Profile Management policies
This topic describes some important aspects of the policies in the .adm and .admx files, the templates used to configure Profile Management.
For reference information on each policy, including its default setting, see Profile Management policy descriptions and defaults. For instructions on setting a policy, see Manage.
Note: To edit the Profile Management policies in Citrix Studio, you must have Studio, Group Policy, and Profile Management installed. To install these components, use the Citrix Virtual Apps and Desktops installer and select the Delivery Controller entry.
Modifying policies
To deactivate any Profile Management policy that you enter as lists (for example, exclusion lists and inclusion lists), set the policy to Disabled. Do not set the policy to Not Configured.
For your changes to take effect, run the gpupdate /force command from the command prompt as documented at http://technet.microsoft.com/en-us/library/bb490983.aspx.
Profile Management variables
In this version of Profile Management, the following variables are available for use in both Group Policy and the .ini file.
For policies that define files and registry entries, the following variables expand as follows.
| Variable | Expansion for Version 1 profiles | Expansion for Version 2 profiles |
|---|---|---|
| !ctx_localsettings! | Local Settings\Application Data | AppData\Local |
| !ctx_roamingappdata! | Application Data | AppData\Roaming |
| !ctx_startmenu! | Start Menu | AppData\Roaming\Microsoft\Windows\Start Menu |
| !ctx_internetcache! | Local Settings\Temporary Internet Files | AppData\Local\Microsoft\Windows\Temporary Internet Files |
| !ctx_localappdata! | Local Settings\Application Data | AppData\Local |
For policies that are used to build paths, the following variables expand as follows.
| Variable | Expansion for Version 1 profiles | Expansion for Version 2 profiles |
|---|---|---|
| !ctx_profilever! | v1 | v2 |
| !ctx_osbitness! | x86 | x64 |
Additionally for policies that are used to build paths, !ctx_osname! expands to the short name as follows depending on the operating system. The long name is written to the log files when the Profile Management Service starts.
| Long Name | Short Name |
| Windows 10 Redstone 5 | Win10RS5 |
| Windows 10 Redstone 4 | Win10RS4 |
| Windows 10 Redstone 3 | Win10RS3 |
| Windows 10 Redstone 2 | Win10RS2 |
| Windows 10 Redstone 1 | Win10RS1 |
| Windows 10 | Win10 |
| Windows 8.1 | Win8.1 |
| Windows 8 | Win8 |
| Windows 7 | Win7 |
| Windows Server 2019 | Win2019 |
| Windows Server 2016 | Win2016 |
| Windows Server 2012 R2 | Win2012R2 |
| Windows Server 2012 | Win2012 |
| Windows Server 2008 R2 | Win2008 |
| Windows Server 2008 | Win2008 |
Policies and versions
As an aid to migration, the following tables show the policies that are available in different versions of Profile Management. And show the location of each policy in the .adm (or .admx) file and the .ini file, and the feature each policy is designed for (or whether it is part of the base configuration of all deployments). The location in the .adm or .admx file is relative to the folder Citrix > Profile Management. Where no location in the .ini file is shown, the policy is not included there.
As a further aid, the tables also relate policies to the configuration decisions that you make when planning your Profile Management deployment. For more information, see Decide on a configuration. Where no decision is shown, do not set the policy unless asked to by Citrix Technical Support.
To simplify upgrades, in Profile Management 5.x, all policies in the .adm file or .admx file are set to Not Configured by default.
Policies available from Version 5.5
Policy in .adm or .admx file
Location in .adm or .admx file
Location in .ini file
Feature
Default Exclusion list
\Registry
DefaultExclusionListRegistry
NTUSER.DAT
\Registry
LastKnownGoodRegistry
Default Exclusion list - directories
\File system
DefaultSyncExclusionListDir
Policy in .adm or .admx file
Configuration decision
Default Exclusion list
Default Exclusion list - directories
NTUSER.DAT
Policies available from Version 5.0 to 5.4
| Policy in .adm or .admx file | Location in .adm or .admx file | Location in .ini file | Feature |
|---|---|---|---|
| Excluded groups | ExcludedGroups | Excluded Groups | |
| Disable automatic configuration | \Advanced Settings | DisableDynamicConfig | Automatic Configuration |
| Redirect the AppData(Roaming) folder, Redirect the Desktop folder, … | \Folder Redirection (in User Configuration) | Integration with Citrix Virtual Desktops | |
| Delay before deleting cached profiles | \Profile handling | ProfileDeleteDelay | Base |
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Excluded groups | |
| Disable automatic configuration | |
| Redirect the AppData(Roaming) folder, Redirect the Desktop folder, … | |
| Delay before deleting cached profiles |
Folder redirection policies are absent from the .ini file for the following reason. Policies in this file apply to computers and can only be filtered for users in basic ways, for example using the ProcessedGroups policy. In contrast, policies in the .adm or .admx file can be filtered in more complex ways that are ideally suited to, and normally required by, folder redirection.
