World of EUC

Shouldn't use that from logon / during the session. Simply use a logoff task in your Workspace management solution to tip over the Profile State of the specific user to 80 hex. examples: Ivanti UWM <https://forums.ivanti.com/s/article/Using-Environment-Manager-to-flip-profile-state-and-delete-roaming-local-profiles>     Ivanti IWC: <https://www.ingmarverheij.com/hybrid-local-profile-with-res-workspace-manager/>

yeah, agreed.  Just trying to give the customer warm and fuzzies over it being a bug, and not an environment problem.

Nah don't use Guests, it has been odd since Windows 10 RTM. Either manipulate the profile State (you will need to unlock the key if not using something like Ivanti), or just delprof after logoff :slightly_smiling_face:

Friday I have to make sure that 34 different languages (XA srv2016, XD W10 1809) have their correct timezone , keyboard, GEO, currency etc. .  I can do this using GPO, tzutil, setlocale, imports of registry, powershell etc.  you name it. Perhaps, just perhaps, somebody has already standardized this and blogged about it, if so...  I'd like to read it and grab the interesting stuff. I can't touch Citrix policies, purely AppSense and I might want to push the settings once and then personalize them. If needed I can then let the ServiceDesk reset the runonce entry so everything is correct for the country code again.

image.png

At least for EDU they have a new shared device licensing model. The users always have to log in but it’s possible to federate and SSO.

Following this thread, it's a project that will land on my plate in 2020.

<@UL91DJGSE> By chance were you able to find anything re: roaming activation?  We will be federating and using SSO via Okta, but are trying to find out if logging in to every session will require the user to enter their Fed ID every time they login to a new VDI

Nope, they opened a case with Adobe and were told the licensing model they use is not suitable to roam in stateless vdi

Replace Local Application Data 'Adobe\OOBE'

Remove

Exclude Local Application Data 'Adobe\OOBE\com.adobe.accc.apps\Icons'

Remove

Merge Application Data 'Adobe'

where.png

So, cortana recent history, I don't quite remember where that is stored, thought in 3 reg keys but can't find it anymore.

Yep, send it back to a local profile at logon when flagged using Ivanti PS, then when the user logs off prep it for migration and shunt it into a VHD, then at next logon use FSLogix. Messy and annoying - been meaning to document it for a while but current workload preventing blogging sadly

hybrid hive into EM, and replace disk. no easy copy process

Edge Chromium.zip

<https://community.liquidware.com/discussion/83/microsoft-edge-chromium-portability-ruleset#latest>

I will upload my new version as soon as I get home, I added me specific locations  for personalization based on what avanite put together 

Edge Chromium IWC and UWM new.zip

This one contains more specific User Settings / Personalization (info comes from Avanite). And for the IWC customers, it contains info on howto block Shortcut creations if you want IWC to create managed shortcuts for you.

Hi Wes, if anyone knows it's the guys of Avanite, they can manage the h*ll out of most common browsers. They recently (last few days), released 2 blogs about the Edge Chromium browser, they might have described that folder, checkout <https://www.avanite.com/blog>

<https://www.foxtonforensics.com/browser-history-examiner/chrome-history-location>

hey everyone! I am curious to hear if anyone has looked into using Microsoft Storage Replica as a profile storage repository. The plan would be to use cluster to cluster async into Azure for DR scenario. Thoughts? Any better options out there?

You are just redirecting one folder to a VHD and sharing it? Teams has folders in LOCALAPPDATA as well as APPDATA (unless you are using the machine-based installer). It doesn't sound like an ideal way of doing things....how are you configuring the single folder mount?

Yes re-directing the whole teams folder to another folder created within the VHD. I’ll send a screenshot in a moment of how I am doing it. 

Image from iOS.png

What I added was the Prod on the end thinking that might work. But doesn’t seem to have done the job it was just MSTeams before that change 

I used the teams cache roaming template on the marketplace 

did you use the Teams machine-based installer or the user-based installer?

