Product Documentation

Diagnose user logon issues

Jun 05, 2018

Use Logon Duration data to troubleshoot user logon issues.

Logon duration is measured only for initial connections to a desktop or app using HDX. This data does not include users trying to connect with Remote Desktop Protocol or reconnect from disconnected sessions. Specifically, logon duration is not measured when a user initially connects using a non-HDX protocol and reconnects and using HDX.

In the User Details view, the duration is displayed as a number value below which the time the logon occurred is displayed and a graph of the phases of the logon process.

localized image

Logon Duration panel in the User Details view 

As users logon to XenApp and XenDesktop, the Monitor Service tracks the phases of the logon process from the time the user connects from Citrix Receiver to the time when the desktop is ready to use. 

Logon duration is measured for HDX sessions only. This data does not include users trying to reconnect from disconnected sessions. Specifically, logon duration is not measured when a user initially connected via a non-HDX protocol reconnects via HDX.

The large number on the left is the total logon time and is calculated by combining the time spent establishing the connection and obtaining a desktop from the Delivery Controller with the time spent to authenticate and logon to a virtual desktop. The duration information is presented in seconds (or fractions of seconds) in the local time of the Administrator’s web browser.

Use these general steps to troubleshoot user logon issues:

  1. From the User Details view, troubleshoot the logon state using the Logon Duration panel.
    • If the user is logging on, the view reflects the process of logging on.
    • If the user is currently logged on, the Logon Duration panel displays the time it took for the user to log on to the current session.
  2. Examine the phases of the logon process.

Logon process phase

Description

Brokering

Time taken to decide which desktop to assign to the user.

VM start

If the session required a machine start, this is the time taken to start the virtual machine.

HDX connection

Time taken to complete the steps required in setting up the HDX connection from the client to the virtual machine.

Authentication

Time taken to complete authentication to the remote session.

GPOs

If Group Policy settings are enabled on the virtual machines, this is the time taken to apply group policy objects.

Login scripts

If logon scripts are configured for the session, this is the time taken for the logon scripts to be executed.

Profile load

If profile settings are configured for the user or the virtual machine, this is the time taken for the profile to load.

Interactive Session

This is the time taken to "hand off" keyboard and mouse control to the user after the user profile has been loaded. It is normally the longest duration out of all the phases of the logon process and is calculated as follows:

Interactive Session duration = Desktop Ready Event Timestamp (EventId 1000 on VDA) - User Profile Loaded Event Timestamp (EventId 2 on VDA)

Interactive Session has three sub-phases:

  • Pre-userinit
  • Userinit
  • Shell

Hovering over Interactive Session displays a tooltip showing the sub-phases and a link to the documentation. The tooltip sub-phases are for information only; sub-phase duration times are not currently available.

Interactive Session – Pre-userinit

This is the segment of Interactive Session which overlaps with Group Policy Objects and scripts. This sub-phase can be reduced by optimizing the GPOs and scripts.

Interactive Session – Userinit

When a user logs on to a Windows machine, Winlogon runs userinit.exe.

Userinit.exe runs logon scripts, re-establishes network connections, and then starts Explorer.exe, the Windows user interface.

This sub-phase of Interactive Session represents the duration between the start of Userinit.exe to the start of the user interface for the virtual desktop or application

Interactive Session – Shell

In the previous phase, Userinit starts the initialization of Windows user interface. The Shell sub-phase captures the duration between the initialization of the user interface to the time user receives keyboard and mouse control.

The total logon time is not an exact sum of these phases. For example, some phases occur in parallel, and in some phases, additional processing occurs that might result in a longer logon duration than the sum.

Note: The Logon Duration graph shows the logon phases in seconds. Any duration values below one second are displayed as sub-second values. The values above one second are rounded to the nearest 0.5 second. The graph has been designed to show the highest y-axis value as 200 seconds. Any value greater than 200 seconds is shown with the actual value displayed above the bar.

Troubleshooting tips

To identify unusual or unexpected values in the graph, compare the amount of time taken in each phase of the current session with the average duration for this user for the last seven days, and the average duration for all users in this Delivery Group for the last seven days.

Escalate as needed. For example, if the VM startup is slow, the issue could be in the hypervisor, so you can escalate it to the hypervisor administrator. Or, if the brokering time is slow, you can escalate the issue to the Site administrator to check the load balancing on the Delivery Controller.

Examine unusual differences, including:

  • Missing (current) logon bars
  • Major discrepancy between the current duration and this user's average duration. Causes could include:
    • A new application was installed.
    • An operating system update occurred.
    • Configuration changes were made.
    • Profile size of the user is high. In this case, the Profile Load will be high.
  • Major discrepancy between the user's logon numbers (current and average duration) and the Delivery Group average duration.

If needed, click Restart to observe the user's logon process to troubleshoot issues, such as VM Start or Brokering.