FsLogix - Unclean logoff causing locked files until server reboot

Much R 71

Problem is described by M4deman under unclean-logoff-causing-locked-files-until-server-reboot

It seems to have something to do with the 2009 version.
The latest version of FSLogix is installed whats-new

Description

After a user logoff, the "System" Process (PID 4) locks the following folders:

C:\Users\local_username\AppData\Local\Microsoft\Credentials
C:\Users\local_username\AppData\Roaming\Microsoft\Credentials

The user is completely logged of, according to Task Manager.

In the FSLogix Profile Log file I can see the following:

[07:53:55.601][tid:00000c90.0000ce44][ERROR:00000020] Delete profile failed for sid S-1-5-21-3364776539-3721753400-1968955100-1179, Cleaning up manually. (Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.)
The last sentence means that the process cannot access the file, because another process already uses it.

Also the whole "local_username" folder cannot be deleted:

[08:23:15.479][tid:00000c90.0000bcc4][WARN: 00000005] Failed to delete C:\Users\local_usename (Access is denied)
Access Denied

Does someone have any info on this behaviour?

Karlie Weng 13,951 Reputation points Microsoft Vendor

2021-01-14T03:03:58.32+00:00

Hello @Much R

Did you check affected user has full control and Owner over their FSLogix Folder and the VHDX files ?

Thanks
Karlie
Much R 71 Reputation points

2021-02-02T08:02:21.997+00:00

Hello,

Where is my answer from yesterday?
Why was this deleted?

How can I open a ticket at Microsoft now?

Thank you
Karlie Weng 13,951 Reputation points Microsoft Vendor

2021-02-02T08:16:39.607+00:00

Hello @Much R

sorry I was going to delete my comment as it wasn't helpful, and your comment is below mine, so it seems they were deleted together. I want to restore but it doesn't has this option.

FSLogix is supported for use with versions of Windows and Office that are still included in the Microsoft Support Lifecycle.

How to open a FSLogix Support Request
https://social.msdn.microsoft.com/Forums/en-US/14ea5f6f-760b-4ad2-83cf-23c3cbc1bcc4/how-to-open-a-fslogix-support-request?forum=FSLogix

Best regards
Karlie
Germain 11 Reputation points

2021-02-19T11:44:10.117+00:00

We are currently experiencing the same issue. The user VHDX is locked by system and can only be unlocked by rebooting the server.
Has Microsoft acknowledged this issue?

Currently using: 2.9.7654.46150
Bracko Ewald 21 Reputation points

2021-02-19T12:10:09.137+00:00

Did you activate the registry value HKEY_LOCAL_MACHINE\SOFTWARE\FSLogix\Apps\CleanupInvalidSessions (REG_DWORD, 0x1)?
Do you use Cloud Cache or not?

Also, maybe you can check with the frx command line tool if there are still some redirects pointing to the use VHDX file. You can then use that tool to delete them manually and detach the VHDX files afterwards using diskpart.
Marius Neuhaus 1 Reputation point

2021-03-09T10:31:38.737+00:00

Hello,

we have the same problem.
We use on-premise terminalserver.:
Windows Server 2019
Citrix 1912 CU2 LTSR
FSLogix 2.9.7621.30127

I've tried the CleanupInvalidSessions RegKey, but it doesn't effect.
We don't use Cloud Cache.
FSLogix Configuration only local and not per gpo.
The frx command line tool dont show redirects pointing to the use VHDX file.
Permission are set correct. Users work correctly with the containers.
Luckily the problem occurs only randomly and not at every logoff.

In the FSLogix Configuration we include the group domain-users and exclude the domain-administrators.
Could it be a Problem?

