When setting up a Citrix Cloud connection in ControlUp within an MSP environment, an issue can arise where unassigned machines—those not part of any Delivery Group—are still appearing in client views even when the "Include Unassigned Machines" checkbox is unchecked. This behavior can cause security and privacy concerns, especially in a Citrix CSP (Cloud Solution Provider) model where multiple clients share the same CSP tenant but must not see each other’s resources.
The key insight is that the "Include Unassigned Machines" checkbox does not control whether unassigned machines are collected in ControlUp; rather, it controls ownership assignment. Unchecking this box only indicates that a particular connection does not own those unassigned machines. If no other connection claims ownership, ControlUp will assign all unassigned machines for that customer ID to the last available Citrix Cloud connection by default, causing them to appear in that connection’s view regardless.
Since filtering by Delivery Group names (for example, using exclusion rules like "*") does not affect unassigned machines—which by definition have no Delivery Group—this method is ineffective for hiding these machines from clients.
The recommended solution is to use a dedicated MSP-only Citrix Cloud connection for unassigned machines. This involves adding a second Citrix Cloud connection using the same Customer ID but naming it something clearly internal, such as "CSP-Unassigned." On this connection, the "Include Unassigned Machines" checkbox is checked, while on all client-facing connections it remains unchecked. By placing this MSP-only connection in a folder or with permissions that clients cannot access, unassigned machines are effectively segregated and hidden from end clients. This setup ensures clients only see Delivery Groups and connectors specific to them, while unassigned machines remain visible only to the MSP’s internal team.
In rare cases where the connector setup itself does not behave as expected—such as when unassigned machines do not show even when the "Include Unassigned Machines" box is checked—it may be necessary to contact ControlUp support for assistance.
For more details on configuring Citrix Cloud connections and collection rules, refer to ControlUp official documentation at https://docs.controlup.com and the ControlUp Academy at https://cuacademy.controlup.com.
Read the entire article here...
Cloud Computing Related Training & Support Archives
Cloud Computing training and support-related archives from inside the ControlUp Community on Slack.
How to Deploy ControlUp Agent via GPO in VDI Environments with MSI Silent Install and PowerShell Automation
Deploying the ControlUp Agent for VDI environments via Group Policy Object (GPO) does not have a dedicated official knowledge-base article, as the installation approach aligns with generic MSI silent installs used in other deployment methods like SCCM or PDQ. The official ControlUp documentation regarding local machine connection and agent communication is the primary reference for deployment: https://support.controlup.com/docs/connect-to-your-machines-locally and https://support.controlup.com/docs/agent-outbound-communication.
For non-persistent VDI setups that use a gold master image, the recommended method is to install the ControlUp agent MSI directly on the master image with specific MSI properties: `MASTER_IMAGE=true`, along with the `AUTHKEY` and `RegistrationKey`. This avoids the need for repeated installations on cloned machines via GPO. For persistent, domain-joined virtual machines, using a GPO Computer Startup Script to run an msiexec command is preferred over GPO Software Installation because it allows passing required MSI properties. An example command line looks like this:
`msiexec /i \\share\ControlUpAgent-xxxx.msi /qn AUTHKEY="" RegistrationKey="" MASTER_IMAGE=true`
The authentication keys are retrieved from the Real-Time Console under Settings → Agent. The Registration Key is mandatory starting from version 9.0. Machines must be manually added to the organization tree unless the agent version is 9.0.5 or higher, which supports self-registration.
When GPO deployment is not optimal, if remote RPC or WMI connectivity is available, deploying the agent remotely via the ControlUp console or Monitor is simpler. For cloud-managed endpoints, Microsoft Intune is the officially documented deployment method.
A practical example was shared demonstrating a PowerShell script to deploy the ControlUp Agent MSI for VDI within a Nerdio scripted action context. The script copies the MSI from a UNC file share to a local temporary path, validates that the MSI file is correctly copied (including a check on the MSI magic bytes), and then executes the msiexec command with silent installation flags, the authentication keys, and logging enabled. It captures and reports installation exit codes and prompts when a reboot is required. The script also includes a post-installation check to list ControlUp-related services to confirm the agent installed and started as expected.
This approach encapsulates the best practice for deploying ControlUp agents in VDI environments using GPO, balancing MSI property requirements, version-specific authentication mechanisms, and practical scripting for automation. For detailed agent deployment contexts and command-line references, the ControlUp official documentation remains the authoritative source: https://support.controlup.com/docs/connect-to-your-machines-locally and https://support.controlup.com/docs/agent-outbound-communication.
Read the entire article here...
Read the entire article here...
Troubleshooting “Detect Workspace” Stuck Prompt for Citrix Cloud Synthetic Monitors on Public Hives
Some users running synthetic monitors to test Citrix Cloud connections from public hives reported that a few monitors become stuck at the "Detect Workspace" prompt. This behavior was inconsistent, with some monitors seemingly configured the same way functioning normally while others encountered this issue.
