vda server 2016 users unable to log off

[Björn Schläfli]

Virtual Apps 2203

VDA multi-session 2203 CU2

WEM 2203

W2k16

 

Every now and then we have an issue with some of our vda servers. Users are unable to log off completely. Server logs a lot of 7011 events in event log (Services not responding for ....ms). Citrix Director and Studio shows the user as connected. In task-manager the affected users on this server are not visibile. Searching for this userid in process explorer shows some left handles under system context like WEM service, lsass. CPU and RAM have low load. Log off these users in task-manager, Studio or Director has no effect. Restarting WEM services, UPM service has no effect. 

I'm able to enable maintenance mode and change the hidden attribute of these users to true, so they are able to logon to another server again.

The only way at the moment to fix this is to reset the virtual machine.

[Jeff Riechers]

Known issues with 2203.  

Adding the following to the image should fix it.

 

 

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Ica\GroupPolicy] "EnforceUserPolicyEvaluationSuccess"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Reconnect] "FastReconnect"=dword:00000000

[Björn Schläfli]

Thank you for your input.

FastReconnect isn't valid for server 2016.

EnforceUserPolicyEvaluationSuccess should be fixed with 2203 CU1 (Citrix fixed issues in edocs). I use vda 2203 CU2. 

This issue existed before with 2103 and 1912. Golden image has been completely new set up.

[Jeff Riechers]

I know it is supposed to fixed in CU2, but to be honest, I have still had to add those registry entries to CU2 machines.

[Björn Schläfli]

I've had this issue this morning on my new set up server 2022 multi-session vda with vda 2203 cu2, where EnforceUserPolicyEvaluationSuccess, FastReconnect and DisableGPCalculation are set (including vda reboot). This issue CTX338807 is not fixed.

[Björn Schläfli]

found this CTX477137 right now. 

[Björn Schläfli]

but this is strange. The suggestion is to disable the setting, which is equal to not configured, which is dword 0. That should be set to enabled 1, shouldn't it?

[Björn Schläfli]

tested the suggestions from CTX477137 enabled and disabled. Not working.

Reconnect is not successful if a user disconnects the session and immediately reconnect. If the user waits for a few seconds the reconnect works.