WEM 1906 Action Group Registry Entries Problems

[Patrick Barth]

Hi

We have a strange behavior with WEM 1906 and the Action Groups. If I configure some Registry Entries and group them in an Action Group, assign the Action Group to an AD-Group, some of the Keys are not applying. 
If I assign the same Registry Entries direct to the same AD-Group, everything was fine (Keys are applied). 
A look in the WEN Agent Log Parser show that the Keys are not processed (over the Action Group) with an Exception. But without any reason. 
 

[dmohrmann24]

I think it's not fixed: https://docs.citrix.com/en-us/workspace-environment-management/current-release/known-issues.html

 

[Kasper Johansen1709159522]

Hi,

 

I have seen something similar. I had to clear the WEM Tracking Cache for registry actions, to get it working as expected.

 

James Kindon has an excellent article on how clear the WEM Tracking Cache:
https://jkindon.com/2018/11/28/selective-deletion-of-the-wem-actions-tracking-cache/

[Patrick Barth]

Thanks for the intresting Link.

 

But i have the Problem with an new User also. And even if i use the Script the Problem was stiil the same (in two seperate Environments!).

[James Kindon]

smells buggy - any commonality in the reg keys? Do they happen to include \Policies\ in path by any chance?

[James Kindon]

I've pinged the for extra eyes too FYI - If you don't have a ticket open, it might be worth doing so

[Haoyu Meng]

Hi,

 

We would like to investigate this issue but more details needed. Could you show us how do you create and assign the reg keys? Agent Log file is also helpful if you can attach it. 

[Patrick Barth]

OK

Here are two special Reg-Settings to check if they are processd. 

 

 

And here is the Assignment of the Action Group "Reg-Test-Key". 

 

The Calculator was created on the Desktop, and the WEM Log Parser was also there.

So far so good. But now comes the really stragne thing. The reg-Key under Software\Adobe\... was created, but the Key unter Software\Policies\Google\Chrome not! And the Log Parser told me the same Result

[Patrick Barth]

The i throw the "_Reg-Key-Test" out of the Action Group, and assign it directly.

 

Logon to the Test-Desktop, and the key is there

 

And the Log told me also the same

 

Perhaps some other Informations. The WEM Infrastruktur is in a different location and different Domain as my User. The CTX Worker is in the same Domain as the WEM Inf. Of course we have a full Trust between the two Domains. We have also CTX Worker in the User-Domain, but with the same Problem (other WEM Config Set on the same WEM Infrastruture). 

I don't relly check witch Settings can be applyed over Action Groups, but it seems that Apps always work, but some Reg-Keys wor and some not. 

 

I send the WEM Logfile directly to Citrix, because there to many private Information Inside.

 

[James Kindon]

So to summarise - what you are seeing is that when reg keys with \policies\ in the path are applied via action groups, it fails, but the same key applies via a direct assignment (not action groups) it appears ok?

 

To my point above - are all the failing keys falling under the \policies\ node??

[Patrick Barth]

Yes

The Same Reg-Key was applied if i assign it directly to an AD Group. Over an Action Group this Key was not applied.

 

And no, the \policies\ node was not the only one with the problem. Other Kesy in different paths where also not applied,  but i don't check every Key. 

I deside to configure alle Reg-Settings not over an Action Group (until this Problem was sloved). I configure App over the Actions Groups, and the rest like we did bevore  the Update to 1906 (assignet directly to an AD Group). 

[James Kindon]

I can replicate this behavior in my environment exactly as you are - reg keys via action groups fail, yet direct assignment are fine

[James Kindon]

There is a private fix for this if you have a ticket in with Support - not sure on the particular ID but its definitely dignified and resolved

[Jay Bhattacharya1709160061]

I James, 
Could you please provide me the LC Number. 

[Nick Clarkson1709160891]

FYI, I'm getting the same issue with reg keys with \Policies\ in the path even in a regular Action (not Action Groups - I'm testing 1906 now...and 1907 is out I know EDIT: No it's not...that's App Layering I'm thinking about...another thing to upgrade :/ ). Weirdly the issue seems intermittent.

 

Specifically, I'm setting this value:

 

Software\Policies\Microsoft\Office\16.0\Outlook\Options\General\DisableOutlookMobileHyperlink

REG_DWORD: 1

 

Clean users (deleted profiles, rebooted servers), 1 user it applies, the next it doesn't. No details in the user's WEM agent log other than the not very useful "it failed" message :)

[Haoyu Meng]

Hi Nick, thank you for your feedback, we would like to look at this issue in our lab later. Hope we can reproduce it soon. 

[Nick Clarkson1709160891]

1 hour ago, Haoyu Meng said:

Hi Nick, thank you for your feedback, we would like to look at this issue in our lab later. Hope we can reproduce it soon. 

No problem; if you need any logs, then I can try and recreate and send them on, although there's not much to see.

 

Thanks, Nick

[Haoyu Meng]

Hi Nick, sorry for reply late. After trying to produce this in my lab, I finally found that I really needed  agent log files as it's never reproduced in my lab. So could you send logs to me?

[dmohrmann24]

I Have exactly the same issues. Registry actions with "policies" in the target path do not apply if the action is part of an action group. Is there a private fix available???

Cheers

Dennis

[Patrick Barth]

Citrix provide us a updates File (Norskale.Common.Data.Agent.Proxy.dll), and this fixes our Problem for new User-Profiles. For existing Profiles, we must use the second Solution from this Article https://support.citrix.com/article/CTX219086
At the moment it seems to work fine.
 

patrick

[Kasper Johansen1709159522]

Can anyone confirm if this issue has been fixed in the latest WEM Agent 1909?

 

I am still experiencing issue when applying registry changes to Software\Policies

[Olly Thompson1709156630]

Any idea when this will be sorted? Currently running 1906 and was going to upgrade to fix until i saw it was still an issue.

Customer has a bundle of registry keys that are sitting in Action Groups waiting to be fixed

[dmohrmann24]

It will be fixed with next WEM release, I guess 1912. For 1909 there is a private hotfix like there is for 1906. 

Dennis