Question about a thread already closed, unsolved. (GPO User policy not applying when using FSLogix Profile Containers)

Daan Poleij 11 Reputation points
2021-01-12T07:48:04.683+00:00

Hi all,

I've been having an issue quite for some time and it's the exact same issue as displayed in the link im dropping in the comments, I can't post it in the body because then I get the familiar "WAF v2 has determined your request exceeded the normal web request and has blocked your request."

Someone else still having the issue?

Azure Virtual Desktop
Azure Virtual Desktop
A Microsoft desktop and app virtualization service that runs on Azure. Previously known as Windows Virtual Desktop.
1,362 questions
FSLogix
FSLogix
A set of solutions that enhance, enable, and simplify non-persistent Windows computing environments and may also be used to create more portable computing sessions when using physical devices.
463 questions
{count} votes

2 answers

Sort by: Most helpful
  1. VipulSparsh-MSFT 16,231 Reputation points Microsoft Employee
    2021-01-15T07:38:35.537+00:00

    @Daan Poleij Please do mention the server version you are using, the known working workaround for the problem is to have following two settings on your servers :

    FSLogix registry key:
    DWORD GroupPolicyState = 0 under HKLM\SOFTWARE\FSLogix\Profiles\

    Computer Policy GPO:
    Computer Config | Admin Templates | System | Group Policy | Enable Group Policy caching for servers

    0 comments No comments

  2. Franklin Muthuswamy 1 Reputation point
    2021-03-19T22:36:09.747+00:00

    I had this working in either of the following two ways: - Only requirement was that the FSlogix had to be installed with domain admin credentials on the VMs:

    1. Registry entries on the VMs in host pool
      HKLM:\SOFTWARE\FSLogix\Profiles (if a path called Profiles is not available in FSLogix, create it)
      DWORD : Key: Enabled value: 1
      Multistring: Key: VHDLocations value: "\path of the fileshare server or azure storage fileshare"
    2. Group policy object in the PDC (to apply to the VDIs mapped as computers - I have my WVD VMs in a separate OU to which I link this GPO)

    Computer Configration>>Policies>>Administrative Templates>>FSLogix>>Profile Containers>>
    'Set Outlook cached mode on successful container attach" Enabled
    'Enabled' Enabled
    'VHD Location' Enabled (give the path of the fileshare)
    'Delete local profile whenn FSLogix Profile should apply' Enabled

    Computer Configration>>Policies>>Administrative Templates>>FSLogix>>Profile Containers>> Container and Directory Naming
    'Virtual disk type' Enabled
    'Swap directory name components' Enabled

    The best approach would be through GPO because that pushed the policy on one go to all the VMs in the pool.

    0 comments No comments