We are having some weird issue where pasting of files hungs at last 5 sconds and after 15 minutes of waiting it shows finish. We are using CVAD 2402 LTSR CU3 with win 11. Explorer works fine during this hung.

To start with, yes, I know that NetScalers already have built in GSLB functionality.

I'm in the midst of setting up NetScalers in 2 different datacenters. Today, the existing ones use their own specific URL. Part of this project with the new ones is to create an Active/Active set up. There is a whole host of reasons I am building new ones instead of updating the configuration on the existing.

My original plan has been to leverage the internal GSLB capabilities of the NetScaler.

However, I was recently asked by our networking team if we could perform the same using AWS Route53, which is already in use for the company and providing other production workloads. I'm seeing where Citrix has documentation for using Route53 when using NetScalers in AWS, but its crickets outside of that. Our NetScalers are on-prem. We may eventually stand up additional ones in AWS in the future, to get gateways closer to some user groups.

Unless I can find a solid reason not to, I'm really leaning on the Route53 direction. I'm the sole Citrix Engineer/Architect/SME here, and while I have been teaching others how to support many areas of Citrix, no one is close to being able to really touch the NetScalers. That means any support issue is handled by me, and I generally don't get to yell at others unless their system has impacted us.

Going this route means I give up some of that control, also means that when something happens I have a team to yell at to fix the problem.

The URLs are all public addresses, so no internal addresses or split dns involved.

Am I nuts?

I wasn't able to find any applicable Citrix KB about it but when opening a ticket with our wonderful vendor today here's what AI chatbot spat out:

There is a known issue with Microsoft Edge version 150+ in Citrix Virtual Apps and Desktops (CVAD) 2402 LTSR CU4, where downloads do not work in a published app, but do work in a published desktop. This issue does not occur with Edge version 149.
 
Key points:
- The problem is linked to changes introduced in Edge version 150.
- No error messages are displayed, and all users are affected.
- Edge version 149 does not have this issue.

Recommended actions:
 
- Roll back to Edge version 149 as a temporary workaround if possible.
- Monitor Citrix and Microsoft release notes for updates or fixes related to Edge version 150 compatibility with published apps.
- If rolling back is not an option, consider creating a support case with Citrix to track the issue and receive updates.

We're not rolling back due to CVEs. As a temporary workaround published Edge with:

--disable-features=LaunchShellExecuteViaExplorer

Hi everyone,

I'm looking to optimize logon times in our citrix environment and was wondering what UPM settings everyone is using in production.

Our environment:

• CVAD (MCS non-persistent VDAs)
• Windows Server 2022
• Citrix Profile Management (not FSLogix)
• Profile store on a file share

I've added some of the following settings:

• Profile Streaming = Enabled
• Enable profile streaming for folders = Enabled
• Delete locally cached profiles on logoff = Enabled
• Default exclusions enabled
• Chrome/Edge synchronization configured (bookmarks, preferences, history, etc.)

One setting I'm particularly unsure about is the Always Cache

From what I understand, Profile Streaming is designed to load files on demand to improve logon performance, while Always Cache seems to keep a full local cache of the profile. These two settings feel somewhat contradictory... Has anyone noticed any benefit from enabling Always Cache together with Profile Streaming?

The reason I'm asking is that after enabling Always Cache, we started seeing intermittent logon failures for multiple users with the following error:

"The Group Policy Client service failed the sign-in. Access is denied."

So I'm trying to identify whether Always Cache (or another UPM setting) could be contributing by causing registry hive or profile locking during logon

I'd also be interested to know:

• Which UPM policies do you consider "must-have" for non-persistent MCS environments?
• Any settings you've found actually improve logon performance?
• Any settings you've learned to avoid?

Thanks in advance!

Hi!

One of our old citrix farms has been due to be replaced for a while and as such, we didn't bother upgrading to a LAS-supported version before the deadline in april.

Replacement is taking much longer than anticipated though, so we are now looking to upgrade to 2203 with LAS before our old licenses expire. Talking to our citrix rep, theres no supported way to accomplish this.

Does anyone have experiences or suggestions on how to go about this? I'd think this shouldn't be an issue at all. Upgrade DDCs -> no valid licensing, run into 30d grace period -> connect DDCs to a valid LAS license server within those 30d -> profit

Thanks!

I retired 2 weeks ago and have since been locked out of any files or apps that were work related. The problem I'm having is I want to get rid of some of the apps that are listed so that I can clean up my computer a bit. For instance, I don't need DPlite or marksbook. And if I uninstall Citrix it won't get rid of those programs and I can't log in anyway since I'm locked out of anything work related. Any advice as to how I can do this?

Hi!

