Endpoint Standard: Grey Screen on Citrix VDI when logging in using RDP/Citrix VDA

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Grey screen while logging into Non-Persistent Citrix VDI through RDP/Citrix VDA.

Environment

• Carbon Black Cloud Console: All available versions
• Endpoint Standard: 3.6.0.2076 version.
• Citrix 

Cause

This issue is due to repmgr.exe holding/blocking csrss.exe which is responsible for performing session graphics initialization.

Resolution

Create a full bypass rule for the full path C:\windows\system32\csrss.exe 

Additional Information

Installations not using the C drive should use the path *:\windows\system32\csrss.exe