Tuesday 22 July 2014

Citrix Xendesktop 7.1/7.5 black screen on login

Nothing is worse than putting in all the effort to build a new Xendesktop environment, PVS farm and master image before finding yourself faced with the dreaded black/blank screen on login.

There are a number of reasons this can occur, including enhanced desktop experience, however there are some factors that occur in the most common cases.
  • Windows 8, Windows 8.1, Server 2012 or Server 2012 R2 is used
  • Xendesktop 7.1 or 7.5 is used
  • 8 dot 3 name creation was disabled at the time of installing the VDI
  • PVS was used in the image creation process
This problem is normally associated with 8 dot 3 name creation being disabled. The "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" registry key references mfaphook.dll (or mfaphook64.dll if 64bit) via its 8dot3 name. 

In basic terms

No 8dot3 name = mfaphook appinit location pointing to no where = no mfaphook loaded on login = no desktop for the user

Once 8 dot 3 is disabled it can't be re-enabled without significant work, in most cases a re-install of the underlying operating system is going to be quicker and more reliable. This is an annoying fault as many PVS optimization guides list disabling 8 dot 3 name creation as a performance enhancing tweak. 
However there is a reliable work around.

Before proceeding with the work around, you can do the following test to determine if you have 8 dot 3 name creation disabled.

Dot 3 Name creation disabled - the below workaround may assist

C:\>dir program*. /x
Volume in drive C is DDC1
Directory of C:\
06/05/2012 10:41 AM <DIR> Program Files
06/05/2012 04:49 PM <DIR> Program Files (x86)


Dot 3 Name creation enabled - the below workaround may not assist
C:\>dir program*. /x
Volume in drive C is DDC1
Directory of C:\
06/05/2012 10:41 AM <DIR> PROGRA~1 Program Files
06/05/2012 04:49 PM <DIR> PROGRA~2 Program Files (x86)



The workaround


We noted that the "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs" registry key referenced "C:\Program Files\Citrix\System32\mfaphook64.dll" but via its 8dot3 name "C:\Progra~1\Citrix\System32\mfaphook64.dll".


Initially we tried simply adding "C:\Program Files\Citrix\System32\mfaphook64.dll" to the AppInit_DLLs string, this didn't work.

To fix the problem first we added "C:\Program Files\Citrix\System32\" to our systems PATH environmental variable.

1. Open Control Panel, click System

2. Click Advanced system settings
3. Click environmental variables
4. From the Systems variable list, select "Path" and click edit
5. Be sure to leave the existing string, but add the below line to the end of the string. Yes it does need the semicolon.
;C:\Program Files\Citrix\System32\



Next we add the reference to the registry.

1. Open regedit

2. Go to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows
3. Open the AppInit_DLLs key
4. If the key is empty, simply add "mfaphook64.dll" for 64 bit systems or "mfaphook.dll" for 32 bit. Don't include the quotations.

If there is already data in the AppInit_DLLs key, add a ; before the dll. For example ";mfaphook64.dll", again without the quotations.




As we added the directory in the environmental PATH variable we don't need to specify a path in the registry key. When the system looks for mfaphook it will search all the directories in %PATH%.


That should be it, you don't even need to reboot. Your users should now be able to login without a black screen. If they still can't, then I suggest you try to re-install to VDA and disable enhanced desktop experience as mfaphook loading likely isn't your issue.

21 comments:

  1. Does this reg key go on the provisioning server, delivery controller or windows 7 base image. We are on 7.1.3. Thanks for any help you can give

    ReplyDelete
  2. It is perfect time to make some plans for the future and it is time to be happy. I've read this post and if I could I desire to suggest you some interesting things or suggestions. Perhaps you could write next articles referring to this article. I want to read more things about it! silkscreen printing Machines for small business

    ReplyDelete
  3. PrepaidCardStatus Login @ prepaidcardstatus com. prepaid debit cards can provide you lot more advantages than regular debit and other cards. Click here to login prepaidcardstatus

    ReplyDelete
  4. You make so many great points here that I read your article a couple of times. Your views are in accordance with my own for the most part. This is great content for your readers. bottle screen printing machine

    ReplyDelete
  5. Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also bottle screen printing machine

    ReplyDelete
  6. I think this is an informative post and it is very useful and knowledgeable. therefore, I would like to thank you for the efforts you have made in writing this article. https://sites.google.com/site/hotmailloginonline/

    ReplyDelete
  7. I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. entrar hotmail

    ReplyDelete
  8. The positive aspect of the paper (where the plans are) is put on the frontal aspect of the screen and secured with a bit of fabric. The entire thing is presented to the sun based energy (sun) for around a couple of moments minutes. houston embroidery

    ReplyDelete
  9. Notwithstanding, there is as yet a current dominant part still pervasive in the nation which sticks to shalwar kameez, Pakistanis public dress. fully embroidered

    ReplyDelete
  10. During login on the off chance that you fail to remember the secret word, at that point you can return to the "failed to remember your secret word" connect. You will discover this connection on all the three pages. hotmail

    ReplyDelete
  11. You mention in detail with screen shoots i really like it Security Doors Melbourne Western Suburbs

    ReplyDelete
  12. I think that thanks for the valuabe information and insights you have so provided here.concreting services melbourne.https://ghaznitiling.com.au/

    ReplyDelete
  13. good.turkish carpet.https://storezone.com.au/collections/rugs-carpets

    ReplyDelete
  14. The first silk utilized for a screen has been supplanted today with a nylon material that has an incredibly, close cross section. ONCETECH

    ReplyDelete
  15. Great write-up, I am a big believer in commenting on blogs to inform the blog writers know that they’ve added something worthwhile to the world wide web!.. cinema

    ReplyDelete
  16. You have a good point here!I totally agree with what you have said!!Thanks for sharing your views...hope more people will read this article!!! cinema

    ReplyDelete
  17. We are truly thankful for your blog entry. You will discover a great deal of methodologies in the wake of going to your post. I was precisely scanning for. A debt of gratitude is in order for such post and please keep it up.  Turkish Runner Sydney

    ReplyDelete
  18. It's actually a great and helpful piece of information. I am satisfied that you just shared this useful information for us. Hijab shop

    ReplyDelete
  19. The completed plan is moved onto the extended screen block. With the guide of a brush, apply the liquid wax or diminished shellac or enamel to hinder the negative spaces of the plan. black leather jacket mens

    ReplyDelete
  20. It is ideal to have two individuals cooperating on these kind of boards and appropriate wellbeing gear on the off chance that you need to deal with higher or rooftop boards. It is constantly prescribed to utilize an expert for this kind of screen fix. leather jackets in germany

    ReplyDelete
  21. The screen is then eliminated and washed under running water. The plan regions will be left open with the negative regions impeded. b3 bomber jacket

    ReplyDelete