Best Regards,
Marius
itsupport 1 Reputation point

2021-05-26T12:40:37.147+00:00

When this happens are you left with multiple <USERNAME>.original folders? I've seen it go as high as <USERNAME>.original11 before I just manually delete all the folders.
Guido Racamato 26 Reputation points

2021-09-28T17:39:34.337+00:00

Hello Everyone, For the Group Policy Access Denied, once you get an affected user, could you please modify the following registry? There's no reboot required.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileService\References\<SID affected user>
REG_BINARY: RefCount
Value: 0
Jon McLeod 1 Reputation point

2021-11-19T14:56:08.267+00:00

This is the answer. Thank you.
Farooq 5 Reputation points

2024-02-14T12:02:36.9533333+00:00

We are having the same issue. We have an RDS environment and time to time users get logged in with Temporary profile, when I check the FSlogix logs I am seeing the following error - Failed to open virtual disk: \server\Profiles\S-1-5-21-26711-2174_user\Profile_user.vhd (The process cannot access the file because it is being used by another process.)
What we done to try resolve this or at least try find the cause and reduce downtime is, we have removed AV from all RDS host, we have created a script which logs out all users at midnight but issue is still occurring. We have a case opened with Microsoft but unfortunately there has been no resolution. Another issue we had is where users could not sign into their Outlook, teams, Office profile on the host. Has anyone else experiencing this issue and has anyone managed to resolve this? Any help or suggestion would be much appreciated.

105 answers

Much R 71 Reputation points

2021-01-14T10:59:23.6+00:00

Hi,

Permissions are OK.

In the screenshot you can see that the folders are blocked by lsass.exe.

I also noticed when the problem occurs I get the message:
The Group Policy Client service failed the sign in. Access is denied

The problem is also described here:
fslogix-error-34group-policy-client-service-failed.html
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment
SMB Solutions Cloud Services Pty Ltd 21 Reputation points

2021-02-18T23:24:22.323+00:00

We are also now experiencing the same issue across multiple RD Servers and the only workaround we seem to have is to reboot the affected server which is problematic as we can have 30 users on the server and only 1 is impacted by the issue.

We need some kind of fix urgently (statement of the bleeding obvious)
Please sign in to rate this answer.

1 person found this answer helpful.
SMB Solutions Cloud Services Pty Ltd 21 Reputation points

2021-07-23T08:49:17.453+00:00

We have deployed the latest release and our issue seems to be solved on all of our RDS servers.
Sign in to comment
Dlo 91 Reputation points

2021-04-19T11:43:23.967+00:00

So the test package they gave me was for windows 10 1809 not 1909 so it wouldn't install.
I am waiting for them to update it for 1909 which they did but they said they got some errors they need to fix now.
Once they get it I will let you guys know what happens.

I also tried enabling CleanupInvalidSessions and DeleteLocalProfileWhenVHDShouldApply to see if maybe that helps with the folders not being deleted off the server for the time being.

the VHD's aren't getting stuck as much as they use to but not sure why but still have all the folders not being deleted and I believe its related to search.

I will update you once I get a working package and test.
Please sign in to rate this answer.

1 person found this answer helpful.
CitrixMember 6 Reputation points

2021-04-21T11:50:15.147+00:00

What package did they gave you? New version of the fslogix? or just a "fix" ?

Dlo 91 Reputation points

2021-04-21T11:51:58.397+00:00

Was a hotfix but still have not got the new version of the hotfix.
Sign in to comment
Deepak Kumar 6 Reputation points

2021-05-08T11:53:09.45+00:00
Hello, I am very new to fslogix, and just finished setting up for a customer.

Windows Server 2019
Citrix Apps & Desktop : 1912 LTSR CU2
FsLogix Apps : 2.9.7654.46150 (No cloudcache)
All MacAfee AV exclusions recommended by Citrix & Microsoft

As of now I am not getting any issue while deleting the profiles after user log off, But if i get i would take below steps to go more in detail . I understood most of you already did these troubleshooting but hope to add new things . Please do this on your test server first.

Download sysinternals tools from Microsoft & run procmon tool (Logs can be very big so apply filters accordingly)

Search the logs with local_username & find the details after user log off

Assuming credential folder is not being deleted ( Try to add NT Authority/System and give rights to delete)..In my case I'm using centralized template profile so its easy to do from single place. If not use group policy to add security on folder or registry or use default profile folders.

Delete existing vhdx and check

I hope this will help or give new insights if not.

Happy debugging.

Thanks
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment
Андрей Михалевский 2,581 Reputation points

2021-07-27T14:20:53.827+00:00

A week later, the problem was back again. Apparently it is not possible to fix it by ourselves and we will have to wait a couple of years for microsoft to fix it :-(
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment