r/Citrix

Hi everyone,

First off, a huge thank you to everyone who contributed to my last post. While I didn't get that specific job, the prep paid off because I just landed a very similar role! I start early next month, which gives me exactly about four weeks to get up to speed.

The new role relies heavily on Citrix Cloud apart from MS 365 administration.

Since I want to hit the ground running, I'm looking for the best resources to cram and get practical knowledge over the next month.

- Where should I start to get a solid foundation in Citrix Cloud?

- Are there any specific courses, labs, or YouTube channels you highly recommend for hands-on learning?

- What are the absolute "must-know" concepts I'll likely face in my first couple of weeks?

Appreciate any roadmaps, documentation links, or advice you can throw my way. Thanks in advance!

Hi everyone,

First off, a huge thank you to everyone who contributed to my last post. While I didn't get that specific job, the prep paid off because I just landed a very similar role! I start early next month, which gives me exactly about four weeks to get up to speed.

The new role relies heavily on Citrix Cloud apart from MS 365 administration.

Since I want to hit the ground running, I'm looking for the best resources to cram and get practical knowledge over the next month.

\- Where should I start to get a solid foundation in Citrix Cloud?

\- Are there any specific courses, labs, or YouTube channels you highly recommend for hands-on learning?

\- What are the absolute "must-know" concepts I'll likely face in my first couple of weeks?

Appreciate any roadmaps, documentation links, or advice you can throw my way. Thanks in advance!

I'm trying to get an External Task in the cloud WEM Service portal to run on my VDA's but can't get it to work. The external task is triggering a ps1 script that I uploaded into the task it's self. For some reason nothing I do will get the task to trigger. We have Group Policy's settings built into the same configuration set that are applying successfully but not the external task. Task is set to launch at logon and the assignments are set to Domain Users AD group , the same settings as with the Group Policy assignments so I would assume it would trigger. Were using the cloud based WEM web console and the local VDA is using the WEM service not the full wem "Agent" . Anyone have any info or tricks to get external tasks , specifically ps1 script to process ? Thanks

Sometimes you wait all day for a CVE and 5 come along at once.

I have vpx is used as netscaler gateway to terminate full client vpn with citrix secure client,

After successful upgrade to latest version there was a complaint from a lot of users who can't connet vpn with secure client 23.x and 24.x , the client is stuck in loading without authentication prompt.

Only versions 25.x and 26.x works !

Any idea?

TL;DR: Same Windows master image, in-place VDA upgrade from CVAD 2203 CU4 to 2507 LTSR. Since the upgrade, our radiotherapy contouring app (RaySearch RayStation) shows the previous patient's CT for a moment before redrawing, and the smart brush stutters during contouring. Reverting to 2203 fixes it. I've ruled out client, OS, GPU hardware, vGPU profile, app-side GPU rendering, and the entire HDX encoder/visual-quality layer. The only variable that correlates with good vs. bad is the VDA version. Looking for others who've hit this with GPU 3D / medical imaging apps on VDA newer than 2203, and for any capture/present-layer knob I'm missing.

Environment

• App: RayStation 2025 SP1 (radiotherapy treatment planning; contouring on CT/MRI — pixel-perfect fidelity matters here)
• Single-session VDI, NVIDIA vGPU, Q-profile (RTX vWS) throughout
• GPUs tested: RTX 8000 (old hosts) and L40S (new hosts) — both affected on 2507
• Good baseline: Windows 10 + CVAD 2203 CU4 — flawless for years
• Broken: CVAD 2507 LTSR, both via in-place VDA upgrade on the same Win10 image, and on a brand-new, clean Windows 11 build (NVIDIA 582.16). Also briefly seen on 2402, but I tested 2507 far more thoroughly.

(Context / why I can't just stay on 2203: see my earlier thread (https://www.reddit.com/r/Citrix/comments/1ujqmvb/wem\_2603\_agent\_fails\_with\_reading\_encrypted\_data/) Short version: in a validated medical environment I'm tied to what the vendor validates, and staying frozen on 2203 indefinitely isn't an option. 2025 SP1 on CVAD 2507 is vendor-validated, so this should work.)

Symptoms

1. Open patient A → Patient Modeling → CT shown. Close A, open patient B → Patient Modeling → I briefly see A's CT, then it updates to B. Clear delay before the correct images appear.
2. Smart brush stutters/lags during contouring (was buttery smooth on 2203).
3. In a separate 2D viewer (Elekta Monaco) scrolling through slices shows low-res first, sharpening if you pause — classic build-to-lossless behaviour, but see below, that's not the whole story.