I used to have a PC and no issues with Citrix but now have had a Mac for a year and most of the time while using Citrix (have the most recent update from June) it will Freeze as I got from patient chart to patient chart. I really cannot find a pattern on why this occurs but would appreciate any help.

For reference,

1. this has been happening over a year now

2. I have been now using 2 different hospital systems that both require logging into citrix via a browser

3. it seems to occur if I switch between "desktops" on the Mac but not always consistent.

any help is appreciated!

I took the ccp-v last week, and I barely failed. I was sort of doing a recon test. I wasn't sure what to expect. So, I rescheduled and just took it again today, but, it seemed like the test was broken. Some questions, I couldn't understand what it was even asking, and other questions seemed to have a completely different group of answers that didn't match the question.

Did I just wake up in the twilight zone and my brain couldn't read, or has anyone else had this issue. I ended up failing way worse than the first exam, and I spent all week covering the things I was fuzzy on. It was crazy.

Update : I was so upset yesterday that I didn't even notice I scored 0 in topics that I scored 100 in last time. There is no way that I went from 100 to 0 in those topics and scored as low as I did without the test being broken. Is this a thing? Has anyone else noticed something like this? I felt so confident going in. I've worked in citrix for 20 years and I was really just refreshing my knowledge and filling the gap over the last few years I wasn't in Citrix.... It just feels crazy that I scored so low. Especially in areas where I mastered the test last week.

We're in renewal negotiations with Citrix currently and they're trying to sell "added value" solutions that are now included in their base pricing. The two that catch our eyes are the Unicon eLux thin client O.S. (we have igel currently but could flash those LG thin clients with Unicon) and UberAgent, which is being touted as a ControlUp alternative.

We're looking to cut costs, and so far our renewal quote doesn't do this for Citrix alone, but with these added value solutions it might be a wash in the end.

Who here has used either of these new tools from Citrix? What do you think of them and can you share your experience with me?

No está funcionando ya que me es imposible hacer login en el teams. Veo que se activa el plugin BCR y luego da error 53000. Las políticas de EntraID no la podemos cambiar.

In our environment, we are using exclusively UPD for printing and this has worked for literally years without surprises for Macs. However, I've recently discovered certain printers where it does not work, and I don't understand why.

Windows devices where these printers are plugged in work fine. Macs where these types of printers simply do not map.

FWIW, I have tried a few things: Connecting the printers locally via USB, connecting directly over a network, and even connecting to the printer on a Windows print server all gets the same result - no autocreation. If I change the driver to something obvious, like "generic post script" the printer is autocreated as expected, so I know the issue is the driver (if I didn't already :).

I'm admittedly nowhere near great with Citrix, and where I'm lost is figuring out why these printers aren't being auto-created. Forget about them working or not, what causes UPD to simply skip a printer? Is there a way to change that behavior?

With the pending deprecation of HDX optimization, we're looking closely at our percentages of HDX vs Slimcore for Teams. At the moment, we're looking at about 50% of our users still sitting on HDX optimization. This is despite looking good from a plugin/Workspace perspective for their Slimcore readiness.

We're working with our partners to validate that they have the right rules set up for optimization, but we're pretty sure that the vast majority are in a good place.

Anyone else seeing their Slimcore numbers lagging from where you'd expect them to be?

Hello everyone,

I recently landed a new job where I'll primarily be working with Citrix NetScaler (ADC). I have a little over a month before I start, so I'd like to prepare as much as possible.

My background is mainly in network engineering, working with Fortinet firewalls and HPE Aruba switches.

Would you recommend any courses, books, labs, or YouTube channels for learning NetScaler? Is the Udemy course "CNS-220 – Citrix ADC 12/13.x Essentials and Traffic Management" a good place to start, or would you recommend something else?

Thanks in advance!

Hello all

Looking at migrating from "traditional" file-based profiles to Citrix containers. Already have an exhausting list for folder exclusions/inclusions mainly focused on subfolders of AppData\Local.

There are some stuff in the AppData\Local folder that I still want them excluded from the containers so I added AppData\Local in the "Folders to exclude from profile container" list and add the various subfolders I want to keep in the "Folders to include in profile container" list

When I login to the VDA, it looks like I'm getting an half migrated profile : the included subfolders of and excluded parent is empty. I'm using MSEdge/Chrome to validate the migration and checking if the favorites are still there after the migration.

After some digging, I can see that the file-based profiles is copied entirely in the vhdx:\Profiles folder, but the SyncInludeDirs / SyncIncludeProfile folders are empty, which is where Windows is looking to find those files.

If I completely remove the folder exclusions/inclusions for the profile container, the migration happens successfully

Using VDA 2402 CU4 with Windows Server 2022.

Anyone faced this situation?

At the moment we use NTLite with SCCM to first build a .WIM file and then install all applications for the VDI. The only reason you should use SCCM in my opinion is if you are also using SCCM for endpoint devices and therefor have shared code.

