Forum Widgets
Latest Discussions
fslogix printing does not work after changing profile from UPM to fslogix
I use Manuel Winkel's script <www.deyda.net> to convert UPM profiles to FSLogix profiles. When users log in again, some of them are unable to print. Deleting the printer, even from the registry, does not help. Adding new printers does not work. Restarting the printer queue does not work. If I delete the profile and create a new one, printing works. Does anyone have any ideas? Equipment: Windows 2019, Citrix 7 2203 CU6, and FSLogix 3.25.626.21064Error removing Rule at logoff
Hello folks. during user logoff Fslogix is trying to remove some rules but get an exception [ERROR:80070490] Error removing Rule: C:\Users\username\AppData\Local\CrashDumps (Element not found.) As a result it removes "users profile" and "local_username" folder correctly with no issues, but sends Error to the logs. It's spamming the logs because it will put error one every excluded folder from redirection. We don't use any FSLogixAppsRuleEditor or something else, checked by ."\frx.exe list-rules -verbose" it returns - "No rules" The redections.xml looks like [...] <Exclude Copy="0">AppData\Local\CrashDumps</Exclude> [...] Is this an known issue ? Thinking it came around with 3.25.202.4223. Thx Jens
Adobe Acrobat Pro Sign on issues in AVD
We have a Windows 11 Multisession AVD pool with 2 Hosts using FSLogix on the latest versions. We have the Hosts shutdown when no one is logged. Users are having an issue where Adobe Acrobat does not remember the users sign on information and they have to sign in again. While I do not think this is specifically a FSLogix issue, I am wondering if anyone else has run into this kind of issue and how the solved it.How to check the file is fslogix redirection file？
hi，I am a developer。I write a minifilter，which altitude is 138200。 I want to check a fileobject is a FSLogix’s redirection file。I foud four ECP GUID in the fslogix driver。 I want to check in minifilter precreate callback function，but it is not effect。 Could you tell me the problem？thanks！ DEFINE_GUID(GUID_1, 0x5AE07381, 0xAA1E, 0x4571, 0xB4, 0x3B, 0x37, 0x2C, 0x2C, 0xDD, 0x96, 0x0A); DEFINE_GUID(GUID_2, 0xE40898B8, 0x1D08, 0x4434, 0xB2, 0xC9, 0x78, 0xD6, 0xB8, 0x83, 0xBF, 0xEB); DEFINE_GUID(GUID_3, 0xFD7F2404, 0x788C, 0x48D3, 0xA7, 0x1B, 0x35, 0x60, 0xD5, 0x70, 0x8F, 0x45); DEFINE_GUID(GUID_4, 0x9414EEF8, 0xE320, 0x43F8, 0xA5, 0x1A, 0x32, 0x58, 0x48, 0x24, 0x10, 0xCF); BOOLEAN xxxIsKernelModeEcpPresent( _In_ PFLT_FILTER Filter, _In_ PFLT_CALLBACK_DATA Data, _In_ LPCGUID EcpType, _Outptr_opt_result_buffer_(*EcpContextSize) PVOID *EcpContext, _Out_opt_ ULONG *EcpContextSize ) { NTSTATUS status; PECP_LIST ecpList; PVOID ecpContext; ULONG ecpContextSize; PAGED_CODE(); if (EcpContext) { *EcpContext = NULL; } if (EcpContextSize) { *EcpContextSize = 0; } status = FltGetEcpListFromCallbackData(Filter, Data, &ecpList); if (NT_SUCCESS(status) && (ecpList != NULL)) { status = FltFindExtraCreateParameter(Filter, ecpList, EcpType, &ecpContext, &ecpContextSize); if (NT_SUCCESS(status)) { if (!FltIsEcpFromUserMode(Filter, ecpContext)) { if (EcpContext) { *EcpContext = ecpContext; } if (EcpContextSize) { *EcpContextSize = ecpContextSize; } return TRUE; } } } return FALSE; } FLT_PREOP_CALLBACK_STATUS xxxPreCreate ( _Inout_ PFLT_CALLBACK_DATA Data, _In_ PCFLT_RELATED_OBJECTS FltObjects, _Flt_CompletionContext_Outptr_ PVOID* CompletionContext ) { FLT_PREOP_CALLBACK_STATUS returnStatus = FLT_PREOP_SUCCESS_NO_CALLBACK; NTSTATUS status; PFILE_OBJECT fileObject = Data->Iopb->TargetFileObject; PAGED_CODE(); createContext.Flags = 0; if (!fileObject) { return FLT_PREOP_SUCCESS_NO_CALLBACK; } // // Skip pre-rename operations which always open a directory. // if (FlagOn(Data->Iopb->OperationFlags, SL_OPEN_TARGET_DIRECTORY)) { return FLT_PREOP_SUCCESS_NO_CALLBACK; } // // Skip paging files. // if (FlagOn(Data->Iopb->OperationFlags, SL_OPEN_PAGING_FILE)) { return FLT_PREOP_SUCCESS_NO_CALLBACK; } // // Skip DASD opens // if (FlagOn(FltObjects->FileObject->Flags, FO_VOLUME_OPEN)) { return FLT_PREOP_SUCCESS_NO_CALLBACK; } if (UpmIsKernelModeEcpPresent(UpmData->FilterHandle, Data, &GUID_1, NULL, NULL)) { UPM_ASSERT(FALSE); } if (UpmIsKernelModeEcpPresent(UpmData->FilterHandle, Data, &GUID_2, NULL, NULL)) { UPM_ASSERT(FALSE); } if (UpmIsKernelModeEcpPresent(UpmData->FilterHandle, Data, &GUID_3, NULL, NULL)) { UPM_ASSERT(FALSE); } if (UpmIsKernelModeEcpPresent(UpmData->FilterHandle, Data, &GUID_4, NULL, NULL)) { UPM_ASSERT(FALSE); }Using Microsoft MFA on RDS with FSLogix
