This message was deleted.

It would be easiest because then the keys would be there. Not sure if you just precreate ghem in another layer if that would work. It probably would because i dont tjink the vda adds any entries automatically there.

If we have both Chrome and Edge layers and those processes need to be in that key. If we create the key in both layers only with their corresponding processes will the key from the platform layer trump the key from the app layers or will they merge in the layered image?

If they are the same key but different valuers they will eb merged but if they are in the same value then the platform layer will overwrite the other layers.

We just validated that the values from the platform layer trump the values from the app layers, not merging them. We thought that’s how it worked but hoped they would merge.

If they are "values" that are the same it has to assume you want them to be what's in the platform layer

Write-Verbose "Fix Citrix API Hook" -Verbose $Processes = @("chrome.exe", "Teams.exe", "msedge.exe", "EdgeLocker.exe", "nacl64.exe", "browsercore64.exe", "chromium.exe", "svchost.exe", "empac86.exe", "FYI3.exe") $RegPath = "HKLM:SYSTEM\CurrentControlSet\services\CtxUvi" $RegName = "UviProcessExcludes" if((Test-Path -LiteralPath $RegPath) -ne $true) { New-Item $RegPath -force -ea SilentlyContinue } foreach ($Process in $Processes) { $Regvalue = $Process if ($Regvalue.Length -ge 14) {$Regvalue = "$($Regvalue.Substring(0,14))"} Write-Output $Regvalue $CurrentValues = Get-ItemProperty -Path $RegPath | Select-Object -ExpandProperty $RegName if (($null -eq $CurrentValues) -eq $true) { New-ItemProperty -LiteralPath $RegPath -Name $RegName -Value "$($Regvalue);" -PropertyType String -Force -ea SilentlyContinue; } elseif (($CurrentValues -notlike "*$($Regvalue)*") -eq $true) { New-ItemProperty -LiteralPath $RegPath -Name $RegName -Value "$($CurrentValues)$($Regvalue);" -PropertyType String -Force -ea SilentlyContinue; } }

I thought this wasn't needed any longer for Edge/Chrome. @Brandon Mitchell Are all those EXE's related to Chrome, Edge (Chromium) and teams? Or are there other apps in that list.

That’s a good question; most of those processes are chromium-based applications. Svchost is related to open cases with Citrix and Microsoft regarding VDA lockups. There are relatively recent CTX articles that say they are still necessary; if they aren’t necessary, I haven’t seen otherwise.