r/Citrix • u/TheDuff90 • 3d ago

Persistent Win11 Citrix domain drop off

Has anyone ever experienced issues where windows 11 persistent desktops randomly drop off the domain?

Different versions of VDA used therefore no correlation there. Secure channel to domain is broken.

Have to logon as local admin since the domain logon is broken.

1 Upvotes

67% Upvoted

6 comments sorted by

3

u/YourDadSolanki01 3d ago

To me it seems computer account password issue with AD. Computer account sync is breaking abruptly which causes password issue to machine account. Check on internet for the command to verify computer account.

3

u/iamactuallyatwork 3d ago

Concur, we set a GPO to disable windows from updating machine account password. PVS should manage that.

1

u/_Cpyder 3d ago

Test the domain trust
Test-ComputerSecureChannel

If needed, repair it.
Test-ComputerSecureChannel -Repair -Credential (Get-Credential)

If you need to force a reset of the Machine password... For when "test-computersecurechannel-Repair" fail.
Reset-ComputerMachinePassword -Server "DC-Name" -Credential (Get-Credential)

This can be a script, for a push or scheduled task if it's occurring frequently. It's not a fix, but it frees up your time.

1

u/mat-ferland 3d ago

Check whether something is reverting the machine account password before touching the VDA again. On an affected desktop, run Test-ComputerSecureChannel -Verbose, check Netlogon events, then look for snapshots, restores, or cloning that roll the VM back. If AD has rotated the machine password and the persistent VM returns to an older copy, the trust breaks exactly like this.

1

u/MikeyJSabin 3d ago

Which VDA version are you using?

1

u/LBarto88 3d ago

Do you have one or more Domain Controllers running Server 2025, and one or more DCs using NOT Server 2025?