This message was deleted.
# microsoft-fslogix
s
This message was deleted.
t
Yeah, it's been a MAJOR pain for the last 4 months for us. Our profile size exploded, user logon times became ridiculous, our intranet broke. It's been a mess. I wish you the best, and definitely am available if you have any questions (specifically, what NOT to do!) πŸ˜ƒ
e
I would be curious to hear about those 'not to do' items. And any lessons learned or recommended settings you could pass along.
πŸ‘ 1
n
I've always had chrome in my gold image, IE is just a disaster, firefox is pretty nice, but seems chrome is the standard now, my biggest complaint with chrome at the moment is this folder saving thousands of file per week per user, there's no GPO to limit it or anything. it doesnt really affect logons or anything as i redirect the entire profile via UPM to the server - \AppData\Roaming\Google\Chrome\User Data\Default\Code Cache\js
j
enter @Aaron Parker pruning scripts here πŸ™‚
n
Personally, I want to go the redirections.xml route with Chrome as opposed to pruning, if at all possible. We already limit what can be done in Chrome on our physical desktops (no autofill, no creds, etc.), so I don't think I'd be losing anything.
My intention is to use the Google-related entries in Aaron's expanded redirections.csv file.
j
Yeah they work, I added those ones in - make sure you do the same for incoming chrome based edge etc (can't recall if we added them to the list or not)
n
@Tim Riegler: I'm definitely open to some tips on what not to do.
I feel sick even saying this, but I'm looking forward to the new Edge. If it suits our needs, I'll definitely replace Chrome with it if only to simplify things.
j
i took on the new edge months ago - rock solid, never looked back πŸ™‚
if only i could get brave working in Citrix
n
I dunno, upgrading to the latest release within one month is pretty brave these days...
Too bad FSLogix doesn't have a feature similar to Logon Exclusion Check, because that'd be pretty damn handy. Aaron's cleanup script is probably the best alternative right now.
j
I meant the brave browser πŸ€ͺ
n
Never heard of it.
t
Let me preface this by saying that we are currently on UPM, and moving to FSL. Everything below is to do with UPM. First thing - don't mess with roaming data / local cache locations. For some reason, we put ours in AppData/Local <- really really stupid decision. Made everything WAY more complicated than it should have been. Second - Get your exclusions correct. Our login times went from ~14s to ~35s, on average, across 1000 users. Definitely want to include the correct locations based on Dennis Span and @Matthias Schlimm's blogs. Code Cache is a huge one. This one bit us due to #1 above. Be careful with Matthias' blog - he redirects his Chrome to AppData\Local, so change all your paths accordingly. Third - Triple check that you are either ignoring or deleting excluded files / folders (not synchronizing!) Fourth - Set your local cache to something minimal and decent. In the GPO, it's configured in bytes, which is stupid. We have ours set at 100 MB, and that seems to work well. It shouldn't be cached into UPM on logoff, so this just affects PVS write cache. Fifth - As mentioned above, we are moving from UPM to FSL. One of the requirements is that users maintain their bookmarks. We are not migrating profiles, it's a clean cut from 2008 R2 to 2016. It is possible to script the saving of the bookmarks to a network share, then copy them into the user profile on login. This is working well for us. Again - the thing we struggled with was #1 above. I'm sure there's more around our specific config for Legacy Browser, plugins, etc., and this is all I can think of for now.
n
...?
t
Yeah - hit <enter> instead of <shift+enter> to start a new line πŸ˜‘
n
πŸ˜† Thank you!
t
Figured I'd leave you on a cliffhanger for the weekend! 🀣
Now to start implementing @Aaron Parker's pruning script.
n
Sounds like you don't have Chrome gpo config'd to setupa profile.pb for the user with all of their stuff huh?
t
We do! The problem was that didn't bring over everything we wanted. We are grabbing that and actual bookmarks files from current environment to copy in the new FSL.
That's been much more consistent for us.
