Product documentation
Citrix Virtual Apps and Desktops
Current Release Service 2507 LTSR 2411 2407 2402 LTSR 2311 2203 LTSR

Troubleshooting

August 7, 2025
Contributed by: 
C

Troubleshooting session sign-out issues with Published Applications

When publishing applications, only the main executable file for the published application is specified. However, some applications might produce additional (child) processes that run in the background and are not closed by the corresponding main executable file when the main published application is closed. Additional processes might also be created, from scripts that are executed, or from specific registry keys, like Run and RunOnceKey. These applications can prevent a graceful sign-out, resulting in lingering or hanging sessions and might result in the session not closing and the user being signed out.

In this case, you need to reset or exit these sessions using Citrix Director.

To help identify and troubleshoot sessions not being signed out properly, Citrix has made three registry entries available. Identifying and troubleshooting of session not being logged off properly due to these issues is a three-step process:

  1. Identifying which sessions have published applications are holding up a graceful sign-out

  2. Identifying for those published applications if they produce any additional (child) processes

  3. Add these processes to a specified registry entry to prevent them from holding up sign-out

Step 2: Identifying for those published applications if they produce any additional (child) processes

Once a published application is identified to hold up a graceful sign-out, the next step is to determine if this application produces additional processes when running.

You can read HKCU\Software\CitrixVolatile\Seamless\Sessions\[ID]\LogoffCheckerBlockingProcess to determine if any processes are blocking a graceful sign-out when a published application is closed.

In the following example, the key LogoffCheckerBlockingProcess contains the following entries:

PhoneExperienceHost.exe
SkypeApp.exe
SkypeBackgroundHost.exe
<!--NeedCopy-->

These processes have held up the graceful sign-out.

Note:

Replace the [ID] with the correct session ID for the session you want to check.

Step 3: Add these processes to a specified registry entry to prevent them from holding up sign-out

You can add these processes to the following registry keys to prevent them from holding up sign-out in future sessions:

Add the process file name to the following registry key:
Caution! Refer to the Disclaimer at the end of this article before using the Registry Editor.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI
Value Name:LogoffCheckSysModules
Type:REG_SZ
String:MyAppName.exe
<!--NeedCopy-->

More information about LogoffCheckSysModules, see Graceful logoff from a published application renders the session in an active state.

Step-by-step troubleshooting guide

  1. Start the remote registry Service under the VDA under test:

    1. In the Control Panel, select Administrative Tools > Services.

    2. Right-click Remote Registry Service and select Properties.

    3. Under Startup Type, select Automatic from the drop-down menu.

    Published app registry

  2. Turn off the Windows Firewall on the VDA under test or create an inbound firewall rule to enable port 455:

    1. In the Control Panel, select Windows Defender Firewall > Advanced Settings.

    2. Right-click Inbound Rules and select New Rule.

    3. In New Inbound Rule Wizard, select Port.

    4. On the Protocols and Ports page, select TCP and Specific Local Ports. Enter 445 as the local port.

    5. Select Allow Connection on the Action page.

    6. Select the firewall profiles that you want to apply the new inbound rule.

    7. Name the firewall rule and select Finish to exit New Inbound Rule wizard.

      Published app firewall port

  3. From another VM on the same domain (it could be DC, DDC, or another VDA), run Regedit and connect to a remote registry.

    Published app registry editor

  4. Enter the IP address of the VDA under test and click OK. The regedit tree must display branches for the VDA under test.

    Published app regedit

  5. Open the Command Prompt published application.

    Published app manage

    The Command Prompt app is displayed on Citrix Workspace.

    Published app cmd prompt

  6. Open Connection Center on the client. This is used for monitoring when a session is signed out, after closing an opened seamless app. We can see in the following image that the Command Prompt process c:\Windows\system32\cmd.exe is active on the remote VDI.

    Published app connection

  7. From the VDA where regedit is running, go to the following remote IP location: HKEY_USERS\S-1-X-XX-XXXXXXXX-XXXXXXXXXXX-XXXXXXXXXX-XXXX\SOFTWARE\CitrixVolatile\Seamless\Sessions\X\

    Note:

    This path changes every time you open a new session.

