Citrix Director – Unable to Shadow Session (Remote Assistance) After Microsoft Security Updates

book

Article ID: CTX696378

calendar_today

Updated On:

Description

Citrix Director successfully generates the invite file, and the file can be downloaded without issue.

However, the launch attempt fails with the following error:

image.png

The following events are recorded in the Event Logs (Source: RemoteAssistance):

  • Remote Assistance was launched with the following command-line parameters:
    -openfile "C:\Users\AdminUser\Downloads\Invite.msrcincident"
  • The user was presented with the error message:
    “The file could be corrupted and should be verified before trying again. If the problem persists, contact your system administrator.”
  • Remote Assistance was then terminated.

Environment

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

Cause

Citrix is currently investigating the issue.

Resolution

Citrix is currently investigating the issue.

Workaround 1: Use HDX Screen Sharing

As an alternative, you can use the HDX Screen Sharing feature, which is supported starting with VDA version 2411.

Note: This feature has specific prerequisites. Please refer to the official documentation for the full list of requirements. 

 

Workaround 2: Use msra.exe /offerra (Offer Remote Assistance)

You can establish a Remote Assistance session using the msra.exe /offerra command.

Prerequisite

  • The Remote Assistance feature must be enabled on the VDA.

Step 1: Enable Remote Assistance via Group Policy

  1. Open Group Policy Management Editor (gpmc.msc).
  2. Navigate to:
    Computer Configuration → Administrative Templates → System → Remote Assistance
  3. Enable Configure Offer Remote Assistance.
    1. image.png
  4. Click Show, and add the user or group allowed to offer assistance using the required format.
    1. image.png

Step 2: Configure Firewall Settings

  1. Open Windows Defender Firewall.
  2. Go to Allow an app or feature through Windows Defender Firewall.
    1. image.png
  3. Ensure Remote Assistance is allowed
    1. image.png.
  4. Create an Inbound Firewall Rule to allow TCP port 135.
    1. image.png

Step 3: Start the Offer Remote Assistance Session

  1. On the helper machine, press Win + R to open the Run dialog.
  2. Enter the following command: 
    msra.exe /offerra
    Example: 
    msra.exe /offerra VDA1
  3. Press Enter.

Step 4: Accept the Connection on the Target Machine

  • The target user will receive a prompt to allow the Remote Assistance connection.
  • image.png
    Once accepted, the helper can view or control the session based on the configured permissions.

Notes

  • The target machine must be online and reachable.
  • The helper account must be explicitly permitted via Group Policy.
  • If the connection fails or performs poorly, verify Citrix policies, firewall rules, and permissions.

 

Issue/Introduction

Citrix shadowing functionality is affected after recent Microsoft OS security patching.
On Windows systems with the security update installed, the invite file cannot be launched.
  • Windows 11 Update KB5074109
  • Windows Server 2025 Update KB5073379
  • Windows Server 2022 Update KB5073457
  • Windows Server 2019 Update KB5073723
  • Windows Server 2016 Update KB5073722


Full list of Windows releases and patches: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20824 


The updates contain the fix for vulnerability CVE-2026-20824: Windows Remote Assistance Security Feature Bypass Vulnerability

Powered by Wolken Software