We have a Windows 2019 RDS collection consisting of 7 x RDSH servers. We have a Conditional Access Policies which enforces MFA when accessing any M365 resource. We had previously excluded our office WAN IP (i.e: a trusted location) from the CA policy. This was to allow RDS users to operate without needing to provide MFA. However, we found that some office based users had never registered for MFA, since they only work on-site. This posed a security risk, so we decided to remove our office IP from the CA policy exceptions list. Now, all users are MFA registered, however, they're experiencing repeated prompts for MFA while working in the RDS environment. For instance, when a user opens Outlook, they are challenged for MFA 3 or 4 times. This doesn't happen if they're working locally on their laptop. In our CA policy, we have configured the 'sign-in frequency' to 90 days, but this does not seem to make any difference on the RDS. I suspect this issue arises because we're using FSLogix user profiles and office containers and a user might be placed on RDS1 one day and then on RDS7 the follow day. Is there anyway to save the MFA session token within the users FSLogix profile?Microsoft MFA, FSLogix and RDS Collection?
We have a Windows 2019 RDS collection that includes 7 RDSH servers. We implement conditional access policies to require MFA for all users and set the 'sign-in frequency' to 90 days. Initially, we whitelisted our office WAN IP by adding it as a trusted/named location. This allowed users to bypass MFA when working from the RDS. However, we then discovered that some users, who only work from the office, had never set up MFA (due to the trusted location/exception). As this is a security concern, we decided to remove the office IP from the trusted locations to ensure that all users registered for MFA. Now, users are prompted for MFA each time they log into the RDS, repeatedly. Even though we set the sign-in frequency to 90 days, I suspect this is because they often connect to a different RDS server each morning, which MFA interprets as a new device. Is there a way to store the MFA session token or cookie in the users' FSLogix profile?
FSlogix Profile associating to wrong Azure Machine registration
Hello, We have Citrix non persistent VDI setup with FSLogix profile management. We use MS Office only for Word and Excel - there is no Outlook or Teams setup. We have hybrid deployment with we do not sync Non persistent VDI OU to Azure. Machines register as users' devices when they log in to MS Office only. During DR exercise we moved users from Production datacenter and DR datacenter Citrix Storefront. Machine name of these non-persistent windows 2019 VDIs on both ends have different names. The FSLogix profile from Prod was Robocopy to DR file share. There are two issues 1- That when user Office token tries renewing it shows in Azure User logs that it was attempted using the old VDI machines name. The activation then fails with 62ubh error. To resolve we can remove the old machine's associated to the user's under the Azure profile and then remove Microsoft.AAD.BrokerPlugin_vnggnktrrj file in C:\%Userprofile%\AppData\Local\Packages. Have the user reboot and then reactivate office. 2- At that point after it takes two tries, it times out with CA0000 error, that device could not be registered- but user gets logged in to MS Office. The VDI from DR never registers in Azure under the user's name under Devices. No issue DSREGCMD /Status and machine has SCP access. We are not resetting the Profiles because it takes time copying their setup preferences.
FSLogix 2.9.8884.27471 redirections.xml and remaining files in the redirected folders
Hi Together, I want to know how you handle the fact that when a new exclusion was added to the redirections.xml the old/orphan files remains in the user profile. We have thousands of profiles which cannot be cleaned manually. Why does FSlogix not offer and option to copy the content to the redirected folder or just delete this orphan files? best regards Bernd
FSLogix v3 25.02 profiles not unloading
Hi all! Like mentioned in the comments in the FSLogix Blog: FSLogix v3 Release 25.02 is now generally available! | Microsoft Community Hub Disks are not unloaded on logoff and the excluded conten (local_%username%) remains on the Worker. Eventlog shows: Event source: Apps (Microsoft-FSLogix-Apps) Event id: 26 invalid map<K, T> key (An exception occurred in the service when handling the control request.) Event source: Apps (Microsoft-FSLogix-Apps) Event id: 42 SessionId: 3, ErrorCode: 1064, Detail: Logoff failed, Please check logs and tracelogging and verify that the users disk was detached. Event source: Apps (Microsoft-FSLogix-Apps) Event id: 26 UnloadProfile failed. Version: 3.25.202.4223. User: <user>. SID: <SID>. SessionId: 3. FrxStatus: 1064 (An exception occurred in the service when handling the control request.) Best regards, Jan