Hi, whether WEM App Access Control rules are store...
# citrix-wem
s
Hi, whether WEM App Access Control rules are stored in file system like FSLogix? We would easily delete/replace FSLogix rules file for troubleshooting quickly.
j
no they are a hashed value set, not a file system file set like Masking Rules
👍 1
s
it is stored in the registry. you can create and test the App Access Control rules using the WEM Tool Hub easily.
image.png
s
Yes, we used WEM tool hub to create and test rules. We are seeing slowness after applying the rules, disabled app access control in WEM but still the rules are applied. Refreshed WEM cache multiple times but no luck. Is there a process to remove the app access control rules cleanly?
s
please check the registry under Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Citrix\UserProfileManager\AppAccessControlRules. it should be deleted when you disable the app access control.
please reset the profile management settings after you change the configuration to make it work.
if you use the tool hub to test the rules, please make sure "*Clear deployed rules from local machine" when you finish the test.* https://docs.citrix.com/en-us/workspace-environment-management/service/reference/wem-tool-hub#rule-generator-for-app-access-control
s
Thanks a lot. Used WEM tool hub and ps config script on single machine but not sure how to do it on 100 servers at once. Registry location and reset profile manager settings did help.
s
if you want to do it on 100 servers, it's better to use WEM web console configure it and apply it to all machines.
s
Yes, applied using WEM console but not able to clear the rules from agent even after removing the rules from WEM Console.
s
maybe it takes some time. please try the reset action if needed. thanks!
how do you operate on the WEM web console? could you share the snapshot?
s
Image from iOS.jpg
s
so you delete all rules and disable the app access control. But the rules still exists in the machine, right?
s
Yes, that’s correct. Even after WEM agent cache refresh.
s
please reset the profile settings also, thanks!
It takes some time for the setting to be deployed on the machines. Resetting the profile settings can make it take effect quickly.