Policies available from Version 4.x
Policy in .adm or .admx file
Location in .adm or .admx file
Location in .ini file
Feature
Cross-platform settings user groups
\Cross-platform settings
CPUserGroupList
Cross-platform settings
Enable cross-platform settings
CPEnabled
Source for creating cross-platform settings
CPMigrationFromBaseProfileToCPStore
Path to cross-platform definitions
CPSchemaPath
Path to cross-platform settings store
CPPath
Offline profile support
OfflineSupport
Offline profiles
Log off user if a problem is encountered
\Advanced Settings
LogoffRatherThanTempProfile
Improved Troubleshooting
| Policy in .adm or .admx file | Configuration decision |
|---|---|
| Cross-platform settings user groups | |
| Enable cross-platform settings | |
| Source for creating cross-platform settings | |
| Path to cross-platform definitions | |
| Path to cross-platform settings store | |
| Offline profile support | Mobile? Static? |
| Log off user if a problem is encountered |
Policies available from Version 3.x
Policy in .adm or .admx file
Location in .adm or .admx file
Location in .ini file
Feature
Active write back
PSMidSessionWriteBack
Active profile write back (in Version 4.0, renamed Active write back)
Folders to mirror (available from Version 3.1)
\File system\Synchronization
MirrorFoldersList
Folder mirroring
Process Internet cookie files on logoff (available from Version 3.1)
\Advanced settings
ProcessCookieFiles
Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0)
DeleteRedirectedFolders
Support for folder redirection
Always cache
\Streamed user profiles
PSAlwaysCache
Streamed user profiles
Profile streaming
PSEnabled
Timeout for pending area lock files
PSPendingLockTimeout
Streamed user profile groups
PSUserGroupsList
Policy in .adm or .admx file
Configuration decision
Active write back
Persistent? Provisioned? Dedicated? Shared?
Folders to mirror (available from Version 3.1)
Which applications?
Process Internet cookie files on logoff (available from Version 3.1)
Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0)
Mobile? Static?
Always cache
Profile streaming
Timeout for pending area lock files
Streamed user profile groups
Policies available from Version 2.x
Policy in .adm or .admx file
Location in .adm or .admx file
Location in .ini file
Feature
Path to user store
PathToUserStore
Base
Processed groups
ProcessedGroups
Local profile conflict handling
\Profile handling
LocalProfileConflictHandling
Migration of existing profiles
MigrateWindowsProfilesToUserStore
Template profile
TemplateProfilePath,
TemplateProfileOverridesRoamingProfile,
TemplateProfileOverridesLocalProfile,
Delete locally cached profiles on logoff
DeleteCachedProfilesOnLogoff
Directory of the MFT cache file
(removed in Version 5.0)
\Advanced settings
USNDBPath
Directories to synchronize
\File system\Synchronization
SyncDirList
Exclusion list
\Registry
ExclusionListRegistry
Files to synchronize
\File system\Synchronization
SyncFileList
Inclusion list
\Registry
InclusionListRegistry
Exclusion list - directories
\File system
SyncExclusionListDir
Exclusion list - files
SyncExclusionListFiles
Number of retries when accessing locked files
\Advanced settings
LoadRetries
Process logons of local administrators
ProcessAdmins
Enable Profile Management
ServiceActive
Enable logging
\Log settings
LoggingEnabled
Logging
Log settings
LogLevel…
Maximum size of the log file
MaxLogSize
Path to log file(available from Version 2.1)
PathToLogFile
Policy in .adm or .admx file
Configuration decision
Path to user store
Pilot? Production?
Processed groups
Local profile conflict handling
Migrate Profiles? New Profiles?
Migration of existing profiles
Template profile
Delete locally cached profiles on logoff
Persistent? Provisioned? Dedicated? Shared?
Directory of the MFT cache file
(removed in Version 5.0)
Directories to synchronize
Which applications?
Exclusion list
Files to synchronize
Inclusion list
Exclusion list - directories
Exclusion list - files
Number of retries when accessing locked files
Process logons of local administrators
Enable Profile Management
Enable logging
Log settings
Maximum size of the log file
Path to log file(available from Version 2.1)