FSLogix Policies Deployment from Citrix WEM

by Sachin Bhardwaj, CUGC Member

Introduction

In this blog, I share some information about the deployment of FSLogix policies using Citrix WEM. FSLogix integration is a popular choice today, but most deployments are made using Active Directory Group Policies because it’s the preferred method to import .Admx for creating FSLogix AD GPOs.

However, what if we could find an alternative solution to apply FSLogix policies deployment? Yes is the response – WEM (Workspace Environment management). All of the FSLogix policies (office/profile) should be managed via Citrix WEM as well, thanks to Citrix. I’ll walk you through the procedures for archiving such situations as follows:

This article outlines the various registry settings applicable to FSLogix that includes (App Services, Profile Containers, ODFC Containers, Cloud Cache) Configuration Settings – FSLogix | Microsoft Learn. You can note down those regedit settings applicable for your environment because we are going to create them in WEM group policies.

Lets begin with deployment:

  1. Login to WEM SaaS portal https://wem.cloud.com or your onprem WEM controller.
  2. Select your Configuration set and navigate to “Actions” in left pane.
  3. Under Action we have “Group Policies Settings,” we have to enable this option as soon as FSlogix polices will be ready.

Legacy console:

Citrix WEM

WEB Console:

WEM Console

Note: I am following the WEB console because we have the additional option to import all the registries in one go in WEM console.   

  1. Enable Group Policy Settings (if not already enabled)
  1. Leave Registry-based selection
Group policy settings
  1. Click on Create GPO
Create GPO
  • Add Name and description (example below)
  • Name: ODFC(Office Data Fslogix Container)
  • Description: Configuration set for Office solutions
  • Click Add to create a new entry
    • Set the Action
    • Select Root Key
    • Add Subpath
    • Add Name (should be the name of key as per)
    • Select the Type
    • Add Data (0 or 1)
    • Select the type of the data (Hexadecimal/Decimal)
    • Click Save to add the GPO
    • Click Done in the next window
Decription
  • IncludeOneDrive is added in the list
  • Can add all the keys in same way
  • We can Move keys up and down from top selection Menu. For this we have to select EDIT and Move whatever key you want to priority.
IncludeOneDrive
  • Same way we can create Profile Container GPOs as below:
Profile Container
  • Once both container created, next step is assignments:
Group Policy Settings
  1. Select the group policy created, assignment status is “Not assigned” click on Manage assignments.
Group Policy Settings
  1. Select assignment targets (users and groups) to Everyone. Click Save.
Manage Assignments
Manage assignments
updated successfully

To know how to create custom assignment group follow the below steps:

  1. Now Go back to Web Console
  1. Select the Configuration Set.
configuration sets
  • Select Assignments
  • Select Assignment Targets
assign targets
  • Click Add assignment target
assignment targets
  • Select the identity provider
  • Active Directory
  • Azure Active Directory
add assignment target
  • Select Users and/or Security groups
  • Add domain
add assignment target
  • Search for the users or security group
  • Click Add

Now we have to add filters for controlling when to assign actions to users. A filter can comprise multiple conditions.

  1. Go to back to Web Console again
  • Select the Configuration Set
  • Select Assignments
  • Select Filters
WEB console
  • Click Create filter
Filters
  • Under Basic Information
  • Add a Filter name
  • Type in a Description
Create Filter
  • Select Enable this filter? – Yes, click Next.
  • Click on Add Condition
  • Select an Default condition (Always True) or click on Create new
Create Filter
  • If you have chosen Create New
  • Add a Condition name
Create condition

Some conditions are user based only so select based on your use case.

  1. Select if you would like to Enable this condition? – Yes/No
  1. Dependent on the Condition type you will get additional options
    • Click Done next window to add the condition

Once we finish with FSLogix policies creation and settings in WEM, the next step is to bind them to the Machine catalog in Citrix Studio as follows:

  1. Login to Citrix DaaS and navigate to Machine Catalog that has to apply the Fslogix policies
  1. Go to Manage Configuration Set – Bind Catalog to WEM (Select a configuration set to which you want to bind this catalog:
Manage configuration set
  1. Tag this MC to respective DG for VDI assignment.

Now as the FSLogix polices are assigned to Machine catalog, any session utilizing these Catalogs will get the same set of policies.

  1. Login to VDI and verify if all Office/Profile container are working as expected.
Check it works as expected
  1. Navigate to “C:\Program Files\FSLogix\Apps\frxtray.exe” to verify the VHD status.
FSLogix profile status
  1. Open regedit -Navigate to profiles folder, all OFC keys are applied, similarly for PFC.
directory
directory

See more posts on Citrix WEM here.

Are you a member of CUGC? Join for free today!

One comment

Leave a Reply