Profile Management policies

This topic describes some important aspects of the policies in the .adm and .admx files, the templates used to configure Profile Management.

For reference information on each policy, including its default setting, see Profile Management policy descriptions and defaults. For instructions on setting a policy, see Manage.

Note: To edit the Profile Management policies in Citrix Studio, you must have Studio, Group Policy, and Profile Management installed. To install these components, use the Citrix Virtual Apps and Desktops installer and select the Delivery Controller entry.

Modifying policies

To deactivate any Profile Management policy that you enter as lists (for example, exclusion lists and inclusion lists), set the policy to Disabled. Do not set the policy to Not Configured.

For your changes to take effect, run the gpupdate /force command from the command prompt as documented at http://technet.microsoft.com/en-us/library/bb490983.aspx.

Profile Management variables

In this version of Profile Management, the following variables are available for use in both Group Policy and the .ini file.

For policies that define files and registry entries, the following variables expand as follows.

Variable Expansion for Version 1 profiles Expansion for Version 2 profiles
!ctx_localsettings! Local Settings\Application Data AppData\Local
!ctx_roamingappdata! Application Data AppData\Roaming
!ctx_startmenu! Start Menu AppData\Roaming\Microsoft\Windows\Start Menu
!ctx_internetcache! Local Settings\Temporary Internet Files AppData\Local\Microsoft\Windows\Temporary Internet Files
!ctx_localappdata! Local Settings\Application Data AppData\Local

For policies that are used to build paths, the following variables expand as follows.

Variable Expansion for Version 1 profiles Expansion for Version 2 profiles
!ctx_profilever! v1 v2
!ctx_osbitness! x86 x64

Additionally for policies that are used to build paths, !ctx_osname! expands to the short name as follows depending on the operating system. The long name is written to the log files when the Profile Management Service starts.

   
Long Name Short Name
Windows 10 Redstone 1 Win10RS1
Windows 10 Win10
Windows 8.1 Win8.1
Windows 8 Win8
Windows 7 Win7
Windows Server 2016 Win2016
Windows Server 2012 R2 Win2012R2
Windows Server 2012 Win2012
Windows Server 2008 R2 Win2008
Windows Server 2008 Win2008

Policies and versions

As an aid to migration, the following tables show the policies that are available in different versions of Profile Management. And show the location of each policy in the .adm (or .admx) file and the .ini file, and the feature each policy is designed for (or whether it is part of the base configuration of all deployments). The location in the .adm or .admx file is relative to the folder Citrix > Profile Management. Where no location in the .ini file is shown, the policy is not included there.

As a further aid, the tables also relate policies to the configuration decisions that you make when planning your Profile Management deployment. For more information, see Decide on a configuration. Where no decision is shown, do not set the policy unless asked to by Citrix Technical Support.

To simplify upgrades, in Profile Management 5.x, all policies in the .adm file or .admx file are set to Not Configured by default.

Policies available from Version 5.5

Policy in .adm or .admx file

Location in .adm or .admx file

Location in .ini file

Feature

Default Exclusion list

\Registry

DefaultExclusionListRegistry

NTUSER.DAT

\Registry

LastKnownGoodRegistry

Default Exclusion list - directories

\File system

DefaultSyncExclusionListDir

Policy in .adm or .admx file

Configuration decision

Default Exclusion list

Default Exclusion list - directories

NTUSER.DAT

Policies available from Version 5.0 to 5.4

Policy in .adm or .admx file Location in .adm or .admx file Location in .ini file Feature
Excluded groups   ExcludedGroups Excluded Groups
Disable automatic configuration \Advanced Settings DisableDynamicConfig Automatic Configuration
Redirect the AppData(Roaming) folder, Redirect the Desktop folder, … \Folder Redirection (in User Configuration)   Integration with Citrix Virtual Desktops
Delay before deleting cached profiles \Profile handling ProfileDeleteDelay Base
Policy in .adm or .admx file Configuration decision
Excluded groups  
Disable automatic configuration  
Redirect the AppData(Roaming) folder, Redirect the Desktop folder, …  
Delay before deleting cached profiles  

Folder redirection policies are absent from the .ini file for the following reason. Policies in this file apply to computers and can only be filtered for users in basic ways, for example using the ProcessedGroups policy. In contrast, policies in the .adm or .admx file can be filtered in more complex ways that are ideally suited to, and normally required by, folder redirection.

