Posts

How-tos, scripts and things learned the hard way.

Allaction1 1ai 1airlock 2avd 3citrix 12daas 5defender 1devicetrust 3fslogix 1github-pages 1horizon 4igel 1intune 1jekyll 1netscaler 3powershell 17security 11uberagent 3workspace-one 2

• VDI Assessment Map: What to Check in a Citrix or AVD Environment 4 Nov 2026 Eight layers I work through when assessing a Citrix or Azure Virtual Desktop environment, what to look for in each, and the PowerShell that gets you started.
• Bye-Bye FAS? Citrix SSO with NetScaler and Entra ID 29 Oct 2026 With CVAD 2607 LTSR, users can sign in once with Entra ID and land on their desktop without FAS, a CA or a second password prompt. How it works, what you need and the gotchas.
• Workspace ONE vs Intune: Which One Do You Actually Need? 28 Oct 2026 Most businesses already pay for Intune. Here's when that's enough, and when Omnissa Workspace ONE earns its place.
• uberAgent: Experience and Security Monitoring from One Agent 28 Oct 2026 uberAgent collects user experience and security data once and uses it twice. What UXM and ESA cover, where the data goes, and how it fits with Citrix Monitor and your EDR.
• NetScaler's Run of CVEs: What's Happened and What to Do Now 28 Oct 2026 Six exploited NetScaler flaws in 2026 so far, two of them zero-days, and PHP fixes on 27 October. The pattern, the builds you need, and a checklist for patching, hunting and reducing exposure.
• Horizon Security Map: Ten Layers from Sign-in to Desktop 28 Oct 2026 Where each control sits in an Omnissa Horizon deployment, from the identity provider to the golden image, and what to check first.
• EUC Security Map: Securing a Horizon and IGEL Stack 28 Oct 2026 Twelve layers, each owned by one tool, from sign-in to recovery, and how they line up with the Essential Eight.
• deviceTRUST and Device Posture: Checking the Device All Session Long 28 Oct 2026 Device Posture decides whether a device can sign in. deviceTRUST keeps checking while the session runs. Here's how the two fit together in Citrix DaaS.
• Citrix vs Omnissa: Two Approaches to AI Governance 28 Oct 2026 Citrix puts NetScaler in the path of AI traffic. Omnissa is building a decision layer above your tools. What each has announced, what's actually available, and where to start.
• Citrix vs Horizon: StoreFront and Delivery Controller vs Connection Server 28 Oct 2026 Moving from Citrix to Horizon? One Connection Server does the job of StoreFront and the Delivery Controller. Here's what changes.
• Citrix vs Azure Virtual Desktop: What Replaces What 28 Oct 2026 Moving from Citrix to AVD? The gateway, portal and broker become Microsoft's problem. Here's how the pieces map and what you still own.
• Citrix Profile Management vs FSLogix: Choosing a Profile Container 28 Oct 2026 Both now mount a VHDX per user. What's different, what you're licensed for, and why you shouldn't run both on the same profile.
• Citrix DaaS vs On-Premises CVAD: What Moves to the Cloud 28 Oct 2026 Citrix DaaS takes the Delivery Controllers, SQL and Studio off your hands. Your VDAs, images and profiles stay where they are. Here's the split, and how to move.
• Citrix DaaS Security Map: Eleven Layers from Sign-in to Session 28 Oct 2026 Where each control sits in a Citrix DaaS deployment, from Workspace sign-in to the VDA, including Device Posture, deviceTRUST, App Protection and uberAgent.
• Citrix DaaS Add-ons: Which Problem Each One Solves 28 Oct 2026 Device Posture, deviceTRUST, App Protection, Session Recording, WEM, uberAgent and Secure Private Access, sorted by the question each one answers.
• Airlock Digital vs App Control for Business and AppLocker 28 Oct 2026 Microsoft's application control is built in and free. Airlock adds the workflow that makes allowlisting survivable. Here's how to choose.
• Scripting Jekyll pages with PowerShell 26 Oct 2026 Two small functions that make generated Markdown files behave: safe slugs and UTF-8 without a BOM.