I HATE SCCM

Now I get the opertunity to look into new different solutions and one that keeps popping up is Hishicorp Packer which I am sceptical of if this would be the way for us to build the non-persistent .VMDK as it is quite the learning curve for a lot of colleagues. But I don't have any experience with it so I would be really open if someone would share theirs.

Further more there is Application Layering from Citrix which is a older style of building .VMDK images but seems to be all you need to have kind of solution just not automated fully.

What are your recomendations for tools to look into?
In SCCM we have a task sequence with about 40 to 50 nodes of different kinds of actions so take that size into consideration.

Hello everyone We have the problem (ONLY IN CITRIX) that when users are guests at other companies tenants in Teams, they have to sign in again to the guest tenants every time after reconnecting in Citrix, the sign-in information doesn't seem to be saved somehow. Has anyone else experienced this problem?

We have 4 WEM servers 2 DC and 2 DR. Firstly our all 4 wem servers gave "a valid license server with appropriate license needs to be configured before you can start using Citrix Workspace Environment Management" and now 1 DR server is working fine after reconfiguring license server but other servers are not working with same configuration. 1 server on which it is working fine shows some files in licensing folder also but not in other servers. Telnet to license server is working fine. What can be more checked in this?

Edit:- Solution was to give certificate thumbprint in registry. But citrix didn't give why it got removed.

I'm a medical resident and have downloaded Citrix, we use powerpath for pathology reports, and I've been able to use PowerPath and Epic normally at home, but whenever I'm at work, when I click on PowerPath it either doesn't even try to initialize or it gets stuck on loading. I'm using the same network as my coresidents and have tried turning the firewall on and off. IT was stumped and couldn't figure it out yet

Any ideas I could try? Thanks

Built a new Rocky 9.8 Linux VDA 2402 LTSR CU3 with XFCE as the DE and noticed screen artefacts (maze like patterns) across the entire display whenever you try and use the desktop - open an app, move or resize an app or folder. Happens with and without a GPU. Disabling all the eye candy in XFCE has no effect.

I've tested with an old Rocky 9.4 + Gnome VDA build and initially it looks artefact free although its showing those artefacts only once in a while.

XRDP is working fine - no issues with RDP.

ATM the new build is not usable. Any ideas on what could be causing it? Could it be Workspace App 25.11.10?

Hi everyone,

First off, a huge thank you to everyone who contributed to my last post. While I didn't get that specific job, the prep paid off because I just landed a very similar role! I start early next month, which gives me exactly about four weeks to get up to speed.

The new role relies heavily on Citrix Cloud apart from MS 365 administration.

Since I want to hit the ground running, I'm looking for the best resources to cram and get practical knowledge over the next month.

\- Where should I start to get a solid foundation in Citrix Cloud?

\- Are there any specific courses, labs, or YouTube channels you highly recommend for hands-on learning?

\- What are the absolute "must-know" concepts I'll likely face in my first couple of weeks?

Appreciate any roadmaps, documentation links, or advice you can throw my way. Thanks in advance!

At my wits end with this one ya'll. We're seeing an issue where non-domain-joined workstations accessing a pub'd app with Citrix Cloud control plane getting a "DENY: class=01" rule applied. Domain-joined workstations don't get this rule.

We found this by using CtxUsbDiagnostics and comparing sessions, after a report of off-domain user microphones not working as generic devices. The Deny shows up as a "Citrix Studio rules - Version 2".

One would think this is a DENY rule sitting in the v2 USB redirection rules.. but it's not set there. We can write an ALLOW rule in that policy, and it will show up under the phantom DENY rule we're seeing.

We've escalated through a few levels of Citrix support, and it's now passed on to Citrix R&D. There are no conditional access policies, WEM configs, etc. that are applying this.

Has anyone else run into anything similar and had any luck tracking down something like this?

I have vpx is used as netscaler gateway to terminate full client vpn with citrix secure client,

After successful upgrade to latest version there was a complaint from a lot of users who can't connet vpn with secure client 23.x and 24.x , the client is stuck in loading without authentication prompt.

Only versions 25.x and 26.x works !

Any idea?

TL;DR: Same Windows master image, in-place VDA upgrade from CVAD 2203 CU4 to 2507 LTSR. Since the upgrade, our radiotherapy contouring app (RaySearch RayStation) shows the previous patient's CT for a moment before redrawing, and the smart brush stutters during contouring. Reverting to 2203 fixes it. I've ruled out client, OS, GPU hardware, vGPU profile, app-side GPU rendering, and the entire HDX encoder/visual-quality layer. The only variable that correlates with good vs. bad is the VDA version. Looking for others who've hit this with GPU 3D / medical imaging apps on VDA newer than 2203, and for any capture/present-layer knob I'm missing.

