With Windows 10 reaching end of life in October, new opportunities emerge, such as trying MSIX app attach for application delivery. MSIX app attach is a Microsoft packaging technology used to deliver apps to virtual desktops and sessions without requiring installation. The app simply runs in a container.
There are four unique phases that must be executed to attach and detach MSIX apps:
- Stage: This phase prepares the machine to receive and mount the MSIX app disk image
- Register: This phase registers the MSIX app to be available for users
- Deregister: This phase removes the MSIX app registration
- Destage: This phase removes all references to the MSIX app and dismounts the disk image
To package an app into MSIX format, you can use the MSIX Packaging Tool. Once the app is packed in MSIX format, you can create the MSIX disk image, which serves as the container. MSIX disk images can be saved as CimFS (Composite Image File System), VHDX, or VHD. CimFS is the recommended disk image format to use (in production environments) because it mounts and unmounts faster and consumes less CPU and memory.
To create an MSIX disk image, you can use the MSIXMGR tool, but you can also use third-party tools like MSIX Hero.
If you're an Azure Virtual Desktop (AVD) user, you can use App attach in the console, which is essentially version 2 of MSIX app attach. However, if you’re not an AVD user, you can still use MSIX app attach.
For example, the following picture represents a Standard Operating Procedure outside of AVD that may be implemented using a combination of other technologies and decision points to ensure that things function.

- Prepare: The identified app is prepared to be packaged in MSIX format
- Package to MSIX: The app is packaged in MSIX format
- Create MSIX Disk Image: The MSIX app package is used to create a disk image
- Test Validate: The MSIX app disk image is test validated
- Upload Files to Prod: The MSIX app disk image files are uploaded to production
- Deploy via GPO: This decision point leads to deploying MSIX app attach via GPO + FSLogix App Masking as a Citrix published desktop and/or published app
- Deploy via Citrix: This decision point leads to deploying MSIX app attach via Citrix DaaS App Packages as a Citrix published app
- User Launch: The user launches the Citrix published resource
- App is MSIX Attached: The MSIX app is attached to the Citrix session
- Administration and Support: The MSIX app is sustained and maintained
FSLogix App Masking rules manage MSIX app attach user entitlement in a multi-session OS and, if necessary, can be configured to do the same in a single-session OS. This is true whether the desktop is persistent or non-persistent.
Citrix delivery groups continue to control who can access published apps and desktops. This is crucial to remember for published apps so that they are properly aligned with the FSLogix App Masking Rules. For example, having access to the app in Citrix but not in the FSLogix App Masking rule.
As a result, if you're looking for new app delivery solutions, this one is worth considering because it simplifies image management by eliminating the need to install apps on the images.
Please contact us if you have any EUC-related questions or need more information about this solution.