we use Citrix UPM 2503 with VDI 2402 LTSR CU3 - after user logon I see that there are a lot of appx install...

is this a normal behavior?

Microsoft.Windows.CloudExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.BioEnrollment_10.0.19587.1000_neutral__cw5n1h2txyewy Microsoft.AAD.BrokerPlugin_1000.19580.1000.2_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.OOBENetworkConnectionFlow_10.0.26495.1000_neutral__cw5n1h2txyewy Microsoft.Windows.OOBENetworkCaptivePortal_10.0.26495.1000_neutral__cw5n1h2txyewy MicrosoftWindows.UndockedDevKit_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.UI.Xaml.CBS_9.2504.3002.0_x64__8wekyb3d8bbwe MicrosoftWindows.Client.Core_1000.26100.81.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CBS_1000.26100.275.0_x64__cw5n1h2txyewy Microsoft.Windows.StartMenuExperienceHost_10.0.26100.4768_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.ShellExperienceHost_10.0.26100.7462_neutral_neutral_cw5n1h2txyewy windows.immersivecontrolpanel_10.0.8.1000_neutral_neutral_cw5n1h2txyewy 1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.26100.1_neutral_neutral_cw5n1h2txyewy E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.19640.1000_neutral_neutral_cw5n1h2txyewy F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.AccountsControl_10.0.26100.1_neutral__cw5n1h2txyewy Microsoft.AsyncTextService_10.0.26100.1_neutral__8wekyb3d8bbwe Microsoft.CredDialogHost_10.0.19595.1001_neutral__cw5n1h2txyewy Microsoft.ECApp_10.0.26100.4061_neutral__8wekyb3d8bbwe Microsoft.LockApp_10.0.26100.6725_neutral__cw5n1h2txyewy Microsoft.MicrosoftEdgeDevToolsClient_1000.25128.1000.0_neutral_neutral_8wekyb3d8bbwe Microsoft.Win32WebViewHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AppRep.ChxApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AssignedAccessLockApp_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.AugLoop.CBS_1.1126.2131.0_x64__8wekyb3d8bbwe Microsoft.Windows.CapturePicker_10.0.19580.1000_neutral__cw5n1h2txyewy Microsoft.Windows.ContentDeliveryManager_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.NarratorQuickStart_10.0.26100.1_neutral_neutral_8wekyb3d8bbwe Microsoft.Windows.ParentalControls_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PeopleExperienceHost_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.PinningConfirmationDialog_1000.25140.1001.0_neutral__cw5n1h2txyewy Microsoft.Windows.PrintQueueActionCenter_1.0.2.0_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.SecureAssessmentBrowser_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.Windows.XGpuEjectDialog_10.0.26100.1_neutral_neutral_cw5n1h2txyewy Microsoft.WindowsAppRuntime.CBS.1.6_6000.690.32.100_x64__8wekyb3d8bbwe Microsoft.WindowsAppRuntime.CBS.1.8_8000.625.330.100_x64__8wekyb3d8bbwe Microsoft.XboxGameCallableUI_1000.25128.1000.0_neutral_neutral_cw5n1h2txyewy MicrosoftWindows.57242383.Tasbar_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.59336768.Speion_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.59337133.Voiess_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.59337145.Livtop_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.59379618.InpApp_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.CoreAI_1000.26100.7462.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.FileExp_1000.26100.4.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.OOBE_1000.26100.28.0_x64__cw5n1h2txyewy MicrosoftWindows.Client.Photon_1000.26100.10.0_x64__cw5n1h2txyewy Windows.CBSPreview_10.0.19580.1000_neutral_neutral_cw5n1h2txyewy Windows.PrintDialog_6.2.3.0_neutral_neutral_cw5n1h2txyewy AdobeAcrobatReaderCoreApp_24.0.0.1_x64__pc75e8sa7ep4e aimgr_0.20.29.0_x64__8wekyb3d8bbwe Microsoft.ApplicationCompatibilityEnhancements_1.2411.16.0_neutral_~_8wekyb3d8bbwe Microsoft.AV1VideoExtension_1.3.20.0_neutral_~_8wekyb3d8bbwe Microsoft.AVCEncoderVideoExtension_1.1.17.0_neutral_~_8wekyb3d8bbwe Microsoft.DesktopAppInstaller_2025.1021.1948.0_neutral_~_8wekyb3d8bbwe Microsoft.Edge.GameAssist_1.0.3456.0_x64__8wekyb3d8bbwe Microsoft.HEVCVideoExtension_2.4.39.0_neutral_~_8wekyb3d8bbwe Microsoft.MicrosoftEdge.Stable_143.0.3650.75_neutral__8wekyb3d8bbwe Microsoft.MPEG2VideoExtension_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.Office.ActionsServer_16.0.19328.20266_neutral__8wekyb3d8bbwe Microsoft.OfficePushNotificationUtility_16.0.19328.20266_neutral__8wekyb3d8bbwe Microsoft.OutlookForWindows_1.2025.1121.100_x64__8wekyb3d8bbwe Microsoft.RawImageExtension_2.5.7.0_neutral_~_8wekyb3d8bbwe Microsoft.ScreenSketch_2022.2507.15.0_neutral_~_8wekyb3d8bbwe Microsoft.SecHealthUI_1000.29429.1000.0_x64__8wekyb3d8bbwe Microsoft.VP9VideoExtensions_1.2.12.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsCalculator_2021.2502.2.0_neutral_~_8wekyb3d8bbwe Microsoft.WindowsNotepad_11.2507.26.0_neutral_~_8wekyb3d8bbwe MicrosoftWindows.Client.WebExperience_525.31002.150.0_neutral_~_cw5n1h2txyewy MSTeams_25306.804.4102.7193_x64__8wekyb3d8bbwe . Die folgenden Pakete werden entfernt: NULL

