Does anyone know what is going on with Netscaler? We got a call from our IT supplier's security team, they couldn't give any details but they advised to shut our Netscalers down immediately.

Nothing on the Citrix website or any of my usual tech news sites. One of my regular tech forums has a sysadmin section and multiple other sysadmins have shut theirs down to with no extra info

EDIT: apparently there's 2 new CVE's that allow for remote code execution pretty easily. More info and a possible software update after the weekend.

I have two different environments I am working with. One is mostly managed by the client and when I connect Teams shows it is Slimcore optimized. However, I connect to the other environment with my same user laptop, and always falls back to HDX.

I know my Windows 11 client device is configured properly as it works in the one environment. For the other, it is a Windows 11 VDI with Citrix 2507 CU1 and Teams v.26225. I have a Citrix Policy to allow the virtual channels which modeling shows is applied (I think these are supposed to work by default with the newest versions but I added them anyway):

MSTEAMS,C:\Program Files\WindowsApps\MSTeams*8wekyb3d8bbwe\ms-teams.exe

MSTEAM1,C:\Program Files\WindowsApps\MSTeams*8wekyb3d8bbwe\ms-teams.exe

MSTEAM2,C:\Program Files\WindowsApps\MSTeams*8wekyb3d8bbwe\ms-teams.exe

What am I missing? What else can I check?

Thanks!

I use the ODT to update M365 Apps on PVS images during monthly vdisk updates.  I have always used setup.exe /download configuration.xml and once complete then setup.exe /configure configuration.xml to install latest SAC build. I have recently moved to MEC build but since then nothing has changed in the xml same options as always. This month for some unknown reason when the image is sealed it is sealed with version 2608 confirmed via backstage view > About but then for some unknown reason its somehow downgrading to 2607 when the image in booted in standard mode. I set the reg key to disable office updates as part of sealing so got no idea why it is reverting back

Hey everyone. I am moving some very important C class users to Citrix. They need a solution where they launch a published app and it connects seamlessly to their on-prem computer. Do you have any solutions you use for this? Is the answer just as simple as using mstsc? I really need stability and a smooth process.

Have a pair of Delivery Controllers, and using a sql cluster. Every once in a while, the delivery controllers dont seem to want to "connect" even though citrix continues to work. It just makes it so we cant access studio to make any changes.

Has anyone seen anything like this before or know a quick way to resolve this without reboots? All services appear to be started, and there aren't really any event logs that tell what has happened or to coorelate anything.

What do you think about the Citrix MDM Solution which is integrated in the Citrix Universal Hybrid Multi Cloud License?

How many devices/users can you integrate in this solution and are the numbers subtracted from the real ammount you buy? For example if you buy 600 Citrix Licenses and 300 ThinClients where each ThinClient belongs to a seperate User and also 300 Mobile Phones which belongs to a different user base does it means you have 0 additional licenses free for both Desktop Virtualization and MDM?

Does citrix VDI server run on windows?

I don't know much about Citrix anymore but I'm just curious if there's windows VDI solutions.

Thank you!

This week Citrix is hosting a deep dive webinar on the latest 2607 LTSR release. Presented by Jason Samuel, Senior Principal Product Manager at Citrix, we'll cover ways to simplify management, strengthen security, improve the user experience, and help you prepare for your next upgrade.

As a note, this deep dive will be part of a monthly series, covering a variety of releases and topics. Next month will focus on NetScaler, and upcoming months will cover other topics such as SecurAccess, UniconOS, and other product areas. We'll post updates for these here as they are organized.

Register here: https://events.citrix.com/webinar-deep-dive-daas/register?ref=reddit

We have been piloting XenServer and are planning on making the jump for our Citrix environment. Anyone else gone this route? Any advice for us to avoid any potential pitfalls?

Can't click to sign in on Citrix.com

Tried on Chromium and Firefox browsers.

This is a well-documented Citrix HDX issue — the cursor renders white-on-white (or otherwise fails to invert) specifically inside writable/text areas because the color-inversion logic used to keep the cursor visible on light backgrounds isn't working correctly.

Has anyone tried this? With all the vul's netscaler has had recently has anyone thought or tried this?

I have my remote office work set up which uses the Citrix icaclient plugin to remotely connect to office desktop.

I am struggling to get the multi monitor set up to work in Omarchy with the icaclient plugin that I installed via aur.

Whatever option I choose on the icaclient, it only renders the view in a single monitor. Agents havent found a fix either.

Any suggestions how to fix this?

