Profile Containers GPO Managed Settings

1. Manual Cleanup of Registry Keys:
   • Identify the registry keys used by FSLogix Profile Containers (commonly under HKLM\Software\FSLogix or HKCU\Software\FSLogix).
   • Create a script or use Group Policy Preferences to clean up specific registry keys if needed, ensuring that obsolete settings are removed.
2. GPO Setting Clarification:
   • Ensure that the GPO settings are applied with the desired values and that they override any previous configurations.
   • Use the gpresult /h report.html command on a sample machine to check the currently applied policies and confirm that the expected GPO is in effect.
3. Re-apply GPO Settings:
   • Refresh or reapply the GPO to enforce the current configuration. You can use the gpupdate /force command to ensure that all settings are reloaded.
4. Resetting the Policy:
   • If you want to reset the FSLogix settings completely, create a policy that explicitly clears or resets all related registry keys and then applies the desired new settings.
5. Implement Managed Settings (Permanent Solution):
   • While GPO settings for FSLogix Profile Containers might not be fully "managed" in the sense of automatically cleaning up registry values, consider using a combination of GPOs and scripts to handle changes:
     • Use Group Policy Preferences to create registry items that are set with an option to remove or update as needed.
     • Deploy PowerShell scripts via GPO startup/shutdown or logon/logoff scripts to manage and clean registry keys.

Long-Term Best Practice:

• Documentation and Change Management: Ensure that any changes to FSLogix settings via GPOs are documented so that future administrators are aware of their impact.
• Monitoring and Alerts: Implement monitoring for registry changes specific to FSLogix settings to alert if unexpected modifications occur.