Product Documentation

Profile management policies

Dec 07, 2016

This topic describes some important aspects of the policies in the .adm and .admx files, the templates used to configure Profile management.

For reference information on each policy, including its default setting, see Profile management policy descriptions and defaults. For instructions on setting a policy, see Manage.

Modifying policies

To deactivate any Profile management policy that you enter as lists (for example, exclusion lists and inclusion lists), set the policy to Disabled. Do not set the policy to Not Configured.

For your changes to take effect, run the gpupdate /force command from the command prompt as documented at http://technet.microsoft.com/en-us/library/bb490983.aspx.

Profile management variables

In this version of Profile management, the following variables are available for use in both Group Policy and the .ini file.

For policies that define files and registry entries, the following variables expand as follows.

Variable Expansion for Version 1 profiles Expansion for Version 2 profiles
!ctx_localsettings! Local Settings\Application Data AppData\Local
!ctx_roamingappdata! Application Data AppData\Roaming
!ctx_startmenu! Start Menu AppData\Roaming\Microsoft\Windows\Start Menu
!ctx_internetcache! Local Settings\Temporary Internet Files AppData\Local\Microsoft\Windows\Temporary Internet Files
!ctx_localappdata! Local Settings\Application Data AppData\Local

For policies that are used to build paths, the following variables expand as follows.

Variable Expansion for Version 1 profiles Expansion for Version 2 profiles
!ctx_profilever! v1 v2
!ctx_osbitness! x86 x64

Additionally for policies that are used to build paths, !ctx_osname! expands to the short name as follows depending on the operating system. The long name is written to the log files when the Profile Management Service starts.

Long Name

Short Name

Windows 10 Redstone 1

Win10RS1

Windows 10

Win10

Windows 8.1

Win8.1

Windows 8 

Win8 

Windows 7 

Win7 

Windows Server 2016

Win2016

Windows Server 2012 R2 

Win2012R2 

Windows Server 2012 

Win2012 

Windows Server 2008 R2 

Win2008 

Windows Server 2008 

Win2008 

Policies and versions

As an aid to migration, the following tables show the policies that are available in different versions of Profile management, the location of each policy in the .adm (or .admx) file and the .ini file, and the feature each policy is designed for (or whether it is part of the base configuration of all deployments). The location in the .adm or .admx file is relative to the folder Citrix > Profile Management. Where no location in the .ini file is shown, the policy is not included there.

As a further aid, the tables also relate policies to the configuration decisions that you make when planning your Profile management deployment. For more information on these, see Decide on a configuration. Where no decision is shown, do not set the policy unless asked to by Citrix Technical Support.

To simplify upgrades, in Profile management 5.x all policies in the .adm or .admx file are set to Not Configured by default.

Policies available from Version 5.5

Policy in .adm or .admx file

Location in .adm or .admx file

Location in .ini file

Feature

Default Exclusion list

\Registry

DefaultExclusionListRegistry

 

NTUSER.DAT

\Registry

LastKnownGoodRegistry

 

Default Exclusion list - directories

\File system

DefaultSyncExclusionListDir

 

Policy in .adm or .admx file

Configuration decision

Default Exclusion list

 

Default Exclusion list - directories

 

NTUSER.DAT

 
 
Policies available from Version 5.0 to 5.4
Policy in .adm or .admx file Location in .adm or .admx file Location in .ini file Feature
Excluded groups   ExcludedGroups Excluded Groups
Disable automatic configuration \Advanced Settings DisableDynamicConfig Automatic Configuration
Redirect the AppData(Roaming) folder, Redirect the Desktop folder, ... \Folder Redirection (in User Configuration)   Integration with XenDesktop
Delay before deleting cached profiles \Profile handling ProfileDeleteDelay Base
Policy in .adm or .admx file Configuration decision
Excluded groups  
Disable automatic configuration  
Redirect the AppData(Roaming) folder, Redirect the Desktop folder, ...  
Delay before deleting cached profiles  

Folder redirection policies are absent from the .ini file for the following reason. Policies in this file apply to computers and can only be filtered for users in basic ways, for example using the ProcessedGroups policy. In contrast, policies in the .adm or .admx file can be filtered in more complex ways that are ideally suited to, and normally required by, folder redirection.