The root cause was identified as related to the Citrix Workspace store’s launch method settings. The "Detect Workspace" screen corresponds to the Citrix client detection page, which is controlled on the store side rather than by Scoutbees or the synthetic monitors themselves. Specifically, when the store is configured with the "Launch virtual apps and desktops" setting set to either "Open in Citrix Workspace app" or "Let the user choose," this page appears. On public hives, where the browser environment is fresh and does not retain prior user choices, the prompt recurs on every run, causing the monitors to stall at this screen.
To resolve this, it is necessary to verify and compare the launch settings in Citrix Cloud under Workspace Configuration (or the targeted StoreFront store). Monitors stuck on the detection prompt typically point to stores configured with "Open in CWA" or "Let the user choose," while those that bypass the prompt are connected to stores set to "Use web browser to access apps and desktops." Changing the store’s launch setting to "Use web browser" bypasses the native Citrix Workspace app detection page, allowing the synthetic monitors on public hives to proceed without interruption.
Before making any changes, administrators should confirm these settings by comparing the store configurations between monitors that are stuck and those that are working. This ensures an accurate diagnosis and prevents unintended side effects from changing the launch mode. Since this is a store-level configuration, it requires adjustments within the Citrix Cloud management console, specifically under Workspace Configuration. If the issue persists or if the public hive environments themselves seem problematic, submitting a support ticket for those specific hives is recommended.
For additional guidance on managing Citrix Cloud Workspace configurations and optimizing monitor setups, see the ControlUp Knowledge Base and Citrix documentation on Workspace Configuration: https://docs.controlup.com and https://docs.citrix.com/en-us/citrix-cloud/workspace-configuration.html.
Read the entire article here...
Read the entire article here...
Using ControlUp to Automate Ticketing During Cloudflare Outages and Maintenance
A member shared a workflow they created to check the Cloudflare status page and raise a ticket during outages or maintenance. The workflow involves using the HTTP node and AI Switch statement. Screenshots and JSON for import were also provided. The current status page for Cloudflare can be found at https://www.cloudflarestatus.com/.
Read the entire article here...
Read the entire article here...
ControlUp Community Meetup #14: Inside ControlUp DaaS IQ — A Deep Dive with PM Gilad Broun
AVD management doesn’t have to be hard and expensive.
If you run Azure Virtual Desktop, you know the pain: unpredictable costs, fragile PowerShell scripts, fragmented visibility, and tab-hopping between the Azure Portal, Intune, and a dozen custom tools just to keep the lights on.
ControlUp’s answer is DaaS IQ — a purpose-built control plane for AVD that replaces the chaos with smart, reusable policies, centralized lifecycle management, and real-time cost intelligence.…
Read the entire article here...
Read the entire article here...
ControlUp Synthetic Monitoring Workflows and Workarounds
A user named Alexander asked Nathan about a known limitation with ControlUp Synthetic Monitoring - specifically, that the server_name is often empty for NetScaler Gateway scouts. Nathan recommended a few different workarounds for auto-restart and suggested adding more fields to the webhook payload for debugging. The suggested workflow was to use resource and query ControlUp Real-Time DX / CVAD for machines or sessions matching the published resource.
Read the entire article here...
Read the entire article here...
Creating a Public Link for Custom NOC Display Dashboards in ControlUp
A user is interested in creating a public link for their customized NOC display dashboard using ControlUp's built-in Big Screen Dashboard feature. Other users have also expressed a need for this feature and it seems to be gaining momentum. ControlUp knows about the request but has not found a secure way to implement it yet, as each widget on the dashboard is a live query requiring a token from the user. The suggestion is to create a service account and properly set up permissions for the dashboard to display it on digital signage.
Read the entire article here...
Read the entire article here...
Troubleshooting Scoutbees Network Connectivity and Check-in issues in ControlUp
A user asked for guidance on troubleshooting network connectivity or check-in issues with Scoutbee. They have installed Hive and it appears in Scoutbees, but remains in a red state. Another user suggested contacting support or using the network tester provided by ControlUp. Link to the network tester provided - https://support.controlup.com/docs/how-to-check-network-connectivity-to-controlup-cloud-services?highlight=network%20tester
Read the entire article here...
Read the entire article here...
When AI Helps, When It Doesn’t: Notes From a Fireside Chat on IT’s Next Chapter
In our latest ControlUp Community Meetup, Co-Founder Yoni Avital, ControlUp expert Eugene Kalayev, and Shane Kleinert from Choice Solutions sat down for a fireside chat on where EUC is headed. The panel tackled the big question: where does AI actually fit in EUC operations?
Read the entire article here...
Read the entire article here...
How to View CVAD Delivery Controller Information in ControlUp Real Time Console
A discussion took place about how to see what CVAD delivery controller a machine is registered to within the Real Time Console 9.2.0.622 - the "CVAD Broker Name" column can show the DNS hostname of the controller a machine is registered to, but this may be empty if the machine's registration state is Unregistered or Unknown. The column should show data when connected to the EUC environment where the machine is hosted, and the auto connect feature can also be used to see CVAD data and ControlUp data together. The discussion can be found on the ControlUp Slack channel.
Read the entire article here...
Read the entire article here...