Below are my notes to perform a basic installation/configuration of Microsoft FSlogix
Download FSLogix
FSLogix components
- Microsoft FSLogix Apps – FSLogixAppSetup.exe ==> !! Mandatory !! To be installed on the end-users clients machines
- installs core drivers and components for all FSLogix solutions
- Unattended switches: /install, /repair, /uninstall, /quiet, /norestart
- Application Masking Rule Editor: FSLogixAppsRuleEditorSetup.exe ==> Optional
- used to define rules used by Application Masking
- Java Version Control Rule Editor ==> Optional
- Used to define rules used by Java Version Control
Configure Storage
Create file shares \\fileserver\ProfileContainer and \\fileshare\OfficeContainer on a file server with the following permissions
- Users – Modify on ‘This Folder Only’
- Creator/Owner – Modify on ‘Subfolders and Files only’
- Administrator – Full Control on ’This Folder, Subfolder and Files’
Script to create shares and set the required permissions
REM *************************** REM Share for Profile Container REM *************************** md D:\ProfileContainer net share ProfileContainer$=D:\ProfileContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domain\admingroup”,CHANGE icacls D:\ProfileContainer /inheritance:r icacls D:\ProfileContainer /grant “domainname\usersgroup”:(NP)(RX,AD) icacls D:\ProfileContainer /grant “domainname\admingroup”:(OI)(CI)F icacls D:\ProfileContainer /grant "CREATOR OWNER":(OI)(CI)F icacls D:\ProfileContainer /remove Administrators REM ************************** REM Share for Office Container REM ************************** md D:\OfficeContainer net share OfficeContainer$=D:\OfficeContainer /grant:”domainname\usersgroup”,CHANGE /grant:”domainname\admingroup”,CHANGE icacls D:\OfficeContainer /inheritance:r icacls D:\OfficeContainer /grant “domainname\usersgroup”:(NP)(RX,AD) icacls D:\OfficeContainer /grant “domainname\admingroup”:(OI)(CI)F icacls D:\OfficeContainer /grant "CREATOR OWNER":(OI)(CI)F icacls D:\OfficeContainer /remove Administrators
Notes:
- The domainname\usergroup referenced in the above commands is an Active Directory group containing all the user accounts who will be using FSLogix containers
- The domainname\admingroup referenced in the above commands is an Active Directory group containing all the administrator accounts who will be administrating the FSLogix containers
- I chose to create the repositories on the D: drive of the fileserver, but this could of course be any drive of your choice
- Ensure that the drive where the ProfileContainers and OfficeContainers will be located is large enough to accommodate all the FSLogix containers for the end-users. By default the FSLogix containers can grow to a maximum size of 30 GB per user!
- I chose to create hidden shares ($), but this is not a necessity to do this
- The OfficeContainer and ProfieContainer shares should be excluded from antivirus scanning
Registry Settings:
The following settings need to be applied to the end-users client machines
- Profile Containers
- HKLM\Software\FSLogix\Profiles
- Value: Enabled | Type: DWORD | Configured value: 1
- Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\ProfileContainer
- During installation of the FSLogix agent the following local groups are created
- FSLogix Profile Exclude List (for dynamic profiles) ==> FSLogix agent will not attach a FSLogix profile container for the members of this list
- FSLogix Profile Include List (for dynamic profiles) ==> By default everyone is included in this group
- HKLM\Software\FSLogix\Profiles
- Office Containers
- HKLM\Software\Policies\FSLogix\ODFC
- Value: Enabled | Type: DWORD | Configured value: 1
- Value: VHDLocations | Type: Multi_SZ or REG_SZ | Configure value: \\fileserver\OfficeContainer
- Value: IncludeOneDrive |Type: DWORD | Configured value: 1
- Value: IncludeOneNote |Type: DWORD | Configured value: 1
- Value: IncludeOneNote_UWP |Type: DWORD | Configured value: 1
- Value: IncludeOutlook |Type: DWORD | Configured value: 1
- Value: IncludeOutlookPersonalization |Type: DWORD | Configured value: 1
- Value: IncludeSharepoint |Type: DWORD | Configured value: 1
- Value: IncludeSkype |Type: DWORD | Configured value: 1
- Value: IncludeTeams |Type: DWORD | Configured value: 1
- During installation of the FSLogix agent the following local groups are created
- FSLogix ODFC Exclude List (for Outlook Data Folder Containers)
- FSLogix ODFC Include List (for Outlook Data Folder Containers)
- HKLM\Software\Policies\FSLogix\ODFC
Notes:
- The above settings can also be configured via Group Policy
References:
- https://docs.microsoft.com/en-us/fslogix/
- https://docs.microsoft.com/en-us/fslogix/configure-profile-container-tutorial
- https://docs.microsoft.com/en-us/fslogix/configure-office-container-tutorial
- https://docs.microsoft.com/en-us/fslogix/implement-application-masking-tutorial
- https://docs.microsoft.com/en-us/fslogix/java-version-control-rules-ht
- https://docs.microsoft.com/en-us/fslogix/install-ht