Forum Discussion
Solved
[FSLogix & Citrix] How to save the profile data of account2 that was startet within my account1?
Hello,
i am starting Citrix Workspaceapp with account1 which uses FSLogix.
Within the Citrix workspace app i start a Citrix app with account2 in another user context.
If possible, how can i configure FSLogix which is aware of account1 to save account2 as a FSLogix profile, too?
Thanks in advance and kind regards
Bernd
- Solution:
On the target device using a GPO i had to remove the local user profile account2 (which is an administrator account) from Computer Management -> System Tools -> Local Users and Groups -> Groups -> FSLogix Profile Exclude List and instead add account2 into the local Computer Management -> System Tools -> Local Users and Groups -> Groups -> FSLogix Profile Include List.
Link: https://learn.microsoft.com/en-us/fslogix/concepts-include-exclude-groups
4 Replies
- My scenario doesn't seem to be supported using FSLogix.
My scenario:
In FSLogix from within an existing single User-1 session and corresponding FSLogix profile-1 i want to create a separate single User-2 session with corresponding FSLogix profile-2
Reasons (as far as i understood them) why my scenario can't be implemented with FSLogix :
1. Session Isolation
Each FSLogix session is designed to be isolated to a single user. This means when User-1 logs in, that users profile container is mounted and locked to that session. FSLogix ensures that only one user profile container is active per session to maintain data integrity and security.
2. Profile Container Locking
FSLogix locks the profile container to prevent multiple users from accessing it simultaneously. This locking mechanism ensures that only the user who owns the profile can access and modify it during their session. Therefore, starting a new session for User-2 from within User-1’s session is not supported (This could violate data integrity and security of User-1's session)
3. Separate Sessions Requirement
To create a session for User-2, you would need to log out User-1 and then log in User-2. Each user must have their own distinct session to have their profile container mounted. This doesn't correspond with my scenario where User-2 doesn't log on to the Citrix target device but instead User-2 would start a Citrix application in User-2 context within the User-1 Citrix session that is already mounted a FSLogix profile container.
Summary regarding my scenario:
No Concurrent User Sessions: You cannot start a new session for a different user from within an existing session.
Separate Logins Required: Each user must log in separately to create their own session.
I would be happy if someone proves me wrong.
Kind regards
Bernd Bernd_Roth
To avoid trouble please be aware that i am asking the same question inBernd_Roth . I am trying to give additional details:
- I am starting Citrix Workspaceapp with account1 which uses FSLogix. This Citrix session connects to non-persistent VDA-1
- Within the Citrix workspaceapp that now is running in context of my account1, i start a Citrix app as different user with account2 context. The Citrix app runs on VDA-1,too.
- At this point on VDA-1 i have a local user profile account1 which will be saved into a FSLogix profile on a different fileshare server when the Citrix session ends.
On VDA-1 i also have a local user profile account2 which will not be saved into a FSLogix profile on the above mentioned fileshare server. And this account2 stops existing when the non-persistent VDA1 is being rebooted. As a result all the user settings within this account2 get lost.
If technically possible i am searching for a solution to save local user profile account2 as FSLogix profile, too.
I assume i missed some important detail in the FSLogix documentation and i am drawing a mental blank. So i appreciate any help/hint.
- Solution:
On the target device using a GPO i had to remove the local user profile account2 (which is an administrator account) from Computer Management -> System Tools -> Local Users and Groups -> Groups -> FSLogix Profile Exclude List and instead add account2 into the local Computer Management -> System Tools -> Local Users and Groups -> Groups -> FSLogix Profile Include List.
Link: https://learn.microsoft.com/en-us/fslogix/concepts-include-exclude-groups