- About Profile Management 5.x
- Get started
- About profiles
- Profile Management architecture
- General recommendations for profiles
- Profile Management use cases
- Access multiple resources
- How Profile management works
- History of changes
- Most read topics
- System requirements
- Plan your Profile management deployment
- Troubleshoot
- Secure
- Install and set up Profile management
- Upgrade and migrate
- Manage
- Configuration precedence
- To choose a migration policy
- To specify a template or mandatory profile
- To resolve conflicting profiles
- To enable Profile management
- About the Profile management .ini file
- Include and exclude items
- To specify the path to the user store
- To define which groups' profiles are processed
- To store certificates
- To stream user profiles
- To configure folder redirection
- To manage cookie folders and other transactional folders
- To configure offline profiles
- To configure active write back
- To configure the Customer Experience Improvement Program (CEIP)
- To force user logoffs
- To configure cross-platform settings
- Cross-platform settings - Case study
- Integrate
- Profile management policies
- Profile management policy descriptions and defaults
- Operating systems and applications supported by cross-platform settings
- Logon diagram
- Logoff diagram
- Glossary
Profile management policies
Dec 07, 2016
This topic describes some important aspects of the policies in the .adm and .admx files, the templates used to configure Profile management.
For reference information on each policy, including its default setting, see Profile management policy descriptions and defaults. For instructions on setting a policy, see Manage.
Modifying policies
To deactivate any Profile management policy that you enter as lists (for example, exclusion lists and inclusion lists), set the policy to Disabled. Do not set the policy to Not Configured.
For your changes to take effect, run the gpupdate /force command from the command prompt as documented at http://technet.microsoft.com/en-us/library/bb490983.aspx.
Profile management variables
In this version of Profile management, the following variables are available for use in both Group Policy and the .ini file.
For policies that define files and registry entries, the following variables expand as follows.
| Variable | Expansion for Version 1 profiles | Expansion for Version 2 profiles |
|---|---|---|
| !ctx_localsettings! | Local Settings\Application Data | AppData\Local |
| !ctx_roamingappdata! | Application Data | AppData\Roaming |
| !ctx_startmenu! | Start Menu | AppData\Roaming\Microsoft\Windows\Start Menu |
| !ctx_internetcache! | Local Settings\Temporary Internet Files | AppData\Local\Microsoft\Windows\Temporary Internet Files |
| !ctx_localappdata! | Local Settings\Application Data | AppData\Local |
For policies that are used to build paths, the following variables expand as follows.
| Variable | Expansion for Version 1 profiles | Expansion for Version 2 profiles |
|---|---|---|
| !ctx_profilever! | v1 | v2 |
| !ctx_osbitness! | x86 | x64 |
Additionally for policies that are used to build paths, !ctx_osname! expands to the short name as follows depending on the operating system. The long name is written to the log files when the Profile Management Service starts.
Long Name |
Short Name |
Windows 10 Redstone 1 |
Win10RS1 |
Windows 10 |
Win10 |
Windows 8.1 |
Win8.1 |
Windows 8 |
Win8 |
Windows 7 |
Win7 |
Windows Server 2016 |
Win2016 |
Windows Server 2012 R2 |
Win2012R2 |
Windows Server 2012 |
Win2012 |
Windows Server 2008 R2 |
Win2008 |
Windows Server 2008 |
Win2008 |
Policies and versions
As an aid to migration, the following tables show the policies that are available in different versions of Profile management, the location of each policy in the .adm (or .admx) file and the .ini file, and the feature each policy is designed for (or whether it is part of the base configuration of all deployments). The location in the .adm or .admx file is relative to the folder . Where no location in the .ini file is shown, the policy is not included there.
As a further aid, the tables also relate policies to the configuration decisions that you make when planning your Profile management deployment. For more information on these, see Decide on a configuration. Where no decision is shown, do not set the policy unless asked to by Citrix Technical Support.
To simplify upgrades, in Profile management 5.x all policies in the .adm or .admx file are set to Not Configured by default.
Policies available from Version 5.5
Policy in .adm or .admx file |
Location in .adm or .admx file |
Location in .ini file |
Feature |
|
Default Exclusion list |
\Registry |
DefaultExclusionListRegistry |
||
NTUSER.DAT |
\Registry |
LastKnownGoodRegistry |
||
Default Exclusion list - directories |
\File system |
DefaultSyncExclusionListDir |
||
Policy in .adm or .admx file |
Configuration decision |
|||
Default Exclusion list |
||||
Default Exclusion list - directories |
||||
NTUSER.DAT |
||||
Policies available from Version 5.0 to 5.4
| Policy in .adm or .admx file | Location in .adm or .admx file | Location in .ini file | Feature |
|---|---|---|---|
| Excluded groups | ExcludedGroups | Excluded Groups | |
| Disable automatic configuration | \Advanced Settings | DisableDynamicConfig | Automatic Configuration |
| Redirect the AppData(Roaming) folder, Redirect the Desktop folder, ... | \Folder Redirection (in User Configuration) | Integration with XenDesktop | |
| Delay before deleting cached profiles | \Profile handling | ProfileDeleteDelay | Base |
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Excluded groups | |
| Disable automatic configuration | |
| Redirect the AppData(Roaming) folder, Redirect the Desktop folder, ... | |
| Delay before deleting cached profiles |
Folder redirection policies are absent from the .ini file for the following reason. Policies in this file apply to computers and can only be filtered for users in basic ways, for example using the ProcessedGroups policy. In contrast, policies in the .adm or .admx file can be filtered in more complex ways that are ideally suited to, and normally required by, folder redirection.
