Fslogix Group Policy Settings Best Practices 17sep20
1685789222
File Name: FSLogix-Group-Policy-Settings-Profile-Conatiner-Best-Practices-v1.0-17Sep20.pdf
File Size: 618.25 KB
File Type: Application/pdf
Last Modified: 2 years
Status: Available
Last checked: 17 hours ago!
This Document Has Been Certified by a Professional
100% customizable
Language: English
We recommend downloading this file onto your computer
Summary
FSLogix Group Policy Settings – Profile & Office Container - Policies Best PracticesProfile Container Policies Container FSLogix GP Settings Type Path Settings Value/Enable/Disable Description FSLogix Profile Include List-Default .\Everyone FSLogix Profile Computer Exclude List - No Configuration/Policies one Added /Windows FSLogix ODFC Settings/Restricted Include List-Default Groups .\Everyone or through group FSLogix ODFC General Policy preferences Enable Exclude for Administrators Group Exclude List Computer Configuration/Adminis Enables logging of trative Enable FSLogix software General Templates/FSLogix Logging All logs enabled activity
Specifies the location where log files should be stored. Local and Computer UNC paths are Configuration/Adminis Path to accepted. Default is trative Logging %ProgramData%\F General Templates/FSLogix Files If path need to change then enable SLogix\Logs
Specifies how Computer many days worth Configuration/Adminis Days to of log files to keep trative keep Log before being General Templates/FSLogix File 7 cleaned up
CacheDirectory specifies the location of the Local Cache file. By Computer it is not possible to rely on GPOs to default, the local Configuration/Adminis set CacheDirectory in environments Cache file will be trative where a GoldImage is applied at boot. placed in Templates/Cloud CacheDir HKLM\SYSTEM\CurrentControlSet\Ser C:\ProgramData\FS General Cache ectory vices\frxccds\Parameters Logix\Cache
Sensitivity: Internal & Restricted Controls whether the VHD/X file should be accessed directly, if a difference disk should be used, and if Read/Write or Read Only access should be used
Normal direct- access profile - if user is not using mullti apps from different servers Computer Read only Configuration/Adminis Profile,Read Write trative profile, TRy forProfile Templates/FSLogix/Pr Profile Read-write and fallContainers ofile Containers Type Normal direct-access profile back to read only Store search database Computer in profile Configuration/Adminis containe trative r -ReferProfile Templates/FSLogix/Pr next Disable - For all Windows Server 2019Containers ofile Containers sheet Enable - For all Windows VDI Computer Configuration/Adminis trativeProfile Templates/FSLogix/PrContainers ofile Containers Enable Enabled Specifies the network location Computer where the VHD(X) Configuration/Adminis files are stored. For trative VHD example,Profile Templates/FSLogix/Pr Location \\servername\sharContainers ofile Containers s Enabled e\containers
Computer Configuration/Adminis Dynamic trative VHD(X)Profile Templates/FSLogix/Pr allocatioContainers ofile Containers n Enabled Delete Please use caution Computer local with this setting
Configuration/Adminis profile When the FSLogix trative when Profiles systemProfile Templates/FSLogix/Pr FSLogix determines that aContainers ofile Containers Profile Enabled user should have a Sensitivity: Internal & Restricted should FSLogix profile but apply a local profile exists, the local profile WILL BE REMOVED and the user logged on with the FSLogix profile
Computer Specify the size for Configuration/Adminis auto-created trative VHD(X) files
Profile Templates/FSLogix/Pr Size in Default is 30,000Containers ofile Containers MB's Enabled (30 GBs)
Enable FSLogix to handle concurrent user sessions on the same machine
Note: If you are using the Windows server feature to allow concurrent logins for the same Windows account Computer on the same server Configuration/Adminis Allow (seen most often trative concurre with CitrixProfile Templates/FSLogix/Pr nt user XenApp), you mustContainers ofile Containers sessions Enabled based on requirment enable this policy
Specifies the Computer number of retries Configuration/Adminis to perform when a trative Locked VHD(X) file is Templates/FSLogix/Pr VHD locked (open byProfile ofile retry Enabled another process orContainers Containers/Advanced/ count Value -3 computer)
When a VHD/X volume is detached unexpectedly, the Computer FSLogix system will Configuration/Adminis attempt to re- trative Volume attach the volume
Templates/FSLogix/Pr re-attach This value specifiesProfile ofile retry Enabled how many times toContainers Containers/Advanced/ interval Value -3 retry
Computer Configuration/Adminis Prevent user login trative Prevent when a failure Templates/FSLogix/Pr login occurs whileProfile ofile with attaching anContainers Containers/Advanced/ failure Enabled FSLogix container
