Microsoft new edge, ready for Citrix terminal serves?

[Sondre Andersen1709159438]

Hi!

Anyone here tested Microsoft new edge in Citrix environment ?

What is the official statement from Citrix, is it supported?

 

Please share important gpo settings, tunings if you have.

 

We are planning to set this in production quite fast when Microsoft release enterprise version of new edge ( have not seen it yet ..)
 

Please share info if you have regarding enterprise official version of edge..

[Jason Stone1709161244]

I came across a good article yesterday thanks to the Carl Stalhood weekly news letter.....

 

http://virtualwarlock.net/microsoft-edge-in-citrix/

 

I deployed it in our test environment and it works well along with the security baseline gpo mentioned in the same article.

 

[Kasper Johansen1709159522]

Hi,

 

That is my blog! :)

Stay tuned for some additional group policy goodness.

[Tim Burgess1709162136]

7 minutes ago, Jason Stone1709161244 said:

Have you checked this blog? (http://virtualwarlock.net/microsoft-edge-in-citrix/) It has some fairly recent edits that may be helpful

 

Thanks for the reply, but that guide only describes excluding from all hooks, that does allow Edge to work, but not for smart cards as the hook is included in the exclude.  

[Kasper Johansen1709159522]

Hi,

 

As the new Edge browser is supported on Windows 7 through 10 and Windows Server 2008 R2 through 2019, I expect it to be supported in Citrix setups as well.

 

I have had it running in Citrix for a while now. Currently there is an "issue" with Citrix API hooks which has to be disabled for the msedge.exe process, otherwise Edge will not start correctly.

 

James Kindon has a good article about it here:
https://jkindon.com/2019/09/17/deploying-brave-and-microsoft-edge-dev-browsers-in-citrix-cvad-environments/

I am currently writing a blog about, both installation and configuration (basic via GPO) of the new Edge browser I am hoping to have it ready within the next couple of days. Basically I am recommending to apply the Edge security baseline GPO and go from there. Keep in mind that the current security baseline GPO is a draft, so expect changes from Microsoft.

 

More info on the security baseline GPO:
https://blogs.windows.com/msedgedev/2019/12/18/security-baseline-draft-edge-79/

[Tyd Ros]

I had hopes that it would be less of a mem hog then google chrome. Not so, a single user is showing showing 3 GB of edge mem being taking.  I guess i need to break out WEM.

[pcrespi938]

Disabling the Citrix API hooks works great, however I noticed if I browse to another Citrix Storefront to launch an application (like our users do) and click on said application (In this instance our Medical Record) Citrix Receiver never loads.  If I use Firefox, Citrix Receiver loads the application as expected.  Has anyone else encountered this?

[Chad Pyle1709158856]

Disabling all hooks via CtxUvi is not a great way to make the browser work.  In a DoD environment, it also disables Smart Card hooking so no authentication may take place.  The only hook that I've found necessary to disable is SfrHook.  Using the CAX Tool ( https://support.citrix.com/article/CTX222592 ) makes it easy to configure.  You'll also see that chrome and firefox are already configured for that hook exclusion, and knowing new Edge is based on chromium makes perfect sense in this scenario. 

[Ard-Jan Verhage]

On 4/16/2020 at 6:55 PM, Chad Pyle1709158856 said:

Disabling all hooks via CtxUvi is not a great way to make the browser work.  In a DoD environment, it also disables Smart Card hooking so no authentication may take place.  The only hook that I've found necessary to disable is SfrHook.  Using the CAX Tool ( https://support.citrix.com/article/CTX222592 ) makes it easy to configure.  You'll also see that chrome and firefox are already configured for that hook exclusion, and knowing new Edge is based on chromium makes perfect sense in this scenario. 

 

I can confirm that only disabling the SfrHook for msedge.exe works on a published desktop with CVAD 1912LTSR on Server 2016.

I only added this key to my master image: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\SfrHook\msedge.exe

[Tim Burgess1709162136]

On 4/20/2020 at 1:16 PM, Ard-Jan Verhage said:

 

 

I only added this key to my master image: HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\CtxHook\AppInit_Dlls\SfrHook\msedge.exe

 

Using 6.5, if i exempt msedge.exe from all hooks it works fine, But disabling from just SfrHook doesn't allow it to load. 

In fact... I've excluded msedge.exe and nacl64.exe from all hooks that the CAX tool would allow me (plus reboot) and Edge still doesnt load. 

 

Does anyone have any further tips please? We need the "Smart Card Hook" working!

 

Thanks.  

[Jason Stone1709161244]

4 minutes ago, Tim Burgess1709162136 said:

 

Using 6.5, if i exempt msedge.exe from all hooks it works fine, But disabling from just SfrHook doesn't allow it to load. 

In fact... I've excluded msedge.exe and nacl64.exe from all hooks that the CAX tool would allow me (plus reboot) and Edge still doesnt load. 

 

Does anyone have any further tips please? We need the "Smart Card Hook" working!

 

Thanks.  

Have you checked this blog? (http://virtualwarlock.net/microsoft-edge-in-citrix/) It has some fairly recent edits that may be helpful

[Roger Eklund]

+1 This doesnt work if you use smart cards.

On 6/30/2020 at 12:26 PM, Tim Burgess1709162136 said:

 

Thanks for the reply, but that guide only describes excluding from all hooks, that does allow Edge to work, but not for smart cards as the hook is included in the exclude.