FsLogix - Unclean logoff causing locked files until server reboot

Much R 71

Problem is described by M4deman under unclean-logoff-causing-locked-files-until-server-reboot

It seems to have something to do with the 2009 version.
The latest version of FSLogix is installed whats-new

Description

After a user logoff, the "System" Process (PID 4) locks the following folders:

C:\Users\local_username\AppData\Local\Microsoft\Credentials
C:\Users\local_username\AppData\Roaming\Microsoft\Credentials

The user is completely logged of, according to Task Manager.

In the FSLogix Profile Log file I can see the following:

[07:53:55.601][tid:00000c90.0000ce44][ERROR:00000020] Delete profile failed for sid S-1-5-21-3364776539-3721753400-1968955100-1179, Cleaning up manually. (Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.)
The last sentence means that the process cannot access the file, because another process already uses it.

Also the whole "local_username" folder cannot be deleted:

[08:23:15.479][tid:00000c90.0000bcc4][WARN: 00000005] Failed to delete C:\Users\local_usename (Access is denied)
Access Denied

Does someone have any info on this behaviour?

Karlie Weng 15,281 Reputation points Microsoft Vendor

2021-01-14T03:03:58.32+00:00

Hello @Much R

Did you check affected user has full control and Owner over their FSLogix Folder and the VHDX files ?

Thanks
Karlie
Much R 71 Reputation points

2021-02-02T08:02:21.997+00:00

Hello,

Where is my answer from yesterday?
Why was this deleted?

How can I open a ticket at Microsoft now?

Thank you
Karlie Weng 15,281 Reputation points Microsoft Vendor

2021-02-02T08:16:39.607+00:00

Hello @Much R

sorry I was going to delete my comment as it wasn't helpful, and your comment is below mine, so it seems they were deleted together. I want to restore but it doesn't has this option.

FSLogix is supported for use with versions of Windows and Office that are still included in the Microsoft Support Lifecycle.

How to open a FSLogix Support Request
https://social.msdn.microsoft.com/Forums/en-US/14ea5f6f-760b-4ad2-83cf-23c3cbc1bcc4/how-to-open-a-fslogix-support-request?forum=FSLogix

Best regards
Karlie
Germain 11 Reputation points

2021-02-19T11:44:10.117+00:00

We are currently experiencing the same issue. The user VHDX is locked by system and can only be unlocked by rebooting the server.
Has Microsoft acknowledged this issue?

Currently using: 2.9.7654.46150
Bracko Ewald 21 Reputation points

2021-02-19T12:10:09.137+00:00

Did you activate the registry value HKEY_LOCAL_MACHINE\SOFTWARE\FSLogix\Apps\CleanupInvalidSessions (REG_DWORD, 0x1)?
Do you use Cloud Cache or not?

Also, maybe you can check with the frx command line tool if there are still some redirects pointing to the use VHDX file. You can then use that tool to delete them manually and detach the VHDX files afterwards using diskpart.
Marius Neuhaus 1 Reputation point

2021-03-09T10:31:38.737+00:00

Hello,

we have the same problem.
We use on-premise terminalserver.:
Windows Server 2019
Citrix 1912 CU2 LTSR
FSLogix 2.9.7621.30127

I've tried the CleanupInvalidSessions RegKey, but it doesn't effect.
We don't use Cloud Cache.
FSLogix Configuration only local and not per gpo.
The frx command line tool dont show redirects pointing to the use VHDX file.
Permission are set correct. Users work correctly with the containers.
Luckily the problem occurs only randomly and not at every logoff.

In the FSLogix Configuration we include the group domain-users and exclude the domain-administrators.
Could it be a Problem?

Best Regards,
Marius
itsupport 1 Reputation point

2021-05-26T12:40:37.147+00:00

When this happens are you left with multiple <USERNAME>.original folders? I've seen it go as high as <USERNAME>.original11 before I just manually delete all the folders.
Guido Racamato 26 Reputation points

2021-09-28T17:39:34.337+00:00

Hello Everyone, For the Group Policy Access Denied, once you get an affected user, could you please modify the following registry? There's no reboot required.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileService\References\<SID affected user>
REG_BINARY: RefCount
Value: 0
Jon McLeod 1 Reputation point

2021-11-19T14:56:08.267+00:00

This is the answer. Thank you.
Farooq 5 Reputation points

2024-02-14T12:02:36.9533333+00:00

We are having the same issue. We have an RDS environment and time to time users get logged in with Temporary profile, when I check the FSlogix logs I am seeing the following error - Failed to open virtual disk: \server\Profiles\S-1-5-21-26711-2174_user\Profile_user.vhd (The process cannot access the file because it is being used by another process.)
What we done to try resolve this or at least try find the cause and reduce downtime is, we have removed AV from all RDS host, we have created a script which logs out all users at midnight but issue is still occurring. We have a case opened with Microsoft but unfortunately there has been no resolution. Another issue we had is where users could not sign into their Outlook, teams, Office profile on the host. Has anyone else experiencing this issue and has anyone managed to resolve this? Any help or suggestion would be much appreciated.