Policies available from Version 4.x
| Policy in .adm or .admx file | Location in .adm or .admx file | Location in .ini file | Feature |
|---|---|---|---|
| Cross-platform settings user groups | \Cross-platform settings | CPUserGroupList | Cross-platform settings |
| Enable cross-platform settings | CPEnabled | ||
| Source for creating cross-platform settings | CPMigrationFromBaseProfileToCPStore | ||
| Path to cross-platform definitions | CPSchemaPath | ||
| Path to cross-platform settings store | CPPath | ||
| Offline profile support | OfflineSupport | Offline profiles | |
| Log off user if a problem is encountered | \Advanced Settings | LogoffRatherThanTempProfile | Improved Troubleshooting |
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Cross-platform settings user groups | |
| Enable cross-platform settings | |
| Source for creating cross-platform settings | |
| Path to cross-platform definitions | |
| Path to cross-platform settings store | |
| Offline profile support | Mobile? Static? |
| Log off user if a problem is encountered |
Policies available from Version 3.x
| Policy in .adm or .admx file | Location in .adm or .admx file | Location in .ini file | Feature |
|---|---|---|---|
| Active write back | PSMidSessionWriteBack | Active profile write back (in Version 4.0, renamed Active write back) | |
| Folders to mirror (available from Version 3.1) | \File system\Synchronization | MirrorFoldersList | Folder mirroring |
| Process Internet cookie files on logoff (available from Version 3.1) | \Advanced settings | ProcessCookieFiles | |
| Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0) | DeleteRedirectedFolders | Support for folder redirection | |
| Always cache | \Streamed user profiles | PSAlwaysCache | Streamed user profiles |
| Profile streaming | PSEnabled | ||
| Timeout for pending area lock files | PSPendingLockTimeout | ||
| Streamed user profile groups | PSUserGroupsList |
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Active write back | Persistent? Provisioned? Dedicated? Shared? |
| Folders to mirror (available from Version 3.1) | Which applications? |
| Process Internet cookie files on logoff (available from Version 3.1) | |
| Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0) | Mobile? Static? |
| Always cache | |
| Profile streaming | |
| Timeout for pending area lock files | |
| Streamed user profile groups |
Policies available from Version 2.x
| Policy in .adm or .admx file | Location in .adm or .admx file | Location in .ini file | Feature |
|---|---|---|---|
| Path to user store | PathToUserStore | Base | |
| Processed groups | ProcessedGroups | ||
| Local profile conflict handling | \Profile handling | LocalProfileConflictHandling | |
| Migration of existing profiles | MigrateWindowsProfilesToUserStore | ||
| Template profile | TemplateProfilePath, TemplateProfileOverridesRoamingProfile, TemplateProfileOverridesLocalProfile, |
||
| Delete locally cached profiles on logoff | DeleteCachedProfilesOnLogoff | ||
| Directory of the MFT cache file (removed in Version 5.0) |
\Advanced settings | USNDBPath | |
| Directories to synchronize | \File system\Synchronization | SyncDirList | |
| Exclusion list | \Registry | ExclusionListRegistry | |
| Files to synchronize | \File system\Synchronization | SyncFileList | |
| Inclusion list | \Registry | InclusionListRegistry | |
| Exclusion list - directories | \File system | SyncExclusionListDir | |
| Exclusion list - files | SyncExclusionListFiles | ||
| Number of retries when accessing locked files | \Advanced settings | LoadRetries | |
| Process logons of local administrators | ProcessAdmins | ||
| Enable Profile management | ServiceActive | ||
| Enable logging | \Log settings | LoggingEnabled | Logging |
| Log settings | LogLevel... | ||
| Maximum size of the log file | MaxLogSize | ||
| Path to log file(available from Version 2.1) | PathToLogFile |
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Path to user store | Pilot? Production? |
| Processed groups | |
| Local profile conflict handling | Migrate Profiles? New Profiles? |
| Migration of existing profiles | |
| Template profile | |
| Delete locally cached profiles on logoff | Persistent? Provisioned? Dedicated? Shared? |
| Directory of the MFT cache file (removed in Version 5.0) |
|
| Directories to synchronize | Which applications? |
| Exclusion list | |
| Files to synchronize | |
| Inclusion list | |
| Exclusion list - directories | |
| Exclusion list - files | |
| Number of retries when accessing locked files | |
| Process logons of local administrators | |
| Enable Profile management | |
| Enable logging | |
| Log settings | |
| Maximum size of the log file | |
| Path to log file(available from Version 2.1) |