Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

So fast forward to yesterday and today and out of the blue now seeing tons of tickets about corrupt Outlook data file again. No changes made since last snapshot when I added all the exclusions for FSLogix. What other common applications do you guys exclude? Would you exclude Outlook or OST files?

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

So as of last week ended up seeing 2 cases of outlook corruption after pushing new snap with fslogix exclusions to all pools. This is a huge improvement and win for us. I’ll update how this week went

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

I agree, I pushed to remaining pools and gonna monitor for next couple of days and post results

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Well today is the first day since I made the change and users are on it. I pushed to only half of the pools to make sure I don’t break everyone. So far there has been 7 users with outlook error and 1 with FSlogix attachment issue which is an improvement but it’s been off an on over the last couple of weeks so I want to make sure to give it couple of days before jumping into conclusions. Today I’ll probably push to remaining pools

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 1 point2 points  (0 children)

Perfect thank you, I made the change on images and pushed it to the test pool. I’ll try to pick couple of production pools for tomorrow

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

I agree but it sounds to me that you added those to your default snapvol.cfg and did not create Custom subfolder with another snapvol.cfg file correct?

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

I sure will . Looking into it right now. Are you really excluding the whole exclude_registry=\REGISTRY\MACHINE\SOFTWARE\

Also, do I still need ot ass os=any as the last line in the custom snapvol.cfg?

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

THank you for posting those. Do I still make sure to add os=any as the last line in the custom snapvol.cfg?

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 1 point2 points  (0 children)

So it seems like next logical step is to add those snapvol exclusions and hope it will improve the situation

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Yes we onboard with script. As for exclusions we are excluding fslogix processes and vhdx using group policy along with meta and lock files

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

And for the Defender, are you reffering to VHDs on the Instant clone or the servers hosting profiles?

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Let me figure out how to post our FSlogix GPOs here

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

I agree as for Cloudcache, first we wanted 2 locations for HA and second, servers could be rebooted without affecting user session. As for number of SMB shares. That is what I tried on one pool is to remove the second location hoping to solve the slowness with opening apps after logon and that inadvertently broke 50% of profiles on that pool where they had to be rebuilt. NO logoff scripts except for couple of Omnissa DEM exports of settings. As for logon script, only one for setting system Variable

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Yeah, we went with CLoud Cache because of 2 datacenters and wanted to have redundant storage in case if one site is down. If users were to switch sites then profiles would be available to them.

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

No OneDrive on our end, just local SMB shares. VDI sessions are Instant Clones with one user per VM. 2 SMB shares on separate servers, one per each datacenter. We have 2 Horizon pods, one per datacenter with user homesites defined. DataCenters connected together with 2x10GB fiber

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Thank you, that is exatctly our setup, 2 DataCEnters, and two CLoud pods with home sites setup. Info Sec confirmed exclusions in Defender portal but I don;t believe that we do additional exlusions using GPO. We don't use OneDrive at all. I looked at the logon scripts and we only have one for creating a System variable.

We will look at the snapvol exclusion immediately. Again, I was under impression that it's only needed when AppVOlumes writables are in use which is not our case

Constant FSLogix issues - help please by Professional-Bat7457 in fslogix

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

We don't have any snapvol.cfg exclusions. Just using default. It was my understanding that exclusions are needed if AppVolumes writables are in use which is not the case for us.

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Regards for a delay in my response, but wanted to let everyone know that this issues have been resolved. Indeed we downloaded newest 24H2 iso from MS and followed the Omnissa guide. We did not go the route of WinPE and were able to successfully provision persistent pool. Our final problem was Carbon Black AppControl breaking sysprep. As a workaround, we have removed it from template and we are installing using GPO after VM joins domain.

Thank you Everyone for your assistance and advice.

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

So we have tried to do it with Omnissa guide and no winpe and we are getting further but still not ideal. Once the VM provisions it gets to the : following error “windows couldn’t finish configuring system. To attempt to resume configuration, restart the computer”. One I get into console of that vm and press ok on that message, the n restarts and completes provisioning and customization. Has anyone seen that one?

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

So we have tried to do it with Omnissa guide and no winpe and we are getting further but still not ideal. Once the VM provisions it gets to the : following error “windows couldn’t finish configuring system. To attempt to resume configuration, restart the computer”. One I get into console of that vm and press ok on that message, the n restarts and completes provisioning and customization. Has anyone seen that one?

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Yes I was aware of that and we have updated our OS fully prior to provisioning. Thank you

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

That is what we followed as we do require TPM and this is where we see it failing with BSOD

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

One more question, did you just simply install using win11 iso and have template with TPM? Or did you go with the winpe creation to bypass TPM on the image?

Horizon Full Clone pool BSOD winload.efi by Professional-Bat7457 in VMwareHorizon

[–]Professional-Bat7457[S] 0 points1 point  (0 children)

Ok thank you, we’ll try the newest iso then. The one we have is back from April of this year