Entries by Rink Spies

Troubleshooting gMSA Installation Failure Caused by Kerberos Encryption Mismatch (28 vs 24)

In our environment, we use several gMSA accounts, which are more secure than conventional service accounts. While testing our scripts on Windows Server 2025, we ran into issues when installing a gMSA. Install-ADServiceAccount : Cannot install service account. Error Message: ‘The provided context did not match the target.’ We began by double checking the gMSA […]

Notes from the Field: Citrix Provisioning Server 2402 CU1 LTSR Upgrade

While upgrading our Citrix Provisioning Server (2203 LTSR) to the latest LTSR version 2402 CU1, we ran into some difficulties that we didn’t encounter with earlier versions. In addition to issues with the Citrix Provisioning Server Console, we also had some struggles getting both Citrix Studio and Citrix PVS Console to run from a single […]

Citrix StoreFront Error “Cannot complete your request”

While replacing Citrix StoreFront (2203 CU5 LTSR) servers running Microsoft Server 2019 with servers running Server 2022, we encountered an error message during login attempts to Citrix StoreFront. Users were shown an error message stating: “Cannot complete your request.” We were running a GSLB setup with a multi-server group (across sites), each containing several Citrix […]

Setup Authentik as Radius Provider

For my home lab environment, I use Authentik as my Identity Provider. Authentik is an open-source authentication and authorization platform that enables Single Sign-On (SSO), identity management, and multi-factor authentication (MFA) via protocols like OAuth, SAML, and LDAP. For various applications, such as the Citrix NetScaler, I use RADIUS for secondary authentication. All my Authentik […]

Another error: ‘Application can’t be started… (Instant Passthru could not be resolved)’ caused by the CWA upgrade.

A while ago, I wrote a blog about the error message ‘Application can’t be started… (Instant Passthru could not be resolved)’ that we encountered when launching a published application from our Ivanti Workspace Control managed session. Recently, we received the same message again, but this time the cause was different. Application can’t be started… (Instant […]

How to Prevent SQL Database Locks and Improve Performance

Within a large environment where Ivanti Workspace Control is used in combination with a Microsoft SQL Database, the SQL Server has to handle numerous connections initiated by all the Ivanti Workspace Control Agents.To minimize the load and connections on the SQL Server, Ivanti introduced the Ivanti Relay Servers, which act as proxies for all agent […]

Why SQL Tables Are Created with domain\username.tablename Instead of dbo.tablename

Let’s start by stating I’m not a SQL DBA 😉 when it comes to databases, I’m just a user who needs a database for my applications 🙂 Lately, in various environments, we’ve been creating different Ivanti Workspace Control and Automation Manager databases. We simply request an empty database from the SQL department and are assigned […]

The Citrix Workspace App sometimes detects an incorrect keyboard layout on OSX.

Apple OSX users sometimes experience an incorrect keyboard layout loaded within their Citrix session. As a result, special characters are often located in different places. The cause of this issue is that Apple has a different keyboard layout compared to Windows, leading to an Apple US-international keyboard being recognized as a Dutch keyboard in Windows. […]