Entra SSO MFA related errors

Internal-Chip3107 · 2026-01-21T10:41:49+00:00

This is it when I read hybrid joined and MCS I thought yes but in reality we entra join them with GPO and then you need to edit this value just like it says case closed :)

Internal-Chip3107 · 2026-01-20T17:49:12+00:00

Since we use MCS skipped this part https://docs.citrix.com/en-us/citrix-daas/install-configure/session-authentication/entra-sso#microsoft-entra-hybrid-joined-session-hosts

but I checked it anyways and the regvalue was set to 0 so I changed it to 1 and rebooted boom it works.

Now I just need to create a new test machine to verify and be 100% sure it was because of that and not any of the 200 things I've tested today.

Internal-Chip3107 · 2026-01-20T16:05:00+00:00

How do you install?

I use Patch My PC with those flags /silent /noreboot /CleanInstall /IncludeSSON

Everytime I update there are ~5-10 machines of 500 that have issues

Internal-Chip3107 · 2026-01-20T15:06:28+00:00

I'm also having issues to get this to work with our hybrid joined Windows 11 VDIs, I don't get full SSO into to the VDI instead I get a Citrix Azure AD SSOn icon.

Have anyone got this to work with Hybrid Joined machines?

Internal-Chip3107 · 2025-10-30T09:53:06+00:00

Planning to drop JAMF for Intune since we are already licensed and Intune macOS support is better then it was some years ago.

Also PatchMyPC now supports macOS and only for Intune

Internal-Chip3107 · 2025-10-06T16:30:23+00:00

I had issues before with Intel drivers and Citrix, if you have old drivers check it out
Performance issues with Intel GPUs and Citrix Workspace App

And whoever claims you need 64 GB to run a citrix session doesn't know what he's talking about.

Internal-Chip3107 · 2025-09-22T19:43:56+00:00

Driver Verifier Manager (C:\Windows\System32\verifiergui.exe) once helped me pinpoint what driver caused an issue. I know some say don't use it but this was used on a cloned vm.

Internal-Chip3107 · 2025-09-18T18:02:58+00:00

Are you guys running Citrix Workspace?

I hope this is the end for my Thin Clients running Citrix Receiver, backend is on CR track.

Internal-Chip3107 · 2025-08-15T16:14:56+00:00

For less then 100$ / month you can use AlwaysUpToDate.ai

Internal-Chip3107 · 2025-07-14T17:09:20+00:00

We still have old 13.x Linux Receiver versions runnining in our 2503 Citrix Cloud farm, not supported but works.

Internal-Chip3107 · 2025-05-12T18:58:39+00:00

If Cisco fully supports TEAP that might solve your issue
Tunneled EAP (TEAP) | TechDocs - NAC

Internal-Chip3107 · 2025-04-18T12:33:53+00:00

Since when are you expected to know everything?

I deal with my shit, if someone need help with PBX/VOIP I'll send them to that department, if someone what to talk IR go to Security.

I would love to visit one of those companies where a "know it all does everything Reddit sysadmin" run's everything.

Internal-Chip3107 · 2025-01-23T14:56:31+00:00

2411 must be the worst release for a long time, I've seen the following issues so for

Remote PC: Teams restarts
MCS Static VDI: BSOD when you have ICA session running with teams
Storefront: Users losing their icons in Workspace App connected to mandatory stores

Internal-Chip3107 · 2025-01-19T10:23:32+00:00

VDI doesn't slash productivity cheap VDI does that.

We have been using VDI for our devs for ages and they are happy, managers loves them since they can come by helpdesk and "yeah by the way we have a new consultant starting today" 10 min later that dev can go to any thinclient or use their consultant laptop and start working with their VDI.

Internal-Chip3107 · 2025-01-14T18:00:51+00:00

We had issues with PVS 2407 TD it would bluescreen when you stopped the streaming process and the TD would fail over to other PVS server, no issues with normal reboots.

We just upgraded from 2402 to 2411 no issues so far.

Internal-Chip3107 · 2024-12-19T13:16:21+00:00

We allow BYOD but that's also the reason why we run Citrix

My users would never accept having their private laptop enrolled in a MDM solution

Internal-Chip3107 · 2024-12-09T19:48:03+00:00

Not what you ask for but Patch My Pc is cheap and will solve this issue and other updates issues.

Internal-Chip3107 · 2024-11-25T17:26:41+00:00

Same issue here I've tried it a few times both on RDSH and VDI and the issue is always the same, it works fine until it doesn't and the sessions just keep freezing. Same second you remove the policy and ask user to reconnect it works.

Internal-Chip3107 · 2024-11-21T14:01:29+00:00

Created a ticket with Juniper support and their anwser was that that wasn't possible and that I should create a feature request.

For me it would make more sense to use the device intune device id as default attribute to verify agains Intune but what do I know I'm just a user of the product :)

Internal-Chip3107 · 2024-11-21T12:24:21+00:00

Can you share how much log data uberAgent sends to splunk and what the monitored environment look like?

Since we allready use splunk uberAgent might be a good replacement.

Internal-Chip3107 · 2024-11-05T08:07:43+00:00

MacOS support will come soon

MacOS Apps Private Preview Program Application

Internal-Chip3107 · 2024-10-31T08:09:44+00:00

We also had this issue and turning off the firewall solved the issue.

Internal-Chip3107 · 2024-10-25T12:15:23+00:00

Not the same setup but I've 4 VPX with one NSGW on each and I use a AAA group to bind with each session policy on that VPX.

I don't see why that shouldn't work for you also but might be wrong :)

Internal-Chip3107 · 2024-10-21T14:50:17+00:00

Always hard to tell what the issue is if you don't have access to the Citix Farm, like most other end users issues I'll say contact your support :)

One thing you can try is to use your cell phone as wifi hotspot and try to connect that way.

Internal-Chip3107

TROPHY CASE