Computer Prevent Prevent user loginProfile Configuration/Adminis login when a userContainers trative with Enabled receives a Sensitivity: Internal & Restricted Templates/FSLogix/Pr tempora temporary ofile ry profile Windows profile
Containers/Advanced/ RedirXMLSourceFol der =
'\\someserver\som eshare'>) If the folder contains a redirections.xml, it will be copied to the local profile and immediately used. Variable names are delimited with '%' characters
Supported variables are %username%, %userdomain%, %sid%, %osmajor%, Provide %osminor%, Computer RedirXM %osbuild%, Configuration/Adminis L file to %osservicepack%, trative customiz %profileversion%, Templates/FSLogix/Pr e %clientname%, andProfile ofile redirecti any environmentContainers Containers/Advanced/ ons Enable based on requirment variable
When checked Computer causes new Configuration/Policies containing /Administrative Swap directories to be Templates/FSLogix/Pr directory named with the ofile name user name firstProfile Containers/Container compon followed by theContainers and Directory Naming/ ents Enabled SID
Computer Configuration/Policies /Administrative Templates/FSLogix/Pr ofileProfile Containers/Container VirtualContainers and Directory Naming/ disk type Enabled -VHDX Computer Configuration/Adminis trative Clear Templates/FSLogix/Pr localCloud ofile Containers/Cloud cache onCache Cache logoff Enabled if this feature requires Sensitivity: Internal & Restricted With cloud clache, profiles will replicate automatically by giving 2 SMB share Computer paths Configuration/Adminis Either VHD trative Cloud locations or CCD Templates/FSLogix/Pr Cache location should Cloud ofile Containers/Cloud Location enable and not Cache Cache s Enabled if this feature requires bothOffice Container Policies Container FSLogix GP Value/Enable/Dis Type Settings Path Settings able Description Computer Configuration / Policies / Administrative Template / Enabled Specify the size for auto- Office FSLogix / Office Size based on created VHD(X) files
Containers 365 Container Size in MB's requirment Default is 30,000 (30 GBs)
Computer Configuration / Specifies the network Policies / location where the VHD(X) Administrative Enabled files are stored. For Template / Enable different example, Office FSLogix / Office share path as a \\servername\share\conta Containers 365 Container VHD Locations best parctices iners
Computer Configuration / Policies / Administrative Template / Office FSLogix / Office Enabled Containers 365 Container Virtual Disk Type VHDX Computer Configuration / Policies / When Enabled is checked, Administrative the Office license Template / Include Office activation data will be Office FSLogix / Office activation data in included in the Office 365 Containers 365 Container container Enabled Container
Sensitivity: Internal & Restricted Computer Configuration / Policies / Administrative When Enabled is checked, Template / the Outlook data files willOffice FSLogix / Office Include Outlook data in be included in the OfficeContainers 365 Container container Enabled 365 Container
Computer Configuration / Policies / Administrative When Enabled is checked, Template / Include Enabled the OneDrive cache will beOffice FSLogix / Office OneDrive/Teams/Share (Enabled based o included in the Office 365Containers 365 Container point data in container requirment) Container
This setting is used when VHDAccessMode is set to '3'. This controls the number of session VHDs that are persistent. For Computer example, if this is set to '2' Configuration / and the user creates a 3rd Policies / session, a new session Administrative VHD will be created and Template / Enabled used, but it will be deletedOffice FSLogix / Office Number of per-Session (Optional based when the 3rd sessionContainers 365 Container VHDs to persist on requirment) ends
.Difference disk stored on local machine .Difference disk Computer stored on network Configuration / .Direct access Policies / .Unique disk per Controls whether the Administrative session VHD/X file should be Template / accessed directly orOffice FSLogix / Office Enabled based on whether a difference diskContainers 365 Container VHD access type requirment should be used
Computer Configuration / Do not apply any of the Policies / settings below if you are Administrative deploying Server 2019
Template / 2019 will roam theOffice FSLogix / Office Store search database Multi-user search windows search out of theContainers 365 Container in Office 365 container Single-user search box
