AVD Session Stuck - Must Delete Host

As the title suggests I'm dealing with an issue where an FSLogix based profile gets stuck on a session host and won't respond to log off commands. The user is unable to login again as the profile is in use, connecting directly to the host via RDP and trying to log off the user also fails as well as closing the profile handle in Azure Files. Session limits are enabled on the pool but don't seem to take effect leaving me with having to delete the host and asking any other users on the same host to sign out. Deleting the host shows multiple attempts to sign out the affected user account. 

Nerdio portal is up to date so the latest version of FSLogix is applied to the hosts and the image has been rebuilt from Windows 10 to Windows 11 but we still see this issue pop up somewhat regularly. This seems to be triggered by network connectivity issues where connection to the session is lost and the user is unable to login again afterwards. I also have the login error prevention reg settings set on the FSlogix profile: 

 

Not sure if anyone has run into anything similar but any suggestions would be appreciated!

 

0

Comments (5 comments)

0
Avatar
DStephenson

Welcome to the community, Graham Jones! 🙂

What you're describing sounds like an FSLogix issue where the session isn't being disconnected properly.
Can you check-out these articles and see if they help?

 

0
Avatar
Graham Jones

Hey Dave,

Thanks for getting back to me, I've flipped through the links you sent over. Our Azure File share is connected to AD and linked in the Nerdio portal, I've verified the users have the SMB contributor role along with Full control on their vhdx file. When this issue does come up it seems to take an aggressive hold on the session host and the user profile, any attempt to close file handles shows as a success but seconds later the same session host will put a lease onto the file, when logging out the user this also appears as a success but the account is still logged into the session host in a disconnected state, the log off task actually resets the event timer for their disconnected state so there's some strange behavior for sure. I'm not sure whether this is an FSLogix issue, something with the image or possibly something at the AD/GPO level but I've noted this behavior through several updates of FSLogix and two seperate template images and host pools so I'm leaning toward there being an issue on the server side or somewhere else within the network. 

 

0
Avatar
DStephenson

Interesting....
I'm wondering if it's the AV/EDR causing issues?
I saw this recent video from Travis Roberts about adding AV exclusions to improve FSLogix performance.
Don’t Let Antivirus Impact FSLogix Performance - YouTube

Tony Cai also posted about the same thing on LinkedIn.
https://www.linkedin.com/posts/tonycai_many-msps-forget-that-avedr-solutions-can-activity-7173682128079978496-ptAm

The other possibility that I can think of is maybe there is a GPO/log-off script that's trying to do something each time the user logs-out.
Have you tried isolating the hosts to a separate OU and/or creating new User GPOs from scratch to try and isolate the problem(s)?

 

 

1
Avatar
Graham Jones

Hey Dave,

I flipped through the group policies and found a logon script running a process unknown to me, after removing the policy we seem to have been okay for the last couple weeks though I'm still monitoring. This issue seems to come in waves for us and primarily affects a certain user who admits they don't sign out properly, though it has affected all users in this environment at one point or another. This is even with session limits enabled, something grabbed a firm hold of the session and wouldn't let go and I'm hoping it was the logon script I found and disabled.

Thanks for your suggestions on this, I appreciate it!

 

 

0
Avatar
DStephenson

Happy to help, Graham.
I'm glad you were able to make some progress.

I have to say that I'm jealous that you have a user who actually admits to not signing out properly.
It seems like all of our users "Deny, Deny, Deny" that they're doing anything wrong. 😁

Please sign in to leave a comment.