Executive Summary
This project replaced manual monthly maintenance activities with a centralized enterprise automation framework. The solution executes update pipelines on golden images, creates timestamped snapshots, publishes to test catalogs first, requests tester sign-off, promotes to production, and enforces snapshot/profile lifecycle controls from a single operations dashboard.
Monthly UpdatesWindows, Teams, M365, FSLogix, Webex update pipeline
Citrix PublishSnapshot-based image publish to test then production catalogs
GovernancePower Automate approval gate and one-week parallel validation
OperationsDashboard-driven cleanup for snapshots and profiles
Delivered Components
- PowerShell module for reusable automation functions (monthly update, catalog publish, cleanup, approvals).
- PowerShell Universal dashboard for machine catalog browsing and maintenance execution.
- Monthly maintenance orchestrator scripts for test publication and production promotion.
- Bicep + Azure DevOps scaffolding for enterprise-managed deployment and validation.
- Runbook and architecture package with detailed operational flow and rollback model.
Visio-Style Architecture Diagram
Figure 1 — Unified automation architecture for Citrix monthly maintenance and catalog release governance.
Monthly Update Workflow Diagram
Figure 2 — End-to-end monthly maintenance flow with approval-driven production promotion.
Runbook (Operational Sequence)
- Authenticate to Azure and Citrix Cloud contexts.
- Power on each golden image VM and run monthly update pipeline (Windows, Teams, M365, FSLogix, Webex).
- Shutdown image VM and create timestamped snapshot using standard naming.
- Publish snapshot to test machine catalogs associated with that image line.
- Send tester request through Power Automate and wait for all required approvals.
- After approval, publish the same snapshot to production catalogs.
- Run one-week parallel validation window before decommissioning old image version line.
- Execute snapshot retention cleanup (keep newest 2; block deletion of in-use snapshots).
- Run FSLogix/UPL profile cleanup for selected users when requested by operations.
- Record completion evidence, rollback status, and change references.
Outcome
- Standardized monthly maintenance across environments with less manual intervention.
- Improved release safety using test-first publication, explicit approvals, and staged production promotion.
- Reduced operational risk via snapshot governance, rollback paths, and profile cleanup workflows.
- Enabled enterprise-scale operations through a single dashboard and module-based automation design.