https://worldofeuc.com logo
Join Slack
Powered by
This message was deleted.
# citrix-vad
s
This message was deleted.
m
around 20s is easily doable with just fslogix and citrix optimizer
logon scripts, appx and GPO is what usually adds a lot
sub 10s is where it starts getting difficult
n
What do you consider to be fully logged on? Desktop loads, or startup apps running? Initial logon (new profile) in our W10 1809/CVAD 1912 environment is around 35-45 seconds for full load, including Skype logging in. Subsequent logons shave off 10-15 seconds.
r
So, we have GPOs, essentially the same as our physical desktop environment, with a few tweaks here and there. We've torn out all but a few AppX packages. The times I'm seeing are not terrible, but they're also not what I'm happy with. We have Teams that's running at startup too.
The performance of the VDAs isn't bad when logged in, but seeing as the first thing users will see is the login time, I want to get it better than what it is now. I guess I need to test what it's like with either no GPOs, or a smaller subset
n
Asynchronous policy processing and not waiting for the network at startup will go a long way towards lowering your logon times. However, if you have folder redirection enabled via GPO, you’ll have to move it to something like WEM (which I’d recommend, anyway).
r
Yeah, I think I have to dig out James Rankin's article again for the asynchronous policy stuff. Control Up does mention asynchronous in the screenshot. I need to check. We're using Citrix UPM, but I'm more inclined to move to FSLogix profile containers. None of this is prod yet. It's a very new environment. We're still tuning it before we hand over for testing.
t
There is a huge difference between Windows 10 and Server OS.
Windows 10 -- your time looks OK, you might be able to shorten that AppX load time down by removing as many AppX packages as possible. Your GPO and Profile time are very very good
Server OS doesn't have AppX load times, and AppX FTA is done async, which means you can get logon times in the 6-20 second time frame
but for Windows 10, that would be my analysis
You do have a 7.7s logon gap, which might be FSLogix, which we could probably identify properly, it seems we are missing something. It's starred, so I think it's looking at the Winlogon events for that time stamp, but FSLogix shouldn't be that quick unless it's not enabled
Or the 7.7s might be Citrix UPM, I haven't had a chance to figure out their start-end events
r
I would take steps. my logins are Published apps 10-15 seconds. Desktop 20-22 seconds. 1.      Switch to FSLogix- you will see a big drop 2.      Then Start with this article. 3.      Step through each one that you can, you will see things drop big time. 4.      I do one GPO (monolithic) that do it all, I stay away from users GPO, and use computer GPO. For users settings I use WEM in place of GPP. https://github.com/ryancbutler/Citrix_Optimizer_Community_Template_Marketplace/blob/master/templates/John%20Billekens/JohnBillekens_3rd_Party_Components.xml 2. Then check into Citrix optimizer. 3. After that disable the 3rd party junk https://github.com/ryancbutler/Citrix_Optimizer_Community_Template_Marketplace/blob/master/templates/John%20Billekens/JohnBillekens_3rd_Party_Components.xml 5.      optimize Adobe as well, (small savings but helps) https://worldofeuc.slack.com/archives/CLCTBHBLH/p1591710321059000 6.      I also get rid of as much schedule task I can, you have to evaluate them
👍 1
j
My mantra for logon times "Aim for 10 seconds, accept 20 seconds, never go over 30 seconds"
👍 2
t
@James Rankin and For Windows 10?
j
Same
n
I've heard rumors of 10 second logons for W10 VDAs, but not a single person has provided evidence of such. I'd love to shave off more time from my logons, but I'm not sure that it's possible at this point.
j
I can video you one right now
I have a health customer in Scotland with 7 second logons for Win10 VDI
n
I would love to know the steps taken to accomplish that, if at all possible.
j
Mainly, superfast storage plus lots of tweaks (the admin there is really sh*t-hot, when I got involved their logons were 10 seconds and they wanted to shave them further down). If you're willing to wait, I do have in the pipeline the "Ultimate Guide to Windows logons" which will contain the entire journey from 4-minute logons down to 10-seconds-ish (hopefully) with documented metrics for each optimization as it is applied. Will be ready possibly end of July
👍 2
n
End of July? I want it in... 7 seconds.
😆 1
But yeah, I'm definitely interested. My stuff is all on flash storage, and I optimize the shit out of the image, so I'm always looking for tweaks.
j
But this guide will naturally include caution around "what you're putting in versus what you're getting out". Healthcare customers had a real interest in saving every second, but they have to really stay on top of that image. Some people get caught up in the "great white whale" approach of shaving every possible millisecond when it's not doing them any tangible business good.
n
Yeah, I'm willing to look at anything reasonable, and I'm in healthcare. Custom mandatory profiles, for instance, are out of the question. Mind you, our users have no issues with our logon times, but if I can improve it safely, I'm all for it.
r
Well, this was a great read to wake up to! Thanks for all the suggestions. This week, I'm going to do a comparison between UPM and FSLogix to see how much that can shave off. Same VDAs, but one with UPM GPO, one without/with FSLogix Profile container. But also going to take a copy of our monolithic workstation GPO and see what I can take out to see if that shaves more time off too. I don't think we'll be getting near 10s, but I'd like sub 30 if possible.
