This message was deleted.

the standard is that they see the logoff process, are you using WEM and have fast logoff enabled by any chance ?

Hey Lucas, no, we’re not using WEM but Liquidware ProfileUnity. The second the logoff button is pressed, it’s almost as if a tsdisconn is issued and then the logoff proceeds behind the scenes. I’ve reached out to Liquidware and they’ve said it’s not them controlling that behaviour.. any thing else it could be?

there are load of ways someone could have done it, at one time it was popular to put tsdicon as a logoff script in gpo, which behaves the same. Apparently there's also ways to do it with Liquid : https://liquidwarelabs.zendesk.com/hc/en-us/articles/360026279351-How-to-improve-and-speed-up-logoff-experience-for-XenApp-RDP-users . I'm guessing one of those is active in your environment somehow.

Great thanks - I’ll double check the config and have a hunt around for anything obvious. Cheers!

I'd consider a procmon on logoff and search for tsdiscon.exe , should be at least pretty fast to confirm or deny that it is indeed triggered.

I’ll have to see if can reproduce on a persistent machine to be able to grab the logs as these are non persistent and restart and revert.. (unless you know of a way to block this temporarily?) thanks

Set-BrokerDesktopGroup -Name "Desktop Group Name" -ShutdownDesktopsAfterUse $False Should normally disable that if I'm not mistaken

Superb! Will report back. Thanks again