Problems with FSLogix 3.26 - W11 MU - 10 users per Vm
Scenario Overview We are documenting a recurring intermittent Denial of Service (DoS) regarding user profiles in an AVD multi-session environment using Azure Files Premium (SMB). The issue consistently surfaces after updating to the FSLogix 3.26 branch (v3.26.126.19110). Root Cause Analysis (Failure Logs) Through deep log analysis, we identified a "driver poisoning" pattern unique to version 3.26: SMB/Kerberos Handshake Sensitivity: Under varying storage response times (latency spikes of ~350ms vs. the usual ~40ms), version 3.26 triggers an intermittent 1326 error (Logon failure: unknown user name or bad password). Driver Execution Flow Corruption: Unlike previous versions, after this initial network/authentication glitch, the 3.26 driver fails to release execution threads or volume handles properly. Catastrophic Failure (Error 267): The system attempts to access the SecuredProfileRegData path within the mounted VHDX, but the driver returns Event ID 26: "0x10b - The directory name is invalid". Unrecoverable "Zombie" State: Once Error 267 occurs, the VM becomes "poisoned." It blocks all subsequent login attempts and even prevents a clean uninstallation of the agent (MSI Error 0x80070643 due to files being "in use"), necessitating a full VM reboot or redeployment. Has anyone else been through this? My first step was to go back to Agent Version 2506 (2210 Hotfix 4) Evidence of Success with Version 2506 (2210 Hotfix 4) After performing a clean deployment and reverting to version 3.25.626.21064, metrics from April 24, 2026, show absolute stability on the same infrastructure: Consistent Logon Times: Average profile load time of 1.6 seconds across multiple concurrent users Storage Efficiency: FindFile response times remained stable between 39ms and 45ms, with the agent successfully retrying any momentary delays. Error Resilience: Unlike v3.26, if this version encounters an authentication glitch (e.g., on a local service account), it bypasses the error and remains functional, allowing domain users to log in without collateral blockages. Concurrency Support: Seamlessly managed over 20 simultaneously mounted volumes without pointer collisions or kernel hangs.
Issues with FSLogix Profiles on Win11 25H2 Multiuser sessionhost's
Hey guys we have currently lot of issues with AVD and FSLogix 26.01. There seems to be an issue that the profile container isnt't unmounted correctly. We have lot's of users who are not able to login correctly because the profile can't be mounted because its already in use by another process. I'm currently looking what could cause that. We use a Azure files storage were i don't see any issues. It looks like a process within the userprofile is blocking the unload of the profile. Should i be able to see in the logs of FSLogix which process is causing this. Or what is a effective way to troubleshoot that? Thanks for any help Best regards Marc
Issue with AVD User Profile – FSLogix Not Recreating
Hi all, We have a user who has repeatedly reported that their settings and favorites are not loading in AVD. To troubleshoot, we deleted the user’s FSLogix profile from our storage account to allow it to recreate automatically. However, the profile is not being recreated. We are operating in a hybrid environment, and the user is part of a group assigned the Storage File Data SMB Share Elevated Contributor role. From the profile logs, we found the following error: FindFile failed for path: \\<redacted>.file.core.windows.net\userprofiles\<redacted>\Profile*.VHD (Account restrictions are preventing this user from signing in. For example: blank passwords aren't allowed, sign-in times are limited, or a policy restriction has been enforced.) What are some likely causes and additional troubleshooting steps we should take?AVD with FSLogix - profiles not loading
Setup AVD with FSLogix several months back and profiles had been loading fine. About a month ago, profiles stopped loading and the logs show "Account restrictions are preventing this user from signing in. For example: blank passwords aren't allowed, sign-in times are limited, or a policy restriction has been enforced." This is in regards to connecting to the profile share path. If I manually try to go to that path, I receive the same error. The accounts do have a password, so it shouldn't be anything to do with a blank password. There are no sign-in time restrictions enforced on these accounts. What's left is a "policy restriction", which is kind of vague. Things I've tried: update to latest FSLogix verify permissions on profile storage enabled these in local policy: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options ‘Accounts: Limit local account use of blank passwords to console logon only‘ = disabled Computer Configuration > Administrative Templates > System > Credentials Delegation ‘Restrict delegation of credentials to remote servers‘ = disabled I have a ticket open with MS support for 3 weeks now, but thus far they've been completely useless.How to fetch username or userEmail from userprofile details of FSLogix
Hi I am trying to fetch several details from FSLogix userprofile like disk size usage , last accessed date. I need to get user details as well like Username or UserEmail. Below is the PS Snippet that I am using. $Profiles = Get-ChildItem -Recurse -Path $FileSharePath -Filter "*.VHDX" -ErrorAction Stop | ForEach-Object { [PSCustomObject]@{ UserGPN = ($_.Name -split '_')[1].Split('.')[0] FileShareName = ($_.FullName -split '\\')[3] FileName = $_.Name TotalSizeInGB = $DriveSizeGB ConsumedSizeInGB = [math]::Round($_.Length / 1GB, 2) FilePath = $_.FullName CreationTimeUtc = $_.CreationTimeUtc.ToString() LastAccessTimeUtc = $_.LastAccessTimeUtc.ToString() LastWriteTimeUtc = $_.LastWriteTimeUtc.ToString() } } How can I get that ? Kindly help! Thanks Hirdesh
Windows Server 2022 and FSLogix profile roaming problems
Hello! Recently I've been tasked with enabling profile roaming between two Windows Server 2022 hosts, which are added to the same collection. Both of them are hosting internal developed app. After enabling fslogix on one of them, I've encountered some errors, users getting blocked from logging in. Those are the errors users are getting when trying to log in into the host that uses FSlogix: 1) Failed to acquire mutex for user: EXAMPLE-USER 2) Failed to acquired cleanup session registry lock for user EXAMPLE-USER (SID=S-1-5-21-1715567821-2139871995-725345543-32785) (Elapsed time: 60000) (The wait operation timed out.) User is from different domain that has Forest trust type set to Transitive. We have multiple domains accessing this VM and users from all of them are having the same problems when fslogix enabled on it. User has access to both VM and Azure Storage Account File share when profiles are being saved (both SMB and on Azure portal access) FSLogix policy is set like this: Policy Setting Comment Delete local profile when FSLogix Profile should apply Enabled Policy Enabled Enabled Policy Setting Comment Set Outlook cached mode on successful container attach Disabled Size in MBs Enabled Size in MBs 10000 Policy Setting Comment VHD location Enabled VHD location \\<example>.file.core.windows.net\profiles FSLogix/Profile Containers/Advancedhide Policy Setting Comment Keep local folder after user logs out Disabled Locked VHD retry count Enabled Locked VHD retry count 3 Policy Setting Comment Locked VHD retry interval Enabled Locked VHD retry interval 5 Policy Setting Comment Prevent login with failure Enabled Policy Setting Comment Prevent login with temporary profile Enabled Policy Setting Comment Redirect temporary file folders to local computer Enabled Redirect TEMP, TMP and INetCache to local drive Policy Setting Comment Remove Orphaned OST Files On Logoff Enabled FSLogix/Profile Containers/Container and Directory Naminghide Policy Setting Comment Swap directory name components Enabled Policy Setting Comment Virtual disk type Enabled VHDX Any ideas how to solve it or what might have caused it?
FSLogix Error 1326 The username or password is incorrect
Hi all, I need your help with this one. I am currently implementing FSLogix in an AVD environment, as I did dozens of times before. But this time I ran into a strange Issue. The error I am getting is: My current setup is: - Hybrid joined VMs - Storage account joined to OnPrem - Active Directory Domain Services (AD DS) Identity is enabled on the storage account via Terraform - All Users and Groups are hybrid - Azure Infrastructure is deployed with Terraform - Hosts and Users are managed via GPOs I already found this Tech Community Post, but the suggestions there unfortunately did not help me. My troubleshooting steps up until now where: Redeploying the storage and the VMs Checked FSLogix, NTFS and IAM settings Deploying an Microsoft Entra Kerberos authentication enabled storage account -> same issue Checked that the Kerberos encryption algorithm of the client and the storage match -> client allows all algorithms, storage is set to max compatibility Created a new computer object in the domain and used it for the domain join via Terrraform Checked that storage account is joined to AD -> here I got an interesting find: Here the AccountType and SamAccountName are missing, I checked this in another environment, there they are displayed correctly BUT this does not explain to me why the Entra Kerberos enabled storage account got the same error Many thanks for reading all of this. Do you guys have any ideas and suggestions what I could try?Teams not working in Windows 11 AVD + FSLogix
I am currently setting up and testing a Windows 11 AVD environment for future use, but I am having trouble with getting Teams to work properly. When a user logs in for the first time I am able to log into Teams. When keeping it open for a couple of minutes the client will start having problems, like crashing, restarting, staying on the "Waiting on Teams" screen or just showing a full white Teams application window. When signing off from the AVD Session Host and signing in again Teams is not working either anymore. I have found out that Teams appears to be working fine when I exclude the user profile from using FSLogix. This is not a solution however. The problem seems very similair to https://docs.microsoft.com/en-us/answers/questions/671639/teams-for-vdi-amp-fslogix.html, unfortunately the mentioned registry key is already present. Further information about the current setup: Image: Windows 11 Enterprise multi session Applied VDOT: https://github.com/The-Virtual-Desktop-Team/Virtual-Desktop-Optimization-Tool FSLogix: tested with versions 2105 and 2015 HF_01 Teams: Latest version installed with ALLUSER=1 and in combination with AVD Optimisations (WebRTC) I am very curious if anyone else has experienced problems like this.FSLogix Blog Update: FSLogix release changes and Windows multi-session updates in Azure Marketplace
Tired of checking and installing FSLogix after deploying your Session Hosts with a Windows multi-session image from the Azure Marketplace? As of August 8th, 2023 (patch Tuesday), these images will come with the latest version of FSLogix already installed. This means that you can skip the hassle of installing or updating FSLogix on your virtual machines and enjoy it's amazing features right away. Read the full post on the FSLogix Blog!