Also, we are using Citrix Optimizer, it's running as part of BIS-F. but I will look into that additional template @Ray Davis suggested. That certificate client scheduled task is looking like it's taking a decent amount of time. Any thoughts on disabling it? Or modifying it so that the 'at logon' trigger is not enabled, but leave the rest. Anyone know what it does? Do bad things happen if you disable?
r
7 seconds? WTF. Teach us Master
On the users cert, do you have a PKI that is doing that interanlly?
James did 90% of the work in his article. If you follow that. You should be good.
r
We do have PKI for computer certs (SCCM). We also are issuing user certs for AnyConnect too. But I guess AnyConnect isn't on these VDAs, for obvious reasons
r
If you run the new Edge, add these Disable-ScheduledTask -TaskName "MicrosoftEdgeUpdateTaskMachineCore" Disable-ScheduledTask -TaskName "MicrosoftEdgeUpdateTaskMachineUA"
I would test disabling the user cert, it might be tied to something that is authenicating your users. But IDK
👍 1
r
We haven't added Edge yet. Rolling out soon though. I'll bookmark that though, cheers
r
Another thing I run is this, But the 3 party Optimzier will handle some.
Get-ScheduledTask -TaskPath "\Microsoft\Windows\Workplace Join\" | Disable-ScheduledTask Disable-ScheduledTask -TaskName "Adobe Acrobat Update Task" Disable-ScheduledTask -TaskName "GoogleUpdateTaskMachineCore" Disable-ScheduledTask -TaskName "GoogleUpdateTaskMachineUA" Disable-ScheduledTask -TaskName "MicrosoftEdgeUpdateTaskMachineCore" Disable-ScheduledTask -TaskName "MicrosoftEdgeUpdateTaskMachineUA" Get-ScheduledTask -TaskPath "\Microsoft\Office\" | Disable-ScheduledTask Set-Service AdobeARMservice -StartupType disabled Set-Service gupdate -StartupType disabled Set-Service gupdatem -StartupType disabled reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v MaintenanceDisabled /t REG_DWORD /d 1 /f #disable java update by policy reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /V EnableJavaUpdate /T REG_DWORD /D 0 /F # if defined programfiles(x86) reg add "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /V EnableJavaUpdate /T REG_DWORD /D 0 /F #Remove java update scheduler reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SunJavaUpdateSched" /f #if defined programfiles(x86) reg delete "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" /v "SunJavaUpdateSched" /f cd 'C:\SRC\Delprof2 1.6.0' .\DelProf2.exe /u
n
Move all of that into Citrix Optimizer, IMO.
r
Yea, your so right. I am working on that. LOL
n
And if you use one of the templates that Citrix provides as your base, don't add your own custom items to their groups. Add your own custom groups into the template so that when templates are updated, you can quickly compare them to see what was changed.
r
Good to know. Thanks Nick.
I need to script removal of active setup.
n
I've got that done already, so I'll send it to you.
r
Citrix optimiztion does some but not all. James sent me this a while back. But I cant find it 😞
n
Actually, let me just send you the entire template.
r
Please do. thats awesome
We should do like monthly meetings and show how we do things. That would be cool.
j
That's called "presenting at a user group" 😉 here's one to go to https://www.citrixug.org.uk/2020/05/26/summer-2020/
r
Oh yea, good point James
n
I asked in the event thread, but are those sessions recorded? I'm going to miss the first hour, but want to see the two sessions I'll miss.
j
Yep should be, @Neil Spellings will know better tho
n
I rip out all of my UWP apps as part of my build, yet still see AppX - Load Packages slowing down the login.
Ah, nevermind. That's gotta be Edge, Cortana, and the other stuff that you can't rip out.
j
You can......just they tend to come back
🤪 1
n
Yeah. Not sure if I can really whittle down AppX - Load Packages, but what is Windows Duration?
Oof - self-inflicted wound:
t
We Use Ivanti EM for shortcuts on our estate and we created a Disconnect button so users only have to sign in once on a Monday. Good spot!
n
We're in healthcare, so letting users stay in a Disconnected state for a week would never fly here.
t
Understood sir
n
@James Rankin: Are you any closer to your ultimate guide to Windows logons blog?
j
It has commenced, first part due this week hopefully
😃 2
👍 3
n
I look forward to parts 3 through 4 next week........
j
Things are busy, but I will aim to at least push one a week
r
James, its like eating ICE cream in front of me. you cant do that and not share LMAO
n
And now I want ice cream. Thanks, Ray.
r
haha
j
BTW my site has just gone down, a WordPress update failed that I clicked on as I was logging out
Apologies, am waiting in the queue for support
a
thanks for this ! this is awesome! and dammit now i have to go get ice cream later too
t
Nice one Cheers
n
Happy to host your Wordpress site James, hopefully for less than you're paying your existing host 😉
j
Actually I might eventually take you up on that - the thought of a PHP upgrade is currently filling me with trepidation
n
DM me with what you need 👍
t
Great introductory article. 👍 Looking forward to the rest.
2 Views
Open in Slack
PreviousNext
Powered by