I am using the "Directories to synchronize" GPO.

Any help ?

Thanks

Looking at the release notes, this has been a known issue since the 2206 release of Profile Management.

The proposed workaround is to disable the recycle bin or inform users to use shift+delete to permanently delete the folder.

Neither option sounds ideal. How are others handling this?

I’m struggling with implementing Citrix UPM Profile Container together with the FSLogix ODFC Container in order to store the Outlook cache on a file share. After first logon, the VHDX (ODFC_xxxx.VHDX) is created on the share, but once Outlook is opened, the *.ost file is still located in the local profile under AppData\Local\Microsoft\Outlook instead of inside the VHDX container.

In UPM I have excluded the path AppData\Local\Microsoft\Outlook under Profile Container Settings → Folders to exclude from profile container.

Does anyone have an idea or experience with what might be causing this issue, or which settings are required to make this work correctly?

Robert

UPM 2503 + FSLogix 25.06 on XenDesktop 2402 CU1 + W11 24H2

Several users have multiple ProfileContainer_RO.vhdx disks, as shown in the attached screenshot. Could you explain the cause of this and suggest measures to prevent it?

we use XD 2402 LTSR CU1/CU2 and UPM 2503...

Regards Robert

If we use the same Systems (same GPO’s and WEM Settings) but with CU2 everything works as expected for existing Users. Existing users with short and long (more than 11 Characters) sAMAccountNames have no problems. But new User with long sAMAccountName, cannot create the OutlookSearchIndex.vhdx File. The File appears shortly in the Share, and diapers immediately. If this user logs of, “something” has an Handle on the OutlookOST.vhdx (on the Profile-Network-Share (NetApp)). On the CTX-Worker where the User was logged off, you cannot see anything regarding (handle ore anything else) this OutlookOST.vhdx. We cannot delete this Profiles, because of the OutlookOST.vhdx Handle (file in use). No Problems with the ProfileContainer.VHDX!

For Testing we provide a Win2019 Fileserver for the UPM-Profiles. There you can see that the CTX-Worker have a Handle on the OutlookOST.vhdx from the User. This Handle was not closed until you restart the CTX-Worker, ore close the Handle manually.

If a new user has a short sAMAccountName, everything works as expected!

We test with Worker without almost any GPO and without WEM-Settings. We create many new Layers, and test with Systems where only OS and Platform-Layer are provided. Always the same Result.

At the moment we decide to stay on 2402 CU1 for the CTX-Workers. In my opinion this is an CU2 UPM-Bug.

