Microsoft FSLogix – Basic Installation and Configuration Notes

Advertisements


 

 

 

 

 

 

Below are my notes to perform a basic installation/configuration of Microsoft FSlogix

Download FSLogix

FSLogix components

  • Microsoft FSLogix Apps – FSLogixAppSetup.exe ==> !! Mandatory !! To be installed on the end-users clients machines
    • installs core drivers and components for all FSLogix solutions
    • Unattended switches: /install, /repair, /uninstall, /quiet, /norestart
  • Application Masking Rule Editor: FSLogixAppsRuleEditorSetup.exe ==> Optional
    • used to define rules used by Application Masking
  • Java Version Control Rule Editor ==> Optional
    • Used to define rules used by Java Version Control

Configure Storage

Create file shares \\fileserver\ProfileContainer and \\fileshare\OfficeContainer  on a file server with the following permissions

  • Users – Modify on ‘This Folder Only’
  • Creator/Owner – Modify on ‘Subfolders and Files only’
  • Administrator – Full Control on ’This Folder, Subfolder and Files’

Script to create shares and set the required permissions

REM ***************************
REM Share for Profile Container
REM ***************************
md D:\ProfileContainer
net share ProfileContainer$=D:\ProfileContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domain\admingroup”,CHANGE
icacls D:\ProfileContainer /inheritance:r
icacls D:\ProfileContainer /grant “domainname\usersgroup”:(NP)(RX,AD)
icacls D:\ProfileContainer /grant “domainname\admingroup”:(OI)(CI)F
icacls D:\ProfileContainer /grant "CREATOR OWNER":(OI)(CI)F
icacls D:\ProfileContainer /remove Administrators

REM **************************
REM Share for Office Container
REM **************************
md D:\OfficeContainer
net share OfficeContainer$=D:\OfficeContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domainname\admingroup”,CHANGE
icacls D:\OfficeContainer /inheritance:r
icacls D:\OfficeContainer /grant “domainname\usersgroup”:(NP)(RX,AD)
icacls D:\OfficeContainer /grant “domainname\admingroup”:(OI)(CI)F
icacls D:\OfficeContainer /grant "CREATOR OWNER":(OI)(CI)F
icacls D:\OfficeContainer /remove Administrators 

Notes:

  • The domainname\usergroup referenced in the above commands is an Active Directory group containing all the user accounts who will be using FSLogix containers
  • The domainname\admingroup referenced in the above commands is an Active Directory group containing all the administrator accounts who will be administrating the FSLogix containers
  • I chose to create the repositories on the D: drive of the fileserver, but this could of course be any drive of your choice
  • Ensure that the drive where the ProfileContainers and OfficeContainers will be located is large enough to accommodate all the FSLogix containers for the end-users. By default the FSLogix containers can grow to a maximum size of 30 GB per user!
  • I chose to create hidden shares ($), but this is not a necessity to do this
  • The OfficeContainer and ProfieContainer shares should be excluded from antivirus scanning

Registry Settings:

The following settings need to be applied to the end-users client machines

  • Profile Containers
    • HKLM\Software\FSLogix\Profiles
      • Value: Enabled | Type: DWORD | Configured value: 1
      • Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\ProfileContainer
    • During installation of the FSLogix agent the following local groups are created
      • FSLogix Profile Exclude List (for dynamic profiles) ==> FSLogix agent will not attach a FSLogix profile container for the members of this list
      • FSLogix Profile Include List (for dynamic profiles) ==> By default everyone is included in this group
  • Office Containers
    • HKLM\Software\Policies\FSLogix\ODFC
      • Value: Enabled | Type: DWORD | Configured value: 1
      • Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\OfficeContainer
      • Value: IncludeOneDrive |Type: DWORD | Configured value: 1
      • Value: IncludeOneNote |Type: DWORD | Configured value: 1
      • Value: IncludeOneNote_UWP |Type: DWORD | Configured value: 1
      • Value: IncludeOutlook |Type: DWORD | Configured value: 1
      • Value: IncludeOutlookPersonalization |Type: DWORD | Configured value: 1
      • Value: IncludeSharepoint |Type: DWORD | Configured value: 1
      • Value: IncludeSkype |Type: DWORD | Configured value: 1
      • Value: IncludeTeams |Type: DWORD | Configured value: 1
    • During installation of the FSLogix agent the following local groups are created
      • FSLogix ODFC Exclude List (for Outlook Data Folder Containers)
      • FSLogix ODFC Include List (for Outlook Data Folder Containers)

Notes:

  • The above settings can also be configured via Group Policy

References:

Advertisements

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.