This article lists recommended operating system patches from Microsoft which have been known to resolve issues within provisioned XenApp and other target environments.

Note: The recommended hotfixes within the article might have been superseded with another Microsoft hotfix. Refer to the Microsoft Support site for the latest update of the hotfixes.

Customers who experience any of the issues listed must install these patches. The possible issues include:

• Gray or Black screens at boot time

• Event ID 7011 in the event logs of the XenApp server, resulting in issues starting the network services at boot time

• XenApp servers very slow to start

• XenApp servers slow to shut down or restart

• Target device crashing or hangs

Ensure to keep your vDisk updated with the latest Microsoft updates and check the Microsoft support website for the latest versions of the following drivers for your operating system:

rdbss.sys, mrxsmb.sys, ntfs.sys

Refer to List of currently available hotfixes for the File Services technologies in Windows Server 2008 and in Windows Server 2008 R2 for the latest list.

Recommended Patches by Operating System

Windows XP

• MS11-043: Vulnerability in SMB Client could allow remote code execution: June 14, 2011

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

If UPHClean.exe is available on the system, ensure it is the latest or download the latest version from Microsoft Download Center.

Windows 2003

• MS11-043: Vulnerability in SMB Client could allow remote code execution: June 14, 2011

• A computer that is running Windows Server 2003 randomly stops responding when you back up data

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• You experience poor performance when you create an IPsec VPN site-to-site connection in Windows Server 2003

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

If UPHClean.exe is available on the system, ensure it is the latest or download the latest version from Microsoft Download Center.

Windows Server 2003 Service Pack 1 (SP1)

• A Windows Server 2003-based or Windows Server 2008-based terminal server stops accepting new connections, and existing connections stop responding

• You receive a Stop error message on a Windows Server 2003 SP1 or Windows Server 2003 SP2-based computer when a device is suddenly disconnected from a host bus adapter

• A Windows Server 2003-based computer stops responding when the registry is in heavy use

Windows Server 2003 Service Pack 2 (SP2)

• Some data is corrupted when cached and non-cached I/O operations occur by using the same NTFS file handle

• A Windows Server 2003-based or Windows Server 2008-based terminal server stops accepting new connections, and existing connections stop responding

• You receive Stop error message 0x000000CD or 0x00000019 on a computer that is running Windows Server 2003 when corrupted registry hive files are loaded

• You receive a Stop error message on a Windows Server 2003 SP1 or Windows Server 2003 SP2-based computer when a device is suddenly disconnected from a host bus adapter

• STOP: 0x00000048 CANCEL_STATE_IN_COMPLETED_IRP" error message in Windows Server 2003 Service Pack 2

• A Windows Server 2003 SP2-based iSCSI boot server cannot generate dump files if the server uses a Storport virtual miniport as the LUN controller

• A Windows Server 2003-based computer stops responding when the registry is in heavy use

Windows Vista

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

• A computer that is running Windows Server 2008 or Windows Vista may crash randomly

Windows Vista SP1

• Some data is corrupted when cached and non-cached I/O operations occur by using the same NTFS file handle

• The computer stops responding when you access some shared files from a computer that is running Windows Server 2008 or Windows Vista

Windows Vista SP2

• Some data is corrupted when cached and non-cached I/O operations occur by using the same NTFS file handle

• The computer stops responding when you access some shared files from a computer that is running Windows Server 2008 or Windows Vista

Windows Server 2008

• Some data is corrupted when cached and non-cached I/O operations occur by using the same NTFS file handle.

• The computer stops responding when you access some shared files from a computer that is running Windows Server 2008 or Windows Vista

• A Windows Server 2003-based or Windows Server 2008-based terminal server stops accepting new connections, and existing connections stop responding

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

• A computer that is running Windows Server 2008 or Windows Vista may crash randomly

Windows Server 2008 SP2

• Some data is corrupted when cached and non-cached I/O operations occur by using the same NTFS file handle

• The computer stops responding when you access some shared files from a computer that is running Windows Server 2008 or Windows Vista

Windows 7

• Some data is corrupted when cached and noncached I/O operations occur by using the same NTFS file handle

• There is a delay when you shut down, restart, or log off a computer that is running Windows 7 or Windows Server 2008 R2

• Stop error in Windows 7 and in Windows Server 2008 R2 if a heavy load situation exists or if connectivity issues exist: "STOP: 0x000000B8"

• A computer that is running Windows Server 2008 R2 or Windows 7 stops responding randomly

• Startup takes a long time on a Windows 7 or Windows Server 2008 R2-based computer that has an Intel Nehalem-EX CPU installed

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

• You may encounter unexpected behavior when you use multiple IPv4 addresses on a computer that is running Windows 7 or Windows Server 2008 R2

• "0x0000007B" Stop error when you replace an iSCSI or PCI Express network adapter or a motherboard with an identical device on a Windows Server 2008 R2-based or Windows 7-based computer

Window 7 SP1

Windows SP1 is the recommended version to be using with PVS.

• "0x0000007B" Stop error after you replace an identical iSCSI network adapter in Windows Server 2008 R2 SP1 or in Windows 7 SP1

Windows Server 2008 R2

• Some data is corrupted when cached and noncached I/O operations occur by using the same NTFS file handle

• A Windows Server 2008 R2-based Remote Desktop server denies some connection requests randomly under heavy logon or logoff conditions

• There is a delay when you shut down, restart, or log off a computer that is running Windows 7 or Windows Server 2008 R2

• "0x000000B8" Stop error in a heavy load situation or when you have connectivity issues in Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2

• A computer that is running Windows Server 2008 R2 or Windows 7 stops responding randomly

• Remote desktop sessions do not completely exit, and you cannot establish new remote desktop sessions to a computer that is running Windows Server 2008 R2

• Startup takes a long time on a Windows 7 or Windows Server 2008 R2-based computer that has an Intel Nehalem-EX CPU installed

• MS11-011: Vulnerabilities in Windows Kernel could allow elevation of privilege

• MS11-041: Vulnerabilities in Windows kernel-mode drivers could allow elevation of privilege: June 14, 2011

• You may encounter unexpected behavior when you use multiple IPv4 addresses on a computer that is running Windows 7 or Windows Server 2008 R2

• "0x0000007B" Stop error when you replace an iSCSI or PCI Express network adapter or a motherboard with an identical device on a Windows Server 2008 R2-based or Windows 7-based computer

Windows Server 2008 R2 SP1

• "0x0000007B" Stop error after you replace an identical iSCSI network adapter in Windows Server 2008 R2 SP1 or in Windows 7 SP1

Windows Server 2012 and Windows Server 2012 R2

• Citrix recommends applying the latest Microsoft patches for Windows Server 2012 and Windows Server 2012 R2. 

If running Microsoft Application Virtualization 4.6 RTM

• Hotfix Package 7 for Microsoft Application Virtualization 4.6 RTM: June 2011

If streaming XenApp 6 servers, refer to the recommended Citrix and Microsoft Hotfixes for XenApp 6 and Windows Server 2008 R2

• CTX129229 - Recommended Hotfixes for XenApp 6.0 and later on Windows Server 2008 R2

Additional Resources 

CTX125761 - XenApp Target Device does not Respond with the Gray Screen

CTX116627 - Errors in Event Viewer after Building a Presentation Server 4.5 Image