Policies available from Version 4.x

Policy in .adm or .admx file

Location in .adm or .admx file

Location in .ini file

Feature

Cross-platform settings user groups

\Cross-platform settings

CPUserGroupList

Cross-platform settings

Enable cross-platform settings

CPEnabled

Source for creating cross-platform settings

CPMigrationFromBaseProfileToCPStore

Path to cross-platform definitions

CPSchemaPath

Path to cross-platform settings store

CPPath

Offline profile support

OfflineSupport

Offline profiles

Log off user if a problem is encountered

\Advanced Settings

LogoffRatherThanTempProfile

Improved Troubleshooting

Policy in .adm or .admx file Configuration decision
Cross-platform settings user groups  
Enable cross-platform settings  
Source for creating cross-platform settings  
Path to cross-platform definitions  
Path to cross-platform settings store  
Offline profile support Mobile? Static?
Log off user if a problem is encountered  

Policies available from Version 3.x

Policy in .adm or .admx file

Location in .adm or .admx file

Location in .ini file

Feature

Active write back

PSMidSessionWriteBack

Active profile write back (in Version 4.0, renamed Active write back)

Folders to mirror (available from Version 3.1)

\File system\Synchronization

MirrorFoldersList

Folder mirroring

Process Internet cookie files on logoff (available from Version 3.1)

\Advanced settings

ProcessCookieFiles

Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0)

DeleteRedirectedFolders

Support for folder redirection

Always cache

\Streamed user profiles

PSAlwaysCache

Streamed user profiles

Profile streaming

PSEnabled

Timeout for pending area lock files

PSPendingLockTimeout

Streamed user profile groups

PSUserGroupsList

Policy in .adm or .admx file

Configuration decision

Active write back

Persistent? Provisioned? Dedicated? Shared?

Folders to mirror (available from Version 3.1)

Which applications?

Process Internet cookie files on logoff (available from Version 3.1)

Delete Redirected Folders (available in Versions 3.2, 3.2.2, and 4.0)

Mobile? Static?

Always cache

Profile streaming

Timeout for pending area lock files

Streamed user profile groups

Policies available from Version 2.x

Policy in .adm or .admx file

Location in .adm or .admx file

Location in .ini file

Feature

Path to user store

PathToUserStore

Base

Processed groups

ProcessedGroups

Local profile conflict handling

\Profile handling

LocalProfileConflictHandling

Migration of existing profiles

MigrateWindowsProfilesToUserStore

Template profile

TemplateProfilePath,

TemplateProfileOverridesRoamingProfile,

TemplateProfileOverridesLocalProfile,

Delete locally cached profiles on logoff

DeleteCachedProfilesOnLogoff

Directory of the MFT cache file

(removed in Version 5.0)

\Advanced settings

USNDBPath

Directories to synchronize

\File system\Synchronization

SyncDirList

Exclusion list

\Registry

ExclusionListRegistry

Files to synchronize

\File system\Synchronization

SyncFileList

Inclusion list

\Registry

InclusionListRegistry

Exclusion list - directories

\File system

SyncExclusionListDir

Exclusion list - files

SyncExclusionListFiles

Number of retries when accessing locked files

\Advanced settings

LoadRetries

Process logons of local administrators

ProcessAdmins

Enable Profile Management

ServiceActive

Enable logging

\Log settings

LoggingEnabled

Logging

Log settings

LogLevel…

Maximum size of the log file

MaxLogSize

Path to log file(available from Version 2.1)

PathToLogFile

Policy in .adm or .admx file

Configuration decision

Path to user store

Pilot? Production?

Processed groups

Local profile conflict handling

Migrate Profiles? New Profiles?

Migration of existing profiles

Template profile

Delete locally cached profiles on logoff

Persistent? Provisioned? Dedicated? Shared?

Directory of the MFT cache file

(removed in Version 5.0)

Directories to synchronize

Which applications?

Exclusion list

Files to synchronize

Inclusion list

Exclusion list - directories

Exclusion list - files

Number of retries when accessing locked files

Process logons of local administrators

Enable Profile Management

Enable logging

Log settings

Maximum size of the log file

Path to log file(available from Version 2.1)