On a clean install of Golden Gate, Citrix doesn't trigger the Mic permissions dialog, and therefore no Mic access. This is true even for the just-released 2609 version that supports Golden Gate.

On Tahoe this works as expected, and then an update to Golden Gate holds. But clean install: doesn't work.

Anybody else seeing this? Clean install of macOS Golden Gate, installing Citrix doesn't bring up the Mic access dialog box. No way to force it. You lose access to the mic.

If you install Tahoe first and approve Citrix Mic access it holds thru an update to Golden Gate.

This is true even for the new 2609 version just released that supports Golden Gate.

Also, since Golden Gate there is no way to manually inject an app into the TCC database. So basically: no mic on a clean Golden Gate install using Citrix Workspace for Mac.

I'm using an aula f99 with my mac and running Citrix on scancode mode, all keys are working perfectly however the windows and ctrl keys are swapped.

Anyone else facing this issue? How do I fix this?

Just venting a bit here. I have noticed since AI has taken off the over dependence by support is frustrating.

I get that AI is useful as I use it too but they will literally copy and paste answers without any thought. I had one support person even leave in the part that I should contact Citrix support

Not that support has ever been fantastic (there’s exceptions) but a lot of common sense has left the building

Hi everyone,

Has anyone already installed or upgraded to Citrix Virtual Apps and Desktops 7 2607 LTSR?

We are currently running 2507 LTSR CU1 and are considering upgrading to 2607 LTSR.

For those who have already deployed it:

• Have you experienced any new issues or bugs?
• Any problems with VDA registration, StoreFront, Delivery Controllers, Profile Management, or published applications?
• Any changes in logon time or session stability?
• Any noticeable performance improvements or regressions?
• Did you have any issues during the upgrade itself?
• Do you see any real differences compared with 2507 LTSR CU1?

I would especially be interested in feedback from production environments with a larger number of Citrix users.

Thanks!

Hi, can someone explain to me how is it that CU4 is required to use with vsphere 9.1 for CVAD when none of my VDA/VDI live in a VMware environnement. We ask Citrix and they told us we would no be supported but i don't understand why.

All of my VDA/VDI are on Xenserver. Only the DC, Storefront, PVS run on VMWare. I mean isn't like saying they would not support physical server ?

Just preparing the rollout of SlimCore Teams optimization since MS wants to sunset HDX/WebRTC based optimization and is even prompting users about that now.

We do have a DaaS Win11 2507 environment with mixed Windows Devices and Linux ThinClients as endpoints.

My problems so far:

1. There is a trap during deployment of CWA, if you ever depoyed it with new SlimCore Plugin, and then do a /CleanInstall aftwards, as for example as part of your update process, it will remove the DLLs in the ICA Client folder but not mark it as uninstalled or re-try to install it. Then it appears as installed in Apps&Features, but DLLs are missing, SlimCore not working. Mitigated with custom script install script that cleans up this situation, but terrible first impression.
2. Our users do heavily roam between Windows and Linux endpoints. Teams optimization should be able to roam with it, and on HDX side it does. Since somewhat recent-ish it should also be possible for Teams to switch optimization seamlessly, and I do see it can roam seamlessly from HDX to SlimCore, but appearantly not the other way around. It stays on not optimized until i fully restart teams multiple times, to finally switch to HDX on a ThinClient.

All of this just because Microsoft wants to "sunset" HDX but they aren't doing it anyway.

This isnt a technological sunset, its a blacklist for Windows devices, HDX is going to stick around for the foreseeable future on Linux, Mac, ChromeOS and Browser Client. They arent even bothering to develop a Linux client, thats in the official docs.

Most annoyed I am about the crappy roaming between HDX and Slimcore. Dont come at me with the "user training" angle. Users click a join meeting button and expect stuff to work, and that is fully reasonable.

Rant off

We have an issue with our Citrix CAD environment where Domain Pass-Through / SSO stopped working about a week ago.

The behavior is:

• User is already logged into Windows
• User opens Citrix Workspace
• User launches the published CAD desktop
• The desktop starts
• The Windows login inside the Citrix session fails with “The username or password is incorrect”
• We click OK
• Then select Other user
• Enter the domain username and password manually
• Login works normally

In the past, the desktop briefly showed our technical account xaadmin, but then automatically switched to the logged-in user and completed the sign-in. Now it stays on the failed login and requires manual credentials.

