Under certain conditions, after updating an image (with VDA version >= 2407) for MCS pooled machines, the machines may fail to join domain, if the the machine catalog was created with domain injection disabled using following command:

Set-ProvServiceConfigurationData –Name DisableDomainInjection –Value true

When DisableDomainInjection is enabled, MCS does not inject domain information required for domain joining when provisioning the machines anymore, and instead relies on the configuration present in the master image.

However, beginning with Virtual Delivery Agent (VDA) version 2407, by default, the master image will be un-joined from the domain as part of the image preparation process, which will remove domain information from the master image. As a result, provisioned machines may fail to join the domain due to missing domain information.

To resolve this issue, follow the steps below:

1.Launch elevated PowerShell on Delivery Controller and execute below commands

asnp citrix*

Set-ProvServiceConfigurationData -Name ImageManagementPrep_Excluded_Steps -Value LeaveAD

2.Update image for the MCS catalog

3.Reboot the provisioned machines

MCS Provisioned Machines Fails to Join Domain after Image Update