Jump to content
Welcome to our new Citrix community!
  • 0

PicaSessionAgent reverting DisableLockWorkstation registry setting at disconnect time


JUSTIN RYERSE

Question

For VDI based on Server 2016 running 1912LTSR VDA against an 1808.2 delivery controller,  I'm setting HKLU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation  via group policy to disable the lock buttons in the Windows UI.

 

This works fine upon first connection to a desktop. However, after the session is disconnected, subsequent re-connects show the lock buttons.

 

Upon further investigation, the registry key(HKLU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation  ) is being reverted from 1 (enabled) to 0 (disabled) and it is happening simultaneously to the disconnect. Meaning that it isn't GPO or something else. After turning on registry logging , C:\Program Files\Citrix\ICAService\PicaSessionAgent.exe  is making the change.

 

Here is the event text:

A registry value was modified.

 

Subject:

Security ID:                SYSTEM

Account Name:                Desktop1$

Account Domain:                ALPINESKIVILLAGE

Logon ID:                0x3E7

 

Object:

Object Name:                \REGISTRY\USER\S-1-5XXXXXXXXXXXXXX-XXXX\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

Object Value Name:        DisableLockWorkstation

Handle ID:                0x340

Operation Type:                Existing registry value modified

 

Process Information:

Process ID:                0x718

Process Name:                C:\Program Files\Citrix\ICAService\PicaSessionAgent.exe

 

Change Information:

Old Value Type:                REG_DWORD

Old Value:                1

New Value Type:                REG_DWORD

New Value:                0

Link to comment

2 answers to this question

Recommended Posts

  • 0

We are seeing the same thing, when users disconnect from VDI. picasessionagent changes the regkey from 1 to 0. We were able to use procmon to see this was happening. Anyone find a fix? 

 

From Procmon Log............

PicaSessionAgent.exe

1680

RegSetValue

HKU\SID####\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableLockWorkstation

SUCCESS

Type: REG_DWORD, Length: 4, Data: 0

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...