  8. There are two keys to read here (do not change them here): LogoffCheckBlockingProcess and LogoffCheckerBlockingVisibleProcess. These keys display any programs that are blocking sign-out. The first one must display C:\Windows\System32\cmd.exe since that was open and has not been closed yet.

    Note:

    LogoffCheckBlockingProcess and LogoffCheckerBlockingVisibleProcess must not be manually edited. Manually editing these registry values could lead to unstable sessions.

    Published app 2

  9. Click X in the upper-right hand corner to exit Seamless CMD.

  10. Check the connection center to see if the session closes. It may take up to 30 seconds to close. If it closes, there have been no applications or processes that have prevented a graceful sign-out.

    Graceful signout

  11. If the session did not close, refresh the regedit output with F5.

  12. Check the contents of LogoffCheckBlockingProcess and LogoffCheckerBlockingVisibleProcess again. CMD must no longer be present but there should be another listed process. Whatever process is currently blocking session sign-out must be displayed here.

    In this case, Notepad.exe is open from the published command prompt before the command prompt was closed and this remote notepad process is holding up a graceful sign-out.

    Regedit

  13. Make a note of the path to this executable, and which key it appeared in, and enter it in the following registry key, under the remote tree:

    • If it appears in LogoffCheckBlockingProcess: HKLM\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWILogoffCheckSysModulesInternal
    • If it appears in LogoffCheckerBlockingVisibleProcess: HKLM\SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWILogoffCheckVisibleSysModules

    Note:

    If there is already one or more entries in the key, add a comma to the end and put the new entry after the comma.

    Regedit-final

  14. Sign out from the session from the connection center on the client, and re-open the Remote Application.

  15. Repeat steps 9-16 until the session is signed out automatically within 30 seconds of closing the Remote Application.

    Note:

    After troubleshooting, revert the temporary Firewall changes to allow remote registry access if needed.

How to modify LogonUI to view Windows disclaimer message in full size when opening published applications

The LogonUI window scaling is improved for scenarios where authentication pass-through does not occur. The LogonUI window is scaled based on the monitor resolution and DPI settings used which ensures that the complete LogonUI window is visible without any clipping.

The window size in pixels can also be set manually in the registry.

  1. Open the Registry Editor using regedit on the Run command.

  2. Go to HKEY_LOCAL_MACHINE\Software\Citrix\CtxHook\AppInit_DLLS\Seamless Hook\.

  3. Create two new DWORD keys: LogonUIWidth and LogonUIHeight.

  4. Set the value of the keys to the required width and height in pixels for the LogonUI window.

    When manually setting the LogonUI windows size, automatic scaling is disabled.

Note:

These registry paths have changed from 2407 and later. The old registry values are ignored and deprecated.

By default, the LogonUI window includes a title bar with a close button which enables the end user to disconnect from the session if needed.

Disable a tilebar

You can disable the tile bar in the LogonUI window with the following registry key:

  1. Open the Registry Editor using regedit on the Run command.

  2. Go to HKEY_LOCAL_MACHINE\Software\Citrix\CtxHook\AppInit_DLLS\Seamless Hook\.

  3. Create new DWORD keys: LogonUICaption and set the value of the key to 0.

    LogonUI window with tilebar

Published application does not appear

Refer to the support articles to troubleshoot instances when the published application do not launch or disappear during launch or when it fails to appear.

To troubleshoot instances

Additional Seamless configuration settings

Under most circumstances, the default server settings are sufficient for the majority of applications, and no additional settings are required for published applications.

In some cases, additional configuration is required, including controlling the interaction and display of specified application windows, as well as settings within the published application environment itself.

Note:

Citrix does not recommend changing these configuration settings unless explicitly instructed by Citrix support

These settings are outlined in the Seamless configuration settings KB article.

Troubleshooting
August 7, 2025
Contributed by: 
C
August 7, 2025
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.