Below are my notes to perform a basic installation/configuration of Microsoft FSlogix

Download FSLogix

• https://aka.ms/fslogix_download

FSLogix components

• Microsoft FSLogix Apps – FSLogixAppSetup.exe ==> !! Mandatory !! To be installed on the end-users clients machines
  • installs core drivers and components for all FSLogix solutions
  • Unattended switches: /install, /repair, /uninstall, /quiet, /norestart
• Application Masking Rule Editor: FSLogixAppsRuleEditorSetup.exe ==> Optional
  • used to define rules used by Application Masking
• Java Version Control Rule Editor ==> Optional
  • Used to define rules used by Java Version Control

Configure Storage

Create file shares \\fileserver\ProfileContainer and \\fileshare\OfficeContainer  on a file server with the following permissions

• Users – Modify on ‘This Folder Only’
• Creator/Owner – Modify on ‘Subfolders and Files only’
• Administrator – Full Control on ’This Folder, Subfolder and Files’

Script to create shares and set the required permissions

REM ***************************
REM Share for Profile Container
REM ***************************
md D:\ProfileContainer
net share ProfileContainer$=D:\ProfileContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domain\admingroup”,CHANGE
icacls D:\ProfileContainer /inheritance:r
icacls D:\ProfileContainer /grant “domainname\usersgroup”:(NP)(RX,AD)
icacls D:\ProfileContainer /grant “domainname\admingroup”:(OI)(CI)F
icacls D:\ProfileContainer /grant "CREATOR OWNER":(OI)(CI)F
icacls D:\ProfileContainer /remove Administrators

REM **************************
REM Share for Office Container
REM **************************
md D:\OfficeContainer
net share OfficeContainer$=D:\OfficeContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domainname\admingroup”,CHANGE
icacls D:\OfficeContainer /inheritance:r
icacls D:\OfficeContainer /grant “domainname\usersgroup”:(NP)(RX,AD)
icacls D:\OfficeContainer /grant “domainname\admingroup”:(OI)(CI)F
icacls D:\OfficeContainer /grant "CREATOR OWNER":(OI)(CI)F
icacls D:\OfficeContainer /remove Administrators 

Notes:

• The domainname\usergroup referenced in the above commands is an Active Directory group containing all the user accounts who will be using FSLogix containers
• The domainname\admingroup referenced in the above commands is an Active Directory group containing all the administrator accounts who will be administrating the FSLogix containers
• I chose to create the repositories on the D: drive of the fileserver, but this could of course be any drive of your choice
• Ensure that the drive where the ProfileContainers and OfficeContainers will be located is large enough to accommodate all the FSLogix containers for the end-users. By default the FSLogix containers can grow to a maximum size of 30 GB per user!
• I chose to create hidden shares ($), but this is not a necessity to do this
• The OfficeContainer and ProfieContainer shares should be excluded from antivirus scanning

Registry Settings:

The following settings need to be applied to the end-users client machines

• Profile Containers
  • HKLM\Software\FSLogix\Profiles
    • Value: Enabled | Type: DWORD | Configured value: 1
    • Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\ProfileContainer
  • During installation of the FSLogix agent the following local groups are created
    • FSLogix Profile Exclude List (for dynamic profiles) ==> FSLogix agent will not attach a FSLogix profile container for the members of this list
    • FSLogix Profile Include List (for dynamic profiles) ==> By default everyone is included in this group
• Office Containers
  • HKLM\Software\Policies\FSLogix\ODFC
    • Value: Enabled | Type: DWORD | Configured value: 1
    • Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\OfficeContainer
    • Value: IncludeOneDrive |Type: DWORD | Configured value: 1
    • Value: IncludeOneNote |Type: DWORD | Configured value: 1
    • Value: IncludeOneNote_UWP |Type: DWORD | Configured value: 1
    • Value: IncludeOutlook |Type: DWORD | Configured value: 1
    • Value: IncludeOutlookPersonalization |Type: DWORD | Configured value: 1
    • Value: IncludeSharepoint |Type: DWORD | Configured value: 1
    • Value: IncludeSkype |Type: DWORD | Configured value: 1
    • Value: IncludeTeams |Type: DWORD | Configured value: 1
  • During installation of the FSLogix agent the following local groups are created
    • FSLogix ODFC Exclude List (for Outlook Data Folder Containers)
    • FSLogix ODFC Include List (for Outlook Data Folder Containers)

Notes:

• The above settings can also be configured via Group Policy

References:

• https://docs.microsoft.com/en-us/fslogix/
• https://docs.microsoft.com/en-us/fslogix/configure-profile-container-tutorial
• https://docs.microsoft.com/en-us/fslogix/configure-office-container-tutorial
• https://docs.microsoft.com/en-us/fslogix/implement-application-masking-tutorial
• https://docs.microsoft.com/en-us/fslogix/java-version-control-rules-ht
• https://docs.microsoft.com/en-us/fslogix/install-ht