "group policy breaking"

@Owen Reynolds we have still an active CTX Case, but we are getting closer, and it looks like, some one else has the same problem. inside CDF trades, those errors are visible: GpoListLoaderWorkItemDomain:GetGpoListInternal GetGPOList result = 0 13","" CGpoListLoaderWorkItemDomain::AddComputerGpos,9,Error,"*GetGpoListInternal (Computer) FAILED - Error = 13",""* CGpoListLoaderWorkItemDomain::ExecuteInternal,9,Error,"*AddComputerGpos FAILED - Error = 0x8007000D",""* 2022/04/21 and it goes in direction "loopback setting" as soon as we disable loopback, logon works. after enabling loopback, logon fails. So, at the moment it is again at CTX to figure our, to define "group policy breaking", because this setup runs now for years without problems. i would post the result. regards Thorsten

a Citrix implementation without loopback? yikes! 😛

they work on a private fix