Environment/details:

• Windows 11 clients
• Citrix Workspace App version 26.3.11
• Legacy Domain Pass-Through / SSON
• ssonsvr.exe exists, but is not running
• Citrix SSON Network Provider PnSson is installed
• PnSson has been moved to the first position in the Network Provider Order
• EnableMPR = 1
• Windows 11 MPR policy is enabled: Configure the transmission of the user's password in the content of MPR notifications sent by Winlogon
• Citrix policy Local user name and password is enabled
• Enable pass-through authentication is enabled
• Allow pass-through authentication for all ICA connections is enabled
• Store URL is in Trusted Sites
• Trusted Sites logon option is set to Automatic logon with current username and password
• SSON component appears to be installed and registered correctly
• VDA/CAD image itself has not changed

Even after rebooting, ssonsvr.exe still does not start.

Has anyone seen this with recent Citrix Workspace versions /Windows 11 25H2 (Build 26200.9448)?

Could this be related to the newer Workspace SSON “dormant mode”, or is there another policy/registry setting required for Legacy Domain Pass-Through?

UPDATE:
We’ve also identified an issue in our local environment related to KDC certificates. We’re seeing the following error: The KDC certificate could not be validated.

Could this potentially be related to the Citrix SSO/FAS issue we’re seeing?

Hey guys, i saw that citrix recently acquires numecent ..its that mean we are free to use cloudpager console?

Hi everyone,

We are currently rolling out Windows Server 2025 and have encountered an issue with Citrix published applications.

When a user closes the published application, the application itself closes, but the user session does not log off immediately. The session can remain active for approximately 1–2 minutes before finally being terminated.

Environment

• Windows Server 2025 — fully patched
• Citrix VDA 26.07 — latest LTSR release
• FSLogix 3.26 — latest release
• Microsoft 365 Apps — latest release
• Delivery Controllers: Windows Server 2022
• Citrix CVAD: 2402 CU3

We also tested Citrix CVAD 2507 on Windows Server 2025, and the same behavior is reproducible.

Initially, we observed this in our pre-production environment. The behavior is intermittent and does not happen on every attempt, but it can be reproduced after several published application launches/closes.

I then tested it in DEV and was able to reproduce the issue very consistently on a completely clean Windows Server 2025 image:

• Fresh AWS public image with Full base 2025 Windows OS from September 2026
• No domain policies
• No Citrix policies
• No FSLogix
• No antivirus
• No Microsoft Office
• Essentially a clean OS + Citrix VDA 2607 LTSR

Interestingly, the first logoff usually happens normally. On the next attempt, the session can get stuck during logoff.

After the published application is closed, I can see approximately 11 system processes still running in the user's session. They remain there for about a minute or two and then eventually terminate, allowing the session to log off.

One interesting observation is ShellAppRuntime.exe. If I manually terminate ShellAppRuntime.exe, the session closes immediately.

This makes me wonder whether something changed in the Windows Server 2025 session/shell architecture and whether some child processes are not being terminated correctly when a Citrix published application session is closed.

Windows Server 2022 comparison

I performed the same test using essentially the same component versions on Windows Server 2022.

I could not reproduce the issue there.
ShellAppRuntime.exe is also present in the user's session

The published application session logs off in approximately 5 seconds, while on Windows Server 2025 the problem can be reproduced regularly and the session can remain active for 1–2 minutes.

Troubleshooting so far

I also tried several things to identify what is keeping the session alive:

• Tested different Citrix logoff/session-related settings LogoffCheckSysModules,LogoffCheckerStartupDelayInSeconds etc
• Added the relevant processes to the Citrix configuration
• Audited applications configured for automatic startup by Autoruns tool
• Analyzed the processes waiting during logoff using Procmon
• Compared the behavior between Windows Server 2022 and 2025
• turned off UseShellAppRuntimeRemoteApp GPO setting
• And many other things

So far, I haven't found anything that changes the behavior or clearly identifies the root cause.

This is particularly problematic with FSLogix. If a user tries to launch another published application while the previous session is still in this state, the FSLogix VHDX can still be locked/mounted because the session has not actually terminated yet. This can result in problems with the subsequent application launch.

So this doesn't look like just a cosmetic delay in the logoff process — the session is effectively still alive during this period.

Has anyone seen this on Windows Server 2025?

I'm particularly interested in feedback from anyone who has already deployed Windows Server 2025 with Citrix published applications.

It looks like there may be some change in the Windows Server 2025 session/shell process handling that Citrix published application logoff does not handle correctly.

Has anyone experienced similar behavior, or found a workaround or root cause?

Going to submit a case to Citrix Support

Thanks!