[Issue]: Slow login with profile container after using BIS-F

[maik268]

Describe the bug

After the image has been sealed, the profile loading time increases to 3-10 minutes.
Before sealing, it is about 20 seconds.
It stucks at "Waiting for fslogix service" (if using fslogix) or at "Waiting for Citrix profile management" (if using citrix profile container).

We are currently switching to Windows Server 2025 and FSLogix. However, the problem also occurs with Citrix profile containers.

Unfortunately, I have no idea where to start.
I would be happy to provide more information.

Steps to reproduce

1: Install Windows Server 2025
2: Install Citrix VDA
--Everything is working fine
3: Seal Image with BIS-F
--Now the login time has been extended.

Expected behavior

A login time of 20 seconds as before sealing.

Screenshots

No response

Desktop, please complete the following information.

No response

Smartphone, please complete the following information.

No response

Additional context

No response

[fgottilu]

Hi,
I have the same issue with Windows Server 2025 with latest VDA 2411.

Also when you launch the script, the Windows Update service is not disabled.

[Marc408]

Hi, same issue, not using any profile containers.
WS 2025, VDA 2407

[EUCweb]

Is BIS-F trigger Citrix Optimizer ?

If possible please upload the BIS-F preparation log from the master image and the personalization log from a target VM. Anonymize any sensitive data in the log before upload it here into the GitHub issue.

[Marc408]

I did deactivate Citrix Optimizer in the GPO. Same Issue. Logs are appended.

PERS_BISF_ServerName2_20250219-090718.log
PREP_BISF_ServerName1_20250219-075709.log

[EUCweb]

In addition the logs from the FSLogix profile container or Citrix UPM are possible to analyze it further

[Marc408]

Hi, heres the UPM Logs. Logon is at ~16:10

contoso.com#ServerName2_pm.log

[EUCweb]

@Marc408 with deactivated Citrix Optinizer, is this a freeh new image ?

Deactivate optimizer doesn't change back the settings. You can rollback the optimizer settings.

But prefer a fresh new image for reference.

[Marc408]

@EUCweb When i rollback to an earlier Snapshot before running BISF logon works as usual. I tried running BISF once with Optimizer and once without - both times breaking logon.

However, when creating the image I have already run Citrix Optimizer manually, independently of BISF. Works fine.

I could create a fresh install and test again, I would have to come back later tho

[EUCweb]

Got further informations from the log, thanks to @JamesKindon

Log doesn't show much of use outside of a cannot find specified file - but i don't know from the log what it's looking for - wonder if they have async policy processing enabled in both environments for both solutions

[JamesKindon]

Could this be related to taskoffload or RSS being disabled by BISF?

[JamesKindon]

Specifically in here https://github.com/EUCweb/BIS-F/blob/develop/Framework/SubCall/Preparation/97_PrepBISF_PRE_BaseImage.ps1

[davisray1983]

Yes, I believe it is or could be. Yesterday I was troubleshooting a Window 11 Image 24H2 on VMware 8.0.x stack. With latest VMware tools.
When opening a UNC path to the Golden image or the VDA to \W11\C$ for example.
When copying a file from a source machine to the destination machine. Destination being \W11\C$ for example (Golden or VDA that is W1124H2). it would stall and state calculating for a long time. After about 12 minutes, it would start copying, but it was 355kbps.
The seemed to impact anything that relied on anything be called via SMB
Did some digging and relized it was due to DisableTaskOffload' -Value '1' and rss=disable

Once I put the DisableTaskOffload' -Value '0" the speeds went from 355KB to over 165MB
Then once I reset this rss=enable, the speeds were over 300MB and things were back to normal.
These two settings are legacy and not needed for modern Operating systems from what I am seeing now.

Quick workaround to update [Preparation/97_PrepBISF_PRE_BaseImage.ps1]

$BISFDir = "C:\Program Files (x86)\Base Image Script Framework (BIS-F)\Framework\SubCall"
((Get-Content "$BISFDir\Preparation\97_PrepBISF_PRE_BaseImage.ps1" -Raw) -replace "DisableTaskOffload' -Value '1'","DisableTaskOffload' -Value '0'") | Set-Content -Path "$BISFDir\Preparation\97_PrepBISF_PRE_BaseImage.ps1"
((Get-Content "$BISFDir\Preparation\97_PrepBISF_PRE_BaseImage.ps1" -Raw) -replace 'rss=disable','rss=enable') | Set-Content -Path "$BISFDir\Preparation\97_PrepBISF_PRE_BaseImage.ps1"

I am happy to create another issue request if needed on this topic that I just posted.