Our main problem was that the profile.pb was redirected to AppData\Local, along with (when testing) the "normal" AppData\Roaming Google stuff. This caused us all sorts of problems.
n
im confused, if you copy over the profile.pb from upm to fsl all of their bookmarks, passwords, etc, etc are in that file
t
We finally have a handle on it, just in time to move to FSL, of course.
n
We have no intention of using roaming stuff in Chrome, and honestly, the only thing we do want to save is the bookmarks file. So long as I can carry that in the profile, we should be good.
t
We tried that, and could not get everything to come over like we wanted. There were all sorts of oddities. This could definitely just be our environment, though, and might be worth a second look πŸ˜ƒ
n
I'm not sold on FSL yet, my login times went up 4x and I still have this weird printer issue. They've finally agreed to a call as they can't see anything from all the logs I've sent. Back and forth for almost 3 weeks now.
t
ouch. I remember talking with you about that. We aren't having any problems with ours, so far. Only about 45 people testing it though. Most of problems stem from 2016, honestly. Our login times went down (once we used the smaller exclusions file from Aaron). The larger one caused our times to increase to over a minute.
n
I was having logons of 90 secs with empty profiles on subsequent logons after creation, i can understand the first time is slow, ok fine, but after 2 weeks and you're still at 90s with nothing shown in their logs to prove this, sounds sketchy to me
My upm works great, I redirect everything to the network share (no copying of any sort back and forth, no exclusions) and logons are about 21s, have been for 5+ years now. it's funny as much as i wanted to run to FSL, i ran ever faster back to UPM, hehe
n
@Tim Riegler: Whose redirections.xml file are you using for Chrome? I can't find a link to Matthias's, but Aaron's doesn't redirect anything in AppData\Local.
t
My fault Nick - getting my streams crossed this morning. For UPM, we used Dennis and Matthias' blogs (Matthias' is here: https://eucweb.com/blog/1397). For FSL, we are using Aaron's scaled down version. His first (longer) version caused the login delays, and it's not specific to Chrome...I was just referencing it regarding login times.
d
I wrote a blog about this. We change the Chrome default user settings and cache and then exclude this stuff in the redirection.xml. Works like a charm in several production environments for months now. Read my blog post: https://www.sul.de/2019/04/05/fslogix-in-a-citrix-provisioning-environment/
n
@Dennis: So you're basically using GPO to change the user data directory from AppData\Local\Google\Chrome\User Data to AppData\Roaming\Google\Chrome\User Data? I see the cache directory being set, too, but it looks like it's in AppData\Local by default and in your policy.
t
@Dennis What are your login times for PVS when redirecting the Cloud Cache to local write cache disk? What does the disk IO locally look like? Are you hosting the write cache disk on flash? Are you doing profile and Outlook data in the VHDX, or just profile?
d
@Tim Riegler Login times are about 18-22 sec. Disk IO is low, there are about 15 users on each XenApp server. Write cache is on local storage (XenServer) with fast SSD drives. Cache disk size for each XenApp is 80 GB. Just profile data, no Office profile disks.
@Nick Panaccio Yes, we change the user data to AppData\Roaming and then use the xml to exclude certain folders (things you don’t need/want in your profile). It’s easier this way, because you keep important userdata files and get rid of the junk. Cache is redirected to AppData\Local to completely exclude it in the xml. Works great so far, Chrome directory in AppData is relatively small, compared to the default size.
πŸ‘ 1
n
I'm going to run with that config to see how things work out. With us really preventing much of any customization or data saving, it might work out quite well.
d
Please report you experiences!
n
No worries, I certainly will. And if your redirections break something, I'll let you know that I'm shaking my fist at my monitor. πŸ˜‰
d
😯 πŸ˜‚
n
Initial testing is going well. Using your Google-specific redirections for FSLogix, and the modified Google paths via GPO, my favorites and settings (browser size namely) are being saved nicely.
πŸ‘ 1
d
πŸ‘πŸ»
t
Nick - what's your login time with new settings?
n
I didn't compare that, but I'll do so today.
42 seconds on the dot from the time I launch the desktop until the the time I see the wallpaper no matter which redirections.xml I use - one with no Chrome settings, one with Dennis's settings. I see the same times using my previous vDisk that doesn't have Chrome installed.