If you used the user installer, then Teams stores data all over the place (APPDATA, LOCALAPPDATA, and folders in both called Teams and Microsoft Teams and also Microsoft\Teams) - which might make sense as to why it is potentially crashing

Sorry James, yesterday was a long day
Here here the install string that we used - msiexec /i Teams_windows_x64.msi /l*v %temp%\teamsinstall.log ALLUSER=1

The ALLUSER=1 configures Teams as machine-wide

So do you think we need to redirect other stuff to the folder aswel as what I have already done

On my blog I have a guide on how to install Teams. The guide has a list of stuff to exclude with Teams, so you just have to basically include all other folders than the ones listed.

<https://virtualwarlock.net/microsoft-teams-in-citrix/|https://virtualwarlock.net/microsoft-teams-in-citrix/>

Thanks I’ll try that I also found an article from James which I am following we are on 7.15 Citrix so there is a reg key we need to add also using teams 1.3 version 

You must use Active/Passive (and cross-replication). <https://www.citrix.com/blogs/2014/03/29/xendesktop-gslb-dr-everything-you-think-you-know-is-probably-wrong/>

Also depends on the solution how you can architect it.

It's a new environment, which we're still planning. We originally went with UPM, but I'm considering going with FSLogix instead.

FSLogix for example you have Cloud Cache builtin which can help with A/A multisite.

Hmm. What Profile Manager features being used?

let me confirm but defaults, no active write back etc

defaults, also seeing it with MS roaming profiles

having another engineer test with a vanilla SOFS server set no agents/av etc

yes! I have FSLogix and it leaves the smb sessions open all the time, can’t figure it out.

yea we are still digging, scaled out more servers to deal but its annoying

You could simply do a comparison of the redirected Registry value in HKCU\Software\MS\Windows\CurrentVersion\Explorer\User Shell Folders and if it doeesn't match the expected format, call the logoff.exe command?

Yeah that’s what I’m thinking, absence of C:\ or presence of \\domain\dfsn\ would be enough for my needs. 

I think the non-redirected default points to %USERPROFILE%, but yes :slightly_smiling_face:

Umm now I am embarrassed because I lifted  the answer file from your site   .    &lt;?xml version=”1.0″ encoding=”utf-8″?&gt;&lt;unattend xmlns=”urn:schemas-microsoft-com:unattend”&gt;
&lt;settings pass=”specialize”&gt;
&lt;component name=”Microsoft-Windows-Shell-Setup” processorArchitecture=”amd64” publicKeyToken=”31bf3856ad364e35″ language=”neutral” versionScope=”nonSxS” xmlns:wcm=”<http://schemas.microsoft.com/WMIConfig/2002/State>” xmlns:xsi=”<http://www.w3.org/2001/XMLSchema-instance>”&gt;
&lt;CopyProfile&gt;true&lt;/CopyProfile&gt;
&lt;/component&gt;
&lt;/settings&gt;
&lt;cpi:offlineImage cpi:source=”wim:D:/sources/install.wim#Windows 10 Enterprise” xmlns:cpi=”urn:schemas-microsoft-com:cpi” /&gt;
&lt;/unattend&gt;

OK, did you paste it into Notepad first to make sure the formatting wasn't a bit funny? Cutting and pasting direct from web pages often interprets some characters differently

Note that I say that only to imply my error

OK I will reconnect and try with that ; thank you

it will take a bit, many hoops to jump through to get that xml into the environment

No time pressure here :slightly_smiling_face:

So, that did the trick, although I had to drop enable the admin account twice in the process.  There may be something wrong with the image.  If I can just find the time to restart from scratch I will and try it before I add the apps. Thanks for the help sir

Someone screwed with the RootFolder property in the Global table in the database?