What I've ruled out (with testing)

• Client / CWA version — reproduces on every endpoint type (Linux Wyse thin clients, thick Win11), all my test runs from the same Win11 machine.
• Guest OS — Win10 and Win11 both affected.
• GPU hardware — RTX 8000 and L40S both affected on 2507 (this pre-dates our L40S migration, so the GPU swap is not it).
• vGPU profile — Q-series in all cases.
• App renders on GPU — nvidia-smi shows RayStation.exe as C+G; nvidia-smi dmon -s u shows sm clearly peaking when Patient Modeling renders. No software-rasterizer fallback.
• Entire HDX encoder / visual-quality layer — tested Use-when-preferred (selective), For-the-entire-screen (full-screen H.265), Always Lossless (pixel-perfect toggle), and For-actively-changing-regions (i.e. Intelligent Build to Lossless disabled per Citrix docs). None of them changes the behaviour.

Graphics Status Indicator, 2203 vs 2507, identical policy

Nearly identical readouts on both: H.265 (Yuv444), hardware encoding enabled, Build to Lossless, full-screen. The one visible difference: 2203 shows an "HDX 3D Pro: Enabled" line; 2507 does not (shows "Not applicable" in pixel-perfect). I suspect that's just the relabel to "HDX Graphics" rather than a functional flag, but noting it.

nvidia-smi dmon -s u during a patient switch, both versions

sm peaks where rendering happens; enc sits at 0 the whole time on both (so no measurable NVENC difference, likely CPU-encode or too-low-to-register). GPU-side, I see no difference between the good and bad version. Which is itself telling: the difference isn't in how much GPU work happens.

Where I think it lives

Since every encoder choice is exhausted with no effect, and the app demonstrably renders on the GPU on both versions, my working hypothesis is the frame capture / present layer of the VDA — the bit between "app has drawn on the GPU" and "encoder gets a frame to send" — which was rebuilt across versions. The stack changed a lot after 2203: HDX 3D Pro → "HDX Graphics", Optimize for 3D graphics workload is now deprecated in favour of a Full Screen Encoder, and Intelligent Build to Lossless is default-on for VDAs with a GPU from 2503+. The stale-previous-frame symptom in particular smells like a change-detection / region-invalidation timing difference upstream of the codec, not a compression setting.

What I'm asking the hive mind

1. Anyone running GPU-accelerated 3D / medical imaging (RayStation, MIM, Eclipse, PACS, CAD) seeing display regressions after moving off VDA 2203 to 2402/2503/2507?
2. Is there a non-documented VDA-side registry knob for the capture/present cadence or damage-region handling that reverts the pre-2503 behaviour? Encoder policies don't touch this.
3. Any known-issue / LCM number I've missed? The 2402/2507 known-issues lists don't mention anything matching.
4. If you fixed something similar — what actually moved the needle?

I have a clean reproducible A/B (same image, only the VDA version differs) and I'm opening cases with both Citrix and RaySearch, but I'd love to hear from anyone who's walked this path. Happy to share indicator screenshots, dmon captures, or policy exports.

English isn't my first language, so I used AI to help write this up clearly — the technical content, testing and findings are all my own.

I am rebuilding my Citrix and going through now a very annoying problem. When users try to use the HTML5/Light Version, they receive an error when opening the Desktop. but if they refresh the storefront and try again, works just fine. Looking at the logs after downloading from the page, I see the problem is related to web socket error. If they download the ICA, and opens the file with Citrix receiver, works just fine. This HTML5 version is driving me crazy. Has anyone seen this before?

Issue-
We’re seeing an issue with New Teams when users share a single window instead of their full screen. Sharing works normally until the user resizes the shared window, at which point visual glitches and random artifacts begin to appear. Once this starts, it can be temporarily resolved by resizing the entire VDI session (switching between full screen and windowed mode), which forces all windows to redraw and restores normal behavior until the shared window is adjusted again. If the user resizes the shared window, triggers the issue, and leaves it in that state, the problem eventually escalates and causes the entire VDI session to crash, forcing the user to reconnect.

Details-
Windows 11 25H2 Persistent desktop
HDX Optimized Teams 26149.1205.4798.6437 in VDI.
CVAD 2402 CU3
Hardware Acceleration Disable via

We recently came off a 5 year legacy DaaS licensing sku that no longer exists, and moved to the Universal Hybrid Multi-Cloud sku. With our legacy licensing sku it was per user/device and our site was configured as such in Daas. With this new Hybrid Multi-Cloud I can't find anywhere if it is treated as per user/device or concurrent. We have user's able to generate sessions but the licenses are not being checked out or reflected that there are being used in the cloud DaaS license portal. Does anyone know if Hybrid Multi Cloud is considered concurrent or user/device? We're running a full cloud DaaS site with the cloud based license portal , on prem VDA virtual apps and desktops, seamless virtual app sessions only. Thanks

Just when you thought the experience dealing with support was maddening enough, they go and end phone support on June 9th and force all support activity though a chatbot.

Nothing says 'Customers First' as a mindless chatbot.

