Windows 11 KB5074109 Citrix Director and Enterprise App Crashes

What is the KB5074109 Citrix and Enterprise App Crash?

Windows 11 security update KB5074109 (released January 13, 2026, for builds 24H2 and 25H2) introduced a critical regression that breaks Citrix Director shadowing, Azure Virtual Desktop (AVD) connections, and Windows 365 Cloud PC authentication. The root cause is that Microsoft's fix for CVE-2026-20824 corrupted the Microsoft Remote Assistance binary (msra.exe), which Citrix Director depends on for session shadowing. When a Citrix admin tries to shadow a user session, the invite file fails to open with a "File corrupted" error.

This affects enterprise environments running Citrix Virtual Apps and Desktops (CVAD) with Director, as well as organizations using Azure Virtual Desktop or Windows 365.

When does it occur?

• When a Citrix Director admin attempts to shadow a user's virtual desktop session
• When connecting to Azure Virtual Desktop or Windows 365 Cloud PCs via the Windows App
• When launching Microsoft Remote Assistance (msra.exe) directly — it fails with "file corrupted"
• When enterprise VPN clients that depend on Windows networking components fail to authenticate
• After installing KB5074109 on Windows 11 24H2 (Build 26100.7623) or 25H2 (Build 26200.7623)

Common causes

• Corrupted msra.exe — KB5074109's patch for CVE-2026-20824 broke the Microsoft Remote Assistance binary
• Citrix Director's dependency on msra.exe — Director uses Remote Assist for session shadowing, which no longer functions
• Azure Virtual Desktop authentication failure — the update broke the Windows App's authentication flow to AVD/W365
• Enterprise certificate store changes — the security update modified certificate validation that some VPN clients rely on
• Group Policy conflicts — new security policies deployed by KB5074109 may conflict with enterprise remote access configurations
• Windows App version incompatibility — older versions of the Windows App (formerly Remote Desktop) fail entirely after this update

Step-by-step fixes

1. Switch to HDX Screen Sharing (Citrix) — Citrix's official workaround. If you're running CVAD 2311 or later with Director, enable HDX Screen Sharing instead of Remote Assist shadowing. In Citrix Studio, navigate to Policies > ICA > Graphics > Screen Sharing and set it to Allowed. HDX Screen Sharing is lower latency and doesn't depend on msra.exe.

1. Install the February 2026 cumulative update — Microsoft released KB5078127 as an emergency out-of-band fix on January 24, 2026. Check Windows Update for the latest cumulative update. Run winver to confirm your build is newer than 26100.7623.

1. Apply the Known Issue Rollback (KIR) — For managed devices, Microsoft deployed a KIR policy. In Group Policy Editor, navigate to Computer Configuration > Administrative Templates > KB5074109 260126_02560 Known Issue Rollback. Set it to Enabled. Allow up to 24 hours for the policy to propagate.

1. Replace msra.exe manually (temporary workaround) — If you cannot update immediately: take ownership of C:\Windows\System32\msra.exe using TrustedInstaller permissions (tools like AdvancedRun from NirSoft can help). Replace it with the pre-KB5074109 version from a December 2025 backup. This is unsupported by Microsoft but restores Citrix Director shadowing.

1. Update the Windows App for AVD — Download the latest Windows App (version 2.0.4 or newer) from the Microsoft Store or [Microsoft's download page](https://learn.microsoft.com/en-us/windows-app/). The updated version includes a fix for the AVD/W365 authentication regression.

1. Uninstall KB5074109 (last resort) — Open Settings > Windows Update > Update History > Uninstall updates. Find KB5074109 and uninstall it. Alternatively, run in an elevated Command Prompt: wusa /uninstall /kb:5074109 /quiet /norestart. Note: this removes security fixes for CVE-2026-20824, so only do this if the February update is not yet available for your build.

If it still doesn't work

For large enterprise deployments, use WSUS or Intune to pause KB5074109 distribution while testing the February cumulative update (KB5078127) in a staging environment. If Citrix Director shadowing remains broken after updating, verify that your CVAD version supports HDX Screen Sharing (requires CVAD 2311+) and that the VDA on target machines is updated to match.

Contact Microsoft Premier Support with your build number (winver), Citrix CVAD version, and the exact error message from msra.exe. Microsoft has acknowledged all three regressions (Citrix/msra, AVD, Outlook POP3) and is tracking them on the [KB5074109 known issues page](https://support.microsoft.com/en-gb/topic/january-13-2026-kb5074109-os-builds-26200-7623-and-26100-7623-3ec427dd-6fc4-4c32-a471-83504dd081cb). If you're also seeing gaming artifacts, see our guide to [KB5074109 Nvidia issues](/en/errors/windows-11-kb5074109-nvidia-gaming-artifacts).