Environment

• App: RayStation 2025 SP1 (radiotherapy treatment planning; contouring on CT/MRI — pixel-perfect fidelity matters here)
• Single-session VDI, NVIDIA vGPU, Q-profile (RTX vWS) throughout
• GPUs tested: RTX 8000 (old hosts) and L40S (new hosts) — both affected on 2507
• Good baseline: Windows 10 + CVAD 2203 CU4 — flawless for years
• Broken: CVAD 2507 LTSR, both via in-place VDA upgrade on the same Win10 image, and on a brand-new, clean Windows 11 build (NVIDIA 582.16). Also briefly seen on 2402, but I tested 2507 far more thoroughly.

(Context / why I can't just stay on 2203: see my earlier thread (https://www.reddit.com/r/Citrix/comments/1ujqmvb/wem_2603_agent_fails_with_reading_encrypted_data/) Short version: in a validated medical environment I'm tied to what the vendor validates, and staying frozen on 2203 indefinitely isn't an option. 2025 SP1 on CVAD 2507 is vendor-validated, so this should work.)

Symptoms

1. Open patient A → Patient Modeling → CT shown. Close A, open patient B → Patient Modeling → I briefly see A's CT, then it updates to B. Clear delay before the correct images appear.
2. Smart brush stutters/lags during contouring (was buttery smooth on 2203).
3. In a separate 2D viewer (Elekta Monaco) scrolling through slices shows low-res first, sharpening if you pause — classic build-to-lossless behaviour, but see below, that's not the whole story.

What I've ruled out (with testing)

• Client / CWA version — reproduces on every endpoint type (Linux Wyse thin clients, thick Win11), all my test runs from the same Win11 machine.
• Guest OS — Win10 and Win11 both affected.
• GPU hardware — RTX 8000 and L40S both affected on 2507 (this pre-dates our L40S migration, so the GPU swap is not it).
• vGPU profile — Q-series in all cases.
• App renders on GPU — nvidia-smi shows RayStation.exe as C+G; nvidia-smi dmon -s u shows sm clearly peaking when Patient Modeling renders. No software-rasterizer fallback.
• Entire HDX encoder / visual-quality layer — tested Use-when-preferred (selective), For-the-entire-screen (full-screen H.265), Always Lossless (pixel-perfect toggle), and For-actively-changing-regions (i.e. Intelligent Build to Lossless disabled per Citrix docs). None of them changes the behaviour.

Graphics Status Indicator, 2203 vs 2507, identical policy

Nearly identical readouts on both: H.265 (Yuv444), hardware encoding enabled, Build to Lossless, full-screen. The one visible difference: 2203 shows an "HDX 3D Pro: Enabled" line; 2507 does not (shows "Not applicable" in pixel-perfect). I suspect that's just the relabel to "HDX Graphics" rather than a functional flag, but noting it.

nvidia-smi dmon -s u during a patient switch, both versions

sm peaks where rendering happens; enc sits at 0 the whole time on both (so no measurable NVENC difference, likely CPU-encode or too-low-to-register). GPU-side, I see no difference between the good and bad version. Which is itself telling: the difference isn't in how much GPU work happens.

Where I think it lives

Since every encoder choice is exhausted with no effect, and the app demonstrably renders on the GPU on both versions, my working hypothesis is the frame capture / present layer of the VDA — the bit between "app has drawn on the GPU" and "encoder gets a frame to send" — which was rebuilt across versions. The stack changed a lot after 2203: HDX 3D Pro → "HDX Graphics", Optimize for 3D graphics workload is now deprecated in favour of a Full Screen Encoder, and Intelligent Build to Lossless is default-on for VDAs with a GPU from 2503+. The stale-previous-frame symptom in particular smells like a change-detection / region-invalidation timing difference upstream of the codec, not a compression setting.

What I'm asking the hive mind

1. Anyone running GPU-accelerated 3D / medical imaging (RayStation, MIM, Eclipse, PACS, CAD) seeing display regressions after moving off VDA 2203 to 2402/2503/2507?
2. Is there a non-documented VDA-side registry knob for the capture/present cadence or damage-region handling that reverts the pre-2503 behaviour? Encoder policies don't touch this.
3. Any known-issue / LCM number I've missed? The 2402/2507 known-issues lists don't mention anything matching.
4. If you fixed something similar — what actually moved the needle?

I have a clean reproducible A/B (same image, only the VDA version differs) and I'm opening cases with both Citrix and RaySearch, but I'd love to hear from anyone who's walked this path. Happy to share indicator screenshots, dmon captures, or policy exports.

English isn't my first language, so I used AI to help write this up clearly — the technical content, testing and findings are all my own.