Don’t expect that, no one touches the DB in any other way then using the console. But as persinfo says it’s ok, the path validation check in persinfo also says the path is OK and there’s nothing going into AppSense virtual, I’d say it’s not in DB is it. BUT I could suggest removing the app perso config, and then manually add the config. If that solves it, it is something in the DB. Auditing by the way also says all is fine.

Is <@ULD7RHZGS> on here? He might know (although I concede that he was a bit higher up the food chain in AppSense than support, tbf) :slightly_smiling_face:

Yeah, I’ll be working with them on Friday again, will see what Ivanti UWM support delivers. Before that. <@ULJM9DQF2> does this ring a bell perhaps?

Hmm. Sorry, nothing springs to mind. Did you upgrade anything recently? Did anything change in the environment. Sorry, dumb questions, and probably the first ones that Support asked...

Nope nothing, don’t know exactly how the perso works but if it’s a filterdriver, there’s no change in any altitude there

yeah, there's a filter driver doing file/reg redirection, but that would affect all apps, not just one

Use Process Explorer to check that pvc.dll is injected. Check profileconfig.xml has the problematic exe in a personalisation group. If it's personalised via a WSG then that uses the real HKCU registry and file system/local profile rather than redirecting to appsensevirtual

Those files are encrypted so another user won't be able to decrypt it.

export/import will be the only way I think

Yes, I've done it.

I use GPO to force profile.pb file usages, and capture that (and other stuff) with VMware UEM.  Copying that archive between users works, passwords visible in Chrome.  I think the magic isn't the profile.pb, but it's the other stuff.  UEM dump:

```[IncludeRegistryTrees]
HKCU\Software\Google\Chrome

[ExcludeFiles]
# Metrics
&lt;LocalAppData&gt;\Google\Chrome\User Data\BrowserMetrics-spare.pma
&lt;LocalAppData&gt;\Google\Chrome\User Data\CrashpadMetrics-active.pma

[IncludeFiles]
# Profile
&lt;AppData&gt;\Google\Chrome\User Data\Default\profile.pb 
# Cookies 
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Cookies
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Cookies-journal
# Various, to track 1st-time stuff like Welcome to Chrome Tab <https://communities.vmware.com/thread/578914> (Source) also needed for 'remember me' browser data file in same folder.
&lt;LocalAppData&gt;\Google\Chrome\User Data\*
# Various settings/history
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Preferences
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Login Data
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\History
# Retain Extension customizations and first run tabs
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Extension Cookies

[IncludeFolderTrees]
&lt;LocalAppData&gt;\Google\Chrome\User Data\Default\Local Storage```


n.b. Can differering OS can break this, regardless of user account.  e.g. Can't go Win 2016 to Win 7, but can go other way.

Any good repositories for WEM/ DEM/ UE-V/ Liquidware/ Ivanti Personalization templates? I know VMware had a good community but that seems to be pretty much dead now.

Could you install Citrix WEM and UPM on the Horizon VDI and capture the user settings that way if you cannot migrate setting from one to the other?

Are you simply wanting to move the user profile from the VMware DEM ini/zip arrangement to a UPM profile?

If you want to move the policies across from DEM to WEM, I don't have that experience, but it possibly could be done with some coding. An interesting project for someone. Maybe Citrix has an internal tool.

Yeah the basics would be to move the user settings from DEM to WEM and whatever method there is.

You're migrating from Horizon to CVAD? You can certainly install DEM on a VDA along side WEM and UPM. You can them "import" the user settings at logon from the ini/zip files, which will be "captured" by UPM. This is how I do my profile migrations. I have a blog I will finish over weekend to demonstrate this.

However, I don't have experience with DEM policies beyond the user profile. My process simply moves the user profile data itself.

I think we'll just migrate using that method to capture the horizon user settings into UPM.

I'll post back here once I publish the blog and my script, and then you can see if it fits your use case.

Sorry...running a new days behind due to my workload.

Finally published! Sorry for the delays. Please check my web site.