106 answers

Sven Goossens 1 Reputation point

2021-05-28T09:24:03.237+00:00

We saw the issue dissappear after completely removing the antivirus. So I'm not really sure this is caused by Fslogix.
Please sign in to rate this answer.
JLugo-ITCS 6 Reputation points

2021-05-28T13:22:39.167+00:00

Now that you mentioned that, I recall seeing antivirus mentioned somewhere else in the FSLogix KB's. I do need AV scanning the hosts and always thought we only needed to exclude the containers.

"Frxrobocopy is used to exclude the file copy, done by the FSLogix agent, from Anti-virus scanners."

https://learn.microsoft.com/en-us/fslogix/fslogix-installed-components-functions-reference#frxrobocopyexe

I believe robocopy is used regardless if you use cloud cache or not, but they could expand that description. I'll give this a try over the weekend.
Sign in to comment
CitrixMember 6 Reputation points

2021-06-03T11:14:58.923+00:00

Any improvements with frxrobocopy.exe tool inside fslogix\apps?
Please sign in to rate this answer.
Robert Berggren 1 Reputation point

2021-06-04T09:47:25.217+00:00

We have no antivirus scanning the fslogix directory. And I believe that this only is a solution when you use cloud cache?

Robert

Denilson Tobal 1 Reputation point

2021-06-05T15:42:06.457+00:00

Hi!

I am using Windows Defender with the exclude directories, and I am experiencing this situation.

Any workaround?

It is a WVD with NV v3 vm in production. I cannot restart during the days.

CleanInvalidSessions = 1 ?
GPP = Update ?
Antivirus = ?
Downgrade to 2004 Fslogix version ?

Anyone has a gold bullet ?

Thanks
Denilson

Nirmal Singh 1 Reputation point

2021-06-06T23:35:09.71+00:00

Downgrading to FSLogix 2004 won't fix the issue however it would drop down the frequency of the issue.
We are using WS2019 + FSLogix 2004 for office containers. We have a case with MS from past few weeks but they have no answer to this.

Thanks,
Nirmal
Sign in to comment
CitrixMember 6 Reputation points

2021-06-14T06:49:58.023+00:00

Finally! New FSLogix version out on public review!
Anyone tried this version according to the problems?
It seems the problems is mentioned here fixed.

https://techcommunity.microsoft.com/t5/fslogix-blog/fslogix-release-2105-public-preview/ba-p/2380669
Please sign in to rate this answer.
Karsten Hedemann 1 Reputation point

2021-06-25T12:21:32.807+00:00

I have an environment running Windows 10 Multi-User in Azure on 20H2 release, and previously I was using FSlogix version 2004 with 19H2, which worked out as intended according to accomplishing not having locked disks.
Now on 20H2 the issue has been re-introduced with both version 2004 and 2009 HF_01 (2.9.7654.46150).

I will try out the new 2105 Public Preview!

Ryan Grimm 6 Reputation points

2021-07-07T15:56:20.493+00:00

Just tried out the 2105 Public Preview and it partially fixes the issues we're seeing. The System (PID 4) process is no longer holding onto anything, but the lsass.exe process does.

C:\Users\username\AppData\Roaming\Microsoft\Credentials
C:\Users\username\AppData\Local\Microsoft\Credentials

CitrixMember 6 Reputation points

2021-07-08T15:37:21.35+00:00

Thanks for feedback Ryan.
In our scenario, this 2105 version from MS seems to have solved problem completely, with crash of the Fslogix service and disk retries / logon etc.
According to csrss issues you refer to, check out this Citrix forum and what Balaji Muthukrishnan mention.

Could this be a fix for "rest" problem you refer to?

https://discussions.citrix.com/topic/402797-server-2019-reconnect-issues-still-around-with-1903/page/3/

Ryan Grimm 6 Reputation points

2021-07-08T19:16:12.127+00:00

The issues we saw were on Windows 10 20H2 single-session (random) desktops. Windows event logs and a procmon capture showed profile name mismatches and failed vhdx creation attempts. So at the suggestion of MS Support we adjusted our VHDNameMatch and now things appear to be working a lot better.

Андрей Михалевский 2,641 Reputation points

2021-07-16T07:31:43.243+00:00

Hello. Please tell me more about what you did and what the problem was.
Sign in to comment
Андрей Михалевский 2,641 Reputation points

2021-07-16T07:08:42.88+00:00

Hello. Has anyone been able to fix this ? Please share the solution.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Daniel Viklund 12 Reputation points

2021-07-16T14:01:00.283+00:00

Looks like this problem still exist with the latest version 2.9.7838.44263
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Share via

FsLogix - Unclean logoff causing locked files until server reboot

106 answers