Perhaps someone have the same Problems, or a Solution for this.

Regards

pb

we use Citrix Profile Container (VDA2503) with the following two settings enabled:

• Profile Caching

• Delete locally Cached Profiles at logoff

After the user logs off, the NTUSER.DAT resides on the VDA and the Log says that it is beeing used by another process.

When looking into it via Procmon, the only process accessing the NTUSER.DAT is "UserProfileManager.exe" itself.

We already deactivated Windows Defender and also tested with the delay setting mentioned here: https://support.citrix.com/external/article?articleUrl=CTX216097-unable-to-delete-ntuserdat-files-when-a-user-logs-off&language=en_US

Support Case is running but dragging.

Any ideas from you, guys?

Thanks,
Daniel

in our environment, the terminal servers unfortunately crash sporadically when accessing profile VHDX files.

We have already pulled dumps and analyzed them with Microsoft. Microsoft's statement is that the server crashes unexpectedly when accessing the profile container. However, we have only noticed this behavior when an antivirus program is activated. (Trellix or Defender)

The servers crash randomly, it is also possible that 10 or more users are already logged in and working on them for several hours.

Theoretically, all antivirus exceptions are set, we have also had this checked again.

Has anyone ever encountered this issue, does anyone know of it and can help?

We have a parallel ticket with Citrix / Microsoft and Trellix, unfortunately we are not really making any progress here.

Our environment looks like this:

Persistent Windows Server 2022, MCS cloned via Hyper-V 2022
Citrix VDA 2402 LTSR
Citrix profile container only

I hope someone has a good hint. 🙃

Sebastian

we are experiencing an issue with UPM related to the user temp folder — we are using version 24.11.100.53 along with Profile Container.

Some programs are apparently unable to write correctly to the user's temp directory, such as:

C:\Users\w11xdtest03\AppData\Local\Temp

This also happens, for example, when dragging an email from Outlook 365 into the Edge browser — under UPM, the email file is not written to the temp folder, whereas this works as expected on a "regular" machine.

Other applications that rely on this temp folder also seem to have issues.

It appears this may also be related to the length of the username and the 8.3 short filename format issue. However, we would prefer not to disable this using NtfsDisable8dot3NameCreation, as that could have other side effects.

Can anyone help us understand why Citrix UPM is causing these problems with the user's temp directory?

Best regards,
Robert

we finished our migration from Citirx UPM File based Profiles to Citrix UPM Profile Containers. 
We used * to migrate the whole profile and ecluded appdata\local\temp and the Edge CacheStorage Folders.

The next step was to change outlook from online only, to chache mode (comming exchange online migration). This worked. But I have a big issue with the sync setting.

I used 1 month with the Microsoft GPOs and the Users getting this setting to there registry:

HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\16.0\Outlook\Cached Mode
syncwindowsetting 1

But Outlook ignores it and the sync setting is set to ALL. I tried all combinations with the ms policies but always it is set to ALL and greyd out.

I tried it also with enabling the Citrix Policie "Enable search Indes roaming for Microsoft Outlook users" (but basically I won't have this option enabled, because its creating 2 more VHDX files), but Outlook still ignores the Polcie and is fixed on ALL.

We are on 2402LTSR CU2 on Windows Server 2022.  I Updated the MS365 Policies yesterday.

Any help woulb be nice.

Regards

Is this possible?

What is in use:
- Windows 11 24H2 VM on vSphere
  3 vCPU, 16 GB RAM, 100 GB C-drive, 25 GB D-drive (persistent)
- Citrix VDA 2411 (DaaS)
- MCS, non-persistent VDI
- Citrix Profile Management 2411 (installed as part of the VDA installation)
 (container-based is in use and therefore not file-based)
- Citrix WEM 2411 (WEM Services in Citrix Cloud)
- Citrix Optimizer 3.5.0.1 run
- Crowdstrike Falcon Sensor in use
 (installed in master image with the option VDI=1 NO_START=1)
- AV exclusions applied
- Group Policies in AD
- VDI is Hybrid Joined

When logging in for the first time, so without a profile, after the CPM and WEM part appears for about 45 seconds ‘Preparing Windows’.
With a 2nd and multiple logins this takes about 20 seconds.
(without the Crowdstrike AV solution installed this is 12 seconds)

In the CPM policies ‘Enable AppX package load acceleration’ is set to Enabled.
(in the WEM Tool Hub it can still be seen that the AppxLoadPackage takes about 18 seconds)

I have already tested with the ‘DelayedDesktopSwitchTimeout’ setting and tested it at 0, 1 and 5 seconds, but all without result. The only thing I see then is that the ‘Preparing Windows’ message disappears after 0, 1 or 5 seconds, but that a black screen is still visible until the remaining 20 seconds.

