This message was deleted.

Amen to that

I concur

agreed. I typically add BUILTIN\Administrators to the Exclude groups and advise our engineers to change the include groups to existing RDS or Citrix user groups that grant access to the environment

that's exactly what i do. but through GPP

yeah I also use GPP for managing those 4 FSLogix groups as well