Hey all, hoping someone with PVS experience can help.

Setup: Citrix PVS, master image in Standard Image Mode, targets boot from a shared read-only vDisk with a write cache. The problem: when stuff gets written to C:, the write cache VHDX grows and grows, and once it gets too big the machine hangs/freezes. Classic write cache exhaustion, I think.

I understand the cache only grows and never shrinks until reboot, so I've been trying to track down what's generating all the writes. So far I've identified a few usual suspects:

• Antivirus agent continuous log writes plus pattern/definition churn
• Vulnerability assessment agent writes logs and job/scan result data, plus a filesystem-walker process that crawls the disk for assessments
• Software distribution / management agent cache and state data

What we've already done:

• Redirected several log and cache folders to a separate persistent local drive via symbolic links, to keep them out of the write cache. This helped, but the VHDX is still growing more than I'd like. So there are clearly other writers I haven't pinned down yet.
• Defragmented C: in the master image before sealing
• Various DISM cleanup commands (component store cleanup etc.)
• Checked and disabled all auto-updates (Windows Update, Store, and the agents own self-update mechanisms)
• Disabled unnecessary scheduled tasks

What I'm trying to figure out:

1. Best way to actually measure which folders are growing in the write cache. I tried Process Monitor but it keeps crashing and the output is overwhelming. I can't narrow anything down with it.

Any pointers appreciated. Thanks!

https://docs.citrix.com/en-us/citrix-workspace-app-for-linux/whats-new#removal-of-arm64-support

No download anymore for ARM64: https://www.citrix.com/downloads/workspace-app/linux/workspace-app-for-linux-latest.html

Why do they do that???

It totally sucks.

Hi, I have a client running CVAD 2507. In StoreFront, the enabled authentication methods are AD username and password, Domain pass-through, and Pass-through from Citrix Gateway**.**

When users try to add the store in Citrix Workspace using the external URL, for example https://access-citrix.com, and they are on the internal network, they are still routed through ADC, where 2FA is required. The requirement is that internal users should access StoreFront directly, without going through ADC.

My understanding is that I need to create an internal DNS record for access-citrix.com that points to an internal VIP/load balancer, which then points to the StoreFront servers.

My question is:

• should I also change the Store URL, which is currently something like https://storefront.domain.local, to https://access-citrix.com?
• Also, in this scenario, what should I configure as the internal and external beacons?

Thanks for your help!

Is anyone running into issues with newer multi-tenant deployments? It doesn’t appear that there’s a way to scope Citrix policies to a specific tenant. As a result, tenant-only administrators can see and update all policies across the entire multi-tenant environment.

This creates a significant security and operational risk. Based on the documentation I’ve reviewed, there doesn’t seem to be a workaround for this limitation.

Has anyone come up with a creative solution? At the moment, I can’t use tenant administrator roles because they provide cross-account visibility and management, which isn’t acceptable for our use case.

Hi everyone

I would like to know the best troubleshooting steps for this situation.Hi everyone,
We have a Citrix Virtual Apps and Desktops environment with Citrix ADC / NetScaler Gateway.
On the ADC Gateway vServer, we configured two STA servers, which are our Delivery Controllers:

DC1 - Delivery Controller / STA - UP
DC2 - Delivery Controller / STA - DOWN
The issue is only with DC2. DC1 works normally.

What I already checked:

- Citrix services on DC2 are running
- Delivery Controller DC2 is active in Citrix Studio
- Firewall rules look OK
- No obvious network block between ADC and DC2
- DC2 is reachable from the network

In ADC / NetScaler, the STA status for DC2 is still showing DOWN.

I would like to know the best troubleshooting steps for this situation.

I am looking for help from the pros and wondering if there is a Citrix discord or slack channel I can join? I searched and results were for Citrix community site and I didn't see one listed there.

Does anyone know how to lock my citrix work account without getting caught?

I want to get Citrix CCA certification but on-demand training requires an account for that my company needs to be a customer. 

Self-paced labs by Layer8 cost $1750 while instructor-led training cost $5000. This is a joke right?

This seems like citrix doesn’t want relevant in a market.

Hi,

we have to move Citrix Worker to another LUN within VMware.

So for MCS i would just create a new MC / add another Hosting Connection.

But what is the way for PVS. Do i even need to consider the Hosting connection? In the newer version we needed to create the MC within the PVS Console and the hosting connection is mandatory.

Thanks in Advance!

I feel stupid asking this but

Some background:

Hybrid CVAD DAAS environment MCS persistent clones from a golden image.

Is it impossible to patch these with a MSU downloaded from MS? I have tried everything and they fail no matter what. I have not dug into the logs too much yet but I did notice that in CVAD virtualization station it says "not able to receive updates from windows update"

Maybe this is why? though I am downloading the MSU and trying to patch locally...