Having issue Azure AD joining a Windows 10 or 11 computer and getting error 8018000a? This script might help you. It deletes all keys except Context under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Enrollments

$EnrollmentsPath = “HKLM:\SOFTWARE\Microsoft\Enrollments\”
$Enrollments = Get-ChildItem -Path $EnrollmentsPath
$DiscoveryServerFullUrls = @(“https://wip.mam.manage.microsoft.com/Enroll”)
Foreach ($Enrollment in $Enrollments) {
$EnrollmentObject = Get-ItemProperty Registry::$Enrollment
if ($EnrollmentObject.”DiscoveryServiceFullURL” -in $DiscoveryServerFullUrls ) {
$EnrollmentPath = $EnrollmentsPath + $EnrollmentObject.”PSChildName”
Remove-Item -Path $EnrollmentPath -Recurse
& “C:\Windows\System32\deviceenroller.exe /c /AutoEnrollMDM”
}
}

References:

https://jocha.se/blog/tech/azure-ad-mdm-intune-error-8018000a

If you are having issues with some users having freeze issues and high response time in Citrix Director, this registry key might help you. It happens in conjunction with dedicated GPUs on notebooks. The key disabled GPU acceleration for Citrix Workspace App.

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\ICA Client\Graphics Engine] “HWacceleration”=dword:00000000

References:

https://support.citrix.com/s/article/CTX297140-screen-freezes-and-takes-a-few-seconds-to-return-to-normal-apps-also-flicker-when-open?language=en_US

If you need to perform a packet capture under Windows without having to install Wireshark, here are some netsh commands:

netsh trace start capture=yes tracefile=c:\net.etl persistent=yes maxsize=4096 filemode=circular overwrite=yes report=no

When you are done with your capture do:

netsh trace stop

This will take some time.

You will see the files under C:\net.etl and net.cab

Classic Authentication Schemes will soon be deprecated in Citrix Netscaler and should be replaced with nFactor AAA.

Here is a quick tutorial on how to configure nFactor Authentication.

Security > AAA Application Traffic > Policies > Authentication > Basic Policies > RADIUS

Select Servers > Add

Name RADIUS_Server

Server IP xxxx

Secret

Also test the radius reachability

Security > AAA Application Traffic > Policies > Authentication > Basic Policies > LDAP

Select Servers > Add

Fill in all the information that apply to your domain

Security > AAA – Application Traffic, Policies, Authentication, Advanced Policies > Policy. Then, click “Add”

Do the same thing for RADIUS

Create AAA virtual server

Configuration > Security > AAA – Application Traffic > Virtual Servers

Import private certificate and root cert

Click on “No Authentication Policy”

Select Policy LDAP_Pol

Click on Select next to “Next Factor”

Add an authentication policy label

Continue

Policy Binding > Select RADIUS_Pol

Goto Expression > Select END and BIND the authentication Policy Label

Done

BIND

Continue

Add a login schema on the right side

Select “No Login Schema”

Select Policy

Bind and Done

Add nFactor to the Gateway virtual server

Citrix Gateway > Virtual Servers > select VIP > Add Authentication Profile on the right

Create > Ok > Done

If you get this error after logging in, you have to enable SSO on the Authentication Template

Go to Security > AAA Application Traffic > Login Schema > lschema_dual_factor_builtin > … Edit

Edit the profile again

Click on the pencil

> More > Check Enable Single Sign On Credentials > OK > OK

References:

https://community.citrix.com/tech-zone/build/deployment-guides/gateway-mfa/#_=_

This quick script shows you if and where inheritance is deactivated. You can also set in the parameters how deep or how many levels inheritance is checked.

# Function to check inheritance up to the specified level
function Check-Inheritance {
    param (
        [string]$directoryPath,
        [int]$currentLevel,
        [int]$maxLevel
    )

    # Exit if current level exceeds max level
    if ($currentLevel -gt $maxLevel) {
        return
    }

    # Get the ACL of the directory
    $acl = Get-Acl -Path $directoryPath

    # Check if inheritance is disabled
    if ($acl.AreAccessRulesProtected) {
        Write-Output "$directoryPath - Inheritance is disabled"
    } else {
        #Write-Output "$directoryPath - Inheritance is enabled"
    }

    # Recursively check subdirectories if current level is less than max level
    if ($currentLevel -lt $maxLevel) {
        $subdirectories = Get-ChildItem -Path $directoryPath -Directory
        foreach ($subdir in $subdirectories) {
            Check-Inheritance -directoryPath $subdir.FullName -currentLevel ($currentLevel + 1) -maxLevel $maxLevel
        }
    }
}
# Function to check inheritance up to the specified level
function Check-Inheritance {
    param (
        [string]$directoryPath,
        [int]$currentLevel,
        [int]$maxLevel
    )

    # Exit if current level exceeds max level
    if ($currentLevel -gt $maxLevel) {
        return
    }

    # Get the ACL of the directory
    $acl = Get-Acl -Path $directoryPath

    # Check if inheritance is disabled
    if ($acl.AreAccessRulesProtected) {
        Write-Output "$directoryPath - Inheritance is disabled"
    } else {
        #Write-Output "$directoryPath - Inheritance is enabled"
    }

    # Recursively check subdirectories if current level is less than max level
    if ($currentLevel -lt $maxLevel) {
        $subdirectories = Get-ChildItem -Path $directoryPath -Directory
        foreach ($subdir in $subdirectories) {
            Check-Inheritance -directoryPath $subdir.FullName -currentLevel ($currentLevel + 1) -maxLevel $maxLevel
        }
    }
}

To execute the script:

Check-Inheritance -directoryPath $rootDirectory -currentLevel 1 -maxLevel 3