I do notice in the WEM Tool Hub Logon analyzer that even with the 2nd and subsequent logons there is still ‘Firsts logon’ shown, see screenshots.

In the Citrix demo videos you never see the Preparing Windows message, so apparently you should be able to get rid of it.
Who has actually been able to solve this problem, and of course with the question how?

I hope someone on this forum has a solution for this.

The vhdx file remains empty and small in size.

Please assist. 

We use citrix upm2402CU2 vhdx profile containers with the "Enable exclusive access to VHD containers" policy enabled.
Some program starts writing a lot of files to appdata/local/app/logs and the profile grows a lot.
The administrator configures the "Folders to exclude in profile container" policy, adding the "appdata/local/app/logs" path.
In a new session, all data on this path will be deleted after logoff, but the files that have already been saved in vhdx will remain there forever.
The "Logon Exclusion Check - Enabled - Delete exluded files or folders" policy does not work.
Tell me how to delete previously created files in the profile?

Thank you

I'm working with a company that has Citrix CPM 2203. They have a shared virtual desktop setup. For security reasons they have enabled the "prevent access to drives from my computer" group policy. I believe that this is a common security measure used by organisations, particularly with shared environments. However, they also want to deploy OneDrive for Business. The group policy is blocking access to their OneDrive folders.

I understand that later versions of Citrix CPM support OneDrive containers. Is there a simple way to protect the file system against malicious activity but still allow OneDrive for Business to to work? 

What optimizations can be made to load Citrix profiles with Firefox in under 60 seconds?
What are the best practices for loading Citrix profiles with Firefox as quickly as possible?

thx

How can the loading time of Citrix profiles be optimized so that it remains under 60 seconds?
What are the best practices for loading Citrix user profiles as quickly as possible?

How do you do this with large profiles?

thx

please help me

Do you happen to know if this is a workable solution? The customer wants to separate the profile from the user personalization layer. The fact that we are using two different container technologies should work as long as I can exclude the User folders from the UPL. I know this can work with FSLogix.

I have recently started using Citrix UPM 2402 CU1 in the VDI environment but encountered issue with App-V packaged application which is pushed through the sccm and installed on VDIs.

App-V based apps doesn't launch while using Citrix UPM (Container based). I have followed the exclusions in the article Profile Management and App-V | Profile Management 2411 that didn't help.

Any help would be highly appreciated. 

I need to deploy Citrix UPM in DaaS for around 8000 users which will require multiple shares say 10. We have single OU and GPO. Creating multiple OUs and GPOs are not feasible.

Is there any way, I can distribute the users dynamically on multiple file share and can accommodate future onboarding request?

In FSLogix world, we have user-based SID VHDLocation which can be leverage but is there anything similar in Citrix?

We have WEM UPM 2402 And we set Profile Container with VHDX Compaction is enabled. We see the user profiles have large size on the profile server. But when we see on the profile itself om the terminal server the size is much more low. Is there any way to configure UPM to resize the profile to the real size?

has anybody experiences to use UPM with Microsoft SSO and how to set Exclusions and Synchronisation Settings so that it works for Office, Edge, Teams?
(please share your exlusions/synchronisations)

we have the problem that it works not for Edge but for Teams and Office 365 but somethimes also not for Office...

are there any best pratices?

robert

I an seeking assistance with my Container Profiles. I would like to replace our File-Based UPM with containers to address OneDrive Compatibility. 

If we our user logs in we get 2 user directories under users as in screenshot below.

All the VHDXs does actually mount. 

Citrix Support reported this as an issue. Anyone that can confirm this?

We are on 2402 and the VDIs are Win 11.

Thanks in advance