If this feature is enabled Computer and the Office365 Configuration / Container is successfully Policies / attached, the Outlook Administrative setting that enables cache Template / Set Outlook cached mode is temporarily setOffice FSLogix / Office mode on successful Enabled for the current sessionContainers 365 Container container attach (Must) until the container is Sensitivity: Internal & Restricted removed. This ensures that the cache mode is only used when the container is attached If Dynamic VHD(X) allocation is enabled, the VHD(X) files are assigned dynamically. This means that the file size of the VHD(X) file only grows Computer when data is added to the Configuration / Office365 Container. If this Policies / option is not enabled, Administrative automatically created Template / VHD(X) files will be directlyOffice FSLogix / Office Dynamic VHD(X) Enabled allocated to the full dataContainers 365 Container allocation (Must) storage space Computer This setting should be used Configuration / when the target system is Policies / multi-session and allows Administrative simultaneous logins for Template / Enabled the same WindowsOffice FSLogix / Office Allow concurrent user Based on account on the sameContainers 365 Container sessions requirement server Computer Configuration / Policies / Administrative Template / Specifies the number of FSLogix / Office retries to perform when a 365 VHD(X) file is locked (openOffice Container/Advan Enabled by another process orContainers ced Locked VHD retry count Value -3 computer)
Computer Configuration / Policies / When a VHD/X volume is Administrative detached unexpectedly, Template / the FSLogix system will FSLogix / Office attempt to re-attach the 365 volume. This valueOffice Container/Advan Volume re-attach retry Enabled specifies how many timesContainers ced interval Value -3 to retry
Computer Configuration / Policies / Administrative Template / When checked causes new FSLogix / Office containing directories to 365 be named with the userOffice Container/Contai Swap directory name name first followed by theContainers ner and components Enabled SID
Sensitivity: Internal & Restricted Directory Naming/Additional Best Practices Delete any local profiles on the machine (not mandatory, but recommended as sometimes creates issues) Create a group in AD called "APP_FSLogixProfiles_Exclude and add groups through preferences Create the exclusions file (optional) Create a new GPO just for FSLogix Profile settings (don't combine ODFC and profiles into one GPO) post Fslofgix Login , you will see local_*user* folder under c:\users For exclusion test -Create some files in one of your excluded folders-Log out of the RDS and log back in Office365 Container can be used parallel to existing profile methods (Roaming, UPM .Fslogix Profile container etc.) Anti-Virus Exceptions C:\Program Files\FSLogix\Apps\frxdrv.sys and frxsvc.exe C:\Windows\TEMP\ Exclude .VHD and .VHDXRef: Cloud Cache registry configuration https://docs.microsoft.com/en-us/fslogix/cloud-cache- reference configuration-reference https://www.amorales.org/2019/11/deploying-fslogix-profile- containers.html https://virtualwarlock.net/how-to-install-the-fslogix-apps-agent/ Windows Search in Server 2019 and Multi- https://jkindon.com/2020/03/15/windows-search-in-server- Session Windows 10 2019-and-multi-session-windows-10/ FSLogix in a Citrix Provisioning environment https://www.sul.de/2019/04/05/fslogix-in-a-citrix-provisioning- & Redirection file sample environment/ https://social.msdn.microsoft.com/Forums/en-US/028c48b2- FAQ: How to use Office 365 and Profile 1a98-4202-975b-e9125fdd9b6e/faq-how-to-use-office-365-and- Containers together profile-containers-together?forum=FSLogix https://www.deyda.net/index.php/en/2019/11/05/fslogix- FSLogix Container (Office/Profile) in Citrix container-office-profile-in-citrix- Environments environments/#Office365_Container-2 Sensitivity: Internal & Restricted
Title: Microsoft Word - FSLogix Group Policy Settings -Best Practices-17Sep20.docx Author: VE844986 Created Date: 9/17/2020 7:59:26 PM
Documemt Updated
Popular Download
Frequently Asked Questions
How to create a gpo in fslogix?
Fill in a name for the new GPO and press “OK” Right-click on the new created policy and select “ Edit ”, the Group Policy Management Editor app opens. Expand Computer configuration > Policies > Administrative Templates > FSLogix and enable the desired settings for your configuration.
What is the default registry size for fslogix?
Default value is 30000 MB or 30 GB. More capabilities for PowerShell and maintenance. Makes it easier to search for the specific profile container user folder on the network share. To manage these registry settings at scale, group policy templates are included with the FSlogix installation package.
What are the best practices for fslogix profile containers?
The following are general best practices for FSLogix profile containers. For optimal performance, the storage solution and the FSLogix profile container should be in the same data-center location. Exclude the VHD (X) files for profile containers from antivirus scanning, to avoid performance bottlenecks.
How to enable cloud cache in fslogix?
Under parent FSLogix folder, there are dedicated sections for Cloud Cache, Office 365 Container, and Profile Container. For each setting, double-click on it, enable and eventually fill in required values. At the end, be sure to click on “ Apply ” to save and exit the dialog: