FSLogix – Copy Application Masking Rules with VMware Dynamic Environment Manager


When using FSLogix Application Masking, the rule files (.fxr) and assignment files (.fxa) should be copied into C:\Program Files\FSLogix\Apps\Rules.

In a VDI environment you typically want the rule files and assignment files to be copied at logon from a central location. However an end-user does not have the permissions to write into the folder C:\Program Files\FSLogix\Apps\Rules.

Elevated Tasks from VMware User Environment Manager can help with this.

  • Step 1:
    • create a subfolder “FSLogix” on your netlogon share
    • save the .fxr and .fxa files in this FSLogx folder
    • create a batch file “Copy_FSLogix_AppMasking_Rules.bat” with the following content
      • copy /Y \\<yourdomaincontroller>\netlogon\FSLogix\*.fx* C:\”Program Files”\FSLogix\Apps\Rules
  • Step 2:
    • In VMware Dynamic Environment Manager creat a Privilege Elevation setting from the type “Elevated task” where you elevate the “C:\Windows\System32\cmd.exe” with the argument “/c %logonserver%\netlogon\FSLogix\Copy_FSLogix_AppMasking_Rules.bat”
  • Step 3:
    • In VMware Dynamic Environment Manager create a logon task where you choose the privilege elevation setting created above as the elevated task to run (drop-down box) – ensure to ruin the logon task asynchronously
    • Now when

When an end-user now logs on the .fxr and .fxa files will be copied to the folder C:\Program Files\FSLogix\Apps\Rules



Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.