Citrix DaaS

Remove broker user from the cache

March 28, 2025

Contributed by:

There are cases when administrators are unable to remove a broker user from the cache or sometimes when running Get-BrokerUser, the user displays the incorrect SID from AD.

This happens when the user is deleted from AD and recreated but the broker cache still has the previous user SID.

To resolve this, do the following:

Remove the users from Active Directory.
Run Get-BrokerUser for each removed account. Accounts that are not referenced anywhere, do not return any results. For users that are referenced, you get a value after you run Get-BrokerUser. Now, you must find out what resources the user is assigned to and manually remove the users from those resources.

For example:

Find if the user is assigned to an application: Get-BrokerApplication
Find if the user is assigned to an application group: Get-BrokerApplicationGroup
Find if the user is assigned to an access policy: Get-BrokerAccessPolicyRule
Find if the user is assigned to an application entitlement policy: Get-BrokerAppEntitlementPolicyRule
Find if the user is assigned to a desktop entitlement policy: Get-BrokerEntitlementPolicyRule
Find if the user is assigned to a desktop group session linger: Get-BrokerSessionLinger
Find if the user is running any sessions on a VDA: Get-BrokerSession = Find if the user is assigned to a resource in the merged group: Get-BrokerMergedResource
Find if the user is assigned to a group of resources: Get-BrokerMergeGroup
Find if a command is queued for a user: Get-BrokerMachineCommand
Find if the user is assigned to a private desktop: Get-BrokerMachine
Find if the user is assigned to a zone preference: Get-BrokerUserZonePreference

Manually remove the users from the resources.
Run Get-BrokerUser command to confirm the user has been removed from all resources.
Once the user has been removed from all resources, run the following to remove the user from the cache.
```
Update-BrokerNameCache -Users -Purge -UnusedFor 0
 
```

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Remove broker user from the cache

March 28, 2025

Contributed by:

Was this helpful

Remove broker user from the cache

In this article