You have configured configured Enhanced SSO for Citrix workspace app and you are either on Windows 10 or Windows 11 endpoints.
When you launch a desktop session and try to access the domain shares you may encounter the below prompt for credentials -
You can also repoduce this issue by accessing the server through rdp by providing the /remoteguard switch.
This can also affect applications which may be hosted on a network share, or any resources that an application may require access to that is hosted on a network share.
You may also observe events related to group policy updates failing within system event logs.
When you enter the credentials manually, the prompt goes away and does not asked the second time, but upon a reboot or on launch of a new session you may experience the problem again.
The issue is documented under the public article - https://learn.microsoft.com/en-us/answers/questions/1294080/windows-11-22h2-remote-credential-guard-(rcg)-hop
To avoid the issue, you can be on the below combinations that is compatible with remote credential guard feature.
1. Endpoint on Windows 10 + VDA OS on Windows Server 2019
2. Endpoint on Windows 11 + VDA OS on Windows Server 2025
For fix related to this problem, please contact Microsoft support.
The problem is due to a compatibility issue in remote credential guard feature.
This is documented under - https://learn.microsoft.com/en-us/answers/questions/1294080/windows-11-22h2-remote-credential-guard-(rcg)-hop