Policies available from Version 4.x

Policy in .adm or .admx file Location in .adm or .admx file Location in .ini file Feature
Cross-platform settings user groups \Cross-platform settings CPUserGroupList Cross-platform settings
Enable cross-platform settings CPEnabled
Source for creating cross-platform settings CPMigrationFromBaseProfileToCPStore
Path to cross-platform definitions CPSchemaPath
Path to cross-platform settings store CPPath
Offline profile support   OfflineSupport Offline profiles
Log off user if a problem is encountered \Advanced Settings LogoffRatherThanTempProfile Improved Troubleshooting
Policy in .adm or .admx file Configuration decision
Cross-platform settings user groups  
Enable cross-platform settings  
Source for creating cross-platform settings  
Path to cross-platform definitions  
Path to cross-platform settings store  
Offline profile support Mobile? Static?
Log off user if a problem is encountered  

Policies available from Version 3.x

Policy in .adm or .admx file Location in .adm or .admx file Location in .ini file Feature
Active write back   PSMidSessionWriteBack Active profile write back (in Version 4.0, renamed Active write back)
Folders to mirror (available from Version 3.1) \File system\Synchronization MirrorFoldersList Folder mirroring
Process Internet cookie files on logoff (available from Version 3.1) \Advanced settings ProcessCookieFiles
Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0) DeleteRedirectedFolders Support for folder redirection
Always cache \Streamed user profiles PSAlwaysCache Streamed user profiles
Profile streaming PSEnabled
Timeout for pending area lock files PSPendingLockTimeout
Streamed user profile groups PSUserGroupsList
Policy in .adm or .admx file Configuration decision
Active write back Persistent? Provisioned? Dedicated? Shared?
Folders to mirror (available from Version 3.1) Which applications?
Process Internet cookie files on logoff (available from Version 3.1)
Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0) Mobile? Static?
Always cache
Profile streaming
Timeout for pending area lock files
Streamed user profile groups

Policies available from Version 2.x

Policy in .adm or .admx file Location in .adm or .admx file Location in .ini file Feature
Path to user store   PathToUserStore Base
Processed groups   ProcessedGroups
Local profile conflict handling \Profile handling LocalProfileConflictHandling
Migration of existing profiles MigrateWindowsProfilesToUserStore
Template profile

TemplateProfilePath,

TemplateProfileOverridesRoamingProfile,

TemplateProfileOverridesLocalProfile,

Delete locally cached profiles on logoff DeleteCachedProfilesOnLogoff
Directory of the MFT cache file

(removed in Version 5.0)

\Advanced settings USNDBPath
Directories to synchronize \File system\Synchronization SyncDirList
Exclusion list \Registry ExclusionListRegistry
Files to synchronize \File system\Synchronization SyncFileList
Inclusion list \Registry InclusionListRegistry
Exclusion list - directories \File system SyncExclusionListDir
Exclusion list - files SyncExclusionListFiles
Number of retries when accessing locked files \Advanced settings LoadRetries
Process logons of local administrators   ProcessAdmins
Enable Profile management   ServiceActive
Enable logging \Log settings LoggingEnabled Logging
Log settings LogLevel...
Maximum size of the log file MaxLogSize
Path to log file(available from Version 2.1) PathToLogFile
Policy in .adm or .admx file Configuration decision
Path to user store Pilot? Production?
Processed groups
Local profile conflict handling Migrate Profiles? New Profiles?
Migration of existing profiles
Template profile
Delete locally cached profiles on logoff Persistent? Provisioned? Dedicated? Shared?
Directory of the MFT cache file

(removed in Version 5.0)

 
Directories to synchronize Which applications?
Exclusion list
Files to synchronize
Inclusion list
Exclusion list - directories
Exclusion list - files
Number of retries when accessing locked files
Process logons of local administrators
Enable Profile management  
Enable logging  
Log settings  
Maximum size of the log file  
Path to log file(available from Version 2.1)