Citrix Virtual Apps and Desktops | 2402 CU3 and later | Users experience a black screen after the initial windows welcome screen
Article ID: CTX696702
Updated On:
Description
Black static screen after windows welcome screen during VDI connection after upgrading to a Windows 11 image
The behavior is caused by a known issue in Citrix Virtual Apps and Desktops 2402 CU3 and later that can occur during session initialization. Under certain conditions, the logon process completes authentication, but the user shell does not finish rendering correctly, resulting in a persistent black screen.
Cause
The issue was caused by incorrect/ Missing NTFS permissions on user profile folders that had been migrated to a new Citrix Profile Management user store.
Resolution
Citrix recommends the following permissions for the Profile Management user store and cross-platform settings store.
Share Permissions
Grant Full Control on the root user store share.
NTFS Permissions
| Group or User Name | Permission | Apply To |
|---|---|---|
| Creator Owner | Full Control | Subfolders and files only |
| Users managed by Citrix Profile Management | List Folder / Read Data, Create Folders / Append Data | This folder only |
| Local System | Full Control | This folder, subfolders, and files |
These permissions allow users to access the user store, create profile folders, and perform the necessary read and write operations required by Citrix Profile Management.
After correcting the NTFS permissions on the migrated profile folders, affected users would be able to successfully load their profiles and access their Citrix sessions without encountering the black screen after the Windows welcome screen.
Additional Recommendations
- Verify that permission inheritance is enabled unless a specific security design requires otherwise.
- If a template profile is configured, ensure that users have Read access to the template profile.
- Consider creating an administrative group with Full Control permissions on profile subfolders and files to simplify profile maintenance and troubleshooting activities.
Issue/Introduction
Users can authenticate and launch a published desktop or application. After the initial Windows Welcome screen is displayed, the session transitions to a black screen and remains unresponsive. The user does not receive the expected VDI desktop or application window.
Additional Information
For additional guidance on securing Citrix Profile Management stores, refer to: https://docs.citrix.com/en-us/profile-management/current-release/secure.html
